$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.mft File: F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.mft (raw, json) Hash identifier: EOjVtyd47mE3cfgB52QaBuL23h+wngRTZ9/cZq5Zl9k= Subject key identifier: 94:31:FF:EA:4C:40:28:22:B6:75:50:84:27:CA:A6:65:D2:3F:64:B0 Authority key identifier: F3:6B:46:8C:4C:F4:F0:6F:0C:43:FA:E2:30:EE:86:C7:DA:06:C7:97 Certificate issuer: /CN=F36B468C4CF4F06F0C43FAE230EE86C7DA06C797 Certificate serial: 60E30964837F6B2EFBB726281F6604A3C38FE6D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.mft Manifest number: 0102 Signing time: Tue 10 Nov 2026 12:31:45 +0000 Manifest this update: Tue 10 Nov 2026 12:26:45 +0000 Manifest next update: Wed 11 Nov 2026 15:12:45 +0000 Files and hashes: 1: 3130332e39352e34302e302f32322d3234203d3e203538343935.roa (hash: imn0bSKNfH06upPmhn2tYthgsfP9Fs6RXvoYDtKKr64=) 2: F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.crl (hash: NFl3VqN6EaVEB0Wtz0foAHjni91gwkebfIiT8jbBvPc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.crl rsync://rpki-rsync.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e3:09:64:83:7f:6b:2e:fb:b7:26:28:1f:66:04:a3:c3:8f:e6:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36B468C4CF4F06F0C43FAE230EE86C7DA06C797 Validity Not Before: Nov 10 12:26:45 2026 GMT Not After : Nov 11 15:12:45 2026 GMT Subject: CN=9431FFEA4C402822B675508427CAA665D23F64B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8a:0c:a5:55:e9:fb:41:0e:2c:87:00:75:86: 20:fb:d1:10:06:26:f9:df:fd:a8:68:46:0e:34:1b: 37:34:dc:6a:97:c4:7b:66:c9:65:d8:68:23:af:96: 65:6b:61:36:f0:de:fe:2f:ba:20:77:c4:e8:de:59: a7:db:42:76:8f:16:a1:e3:1c:c5:8c:8d:33:37:da: 20:bf:fb:ca:2a:b7:cc:3c:b4:4a:ec:84:a8:71:0c: b6:29:7c:4f:d7:fb:65:56:91:82:28:11:71:62:e2: 86:6e:83:46:20:be:a3:09:2c:04:b1:04:31:5a:61: af:88:93:14:5d:18:47:3f:6b:fb:91:8c:ea:b9:73: d2:aa:70:84:1d:12:5c:95:78:45:b7:cc:b1:52:58: 9a:bb:7d:82:a4:9a:3c:74:83:0c:9d:f6:2e:1b:6b: d5:83:51:81:88:84:0c:93:77:e2:ad:2e:12:6c:22: ec:9b:b4:8d:d5:c9:4a:b7:f6:31:fe:78:90:f1:67: 01:fb:da:7b:09:03:39:3c:51:27:9b:09:81:92:47: 6d:d3:4d:66:f0:1f:cb:38:d9:eb:00:69:4f:49:55: 00:d7:85:e4:ae:e5:95:ab:b4:6d:44:2c:54:56:73: 3b:26:8f:f0:8f:d4:c7:0b:fc:b4:f7:ca:1c:a5:c6: 36:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:31:FF:EA:4C:40:28:22:B6:75:50:84:27:CA:A6:65:D2:3F:64:B0 X509v3 Authority Key Identifier: keyid:F3:6B:46:8C:4C:F4:F0:6F:0C:43:FA:E2:30:EE:86:C7:DA:06:C7:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/F36B468C4CF4F06F0C43FAE230EE86C7DA06C797.