$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft File: E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft (raw, json) Hash identifier: rXLoOn+EdFVAe52sxKutP2ds+PzZxgqoEGDjL7xfyZk= Subject key identifier: 43:B0:74:EA:0C:81:D7:70:02:F0:F6:13:7C:4E:A5:93:28:F8:79:04 Authority key identifier: E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44 Certificate issuer: /CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44 Certificate serial: 634F7D6AACC9DF969D5050061A2BD173F513DAC5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft Manifest number: 0109 Signing time: Sun 15 Nov 2026 16:09:15 +0000 Manifest this update: Sun 15 Nov 2026 16:04:15 +0000 Manifest next update: Mon 16 Nov 2026 18:32:15 +0000 Files and hashes: 1: 3130332e3134382e38392e302f32342d3234203d3e20313430343231.roa (hash: vqX/mtnN0W8RLZb7l8bNIZx8LnJh0g2gbraFilNseKo=) 2: 323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa (hash: eE2EjWF5JyFRMHUXcgYuX1KiOGjP1McRgQBH4Ci3bis=) 3: 3130332e3134382e38382e302f32332d3233203d3e20313430343231.roa (hash: 3u4SqpMZHOiN005smob5L/czZ7TrAkEBbioYuGaCo6o=) 4: E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl (hash: k70zHoSmWToibZp9Qc0x6bd0HaFh6fhAybTNt38bjSc=) 5: 3130332e3134382e38382e302f32342d3234203d3e20313430343231.roa (hash: 17JZlywqEJeGYZvXZ5p1XRwbIJcNG0ARBxLeQExtlUI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:4f:7d:6a:ac:c9:df:96:9d:50:50:06:1a:2b:d1:73:f5:13:da:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44 Validity Not Before: Nov 15 16:04:15 2026 GMT Not After : Nov 16 18:32:15 2026 GMT Subject: CN=43B074EA0C81D77002F0F6137C4EA59328F87904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ec:77:e8:d1:dd:92:f7:f8:3d:a5:47:a8:d6: 68:f8:6d:ea:da:46:95:d3:d9:d6:65:06:d4:c3:2c: d4:6e:d0:3a:5c:64:a5:4f:68:aa:cc:76:1c:22:6c: e6:b7:57:bb:37:a4:6e:59:75:9f:7a:87:24:4e:0b: bb:68:50:ce:98:62:b0:b2:69:51:73:a8:9d:14:2d: e0:2b:a2:f3:67:7c:eb:28:b6:b0:65:f7:77:93:1b: d7:00:1b:63:53:fb:f8:25:fa:2b:e6:06:b9:d6:84: 27:49:2e:e1:05:ec:d3:88:d7:22:18:a8:5e:06:81: 4b:2b:96:42:98:07:f0:bc:9e:a8:07:43:17:ee:b7: 08:91:0b:f3:ec:4f:0c:70:4e:17:22:08:6b:b0:e8: cf:c4:8a:c0:ff:74:2c:e4:20:82:ce:ed:af:3e:28: 08:90:e9:90:4c:3f:99:d7:06:b0:d6:ce:da:96:0f: 92:a6:b3:c7:fe:93:75:a4:72:6c:02:a2:75:45:27: d1:d3:28:89:cc:72:cf:46:80:93:e1:8c:30:b0:a3: 52:45:d2:ef:af:b3:05:45:f1:62:35:3d:be:a7:fb: 96:42:e9:5c:39:39:07:ab:c8:c5:40:e6:1a:6e:9f: 23:1a:02:6f:6c:d5:53:66:d8:6d:20:55:bd:c6:5f: ec:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B0:74:EA:0C:81:D7:70:02:F0:F6:13:7C:4E:A5:93:28:F8:79:04 X509v3 Authority Key Identifier: keyid:E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:8f:8a:11:c0:dd:67:ec:f9:8a:04:f9:b9:c3:05:3f:7d:de: 27:18:d3:a4:e8:08:78:59:44:73:36:19:11:eb:70:fb:41:58: d4:36:fe:f7:e4:e2:4d:ec:87:3d:9f:8f:83:6f:ea:4c:e8:63: 37:d8:51:cd:ca:e9:a5:a7:ac:30:68:58:b0:2d:0b:87:70:5d: e6:a3:46:8a:00:27:1d:38:ad:22:10:52:93:e7:00:13:03:11: 7e:e3:82:59:80:35:50:e7:8c:04:7f:62:e5:66:1c:ad:fb:2d: e4:ef:27:bb:5a:57:ff:e7:58:0d:8d:23:f2:a6:6c:68:0d:7d: 33:d2:f6:84:da:78:12:10:eb:56:22:07:7a:76:5d:98:d8:aa: 98:a3:e2:4a:b8:91:35:69:a2:9c:ca:88:28:0a:d9:0f:75:1d: 11:51:6a:01:85:03:72:45:9a:4c:4b:5c:44:26:f5:f5:44:24: 61:b8:b9:73:29:d0:a3:31:cf:cd:09:8c:3e:e7:c7:5c:b1:b5: 01:ce:94:4c:7f:8b:28:44:b9:92:f0:05:75:e1:ef:14:c9:2f: 03:05:c5:e0:48:1e:bb:1e:7f:f3:3c:fd:ee:24:af:3a:9a:bb: 9a:50:69:17:e9:19:2d:57:cb:db:73:ec:a6:2c:2c:c8:49:e7: 03:8e:bc:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY099aqzJ35adUFAGGivRc/UT2sUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk3QjAxRTlCMTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVG MzgxMkI0NDAeFw0yNjExMTUxNjA0MTVaFw0yNjExMTYxODMyMTVaMDMxMTAvBgNV BAMTKDQzQjA3NEVBMEM4MUQ3NzAwMkYwRjYxMzdDNEVBNTkzMjhGODc5MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM7Hfo0d2S9/g9pUeo1mj4bera RpXT2dZlBtTDLNRu0DpcZKVPaKrMdhwibOa3V7s3pG5ZdZ96hyROC7toUM6YYrCy aVFzqJ0ULeArovNnfOsotrBl93eTG9cAG2NT+/gl+ivmBrnWhCdJLuEF7NOI1yIY qF4GgUsrlkKYB/C8nqgHQxfutwiRC/PsTwxwThciCGuw6M/EisD/dCzkIILO7a8+ KAiQ6ZBMP5nXBrDWztqWD5Kms8f+k3WkcmwConVFJ9HTKInMcs9GgJPhjDCwo1JF 0u+vswVF8WI1Pb6n+5ZC6Vw5OQeryMVA5hpunyMaAm9s1VNm2G0gVb3GX+yrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ7B06gyB13AC8PYTfE6lkyj4eQQwHwYDVR0j BBgwFoAU6XsB6bEDoFlcEG+9tOqWNfOBK0QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGI3MmVjYTQtNzNhZC00ZTBiLWE2YTYtN2E2NTY5OGI3M2JlLzAvRTk3QjAxRTlC MTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVGMzgxMkI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOTdCMDFFOUIxMDNBMDU5NUMxMDZGQkRCNEVBOTYzNUYzODEy QjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGI3MmVjYTQtNzNhZC00ZTBiLWE2 YTYtN2E2NTY5OGI3M2JlLzAvRTk3QjAxRTlCMTAzQTA1OTVDMTA2RkJEQjRFQTk2 MzVGMzgxMkI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImPihHA3Wfs+YoE+bnDBT993icY06ToCHhZ RHM2GRHrcPtBWNQ2/vfk4k3shz2fj4Nv6kzoYzfYUc3K6aWnrDBoWLAtC4dwXeaj RooAJx04rSIQUpPnABMDEX7jglmANVDnjAR/YuVmHK37LeTvJ7taV//nWA2NI/Km bGgNfTPS9oTaeBIQ61YiB3p2XZjYqpij4kq4kTVpopzKiCgK2Q91HRFRagGFA3JF mkxLXEQm9fVEJGG4uXMp0KMxz80JjD7nx1yxtQHOlEx/iyhEuZLwBXXh7xTJLwMF xeBIHrsef/M8/e4krzqau5pQaRfpGS1Xy9tz7KYsLMhJ5wOOvEA= -----END CERTIFICATE-----Generated at Sun Nov 15 22:03:48 2026 by rpki-client