$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft File: 0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft (raw, json) Hash identifier: 8nwCjHaaoTbH/E+yKnoDL/JBUEtJT0TlOBGi4+sTFGo= Subject key identifier: 02:EB:E8:64:0C:C9:10:08:03:25:CC:AB:28:02:F5:42:4E:94:B6:A5 Authority key identifier: 0B:1A:75:6D:6F:1B:18:8E:DE:FA:5D:D5:CC:34:25:D3:3A:23:AC:9E Certificate issuer: /CN=0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E Certificate serial: 79BB5DFE9D4911D1595388235AD32632099281BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft Manifest number: 0109 Signing time: Sun 15 Nov 2026 06:32:15 +0000 Manifest this update: Sun 15 Nov 2026 06:27:15 +0000 Manifest next update: Mon 16 Nov 2026 10:24:15 +0000 Files and hashes: 1: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: yzj0R3It9R2jU9wBDpqzfiEHW+8PEhf6218rNQIPbSs=) 2: 0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.crl (hash: wh5braV98M5YkEF8bx/kQBKyRHrSZcs+9Mx3FnaUgCE=) 3: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: /5dNawMylgFAUVXMnACcE1jgMAFNneCBr14eai7kMCU=) 4: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: FBsWEYtMf7mRaTuEZ/0PxyglRDybKAQxH+CcBw6tqDM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.crl rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:bb:5d:fe:9d:49:11:d1:59:53:88:23:5a:d3:26:32:09:92:81:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E Validity Not Before: Nov 15 06:27:15 2026 GMT Not After : Nov 16 10:24:15 2026 GMT Subject: CN=02EBE8640CC910080325CCAB2802F5424E94B6A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5c:2a:bd:45:35:86:9d:e3:fd:fd:fb:9e:e7: 9d:37:72:cd:36:5c:72:9c:99:f2:57:63:8e:46:c1: 81:91:17:0f:37:3a:8c:12:08:11:af:29:a6:f6:5d: 35:02:de:d6:f6:18:d1:d9:03:4f:df:21:45:2f:e6: 02:2b:70:b6:f5:88:ea:76:25:06:cc:32:c6:44:f9: 00:c0:d7:5f:fc:67:55:72:e5:48:90:ad:5e:4c:54: 27:9e:8f:6a:0d:dc:de:0d:49:87:a7:1c:3f:dc:40: 56:d4:75:6d:c6:a2:3c:55:d2:8e:81:f0:54:43:64: f5:cc:ba:8a:c1:45:44:19:2f:96:b9:9f:db:ee:30: 2c:67:4a:51:c1:23:77:05:7e:2d:b9:5b:d1:2d:80: 20:4e:d5:cb:f7:07:45:60:a1:5f:2f:37:bd:8c:eb: d1:f7:c0:59:70:3b:0d:cc:36:dd:13:b0:09:f9:92: fc:10:10:cb:44:ac:68:2c:35:14:99:df:44:a3:a8: 12:2c:41:3b:05:ba:2a:70:56:01:ee:80:26:1c:0c: 04:e8:1a:6f:c9:e6:94:76:1f:84:95:ef:7a:c2:ee: de:98:37:b1:59:76:40:5f:14:59:0f:61:87:eb:19: a0:c0:b9:83:4d:1c:fc:9e:77:85:a1:da:7f:8d:49: 33:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EB:E8:64:0C:C9:10:08:03:25:CC:AB:28:02:F5:42:4E:94:B6:A5 X509v3 Authority Key Identifier: keyid:0B:1A:75:6D:6F:1B:18:8E:DE:FA:5D:D5:CC:34:25:D3:3A:23:AC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:67:87:bd:c6:4a:6f:a7:cd:e1:23:b6:84:df:0f:fb:21:c7: 79:5d:89:f2:3b:d8:66:5f:38:79:f6:77:65:49:de:46:bd:6f: 9c:80:a4:42:0d:88:a9:08:7c:43:20:65:6a:f4:75:5c:eb:1e: 22:c3:c4:22:7c:76:0a:88:e0:e3:cd:71:72:44:e3:f1:3e:30: ce:62:ac:dc:32:ab:ad:4b:2c:28:a6:99:67:73:cc:84:69:a0: a9:c6:4d:2f:23:9c:09:99:d8:67:a7:6d:e4:1d:d3:09:34:dc: b2:a4:13:99:72:ca:0e:bc:cb:8a:40:df:97:92:8c:22:0c:90: 74:8e:83:66:69:d5:b1:13:0e:2c:9f:c0:17:ec:87:2e:6c:54: df:9b:c1:5c:6b:cb:db:72:28:31:e9:75:3a:7c:de:67:ed:db: 34:48:b0:9d:73:2d:8b:08:b8:a5:ea:0a:53:81:03:28:98:03: 11:7e:7e:4c:6a:06:93:4f:48:c1:1c:6d:5c:8e:8d:7d:56:45: f8:73:ac:e7:30:03:7f:09:62:02:3b:90:12:4d:01:6f:68:93: 26:4a:b8:71:3d:df:58:ef:cb:90:a1:7c:54:42:15:7f:8b:f9: f9:8b:b8:da:60:a3:54:c9:26:f2:8b:53:07:ed:1d:67:10:a6: 54:b1:9b:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUebtd/p1JEdFZU4gjWtMmMgmSgb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEIxQTc1NkQ2RjFCMTg4RURFRkE1REQ1Q0MzNDI1RDMz QTIzQUM5RTAeFw0yNjExMTUwNjI3MTVaFw0yNjExMTYxMDI0MTVaMDMxMTAvBgNV BAMTKDAyRUJFODY0MENDOTEwMDgwMzI1Q0NBQjI4MDJGNTQyNEU5NEI2QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJXCq9RTWGneP9/fue5503cs02 XHKcmfJXY45GwYGRFw83OowSCBGvKab2XTUC3tb2GNHZA0/fIUUv5gIrcLb1iOp2 JQbMMsZE+QDA11/8Z1Vy5UiQrV5MVCeej2oN3N4NSYenHD/cQFbUdW3GojxV0o6B 8FRDZPXMuorBRUQZL5a5n9vuMCxnSlHBI3cFfi25W9EtgCBO1cv3B0VgoV8vN72M 69H3wFlwOw3MNt0TsAn5kvwQEMtErGgsNRSZ30SjqBIsQTsFuipwVgHugCYcDATo Gm/J5pR2H4SV73rC7t6YN7FZdkBfFFkPYYfrGaDAuYNNHPyed4Wh2n+NSTObAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAuvoZAzJEAgDJcyrKAL1Qk6UtqUwHwYDVR0j BBgwFoAUCxp1bW8bGI7e+l3VzDQl0zojrJ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2QyNjY1MTEtNjM5ZS00YzJiLTk2MzQtOWNjMWUyMmZhNzA4LzAvMEIxQTc1NkQ2 RjFCMTg4RURFRkE1REQ1Q0MzNDI1RDMzQTIzQUM5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQjFBNzU2RDZGMUIxODhFREVGQTVERDVDQzM0MjVEMzNBMjNB QzlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvMEIxQTc1NkQ2RjFCMTg4RURFRkE1REQ1Q0MzNDI1 RDMzQTIzQUM5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBnh73GSm+nzeEjtoTfD/shx3ldifI72GZf OHn2d2VJ3ka9b5yApEINiKkIfEMgZWr0dVzrHiLDxCJ8dgqI4OPNcXJE4/E+MM5i rNwyq61LLCimmWdzzIRpoKnGTS8jnAmZ2GenbeQd0wk03LKkE5lyyg68y4pA35eS jCIMkHSOg2Zp1bETDiyfwBfshy5sVN+bwVxry9tyKDHpdTp83mft2zRIsJ1zLYsI uKXqClOBAyiYAxF+fkxqBpNPSMEcbVyOjX1WRfhzrOcwA38JYgI7kBJNAW9okyZK uHE931jvy5ChfFRCFX+L+fmLuNpgo1TJJvKLUwftHWcQplSxm4w= -----END CERTIFICATE-----Generated at Sun Nov 15 17:43:52 2026 by rpki-client