$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft File: 964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft (raw, json) Hash identifier: N03/rEM+X1e3Ja5+GiVrSanYAW3Pm+B0VRXV2S5F89Y= Subject key identifier: E7:BD:3D:3B:71:57:E3:DA:C0:D1:93:AD:47:30:D4:5E:3E:32:B9:7C Authority key identifier: 96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21 Certificate issuer: /CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21 Certificate serial: 24EAC7031745DFE999714FCB66F22908AB5102A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft Manifest number: FD Signing time: Mon 09 Nov 2026 00:10:39 +0000 Manifest this update: Mon 09 Nov 2026 00:05:39 +0000 Manifest next update: Tue 10 Nov 2026 04:03:39 +0000 Files and hashes: 1: 964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl (hash: LnEVYX3afHomV/wLZK4Q7fw2lBT4xlkvSPIZWirzq9Y=) 2: 3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (hash: FykeN+ZnqOJgkPJefPV3nDEsoGKfA2/qLMJi68jlv2o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 04:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ea:c7:03:17:45:df:e9:99:71:4f:cb:66:f2:29:08:ab:51:02:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21 Validity Not Before: Nov 9 00:05:39 2026 GMT Not After : Nov 10 04:03:39 2026 GMT Subject: CN=E7BD3D3B7157E3DAC0D193AD4730D45E3E32B97C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cd:3c:de:a9:f6:21:1b:b6:f3:27:10:f6:02: a6:a9:df:a6:b0:47:39:45:b9:61:6e:e1:ac:f2:a0: 0c:b2:cc:68:64:41:d6:d5:a8:ae:91:9c:3a:f4:b9: d1:51:57:4c:17:15:a1:f8:b4:89:fb:78:5f:e5:91: 41:64:33:51:8c:0b:cd:aa:a9:4e:d0:86:43:c8:d1: 17:e8:72:0f:db:2e:00:84:2d:3e:71:24:da:a1:8c: 20:23:68:75:2b:62:f0:93:0c:13:33:42:86:bb:13: 83:1b:0a:cf:ab:bf:ba:64:05:ae:22:ea:fb:d6:4e: 09:52:83:64:7a:17:1f:ab:8d:0a:89:2d:5f:67:bf: 42:5d:2b:3f:1c:42:05:53:50:a9:74:eb:d6:6a:ef: 0f:7d:9f:50:e9:5d:c1:37:65:75:75:52:a8:f8:e3: 48:27:5b:02:ed:65:36:0a:d5:1a:65:a8:85:62:f9: ef:2d:d4:f9:d6:d5:91:a4:d5:41:40:22:60:da:f6: 84:a7:d0:dd:62:c9:97:bc:17:bf:55:48:c3:f1:4d: 24:0c:98:6f:2d:cb:1f:c8:75:b1:e5:ec:6d:0b:41: d4:4e:f6:02:df:62:da:f8:68:66:47:b6:c7:aa:0f: 51:56:0a:7a:a1:65:f3:01:83:e5:1e:f4:b1:41:6b: 37:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BD:3D:3B:71:57:E3:DA:C0:D1:93:AD:47:30:D4:5E:3E:32:B9:7C X509v3 Authority Key Identifier: keyid:96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:0a:2f:e0:3f:d3:6a:bd:1c:07:4b:68:eb:4a:19:5d:50:e2: