$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft File: 083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft (raw, json) Hash identifier: BdijT4HCHK1S7yuvIFKBNRuR0+Afy5Do9lxoQuNYcVc= Subject key identifier: D9:09:A5:47:C6:DC:EE:91:84:27:51:38:F4:B0:00:82:71:F6:BB:3F Authority key identifier: 08:37:43:FD:AF:08:07:CC:D8:D2:D3:B9:36:DE:09:16:76:CA:FC:B5 Certificate issuer: /CN=083743FDAF0807CCD8D2D3B936DE091676CAFCB5 Certificate serial: 4A9EEA910E7BBD82F236596F930DE1A73F2CF34A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft Manifest number: FF Signing time: Mon 09 Nov 2026 08:41:22 +0000 Manifest this update: Mon 09 Nov 2026 08:36:22 +0000 Manifest next update: Tue 10 Nov 2026 11:13:22 +0000 Files and hashes: 1: 083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl (hash: kgdS2+5AVyNcLsMhVpJzx51Y8PJXZdC8xAYLp+5kgwY=) 2: 3130332e3136392e33382e302f32332d3234203d3e20313432333331.roa (hash: Udq8GlzFIm/AvhcPc0cFCkf4+tnJ7nB5V9VbIrMM5Xs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 11:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:9e:ea:91:0e:7b:bd:82:f2:36:59:6f:93:0d:e1:a7:3f:2c:f3:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=083743FDAF0807CCD8D2D3B936DE091676CAFCB5 Validity Not Before: Nov 9 08:36:22 2026 GMT Not After : Nov 10 11:13:22 2026 GMT Subject: CN=D909A547C6DCEE9184275138F4B0008271F6BB3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f4:73:2c:f7:23:8b:33:bc:17:3c:30:ab:51: cb:e9:71:05:ad:14:f1:b3:13:0d:ae:eb:71:ac:95: 92:ee:a2:f2:c3:97:9a:fb:9c:fc:50:12:4f:e9:22: 8d:03:f3:c6:11:bc:0b:ce:a8:86:53:bd:44:a6:b0: 31:76:ce:ce:71:cc:40:35:5a:1c:ff:48:d3:b1:04: d8:4e:f8:99:ee:97:b2:87:0d:be:6e:3b:78:b3:54: 1e:c1:94:fe:ff:59:df:81:5b:e6:d6:e7:91:7b:f2: 65:f2:4f:ed:93:f1:54:af:ba:95:73:f6:a2:0b:81: 4c:8f:f1:cf:01:74:c6:91:9d:3a:06:35:4c:a5:3c: c1:f2:07:3b:eb:8c:47:53:2f:ee:d2:fc:21:0b:45: d1:73:30:03:75:27:cd:f6:0c:83:88:40:03:0f:9a: 7b:13:5c:78:40:51:8f:05:f4:3b:cc:2a:9a:a8:a2: cf:b0:ea:ce:9f:fa:34:b2:cb:46:93:0e:09:45:8d: 38:03:e5:b9:03:2b:e0:99:3d:d7:02:be:8e:76:34: 87:44:4a:82:52:f8:4b:52:dc:27:24:9e:82:73:4a: eb:cf:d6:a1:96:ec:1e:27:33:d7:bd:1d:01:06:59: 11:ff:de:e1:32:a8:30:7c:fa:77:3f:a1:f7:73:7c: fd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:09:A5:47:C6:DC:EE:91:84:27:51:38:F4:B0:00:82:71:F6:BB:3F X509v3 Authority Key Identifier: keyid:08:37:43:FD:AF:08:07:CC:D8:D2:D3:B9:36:DE:09:16:76:CA:FC:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:db:99:91:16:65:cd:8b:c8:b7:8c:53:b7:5f:c8:38:47:e1: 