$ rpki-client -vvvf rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft File: E23AA0021573342645A2DFB669071A3FC460F128.mft (raw, json) Hash identifier: FmTPuS/R28QSswyT2yj1LqVivz2ZNbOiJjQ73nIYX08= Subject key identifier: 9B:9F:6D:68:08:5F:C5:DA:60:97:4E:2B:FA:FC:10:7F:97:D5:6D:02 Authority key identifier: E2:3A:A0:02:15:73:34:26:45:A2:DF:B6:69:07:1A:3F:C4:60:F1:28 Certificate issuer: /CN=E23AA0021573342645A2DFB669071A3FC460F128 Certificate serial: 043FFE054EC832096D35AD0A63FA5F71B6B6C1D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft Manifest number: FF Signing time: Mon 09 Nov 2026 22:38:54 +0000 Manifest this update: Mon 09 Nov 2026 22:33:54 +0000 Manifest next update: Tue 10 Nov 2026 23:10:54 +0000 Files and hashes: 1: 3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa (hash: ehJTG/Z8MCWRpYE7Mv6MPXlKzKRx5WpLNTB9Vc1HLns=) 2: E23AA0021573342645A2DFB669071A3FC460F128.crl (hash: CFuhoYvAcuMRGl/1yfCEq0q1pYEvzvIBCmWCfLilCqg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.crl rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 23:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3f:fe:05:4e:c8:32:09:6d:35:ad:0a:63:fa:5f:71:b6:b6:c1:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E23AA0021573342645A2DFB669071A3FC460F128 Validity Not Before: Nov 9 22:33:54 2026 GMT Not After : Nov 10 23:10:54 2026 GMT Subject: CN=9B9F6D68085FC5DA60974E2BFAFC107F97D56D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f7:13:65:c7:20:f5:39:14:45:99:4d:8a:67: 12:c4:36:15:e4:bb:29:a0:2f:b5:3c:ed:dc:ec:c8: 3b:6c:2d:d7:a3:9e:27:25:d8:fa:ce:5a:f9:cd:9f: 37:22:1e:7e:15:91:0b:45:11:6e:4b:00:88:76:6d: 47:c3:3f:21:30:c6:a5:96:e0:6e:aa:c7:ba:9e:fd: 44:83:d1:de:4f:c3:1b:ed:07:e5:78:eb:e0:cc:7a: 74:a4:75:83:f5:6d:c5:75:b6:0b:b4:a4:50:64:64: 6c:cb:a4:dc:fb:0e:4e:a9:75:fd:80:a7:e0:94:59: cc:9b:9f:e5:ea:68:12:1a:20:90:92:59:37:96:b2: d3:86:ff:1c:ac:9f:c6:f6:1c:43:dc:8d:e5:f7:a0: 71:60:fd:c2:eb:21:7d:a3:e5:e4:a8:52:25:de:8f: e9:93:db:bc:18:ef:2a:0b:a5:93:f8:88:ac:85:97: 30:ab:32:20:63:b0:ba:74:6f:00:cf:99:5b:6a:ff: fb:10:9a:80:cd:2e:f2:09:9f:0f:09:94:f8:30:c8: 49:20:14:86:b4:39:0c:02:77:98:f4:3c:3a:a7:db: 75:fa:41:b7:86:0f:f2:4f:e1:79:27:09:82:0f:51: ea:9b:9a:c7:26:6d:67:05:68:cc:00:89:5e:25:f0: 9d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9F:6D:68:08:5F:C5:DA:60:97:4E:2B:FA:FC:10:7F:97:D5:6D:02 X509v3 Authority Key Identifier: keyid:E2:3A:A0:02:15:73:34:26:45:A2:DF:B6:69:07:1A:3F:C4:60:F1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:81:b3:d8:63:d8:ec:bc:79:eb:35:11:b0:d4:f8:4f:1e:70: 