da:70:6d:50:6b:68:7c:78:eb:c3:ea:6a:ef:f4:cb:00:f0:3e: 5e:ed:fb:14:ff:85:86:99:49:27:99:d9:83:b5:fa:2c:e1:e2: d2:fe:a9:4a:66:a3:c7:35:b7:03:ce:d0:44:70:59:e2:d8:fe: 35:03:33:27:bd:82:f5:56:89:ad:57:ab:c3:8f:6f:78:e5:dd: e7:25:63:4a:14:d9:12:33:ca:e8:e1:9b:ce:dd:1e:87:1f:73: a4:dc:bc:b0:bb:b5:18:10:17:91:21:01:21:c2:2a:ee:eb:06: 82:a5:8d:96:55:19:32:7e:bf:95:18:3d:27:26:76:ec:c6:12: 3d:9e:69:83:82:4b:3f:77:52:8c:a8:ce:df:4f:70:6a:3d:ef: 7e:f6:0b:31:dd:42:78:55:8f:8c:dd:ef:40:e0:7e:be:60:0c: c3:d0:c3:de:da:ec:9c:34:3e:53:ed:57:03:e4:c0:69:03:a9: 95:5c:6f:ed:6c:62:67:b2:ff:b5:0c:35:04:60:15:d1:42:fd: 38:54:85:a5:8b:f8:11:ae:60:1c:8e:d8:d1:95:87:f7:4b:07: 8e:3d:65:09:b9:34:4b:01:51:bd:d4:79:32:ff:a4:e8:9c:59: db:2a:9b:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJOrHAxdF3+mZcU/LZvIpCKtRAqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY0Q0VDRTREQjAyQTZEOTc4Q0U3RjIyQjBCMzM2RTc4 RTdFRkUyMTAeFw0yNjExMDkwMDA1MzlaFw0yNjExMTAwNDAzMzlaMDMxMTAvBgNV BAMTKEU3QkQzRDNCNzE1N0UzREFDMEQxOTNBRDQ3MzBENDVFM0UzMkI5N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2zTzeqfYhG7bzJxD2Aqap36aw RzlFuWFu4azyoAyyzGhkQdbVqK6RnDr0udFRV0wXFaH4tIn7eF/lkUFkM1GMC82q qU7QhkPI0Rfocg/bLgCELT5xJNqhjCAjaHUrYvCTDBMzQoa7E4MbCs+rv7pkBa4i 6vvWTglSg2R6Fx+rjQqJLV9nv0JdKz8cQgVTUKl069Zq7w99n1DpXcE3ZXV1Uqj4 40gnWwLtZTYK1RplqIVi+e8t1PnW1ZGk1UFAImDa9oSn0N1iyZe8F79VSMPxTSQM mG8tyx/IdbHl7G0LQdRO9gLfYtr4aGZHtseqD1FWCnqhZfMBg+Ue9LFBazd/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5709O3FX49rA0ZOtRzDUXj4yuXwwHwYDVR0j BBgwFoAUlkzs5NsCptl4zn8isLM2545+/iEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGYzMTUxZGItMTMzMC00ZTcwLTljYzQtOWI4ZmNkNWVkMmQyLzAvOTY0Q0VDRTRE QjAyQTZEOTc4Q0U3RjIyQjBCMzM2RTc4RTdFRkUyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NjRDRUNFNERCMDJBNkQ5NzhDRTdGMjJCMEIzMzZFNzhFN0VG RTIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGYzMTUxZGItMTMzMC00ZTcwLTlj YzQtOWI4ZmNkNWVkMmQyLzAvOTY0Q0VDRTREQjAyQTZEOTc4Q0U3RjIyQjBCMzM2 RTc4RTdFRkUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEKL+A/02q9HAdLaOtKGV1Q4tpwbVBraHx4 68Pqau/0ywDwPl7t+xT/hYaZSSeZ2YO1+izh4tL+qUpmo8c1twPO0ERwWeLY/jUD Mye9gvVWia1Xq8OPb3jl3eclY0oU2RIzyujhm87dHocfc6TcvLC7tRgQF5EhASHC Ku7rBoKljZZVGTJ+v5UYPScmduzGEj2eaYOCSz93Uoyozt9PcGo97372CzHdQnhV j4zd70Dgfr5gDMPQw97a7Jw0PlPtVwPkwGkDqZVcb+1sYmey/7UMNQRgFdFC/ThU haWL+BGuYByO2NGVh/dLB449ZQm5NEsBUb3UeTL/pOicWdsqm9U= -----END CERTIFICATE-----Generated at Mon Nov 9 21:25:28 2026 by rpki-client