$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft File: 040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft (raw, json) Hash identifier: 11K9VkHvyDG3BEG4jGq2WdXzbqUbK1i1bf4CxO8uRvo= Subject key identifier: 0C:70:FA:D0:43:8F:E4:08:FE:55:F0:70:D6:6F:EA:36:78:BA:12:31 Authority key identifier: 04:0C:9F:4B:86:EC:13:FE:0F:91:FD:76:BB:0F:F8:E3:A6:40:28:65 Certificate issuer: /CN=040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865 Certificate serial: 11C5D270C65B93CDCA0D94ED646C16C18BD10628 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 13:30:57 +0000 Manifest this update: Sun 15 Nov 2026 13:25:57 +0000 Manifest next update: Mon 16 Nov 2026 17:23:57 +0000 Files and hashes: 1: 040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl (hash: GTV+3D0TZbOZ+kZzSn+VVnE40EOs/6UOmf4aPJzTlBQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c5:d2:70:c6:5b:93:cd:ca:0d:94:ed:64:6c:16:c1:8b:d1:06:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865 Validity Not Before: Nov 15 13:25:57 2026 GMT Not After : Nov 16 17:23:57 2026 GMT Subject: CN=0C70FAD0438FE408FE55F070D66FEA3678BA1231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:77:be:ac:54:fd:ef:e7:c9:55:04:c3:df:0f: 74:91:f7:6d:ea:1b:2a:21:09:c8:13:60:f5:5b:cc: b5:ed:ad:69:91:1f:8f:77:3e:aa:29:c4:6f:97:b3: 9a:5a:43:28:f8:67:8d:a1:d4:c5:50:c3:e0:e4:fa: 53:84:25:32:9f:69:3e:80:72:b9:ee:a5:46:69:be: d2:3a:ca:0e:b2:4f:b9:38:53:de:cd:59:e3:ef:35: b2:aa:e8:71:f4:b2:99:aa:f6:41:b4:cb:cf:b5:17: d6:8a:5e:fa:07:4e:dc:26:8d:ec:8c:9b:9e:eb:3c: 22:7b:65:40:c6:05:9e:82:ce:ab:77:42:45:82:2c: 4f:4b:c6:54:cb:b5:67:bf:7a:17:9b:08:8b:6e:9d: c7:ff:b7:ba:91:a4:b4:85:1d:c7:52:56:33:62:04: 0b:da:25:e9:df:09:aa:f1:34:5e:5e:49:ec:46:29: 8b:18:39:0c:c7:22:ed:1a:65:70:b8:ae:71:a3:a7: e1:e8:d8:ef:54:13:e2:6b:47:63:76:73:12:52:a9: 20:97:26:13:da:e8:92:55:9b:3f:55:69:ab:cc:da: 2f:7f:56:1f:01:c0:0a:41:cf:44:1c:cb:48:db:a1: 8b:04:2b:76:01:48:e6:64:3c:19:e9:05:7b:a2:b1: 3b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:70:FA:D0:43:8F:E4:08:FE:55:F0:70:D6:6F:EA:36:78:BA:12:31 X509v3 Authority Key Identifier: keyid:04:0C:9F:4B:86:EC:13:FE:0F:91:FD:76:BB:0F:F8:E3:A6:40:28:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:82:36:50:f7:8c:36:e9:f2:65:9a:4c:7e:2b:21:a7:25:20: 8b:35:9b:2f:d8:80:45:f7:f2:bf:9d:04:08:db:52:f3:2b:36: 5c:91:53:99:0f:ce:9b:a4:73:a4:b9:0c:01:0a:0e:d1:af:65: