$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft File: B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft (raw, json) Hash identifier: RcAOMzEtiOzKPpSLpGzgMvYgR+o1ekyhHmK7hCrTgTc= Subject key identifier: C3:17:21:DC:DC:4D:85:84:57:A0:E3:18:9F:F3:E8:07:62:87:65:0E Authority key identifier: B9:D7:A5:A4:9B:32:2E:D9:87:28:18:32:AB:CF:B5:DC:50:9A:B8:89 Certificate issuer: /CN=B9D7A5A49B322ED987281832ABCFB5DC509AB889 Certificate serial: 54E56E27B65F7DECC79C3BADF8A4C1B0D1844BBB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 03:13:07 +0000 Manifest this update: Sun 15 Nov 2026 03:08:07 +0000 Manifest next update: Mon 16 Nov 2026 05:23:07 +0000 Files and hashes: 1: 3130332e3137362e3132312e302f32342d3234203d3e20313437313330.roa (hash: mPIkuQVE9R3LTUTej85wxcqgd13oKy/e6VbDwXPFIhY=) 2: 3130332e3137362e36382e302f32342d3234203d3e20313437313330.roa (hash: huLq2YMQLck+XmMqgf5+tIkuWDJY1pNSg4kGrXts0QE=) 3: B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl (hash: Bk+mtpqlvtbKtFHAjTQ3Wk3UvY0h89WAvX5s12/IK78=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 05:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e5:6e:27:b6:5f:7d:ec:c7:9c:3b:ad:f8:a4:c1:b0:d1:84:4b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9D7A5A49B322ED987281832ABCFB5DC509AB889 Validity Not Before: Nov 15 03:08:07 2026 GMT Not After : Nov 16 05:23:07 2026 GMT Subject: CN=C31721DCDC4D858457A0E3189FF3E8076287650E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:83:0d:e8:bd:9f:13:87:28:9c:1e:f4:d2:88: 0b:40:cf:66:e4:a2:d8:f8:e9:56:f7:f2:4c:aa:22: a6:1d:c9:33:54:1d:c5:38:34:08:a1:c7:e8:bc:25: 73:3e:3e:06:d0:1d:d5:a0:6e:6e:66:7b:f0:04:00: 26:3c:31:06:05:b2:8d:1a:07:c7:9d:c8:a8:47:2a: c5:6b:33:2e:3b:32:50:36:c5:a1:f9:2f:1c:b9:48: 20:d0:67:f9:73:6d:37:56:bb:a0:11:b5:61:e2:ca: 8c:5d:bd:72:42:1a:14:3c:76:a1:f0:f2:68:c6:9c: 22:14:a9:01:4b:74:62:70:01:36:bd:45:1c:12:2a: cf:29:76:e5:cf:c3:4b:e4:d0:0c:3c:74:90:c9:39: 5f:a8:aa:69:6e:92:fe:21:7d:be:a9:da:a9:fd:17: c9:9e:32:21:88:ba:74:3a:02:c8:61:60:64:7d:c1: 2e:1c:1a:86:96:c8:5d:f2:a4:b7:a9:a0:f0:44:b5: 0a:52:79:22:ac:b6:50:91:39:26:91:2c:54:a4:71: 33:e1:03:4d:16:26:cb:44:0e:af:3f:47:4b:d6:44: 24:64:e1:55:64:25:63:ff:a1:f2:35:22:6b:db:e1: d2:08:77:22:57:41:75:9c:03:8c:bf:63:e4:a9:2e: 69:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:17:21:DC:DC:4D:85:84:57:A0:E3:18:9F:F3:E8:07:62:87:65:0E X509v3 Authority Key Identifier: keyid:B9:D7:A5:A4:9B:32:2E:D9:87:28:18:32:AB:CF:B5:DC:50:9A:B8:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:94:22:42:27:69:38:b6:b6:57:ec:16:70:92:91:72:03:2a: