$ rpki-client -vvvf rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft File: F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft (raw, json) Hash identifier: QcS+HVff2f3iJAUsy5feY+E9eGbwUG/I1us72aR6d1M= Subject key identifier: AA:A5:16:2A:5A:05:9F:96:00:6E:E6:0C:F6:C5:0D:A1:4B:74:32:1D Authority key identifier: F9:AD:F5:9D:FC:07:02:EB:1E:3C:C8:F9:D5:63:CA:A4:C0:61:2D:91 Certificate issuer: /CN=F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91 Certificate serial: 1C21FF0E31D5B34FAF484CC1A4CDA9D6A3DE4B18 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 02:11:53 +0000 Manifest this update: Sun 15 Nov 2026 02:06:53 +0000 Manifest next update: Mon 16 Nov 2026 05:17:53 +0000 Files and hashes: 1: F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.crl (hash: 0uysi7MUnazp1Eh/CVZ5tUrC4tVR+b6jR/ZJQNNJ/L4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.crl rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 05:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:21:ff:0e:31:d5:b3:4f:af:48:4c:c1:a4:cd:a9:d6:a3:de:4b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91 Validity Not Before: Nov 15 02:06:53 2026 GMT Not After : Nov 16 05:17:53 2026 GMT Subject: CN=AAA5162A5A059F96006EE60CF6C50DA14B74321D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:60:ce:b5:0a:19:16:ad:27:ed:92:13:c2:9d: 79:94:15:92:15:e0:26:02:ce:a3:95:57:15:f2:8c: 2c:50:10:bd:94:1a:49:53:80:6f:8a:01:5f:86:51: d2:9c:39:bb:05:a8:c0:d6:80:43:7c:a2:ef:12:2d: a3:45:c8:7b:3a:1e:a3:2e:67:22:92:da:3a:e5:40: 15:a7:79:f4:94:61:3c:8c:28:ff:ec:ed:38:7c:85: 7d:23:83:6d:ca:e9:cb:67:6d:5f:84:75:7a:35:16: 6a:9f:19:f3:f0:34:6e:bf:b4:a3:8f:4f:64:96:d3: b2:1d:56:f1:1f:7c:8e:09:f5:01:24:87:95:5e:81: 14:eb:77:ee:a1:dc:35:d5:a8:fd:be:c5:04:fc:39: 4e:c6:0a:2f:c8:99:90:20:6a:92:a1:93:e9:ea:14: 0b:95:e7:23:e1:d8:01:22:90:6b:0f:7a:b0:75:82: e2:7d:37:6c:e8:ac:21:9e:f9:57:d4:af:c3:cb:d4: 9c:00:84:3b:f6:26:c4:d1:c6:78:05:b2:bd:77:74: 94:aa:68:4b:2e:e4:05:b1:03:ae:14:54:57:ad:d5: a3:c1:80:5b:12:98:6b:5b:d4:ab:1e:58:ff:c8:58: 3b:61:bf:c4:05:b4:f6:51:c2:b9:46:fa:08:a7:f0: e1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A5:16:2A:5A:05:9F:96:00:6E:E6:0C:F6:C5:0D:A1:4B:74:32:1D X509v3 Authority Key Identifier: keyid:F9:AD:F5:9D:FC:07:02:EB:1E:3C:C8:F9:D5:63:CA:A4:C0:61:2D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:b6:ed:f5:4b:96:1a:f5:14:c5:ed:61:d1:2f:30:25:8f:bc: 