2a:6b:f1:df:98:d7:7d:4f:ce:9d:4c:16:60:38:bc:3a:8c:0e: 7a:90:56:cd:72:dd:48:d3:84:e2:6e:69:ba:a3:51:20:88:a5: 67:d8:6b:5f:07:3b:b2:08:f8:90:74:3d:32:f8:f9:03:b5:50: 87:cd:43:86:d6:27:ac:f2:81:e4:93:c2:29:84:b7:df:e8:6b: fc:24:e6:99:64:80:2b:f1:c3:ac:6c:61:b1:fb:12:9a:fc:71: 98:8b:dc:56:7d:52:f6:5e:82:a8:78:67:f9:53:66:ab:01:b5: a6:7f:d1:8a:06:e4:93:25:ee:e1:ac:a7:ad:8f:df:9c:38:d1: 94:0f:85:fb:85:10:53:ca:04:9a:96:23:99:fe:19:ad:55:51: ae:e2:e8:48:c8:22:48:b8:8f:8e:9d:1b:1f:3c:69:50:17:47: fe:3d:f4:95:aa:88:34:20:87:65:b0:8d:d3:1c:71:de:d2:36: 10:d8:67:ac:7e:f8:3a:20:ae:00:83:9e:39:59:00:88:e6:60: 15:a3:13:19:2b:f5:98:cd:5c:30:62:7e:8d:c2:6c:2d:79:01: 4f:77:c6:93:78:d1:ef:9a:0a:cf:49:0e:76:2b:2b:6d:45:95: ee:d8:f6:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBD/+BU7IMgltNa0KY/pfcba2wdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIzQUEwMDIxNTczMzQyNjQ1QTJERkI2NjkwNzFBM0ZD NDYwRjEyODAeFw0yNjExMDkyMjMzNTRaFw0yNjExMTAyMzEwNTRaMDMxMTAvBgNV BAMTKDlCOUY2RDY4MDg1RkM1REE2MDk3NEUyQkZBRkMxMDdGOTdENTZEMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW9xNlxyD1ORRFmU2KZxLENhXk uymgL7U87dzsyDtsLdejnicl2PrOWvnNnzciHn4VkQtFEW5LAIh2bUfDPyEwxqWW 4G6qx7qe/USD0d5PwxvtB+V46+DMenSkdYP1bcV1tgu0pFBkZGzLpNz7Dk6pdf2A p+CUWcybn+XqaBIaIJCSWTeWstOG/xysn8b2HEPcjeX3oHFg/cLrIX2j5eSoUiXe j+mT27wY7yoLpZP4iKyFlzCrMiBjsLp0bwDPmVtq//sQmoDNLvIJnw8JlPgwyEkg FIa0OQwCd5j0PDqn23X6QbeGD/JP4XknCYIPUeqbmscmbWcFaMwAiV4l8J3fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm59taAhfxdpgl04r+vwQf5fVbQIwHwYDVR0j BBgwFoAU4jqgAhVzNCZFot+2aQcaP8Rg8SgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjhkMGZjYTgtNWMyZC00ZTM1LWJkN2QtYjQ0OGFhNzVmMmJlLzAvRTIzQUEwMDIx NTczMzQyNjQ1QTJERkI2NjkwNzFBM0ZDNDYwRjEyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMjNBQTAwMjE1NzMzNDI2NDVBMkRGQjY2OTA3MUEzRkM0NjBG MTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjhkMGZjYTgtNWMyZC00ZTM1LWJk N2QtYjQ0OGFhNzVmMmJlLzAvRTIzQUEwMDIxNTczMzQyNjQ1QTJERkI2NjkwNzFB M0ZDNDYwRjEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqBs9hj2Oy8ees1EbDU+E8ecCpr8d+Y131P zp1MFmA4vDqMDnqQVs1y3UjThOJuabqjUSCIpWfYa18HO7II+JB0PTL4+QO1UIfN Q4bWJ6zygeSTwimEt9/oa/wk5plkgCvxw6xsYbH7Epr8cZiL3FZ9UvZegqh4Z/lT ZqsBtaZ/0YoG5JMl7uGsp62P35w40ZQPhfuFEFPKBJqWI5n+Ga1VUa7i6EjIIki4 j46dGx88aVAXR/499JWqiDQgh2WwjdMccd7SNhDYZ6x++DogrgCDnjlZAIjmYBWj Exkr9ZjNXDBifo3CbC15AU93xpN40e+aCs9JDnYrK21Fle7Y9po= -----END CERTIFICATE-----Generated at Tue Nov 10 17:16:03 2026 by rpki-client