af:35:d1:28:ed:64:84:c8:a1:ab:83:17:b3:4a:e4:53:8a:5c: 01:c7:93:bb:cc:08:f4:0a:2e:53:96:54:96:3d:e9:50:a0:23: 5e:6b:64:53:58:f5:8d:79:17:7c:ad:4a:57:1a:69:8e:fb:53: 5e:f9:e4:d1:bf:67:5a:79:da:60:a3:4d:ce:ee:d8:81:5c:8c: c8:7b:01:78:a1:1a:46:9a:58:a2:91:25:93:3e:f2:0b:fe:1d: 5d:65:99:2e:79:4a:be:f9:da:24:e5:e9:b6:5d:a6:1c:94:27: 54:e7:2e:6d:12:b8:b8:a5:ca:d3:81:e3:57:35:1f:00:f9:2a: a3:a7:cb:4a:02:39:65:03:22:bd:7d:0d:e0:e1:6c:09:8f:24: d5:64:23:f8:4a:b9:9d:e3:be:d3:ab:76:99:2b:55:07:f3:41: 44:f2:d2:3c:b6:e4:33:36:41:89:c8:b9:46:c1:32:84:09:80: 85:ba:58:11:e9:15:4a:81:62:91:c7:33:18:3b:0a:a2:1b:5a: f8:9b:41:73:6e:a9:52:e7:92:20:f3:93:ba:eb:16:61:4e:b0: 25:63:50:d4:37:13:c2:f8:6d:a7:63:a9:b7:e9:ae:a1:bf:5d: 21:a6:f8:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVOVuJ7ZffezHnDut+KTBsNGES7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlEN0E1QTQ5QjMyMkVEOTg3MjgxODMyQUJDRkI1REM1 MDlBQjg4OTAeFw0yNjExMTUwMzA4MDdaFw0yNjExMTYwNTIzMDdaMDMxMTAvBgNV BAMTKEMzMTcyMURDREM0RDg1ODQ1N0EwRTMxODlGRjNFODA3NjI4NzY1MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9gw3ovZ8ThyicHvTSiAtAz2bk otj46Vb38kyqIqYdyTNUHcU4NAihx+i8JXM+PgbQHdWgbm5me/AEACY8MQYFso0a B8edyKhHKsVrMy47MlA2xaH5Lxy5SCDQZ/lzbTdWu6ARtWHiyoxdvXJCGhQ8dqHw 8mjGnCIUqQFLdGJwATa9RRwSKs8pduXPw0vk0Aw8dJDJOV+oqmlukv4hfb6p2qn9 F8meMiGIunQ6AshhYGR9wS4cGoaWyF3ypLepoPBEtQpSeSKstlCROSaRLFSkcTPh A00WJstEDq8/R0vWRCRk4VVkJWP/ofI1Imvb4dIIdyJXQXWcA4y/Y+SpLmlHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwxch3NxNhYRXoOMYn/PoB2KHZQ4wHwYDVR0j BBgwFoAUudelpJsyLtmHKBgyq8+13FCauIkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTk1MWRmZWUtYTc1Yi00NDIwLWE3NTUtMmM3MzU4YmFmN2QzLzAvQjlEN0E1QTQ5 QjMyMkVEOTg3MjgxODMyQUJDRkI1REM1MDlBQjg4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUQ3QTVBNDlCMzIyRUQ5ODcyODE4MzJBQkNGQjVEQzUwOUFC ODg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTk1MWRmZWUtYTc1Yi00NDIwLWE3 NTUtMmM3MzU4YmFmN2QzLzAvQjlEN0E1QTQ5QjMyMkVEOTg3MjgxODMyQUJDRkI1 REM1MDlBQjg4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2UIkInaTi2tlfsFnCSkXIDKq810SjtZITI oauDF7NK5FOKXAHHk7vMCPQKLlOWVJY96VCgI15rZFNY9Y15F3ytSlcaaY77U175 5NG/Z1p52mCjTc7u2IFcjMh7AXihGkaaWKKRJZM+8gv+HV1lmS55Sr752iTl6bZd phyUJ1TnLm0SuLilytOB41c1HwD5KqOny0oCOWUDIr19DeDhbAmPJNVkI/hKuZ3j vtOrdpkrVQfzQUTy0jy25DM2QYnIuUbBMoQJgIW6WBHpFUqBYpHHMxg7CqIbWvib QXNuqVLnkiDzk7rrFmFOsCVjUNQ3E8L4badjqbfprqG/XSGm+Fo= -----END CERTIFICATE-----Generated at Sun Nov 15 21:04:27 2026 by rpki-client