9b:2b:34:69:aa:f2:47:60:18:a2:03:bb:f3:ff:1c:00:28:3a: 7e:03:ee:e7:2e:ab:84:fe:ca:7c:92:5b:88:51:6e:32:f3:52: e7:4f:d0:e9:7c:02:16:34:34:d2:c1:37:29:14:51:c6:cf:17: 51:4b:f4:00:77:ca:8f:40:4e:5a:d2:69:94:3e:d0:6c:34:97: e9:78:8b:f2:79:ae:ac:bf:40:4c:36:17:a0:8a:91:bd:2e:f0: 09:bf:ec:fd:6e:2a:6f:e3:ec:be:2a:e8:c2:47:91:f5:7d:56: 21:c1:87:e3:cd:f1:e1:a9:33:11:ef:ef:80:aa:2f:8f:f9:bb: db:1a:a9:15:2b:94:68:87:a4:07:9b:70:65:c7:3f:c9:1d:5d: 1c:4a:71:f1:e4:9a:2e:5c:08:97:fb:bf:bc:a4:9a:1f:8e:72: 5c:ca:73:85:19:bf:20:a9:1c:30:13:2a:c0:1e:5f:74:c8:d7: 28:94:71:12:2c:8b:a3:21:19:f1:3d:57:58:90:bf:31:94:32: 6a:fd:9d:24:a1:06:ff:1a:de:2d:46:f6:d3:c8:fb:95:35:9b: 9b:a4:6d:c7:7a:9c:e5:6a:85:43:c5:65:1c:be:ed:3a:31:b7: c8:3b:f6:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSp7qkQ57vYLyNllvkw3hpz8s80owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgzNzQzRkRBRjA4MDdDQ0Q4RDJEM0I5MzZERTA5MTY3 NkNBRkNCNTAeFw0yNjExMDkwODM2MjJaFw0yNjExMTAxMTEzMjJaMDMxMTAvBgNV BAMTKEQ5MDlBNTQ3QzZEQ0VFOTE4NDI3NTEzOEY0QjAwMDgyNzFGNkJCM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf9HMs9yOLM7wXPDCrUcvpcQWt FPGzEw2u63GslZLuovLDl5r7nPxQEk/pIo0D88YRvAvOqIZTvUSmsDF2zs5xzEA1 Whz/SNOxBNhO+Jnul7KHDb5uO3izVB7BlP7/Wd+BW+bW55F78mXyT+2T8VSvupVz 9qILgUyP8c8BdMaRnToGNUylPMHyBzvrjEdTL+7S/CELRdFzMAN1J832DIOIQAMP mnsTXHhAUY8F9DvMKpqoos+w6s6f+jSyy0aTDglFjTgD5bkDK+CZPdcCvo52NIdE SoJS+EtS3CcknoJzSuvP1qGW7B4nM9e9HQEGWRH/3uEyqDB8+nc/ofdzfP2rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2QmlR8bc7pGEJ1E49LAAgnH2uz8wHwYDVR0j BBgwFoAUCDdD/a8IB8zY0tO5Nt4JFnbK/LUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI0OGQyN2ItY2NiMC00ZmM3LWFiY2EtOWZjMGEzZTE1NzU0LzAvMDgzNzQzRkRB RjA4MDdDQ0Q4RDJEM0I5MzZERTA5MTY3NkNBRkNCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODM3NDNGREFGMDgwN0NDRDhEMkQzQjkzNkRFMDkxNjc2Q0FG Q0I1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI0OGQyN2ItY2NiMC00ZmM3LWFi Y2EtOWZjMGEzZTE1NzU0LzAvMDgzNzQzRkRBRjA4MDdDQ0Q4RDJEM0I5MzZERTA5 MTY3NkNBRkNCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALbbmZEWZc2LyLeMU7dfyDhH4ZsrNGmq8kdg GKIDu/P/HAAoOn4D7ucuq4T+ynySW4hRbjLzUudP0Ol8AhY0NNLBNykUUcbPF1FL 9AB3yo9ATlrSaZQ+0Gw0l+l4i/J5rqy/QEw2F6CKkb0u8Am/7P1uKm/j7L4q6MJH kfV9ViHBh+PN8eGpMxHv74CqL4/5u9saqRUrlGiHpAebcGXHP8kdXRxKcfHkmi5c CJf7v7ykmh+OclzKc4UZvyCpHDATKsAeX3TI1yiUcRIsi6MhGfE9V1iQvzGUMmr9 nSShBv8a3i1G9tPI+5U1m5ukbcd6nOVqhUPFZRy+7Toxt8g79vE= -----END CERTIFICATE-----Generated at Tue Nov 10 03:19:43 2026 by rpki-client