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:31:f6:e8:80:57:78:c8:eb:3b:92:f6:d7:4c:d2:ff:43:91: 89:e5:7c:8e:e6:76:b7:7c:d8:34:e3:42:ce:5a:ed:4f:c2:9b: 01:12:4c:23:15:cd:e3:5b:f8:80:ad:ea:5e:f1:74:e7:ae:87: 2e:e4:23:54:17:e7:1d:ec:fb:18:97:c0:36:18:f1:78:f5:4b: e6:93:fd:67:09:eb:9d:48:1f:4d:a7:72:c6:9f:da:f4:55:16: 0d:0c:69:07:20:05:20:d8:ee:98:cb:f6:20:2b:56:fc:d9:bf: ce:e2:7f:eb:6e:f6:9e:60:5e:b1:57:17:5e:29:65:3f:52:79: 3c:8b:62:94:f3:43:b8:3a:e3:53:70:58:23:1c:ce:33:8e:a0: bc:4a:57:03:de:f7:c0:27:92:c8:35:91:ea:c0:6a:6f:d5:96: d8:35:30:dc:06:64:37:e1:e5:2a:c1:39:f1:54:37:f0:aa:f6: 64:7a:f0:a5:d7:40:1f:9f:03:c9:a6:8e:70:60:14:27:51:a9: cd:ad:68:96:a6:ac:97:8e:53:f9:b5:29:ed:13:75:2c:4c:72: 56:2f:6c:a0:9d:2d:95:91:8a:80:4e:a6:55:38:d6:5f:a4:d1: 83:74:71:98:62:0c:19:23:8b:15:6c:81:b4:de:7c:15:6a:35: 3e:9c:63:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOMJZIN/ay77tyYoH2YEo8OP5tQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM2QjQ2OEM0Q0Y0RjA2RjBDNDNGQUUyMzBFRTg2QzdE QTA2Qzc5NzAeFw0yNjExMTAxMjI2NDVaFw0yNjExMTExNTEyNDVaMDMxMTAvBgNV BAMTKDk0MzFGRkVBNEM0MDI4MjJCNjc1NTA4NDI3Q0FBNjY1RDIzRjY0QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmigylVen7QQ4shwB1hiD70RAG Jvnf/ahoRg40Gzc03GqXxHtmyWXYaCOvlmVrYTbw3v4vuiB3xOjeWafbQnaPFqHj HMWMjTM32iC/+8oqt8w8tErshKhxDLYpfE/X+2VWkYIoEXFi4oZug0YgvqMJLASx BDFaYa+IkxRdGEc/a/uRjOq5c9KqcIQdElyVeEW3zLFSWJq7fYKkmjx0gwyd9i4b a9WDUYGIhAyTd+KtLhJsIuybtI3VyUq39jH+eJDxZwH72nsJAzk8USebCYGSR23T TWbwH8s42esAaU9JVQDXheSu5ZWrtG1ELFRWczsmj/CP1McL/LT3yhylxjbZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlDH/6kxAKCK2dVCEJ8qmZdI/ZLAwHwYDVR0j BBgwFoAU82tGjEz08G8MQ/riMO6Gx9oGx5cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U0NWViYWItZWMxNi00NTg5LWE5YTYtOGEzNjYxZDQzZTNlLzAvRjM2QjQ2OEM0 Q0Y0RjA2RjBDNDNGQUUyMzBFRTg2QzdEQTA2Qzc5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzZCNDY4QzRDRjRGMDZGMEM0M0ZBRTIzMEVFODZDN0RBMDZD Nzk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U0NWViYWItZWMxNi00NTg5LWE5 YTYtOGEzNjYxZDQzZTNlLzAvRjM2QjQ2OEM0Q0Y0RjA2RjBDNDNGQUUyMzBFRTg2 QzdEQTA2Qzc5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgx9uiAV3jI6zuS9tdM0v9DkYnlfI7mdrd8 2DTjQs5a7U/CmwESTCMVzeNb+ICt6l7xdOeuhy7kI1QX5x3s+xiXwDYY8Xj1S+aT /WcJ651IH02ncsaf2vRVFg0MaQcgBSDY7pjL9iArVvzZv87if+tu9p5gXrFXF14p ZT9SeTyLYpTzQ7g641NwWCMczjOOoLxKVwPe98Anksg1kerAam/Vltg1MNwGZDfh 5SrBOfFUN/Cq9mR68KXXQB+fA8mmjnBgFCdRqc2taJamrJeOU/m1Ke0TdSxMclYv bKCdLZWRioBOplU41l+k0YN0cZhiDBkjixVsgbTefBVqNT6cY/k= -----END CERTIFICATE-----Generated at Tue Nov 10 17:34:19 2026 by rpki-client