$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft File: 05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft (raw, json) Hash identifier: PfkpWpVjpngDR7cKPY14gPe5HFq8DiY3yVTvZeghLok= Subject key identifier: 0C:BA:9B:66:8C:A9:08:BF:92:2C:C9:E7:B3:4E:E0:14:DB:39:A8:78 Authority key identifier: 05:CF:9E:16:17:EC:F8:BE:02:F2:FD:FA:27:F1:3A:86:2A:2B:20:EB Certificate issuer: /CN=05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB Certificate serial: F63C1F4D31F7CAB7C22891A27DD3E577520A43 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft Manifest number: FD Signing time: Mon 09 Nov 2026 20:15:58 +0000 Manifest this update: Mon 09 Nov 2026 20:10:58 +0000 Manifest next update: Tue 10 Nov 2026 21:49:58 +0000 Files and hashes: 1: 3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa (hash: Fdccteawm8p+b48M0aaG/VtbesmEvdRHnNtrJ03BLvI=) 2: 05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl (hash: Ym3qBuoK+YVSKifZXx218qJCkIfeyscuniqln6/lCQc=) 3: 3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (hash: z6kI94sxzHsqlH3E/LSFr36Xmy4KrSkD+IFv+WC4jTo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 21:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f6:3c:1f:4d:31:f7:ca:b7:c2:28:91:a2:7d:d3:e5:77:52:0a:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB Validity Not Before: Nov 9 20:10:58 2026 GMT Not After : Nov 10 21:49:58 2026 GMT Subject: CN=0CBA9B668CA908BF922CC9E7B34EE014DB39A878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ea:7e:7f:7f:cd:38:00:ae:8f:de:ec:7e:51: b2:d9:1d:c1:f2:cf:39:2b:69:8f:f5:cd:04:c5:36: 8a:4c:de:a8:b0:42:0c:b2:a9:a5:94:56:22:3e:6d: 61:db:da:76:19:a1:12:78:bc:ce:d3:cc:28:95:a6: 41:e4:49:42:9f:96:71:68:65:cd:3d:89:c6:96:b2: 08:6b:1e:d2:34:29:17:97:1d:76:51:de:d5:5b:48: 06:dc:06:ea:85:b0:74:92:19:d7:63:dd:99:01:fc: 9d:81:0f:93:41:24:1d:61:d8:cf:95:7d:6d:c5:db: 0c:c0:2c:74:96:1a:84:39:ee:67:da:14:ec:23:5c: 17:50:b5:20:23:45:3d:89:28:b9:0c:8c:1b:ee:6c: 62:93:d7:bb:1a:74:af:80:70:c6:e1:47:16:36:6a: 3c:af:82:3b:f6:e5:05:1d:68:c2:b6:be:f7:97:16: 58:7b:37:d8:a6:33:8b:25:24:8d:46:71:e8:89:92: 7b:a7:e5:47:d0:9d:12:43:9a:f3:ab:ff:87:3f:45: 5f:dc:73:61:06:88:36:26:50:dc:08:11:09:bc:44: a9:ec:51:34:cf:6e:d3:49:3b:ba:1d:ae:f1:0e:9a: 01:b4:30:f5:9a:67:f8:2a:02:a3:3f:7b:f9:c8:8d: 8f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BA:9B:66:8C:A9:08:BF:92:2C:C9:E7:B3:4E:E0:14:DB:39:A8:78 X509v3 Authority Key Identifier: keyid:05:CF:9E:16:17:EC:F8:BE:02:F2:FD:FA:27:F1:3A:86:2A:2B:20:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:49:fe:9c:24:bd:a4:6e:71:66:2d:24:2d:53:29:4b:32:15: 