$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft File: B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft (raw, json) Hash identifier: S7JzenqoTaTjRzZBqSIWDQpmXlrqKIvWcFpRr4lXuWQ= Subject key identifier: 43:16:53:2B:58:36:6C:A9:2C:44:3B:9D:C2:D3:CD:E8:40:87:25:6A Authority key identifier: B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5 Certificate issuer: /CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5 Certificate serial: 5E8BFF6A75854607237EF9D0428493D3279F84D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft Manifest number: 0109 Signing time: Sun 15 Nov 2026 12:50:06 +0000 Manifest this update: Sun 15 Nov 2026 12:45:06 +0000 Manifest next update: Mon 16 Nov 2026 14:08:06 +0000 Files and hashes: 1: B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl (hash: Xy09mH5pjECjL62ybTU9u2SZpgWpbZMNJD2DTdvCG0I=) 2: 323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (hash: 0KpGk+Me0s5mBlSvDHCHu9w7qKthN0KZwNcXUygtBFI=) 3: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (hash: G626nf3IkAH7IIThn3UlVRBOX9wH92EFofVHExk6vxQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:8b:ff:6a:75:85:46:07:23:7e:f9:d0:42:84:93:d3:27:9f:84:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5 Validity Not Before: Nov 15 12:45:06 2026 GMT Not After : Nov 16 14:08:06 2026 GMT Subject: CN=4316532B58366CA92C443B9DC2D3CDE84087256A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:33:d1:1c:d8:74:fb:18:cb:83:9f:ba:44:f8: 95:45:b3:74:34:ac:c8:1a:db:2a:27:02:5d:dd:e0: 6a:2f:1a:4c:88:f6:a3:bd:c2:75:a0:ec:e8:d9:4b: 16:4f:f6:c5:45:30:ec:7f:42:ea:a8:bc:8b:5b:76: f6:a7:b0:35:75:fe:c6:ce:d5:ae:09:cc:f2:4c:fa: 90:60:38:0d:b4:1d:cc:41:71:db:30:4a:31:1a:ca: 7b:29:83:d3:34:f1:29:95:7d:03:a6:cd:75:3e:aa: 08:2a:17:e6:4b:e1:36:2a:41:5f:84:be:fa:ba:34: ed:ee:42:e1:db:61:c6:10:dd:37:ec:c4:4b:f8:e3: 2e:29:66:6b:6f:9f:b8:4b:ca:c8:9a:f2:d7:57:df: 30:3e:93:1c:5f:e5:2a:85:8a:75:41:12:98:a3:ef: 36:de:84:27:cc:fd:01:6f:a6:9f:5a:f0:c5:f4:7c: 11:92:a1:62:85:02:84:5b:57:43:c5:d8:f7:09:e8: 39:00:cb:9c:f8:86:f3:03:6f:27:7d:8d:29:d8:cb: 7f:a6:2e:0b:0b:af:e0:11:71:8f:a0:8e:a8:ba:6a: 28:87:57:36:eb:6f:64:8b:2e:2c:ce:ac:fd:c7:9f: 9e:90:27:c9:d9:a6:73:c0:69:93:f0:ee:1f:45:6f: bb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:16:53:2B:58:36:6C:A9:2C:44:3B:9D:C2:D3:CD:E8:40:87:25:6A X509v3 Authority Key Identifier: keyid:B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:18:8e:36:8c:9e:9f:81:38:c7:96:81:30:a3:fa:d8:a4:c3: