$ rpki-client -vvvf rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft File: 00095019ECFE138568A45C973E2550DDCDFE24F9.mft (raw, json) Hash identifier: g/YFb8plDHDkVTZWNItndt7/bwSWGymsKvP14hXn/MU= Subject key identifier: B3:DC:34:FD:54:BA:29:14:E9:AD:65:4B:89:FB:A5:F4:E3:24:25:E0 Authority key identifier: 00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9 Certificate issuer: /CN=00095019ECFE138568A45C973E2550DDCDFE24F9 Certificate serial: 4F0F921AB0EBC65CC642BD5C88239E8F3EFA3FD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft Manifest number: 0102 Signing time: Tue 10 Nov 2026 23:15:20 +0000 Manifest this update: Tue 10 Nov 2026 23:10:20 +0000 Manifest next update: Thu 12 Nov 2026 01:07:20 +0000 Files and hashes: 1: 3138302e39342e382e302f32342d3234203d3e20313532303430.roa (hash: QD46OeSAEEYRUHA+p9YKqowoXvSQlWoPfMsfotiNmwI=) 2: 3138302e39342e392e302f32342d3234203d3e20313532303430.roa (hash: 9NjGQraMtFt8WFleFmys2JeiEGfDbejk4iig/XaEVZ4=) 3: 00095019ECFE138568A45C973E2550DDCDFE24F9.crl (hash: LvhkuJaL6e3c17Haoi91iV+VurPm05Tw8/tLATQCACs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:0f:92:1a:b0:eb:c6:5c:c6:42:bd:5c:88:23:9e:8f:3e:fa:3f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00095019ECFE138568A45C973E2550DDCDFE24F9 Validity Not Before: Nov 10 23:10:20 2026 GMT Not After : Nov 12 01:07:20 2026 GMT Subject: CN=B3DC34FD54BA2914E9AD654B89FBA5F4E32425E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:57:95:c5:56:1d:3d:5d:6b:c3:3d:e6:d3:70: 9d:1c:fa:fd:99:b1:83:f0:d5:da:24:11:9d:84:ea: 23:96:43:b1:e1:4c:64:d3:e5:da:1f:c5:bb:55:a7: 7b:52:04:05:37:0b:21:e8:ae:c7:b4:d9:a8:70:1a: 75:5b:e5:cd:eb:91:7a:9f:ad:5f:a2:61:29:0c:49: ff:f3:c9:1d:6a:23:c8:b8:d5:6e:e8:c9:79:39:0d: b0:23:09:36:92:95:36:15:86:2c:f5:d6:18:6f:39: 73:c5:15:d3:08:ad:67:b3:e1:f2:ab:1c:1d:7d:bc: fb:eb:41:d2:1b:f8:32:ae:a2:6f:9c:fe:aa:f4:5c: 95:ec:c7:04:df:b1:3a:d6:fc:98:94:f5:33:30:36: 98:ba:bd:dd:af:b4:5b:c7:bd:6d:ca:aa:64:f7:42: aa:4c:d1:e0:40:86:36:fc:fc:31:6f:2f:4f:ef:c3: 48:59:db:0d:c1:b0:87:85:42:93:5f:a8:04:8f:06: b6:2d:c6:d3:1b:61:93:80:7c:40:99:1d:6b:e8:49: 42:dd:47:d3:67:f7:89:0d:43:d7:03:ec:36:36:7c: 74:39:b7:5c:9a:68:81:eb:ee:cd:bc:06:6a:dd:14: 8a:ef:4d:b4:e5:c5:6d:94:af:27:96:d1:b3:a3:d6: 72:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DC:34:FD:54:BA:29:14:E9:AD:65:4B:89:FB:A5:F4:E3:24:25:E0 X509v3 Authority Key Identifier: keyid:00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:18:9a:f4:0b:08:7a:58:ef:a5:6b:0e:e4:7d:c5:25:d5:24: 