$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft File: B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft (raw, json) Hash identifier: dGmsY0ZOZNx0y01k3V2ecdmtssXMoiVAkxNRi2g0HRg= Subject key identifier: FA:DC:42:2F:EF:F3:3F:52:D9:F0:1A:5B:B7:8B:2F:BB:4E:89:73:E0 Authority key identifier: B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09 Certificate issuer: /CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709 Certificate serial: 11AF4CDA0E087CCB893186FED92BB35C00B83B16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 06:47:37 +0000 Manifest this update: Sun 15 Nov 2026 06:42:37 +0000 Manifest next update: Mon 16 Nov 2026 07:32:37 +0000 Files and hashes: 1: 323430313a346661303a3a2f33322d3438203d3e20313431393539.roa (hash: YSkaXkoDpu4xkOc0DMYpS2KAoSxyKN+Gksem+MM/1ic=) 2: 3130332e3136362e3232362e302f32332d3234203d3e20313431393539.roa (hash: WrcnjDvM2bO2wuu3OCRivgLaRSs+xddaOJ50D9MbO8U=) 3: 3130332e3136362e3232362e302f32342d3234203d3e20313431393539.roa (hash: Pavi+Ibkd+bl9I6ebmoiu+/5SxrpK9sFhLxy2ZXQkGw=) 4: 3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa (hash: vGdo0aPhNFfXshch3eNd6YkNvIG8QzHxW2xedSDSTPc=) 5: B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl (hash: gLEe5hyjPgNeGE20nbbtpXsyWWYhm6PTNdQ+Y1JOWws=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 07:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:af:4c:da:0e:08:7c:cb:89:31:86:fe:d9:2b:b3:5c:00:b8:3b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709 Validity Not Before: Nov 15 06:42:37 2026 GMT Not After : Nov 16 07:32:37 2026 GMT Subject: CN=FADC422FEFF33F52D9F01A5BB78B2FBB4E8973E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:74:7b:38:7e:76:f8:bc:b4:0c:27:e0:00:a9: 5c:a2:aa:14:30:cd:1a:b0:98:41:2d:52:4a:96:44: 83:c9:85:8e:30:f8:2e:86:b9:a6:2c:40:9b:2a:eb: 87:7b:35:97:d1:f6:6c:b3:a2:1e:0a:e7:8c:86:f3: 32:89:8d:56:38:da:6f:f2:0c:5e:53:b8:cb:4f:8d: fe:da:4b:55:54:04:36:6f:14:60:32:63:e6:ee:14: 72:8b:b1:6a:e0:e2:70:fc:af:5c:c6:21:8c:99:15: a6:6d:63:db:db:8b:83:c7:99:a8:33:23:c3:db:74: f3:d8:bf:b5:5e:17:ba:1e:e0:6c:25:be:fb:28:cc: 4e:d0:46:94:50:2a:a2:0b:95:09:ec:51:f1:7c:db: 7f:48:aa:26:f1:d4:f1:3e:45:58:d1:bc:db:01:51: d8:88:64:eb:42:18:be:db:87:fe:87:cb:09:8c:d0: e4:6d:95:44:10:85:2b:5f:88:a4:75:2c:22:2e:b9: 05:36:a7:9d:0c:23:e4:de:17:e0:3d:5e:18:2e:62: 05:43:fc:23:2d:25:0f:8a:16:61:97:17:a7:8d:c1: d8:41:06:9b:bb:85:21:76:f5:a8:f4:29:1b:41:b0: 92:d5:a8:b2:f3:88:da:fc:b5:8c:88:5b:6e:5c:90: c2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DC:42:2F:EF:F3:3F:52:D9:F0:1A:5B:B7:8B:2F:BB:4E:89:73:E0 X509v3 Authority