bd:b2:af:74:f7:85:69:af:97:ac:66:5a:0f:a5:ff:4e:22:5f: 78:ec:d5:b6:56:cf:d1:61:14:66:a0:df:f5:16:39:f4:e0:e9: 9c:ad:2b:c7:f1:11:e0:15:9c:72:c2:29:a3:76:bc:e1:68:4d: 0a:e7:f2:5d:d6:a7:b4:74:70:ee:8e:30:7a:2d:fc:20:59:ab: 99:50:c7:13:92:1c:42:0c:39:85:0a:96:fe:0d:11:f5:e5:68: f0:01:14:b5:dc:99:79:85:5f:84:de:6b:ab:18:89:7c:85:aa: 27:aa:69:d6:12:f6:8b:79:ae:55:fa:77:69:2e:89:ed:a4:da: 57:f2:07:e8:99:da:d3:ee:c6:c2:1e:3f:ee:1c:08:f8:c5:60: d0:91:c7:71:e9:c9:41:8b:30:11:85:06:4f:1c:00:5f:57:2b: 3b:b7:d6:79:b9:03:5b:f3:19:0e:16:4e:6a:d4:99:36:8f:07: 64:88:60:52:5a:63:56:f2:1b:06:0e:2f:e7:83:6b:19:c1:97: 30:ef:ca:9c:36:01:e2:22:3e:2a:16:ea:66:2c:08:39:fb:de: 87:0b:70:27:ca:ba:38:ab:5a:72:9d:7f:e1:01:01:ed:e6:cf: bd:66:85:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXov/anWFRgcjfvnQQoST0yefhNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdDQjJFOUY2NTEzQjBBQkQ2OUNEMkEyQ0M2MDRENjFD MTVEQUNBNTAeFw0yNjExMTUxMjQ1MDZaFw0yNjExMTYxNDA4MDZaMDMxMTAvBgNV BAMTKDQzMTY1MzJCNTgzNjZDQTkyQzQ0M0I5REMyRDNDREU4NDA4NzI1NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRM9Ec2HT7GMuDn7pE+JVFs3Q0 rMga2yonAl3d4GovGkyI9qO9wnWg7OjZSxZP9sVFMOx/QuqovItbdvansDV1/sbO 1a4JzPJM+pBgOA20HcxBcdswSjEaynspg9M08SmVfQOmzXU+qggqF+ZL4TYqQV+E vvq6NO3uQuHbYcYQ3TfsxEv44y4pZmtvn7hLysia8tdX3zA+kxxf5SqFinVBEpij 7zbehCfM/QFvpp9a8MX0fBGSoWKFAoRbV0PF2PcJ6DkAy5z4hvMDbyd9jSnYy3+m LgsLr+ARcY+gjqi6aiiHVzbrb2SLLizOrP3Hn56QJ8nZpnPAaZPw7h9Fb7uPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQxZTK1g2bKksRDudwtPN6ECHJWowHwYDVR0j BBgwFoAUt8sun2UTsKvWnNKizGBNYcFdrKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMzNzBlNmYtZjBjNy00ZjQwLThiYTQtYTAxZTVkMGM3NGU0LzAvQjdDQjJFOUY2 NTEzQjBBQkQ2OUNEMkEyQ0M2MDRENjFDMTVEQUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0NCMkU5RjY1MTNCMEFCRDY5Q0QyQTJDQzYwNEQ2MUMxNURB Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWMzNzBlNmYtZjBjNy00ZjQwLThi YTQtYTAxZTVkMGM3NGU0LzAvQjdDQjJFOUY2NTEzQjBBQkQ2OUNEMkEyQ0M2MDRE NjFDMTVEQUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkYjjaMnp+BOMeWgTCj+tikw72yr3T3hWmv l6xmWg+l/04iX3js1bZWz9FhFGag3/UWOfTg6ZytK8fxEeAVnHLCKaN2vOFoTQrn 8l3Wp7R0cO6OMHot/CBZq5lQxxOSHEIMOYUKlv4NEfXlaPABFLXcmXmFX4Tea6sY iXyFqieqadYS9ot5rlX6d2kuie2k2lfyB+iZ2tPuxsIeP+4cCPjFYNCRx3HpyUGL MBGFBk8cAF9XKzu31nm5A1vzGQ4WTmrUmTaPB2SIYFJaY1byGwYOL+eDaxnBlzDv ypw2AeIiPioW6mYsCDn73ocLcCfKujirWnKdf+EBAe3mz71mhUE= -----END CERTIFICATE-----Generated at Sun Nov 15 15:22:11 2026 by rpki-client