36:47:db:7f:36:f3:23:aa:b1:12:47:cc:c3:e6:0e:a3:f4:eb: 44:fe:7f:5c:fd:33:d9:3f:98:b6:52:da:d3:8a:4b:a0:04:f8: 92:da:05:1d:33:b5:e8:25:23:70:d8:81:6e:96:23:a6:7e:99: 63:fa:d1:31:0d:4b:67:e3:5c:03:df:e2:c4:a2:e7:2a:4d:26: 46:2f:cb:42:49:b0:ec:9b:3a:38:6d:a4:ba:40:38:ea:ae:44: 3b:fd:22:6a:95:99:58:fb:95:0f:3b:76:da:0e:ef:4a:e4:3e: dc:fa:56:8a:fc:7d:7b:83:4a:4b:ce:6d:87:4e:f5:38:67:4d: 89:1e:08:8b:db:8a:56:e9:bb:05:86:54:75:b3:73:b5:4f:d0: b4:14:0f:49:7f:cc:91:34:69:4c:12:dd:d4:9b:c9:90:37:bd: f8:3d:cf:e6:9f:01:77:8c:a1:cd:9e:98:8f:13:bb:c6:12:06: ab:61:36:06:d6:ca:f9:49:02:e9:31:12:91:57:9a:81:79:8f: 21:79:e3:54:a2:2a:a8:03:e4:3a:bc:77:17:f4:29:b1:2d:45: bf:37:a9:1d:91:1b:7d:87:f2:be:26:2b:b5:87:26:11:ca:fd: 52:63:88:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTw+SGrDrxlzGQr1ciCOejz76P9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAwOTUwMTlFQ0ZFMTM4NTY4QTQ1Qzk3M0UyNTUwRERD REZFMjRGOTAeFw0yNjExMTAyMzEwMjBaFw0yNjExMTIwMTA3MjBaMDMxMTAvBgNV BAMTKEIzREMzNEZENTRCQTI5MTRFOUFENjU0Qjg5RkJBNUY0RTMyNDI1RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcV5XFVh09XWvDPebTcJ0c+v2Z sYPw1dokEZ2E6iOWQ7HhTGTT5dofxbtVp3tSBAU3CyHorse02ahwGnVb5c3rkXqf rV+iYSkMSf/zyR1qI8i41W7oyXk5DbAjCTaSlTYVhiz11hhvOXPFFdMIrWez4fKr HB19vPvrQdIb+DKuom+c/qr0XJXsxwTfsTrW/JiU9TMwNpi6vd2vtFvHvW3KqmT3 QqpM0eBAhjb8/DFvL0/vw0hZ2w3BsIeFQpNfqASPBrYtxtMbYZOAfECZHWvoSULd R9Nn94kNQ9cD7DY2fHQ5t1yaaIHr7s28BmrdFIrvTbTlxW2UryeW0bOj1nI/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs9w0/VS6KRTprWVLiful9OMkJeAwHwYDVR0j BBgwFoAUAAlQGez+E4VopFyXPiVQ3c3+JPkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZmMWViNGItNDhkYy00ZWVhLTkxODEtMTI4Y2IyOGIzZGJhLzAvMDAwOTUwMTlF Q0ZFMTM4NTY4QTQ1Qzk3M0UyNTUwRERDREZFMjRGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDA5NTAxOUVDRkUxMzg1NjhBNDVDOTczRTI1NTBERENERkUy NEY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZmMWViNGItNDhkYy00ZWVhLTkx ODEtMTI4Y2IyOGIzZGJhLzAvMDAwOTUwMTlFQ0ZFMTM4NTY4QTQ1Qzk3M0UyNTUw RERDREZFMjRGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4YmvQLCHpY76VrDuR9xSXVJDZH23828yOq sRJHzMPmDqP060T+f1z9M9k/mLZS2tOKS6AE+JLaBR0zteglI3DYgW6WI6Z+mWP6 0TENS2fjXAPf4sSi5ypNJkYvy0JJsOybOjhtpLpAOOquRDv9ImqVmVj7lQ87dtoO 70rkPtz6Vor8fXuDSkvObYdO9ThnTYkeCIvbilbpuwWGVHWzc7VP0LQUD0l/zJE0 aUwS3dSbyZA3vfg9z+afAXeMoc2emI8Tu8YSBqthNgbWyvlJAukxEpFXmoF5jyF5 41SiKqgD5Dq8dxf0KbEtRb83qR2RG32H8r4mK7WHJhHK/VJjiBQ= -----END CERTIFICATE-----Generated at Wed Nov 11 03:52:40 2026 by rpki-client