67:a9:0b:01:24:72:1c:52:36:51:af:72:f6:46:1d:41:f4:ba: be:0d:71:41:be:41:ac:9a:9e:2d:5e:c4:86:24:53:7b:30:eb: b4:97:6b:a7:0d:b6:51:45:99:0f:9c:6c:e8:2b:22:de:d1:a4: 50:03:a3:61:c5:5b:d3:46:40:a5:ba:ec:cd:e1:86:8b:4c:4c: 8e:9f:75:b1:88:70:79:16:be:b3:b3:7c:97:ba:74:e2:b2:e5: 9b:f2:24:1f:1d:28:a5:8f:83:32:9a:7c:28:bb:a2:16:5f:29: ae:1e:54:ee:a4:72:00:10:9a:81:85:69:b1:26:ea:7d:2d:21: ed:98:e9:a5:c3:99:64:64:69:3f:14:36:33:6e:49:ff:33:3b: e3:66:a1:f3:f6:b7:a6:cf:43:0f:50:0e:12:fd:47:e0:e0:a0: 7d:63:67:e6:9e:8d:fc:d2:29:13:2b:2d:7a:6d:59:c5:56:d9: e5:ea:1e:09:3c:eb:e2:70:b4:a1:69:63:b3:ae:ea:f6:9c:36: cb:d0:e6:48:59:ef:82:34:8a:f4:69:8a:c4:5b:ca:62:d1:0a: 44:23:8f:ce:05:47:ac:97:86:36:e8:d7:96:2a:88:ea:ac:bd: 3b:20:37:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAPY8H00x98q3wiiRon3T5XdSCkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDVDRjlFMTYxN0VDRjhCRTAyRjJGREZBMjdGMTNBODYy QTJCMjBFQjAeFw0yNjExMDkyMDEwNThaFw0yNjExMTAyMTQ5NThaMDMxMTAvBgNV BAMTKDBDQkE5QjY2OENBOTA4QkY5MjJDQzlFN0IzNEVFMDE0REIzOUE4NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr6n5/f804AK6P3ux+UbLZHcHy zzkraY/1zQTFNopM3qiwQgyyqaWUViI+bWHb2nYZoRJ4vM7TzCiVpkHkSUKflnFo Zc09icaWsghrHtI0KReXHXZR3tVbSAbcBuqFsHSSGddj3ZkB/J2BD5NBJB1h2M+V fW3F2wzALHSWGoQ57mfaFOwjXBdQtSAjRT2JKLkMjBvubGKT17sadK+AcMbhRxY2 ajyvgjv25QUdaMK2vveXFlh7N9imM4slJI1GceiJknun5UfQnRJDmvOr/4c/RV/c c2EGiDYmUNwIEQm8RKnsUTTPbtNJO7odrvEOmgG0MPWaZ/gqAqM/e/nIjY9HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDLqbZoypCL+SLMnns07gFNs5qHgwHwYDVR0j BBgwFoAUBc+eFhfs+L4C8v36J/E6hiorIOswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRmZDQyMzQtMTMyMy00ZjBlLWI2ODYtMWQ3MmFjYjg4MDI5LzAvMDVDRjlFMTYx N0VDRjhCRTAyRjJGREZBMjdGMTNBODYyQTJCMjBFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNUNGOUUxNjE3RUNGOEJFMDJGMkZERkEyN0YxM0E4NjJBMkIy MEVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRmZDQyMzQtMTMyMy00ZjBlLWI2 ODYtMWQ3MmFjYjg4MDI5LzAvMDVDRjlFMTYxN0VDRjhCRTAyRjJGREZBMjdGMTNB ODYyQTJCMjBFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNJ/pwkvaRucWYtJC1TKUsyFWepCwEkchxS NlGvcvZGHUH0ur4NcUG+Qayani1exIYkU3sw67SXa6cNtlFFmQ+cbOgrIt7RpFAD o2HFW9NGQKW67M3hhotMTI6fdbGIcHkWvrOzfJe6dOKy5ZvyJB8dKKWPgzKafCi7 ohZfKa4eVO6kcgAQmoGFabEm6n0tIe2Y6aXDmWRkaT8UNjNuSf8zO+NmofP2t6bP Qw9QDhL9R+DgoH1jZ+aejfzSKRMrLXptWcVW2eXqHgk86+JwtKFpY7Ou6vacNsvQ 5khZ74I0ivRpisRbymLRCkQjj84FR6yXhjbo15YqiOqsvTsgNy0= -----END CERTIFICATE-----Generated at Tue Nov 10 06:25:03 2026 by rpki-client