Key Identifier: keyid:B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:1e:bc:33:62:98:8e:5d:9f:f3:3c:36:c0:40:f4:32:6c:22: 17:7f:c6:85:83:8c:de:09:90:0e:e6:bf:5b:02:6f:3d:bd:6b: 2a:bb:2a:c2:bc:6b:aa:2d:f5:7d:e1:48:40:5a:38:96:3b:ec: 14:f7:e1:6f:f7:ff:c9:5d:18:02:46:c3:90:8c:56:a7:45:88: ba:1b:e0:16:60:4e:7c:8c:a8:b8:2b:8d:d5:c0:e0:5c:98:03: 88:8d:84:c9:27:53:53:f2:04:90:79:c8:13:ab:f4:14:b8:bc: 55:58:60:5b:e1:db:94:4d:cf:b5:28:d3:90:80:e2:95:55:8e: cb:7f:ea:86:98:02:32:c7:cc:b0:5b:ea:dd:94:6e:5f:33:5f: 5d:64:8b:ca:95:9c:8a:36:81:bd:45:67:cc:b0:e1:e4:1e:02: 30:14:75:60:cc:d9:57:97:b7:a9:9a:a8:da:b2:41:92:2b:55: 7a:b5:6c:f9:99:5c:cd:7f:db:df:e5:bb:8a:37:fb:d2:e7:35: bf:b7:b9:aa:a4:4b:1e:6f:73:05:30:51:09:8f:cc:02:83:43: 67:90:ed:66:da:d5:5e:62:8f:54:0c:ed:d9:b1:d9:01:93:a8: ca:70:a4:04:96:7c:da:aa:97:92:73:72:7b:db:cf:6c:ec:16: 3e:5d:3c:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEa9M2g4IfMuJMYb+2SuzXAC4OxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMxNkM2M0QyREExMzg3RDE5MUE3RUE2REMwQjU5QzVF Q0QyRDcwOTAeFw0yNjExMTUwNjQyMzdaFw0yNjExMTYwNzMyMzdaMDMxMTAvBgNV BAMTKEZBREM0MjJGRUZGMzNGNTJEOUYwMUE1QkI3OEIyRkJCNEU4OTczRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDedHs4fnb4vLQMJ+AAqVyiqhQw zRqwmEEtUkqWRIPJhY4w+C6GuaYsQJsq64d7NZfR9myzoh4K54yG8zKJjVY42m/y DF5TuMtPjf7aS1VUBDZvFGAyY+buFHKLsWrg4nD8r1zGIYyZFaZtY9vbi4PHmagz I8PbdPPYv7VeF7oe4GwlvvsozE7QRpRQKqILlQnsUfF8239Iqibx1PE+RVjRvNsB UdiIZOtCGL7bh/6HywmM0ORtlUQQhStfiKR1LCIuuQU2p50MI+TeF+A9XhguYgVD /CMtJQ+KFmGXF6eNwdhBBpu7hSF29aj0KRtBsJLVqLLziNr8tYyIW25ckMIlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+txCL+/zP1LZ8Bpbt4svu06Jc+AwHwYDVR0j BBgwFoAUsxbGPS2hOH0ZGn6m3AtZxezS1wkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGZmMDk1ODQtOTExMC00YjBkLThmNmQtMmNlNTI1OGU4NDZiLzAvQjMxNkM2M0Qy REExMzg3RDE5MUE3RUE2REMwQjU5QzVFQ0QyRDcwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMzE2QzYzRDJEQTEzODdEMTkxQTdFQTZEQzBCNTlDNUVDRDJE NzA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGZmMDk1ODQtOTExMC00YjBkLThm NmQtMmNlNTI1OGU4NDZiLzAvQjMxNkM2M0QyREExMzg3RDE5MUE3RUE2REMwQjU5 QzVFQ0QyRDcwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIevDNimI5dn/M8NsBA9DJsIhd/xoWDjN4J kA7mv1sCbz29ayq7KsK8a6ot9X3hSEBaOJY77BT34W/3/8ldGAJGw5CMVqdFiLob 4BZgTnyMqLgrjdXA4FyYA4iNhMknU1PyBJB5yBOr9BS4vFVYYFvh25RNz7Uo05CA 4pVVjst/6oaYAjLHzLBb6t2Ubl8zX11ki8qVnIo2gb1FZ8yw4eQeAjAUdWDM2VeX t6maqNqyQZIrVXq1bPmZXM1/29/lu4o3+9LnNb+3uaqkSx5vcwUwUQmPzAKDQ2eQ 7Wba1V5ij1QM7dmx2QGTqMpwpASWfNqql5Jzcnvbz2zsFj5dPDE= -----END CERTIFICATE-----Generated at Sun Nov 15 16:34:35 2026 by rpki-client