e6:89:7e:2d:81:0a:e1:3a:fd:8b:06:95:de:b9:e3:4b:34:70: 69:38:69:20:bb:04:2e:46:cc:db:f8:ae:e9:54:a1:f6:99:66: 40:16:ca:b5:7d:30:b8:1e:96:76:e5:62:a7:50:ae:0d:e0:ff: 16:6f:11:0f:df:ae:b9:8a:36:2a:de:32:d7:e6:f8:ee:7b:e7: 94:25:8d:30:1a:68:7d:8b:b2:88:3c:55:b4:6d:e4:69:61:a1: a6:96:74:c5:45:1a:cf:a1:1e:e4:e3:dd:30:37:20:9f:42:c1: da:e0:8c:74:f1:b5:ef:08:af:d3:ce:93:86:e1:aa:01:b2:4e: df:74:ec:36:86:81:80:92:6a:ec:a5:c1:89:07:84:0e:6c:98: 04:cb:8c:24:b4:34:de:1c:ae:a8:c3:12:00:a1:e3:8b:18:3d: 05:fd:f4:7a:56:97:96:9c:30:13:c3:4e:ca:7c:3b:8c:0f:b7: d3:d2:b9:74:3f:95:eb:91:49:ab:2f:66:d1:c2:41:eb:1c:9b: f5:f0:32:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEcXScMZbk83KDZTtZGwWwYvRBigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQwQzlGNEI4NkVDMTNGRTBGOTFGRDc2QkIwRkY4RTNB NjQwMjg2NTAeFw0yNjExMTUxMzI1NTdaFw0yNjExMTYxNzIzNTdaMDMxMTAvBgNV BAMTKDBDNzBGQUQwNDM4RkU0MDhGRTU1RjA3MEQ2NkZFQTM2NzhCQTEyMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDId76sVP3v58lVBMPfD3SR923q GyohCcgTYPVbzLXtrWmRH493PqopxG+Xs5paQyj4Z42h1MVQw+Dk+lOEJTKfaT6A crnupUZpvtI6yg6yT7k4U97NWePvNbKq6HH0spmq9kG0y8+1F9aKXvoHTtwmjeyM m57rPCJ7ZUDGBZ6Czqt3QkWCLE9LxlTLtWe/ehebCItuncf/t7qRpLSFHcdSVjNi BAvaJenfCarxNF5eSexGKYsYOQzHIu0aZXC4rnGjp+Ho2O9UE+JrR2N2cxJSqSCX JhPa6JJVmz9VaavM2i9/Vh8BwApBz0Qcy0jboYsEK3YBSOZkPBnpBXuisTshAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDHD60EOP5Aj+VfBw1m/qNni6EjEwHwYDVR0j BBgwFoAUBAyfS4bsE/4Pkf12uw/446ZAKGUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2MTBjOGQtYTkzNS00NGMzLTg5MzUtYjYzYjQ4ZjgzM2YwLzAvMDQwQzlGNEI4 NkVDMTNGRTBGOTFGRDc2QkIwRkY4RTNBNjQwMjg2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDBDOUY0Qjg2RUMxM0ZFMEY5MUZENzZCQjBGRjhFM0E2NDAy ODY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2MTBjOGQtYTkzNS00NGMzLTg5 MzUtYjYzYjQ4ZjgzM2YwLzAvMDQwQzlGNEI4NkVDMTNGRTBGOTFGRDc2QkIwRkY4 RTNBNjQwMjg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALeCNlD3jDbp8mWaTH4rIaclIIs1my/YgEX3 8r+dBAjbUvMrNlyRU5kPzpukc6S5DAEKDtGvZeaJfi2BCuE6/YsGld6540s0cGk4 aSC7BC5GzNv4rulUofaZZkAWyrV9MLgelnblYqdQrg3g/xZvEQ/frrmKNireMtfm +O5755QljTAaaH2Lsog8VbRt5GlhoaaWdMVFGs+hHuTj3TA3IJ9CwdrgjHTxte8I r9POk4bhqgGyTt907DaGgYCSauylwYkHhA5smATLjCS0NN4crqjDEgCh44sYPQX9 9HpWl5acMBPDTsp8O4wPt9PSuXQ/leuRSasvZtHCQescm/XwMhI= -----END CERTIFICATE-----Generated at Sun Nov 15 21:53:45 2026 by rpki-client