1c:67:86:07:dc:64:bc:9d:0b:ea:37:d5:df:62:f5:fe:6a:38: c4:ed:37:10:8c:c2:5f:4b:81:6b:0b:52:c7:8f:e0:11:9c:79: 9f:14:8e:ac:e6:1c:01:34:34:6a:30:76:61:e1:31:de:9f:a4: 87:6c:f8:da:33:c5:48:e3:f5:72:b7:3b:82:38:6b:4f:5a:66: 41:fd:f6:fe:23:c2:36:b1:b6:40:39:73:98:cd:72:2d:39:2b: 36:29:ba:f4:e0:2b:ed:88:ec:df:ea:eb:7c:57:41:12:f3:ad: 20:1a:f1:a4:0c:a7:ae:b7:51:39:b3:cf:52:75:d6:94:8d:b2: 95:c0:22:a6:54:95:bf:4c:fc:23:72:ac:d9:62:24:f8:f0:bd: bf:b4:d2:75:40:2b:67:d5:36:5f:ed:fe:d0:ad:34:ee:01:be: d5:77:76:84:1a:04:90:af:ef:80:5e:65:1f:9e:91:51:fe:37: 9d:73:1f:d8:2b:6d:59:61:e6:b2:90:f4:7b:b1:ad:48:46:65: 49:be:13:7d:42:df:bc:39:34:b0:71:27:31:85:e4:b4:8b:e5: 99:63:16:3e:f3:d0:b6:d4:08:2b:e4:ff:9b:b7:9c:a1:1e:b9: 20:db:b6:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHCH/DjHVs0+vSEzBpM2p1qPeSxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlBREY1OURGQzA3MDJFQjFFM0NDOEY5RDU2M0NBQTRD MDYxMkQ5MTAeFw0yNjExMTUwMjA2NTNaFw0yNjExMTYwNTE3NTNaMDMxMTAvBgNV BAMTKEFBQTUxNjJBNUEwNTlGOTYwMDZFRTYwQ0Y2QzUwREExNEI3NDMyMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXYM61ChkWrSftkhPCnXmUFZIV 4CYCzqOVVxXyjCxQEL2UGklTgG+KAV+GUdKcObsFqMDWgEN8ou8SLaNFyHs6HqMu ZyKS2jrlQBWnefSUYTyMKP/s7Th8hX0jg23K6ctnbV+EdXo1FmqfGfPwNG6/tKOP T2SW07IdVvEffI4J9QEkh5VegRTrd+6h3DXVqP2+xQT8OU7GCi/ImZAgapKhk+nq FAuV5yPh2AEikGsPerB1guJ9N2zorCGe+VfUr8PL1JwAhDv2JsTRxngFsr13dJSq aEsu5AWxA64UVFet1aPBgFsSmGtb1KseWP/IWDthv8QFtPZRwrlG+gin8OH1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqqUWKloFn5YAbuYM9sUNoUt0Mh0wHwYDVR0j BBgwFoAU+a31nfwHAusePMj51WPKpMBhLZEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk3YjhmNGEtMzExMC00MGI3LTkwMzItMGYwMjIxNWEwYjZhLzAvRjlBREY1OURG QzA3MDJFQjFFM0NDOEY5RDU2M0NBQTRDMDYxMkQ5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOUFERjU5REZDMDcwMkVCMUUzQ0M4RjlENTYzQ0FBNEMwNjEy RDkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk3YjhmNGEtMzExMC00MGI3LTkw MzItMGYwMjIxNWEwYjZhLzAvRjlBREY1OURGQzA3MDJFQjFFM0NDOEY5RDU2M0NB QTRDMDYxMkQ5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEC27fVLlhr1FMXtYdEvMCWPvBxnhgfcZLyd C+o31d9i9f5qOMTtNxCMwl9LgWsLUseP4BGceZ8UjqzmHAE0NGowdmHhMd6fpIds +NozxUjj9XK3O4I4a09aZkH99v4jwjaxtkA5c5jNci05KzYpuvTgK+2I7N/q63xX QRLzrSAa8aQMp663UTmzz1J11pSNspXAIqZUlb9M/CNyrNliJPjwvb+00nVAK2fV Nl/t/tCtNO4BvtV3doQaBJCv74BeZR+ekVH+N51zH9grbVlh5rKQ9HuxrUhGZUm+ E31C37w5NLBxJzGF5LSL5ZljFj7z0LbUCCvk/5u3nKEeuSDbtpM= -----END CERTIFICATE-----Generated at Sun Nov 15 20:31:44 2026 by rpki-client