$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft File: 860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft (raw, json) Hash identifier: snZe2skYCJmCmbWCGm4IP9n8zB1ENz+ee7u+OUWUAW4= Subject key identifier: 48:C2:F7:31:D8:56:1C:DA:91:80:47:4C:4A:CB:B3:73:FA:2C:AF:6A Authority key identifier: 86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D Certificate issuer: /CN=860EBB203FFC23894F0B1AC6F45924CD1BA5F08D Certificate serial: 73738A2C17BB45464B33B1B35D5D1CFB75D90ABE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft Manifest number: 0101 Signing time: Mon 09 Nov 2026 16:21:15 +0000 Manifest this update: Mon 09 Nov 2026 16:16:15 +0000 Manifest next update: Tue 10 Nov 2026 17:03:15 +0000 Files and hashes: 1: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: 0F052+gSOkh9neLJMSmVWcXN0V0lC6T7+TyFIH8dSs4=) 2: 860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl (hash: B3md1rIGxcX8b5816DGLUWlPuHaxYHUJMZFl2/PoRps=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 17:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:73:8a:2c:17:bb:45:46:4b:33:b1:b3:5d:5d:1c:fb:75:d9:0a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=860EBB203FFC23894F0B1AC6F45924CD1BA5F08D Validity Not Before: Nov 9 16:16:15 2026 GMT Not After : Nov 10 17:03:15 2026 GMT Subject: CN=48C2F731D8561CDA9180474C4ACBB373FA2CAF6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a9:41:11:e1:fc:57:0d:42:31:43:21:34:9c: e5:5b:cf:87:05:ec:8a:0d:57:63:50:1f:d8:1e:5b: b1:72:05:45:5f:c5:d3:87:a1:45:8b:b9:0b:c3:7d: 9a:1f:ff:b6:fb:4e:16:db:47:d1:5f:8d:3e:65:2e: e6:aa:94:54:f7:67:79:43:8f:75:57:34:4a:8c:7b: 2f:b3:dc:2f:cd:9e:2f:0d:4f:17:dd:1e:1e:9b:94: 88:01:3d:2e:dc:c9:98:d4:f1:00:e9:8f:d7:9d:ef: b0:3b:dd:f1:f2:dd:50:3f:33:a5:83:dc:57:c6:4a: 5c:41:92:d5:25:c6:57:3c:8d:ee:28:03:7b:11:ce: 6e:cc:e1:c9:3c:8a:fa:98:8e:06:58:08:48:34:ab: 5e:94:68:fe:09:d9:b9:92:f9:1e:a6:31:e4:33:1b: 4a:8d:74:66:92:a3:78:05:01:35:4f:77:24:cf:bb: 41:67:5c:c7:0a:56:24:f6:82:22:87:c0:51:6f:7d: 78:88:9c:73:65:f2:76:3b:dd:4e:f7:d4:b9:89:a7: fb:65:d9:3d:e7:43:ff:21:3b:6a:77:37:e4:20:b0: 21:b2:10:ab:f1:d9:8d:39:9f:a8:2d:af:6c:5e:ab: 82:46:f9:15:d2:63:94:aa:e8:aa:e3:f8:e5:f6:4e: 42:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C2:F7:31:D8:56:1C:DA:91:80:47:4C:4A:CB:B3:73:FA:2C:AF:6A X509v3 Authority Key Identifier: keyid:86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:2a:a9:c4:13:d9:62:53:16:9f:72:c8:37:63:4e:6c:ee:85: 23:93:e0:29:f3:cd:11:11:e5:a1:76:2b:53:3b:70:7d:a2:dd: 4d:2d:d3:0a:68:ca:31:96:14:32:47:03:84:74:e0:45:fc:10: 6a:77:d5:bc:71:9c:95:52:54:ba:e4:0d:a5:d1:26:7d:2f:e3: 66:99:35:83:7b:c6:71:23:10:f3:3d:2d:8c:15:67:45:d8:2e: 5d:ad:33:a9:dd:2b:26:8f:39:8b:5a:f9:d2:24:a8:be:72:d8: 00:e2:45:41:d4:45:f2:3c:b1:dd:f6:2a:9d:d2:9b:12:f4:c0: 13:0b:12:13:1f:a7:81:17:82:5c:23:83:0e:b3:ad:06:da:98: 2a:a4:48:a0:0a:6a:72:f8:43:2f:5d:bf:da:f1:11:d8:4c:b7: 11:5f:95:c7:c4:f2:67:7b:c8:c6:c9:e0:c6:4e:06:46:60:9b: bb:d9:9f:04:46:11:fd:39:44:f1:05:00:c3:17:f7:45:ac:8e: c5:d4:ea:49:72:8d:e2:a2:5e:4c:dd:ac:7f:3f:15:89:c9:d2: b9:db:3a:f1:9d:95:85:9a:16:ac:13:8b:e7:5b:69:58:26:f2: 69:10:27:ee:25:ca:d2:e9:c3:99:4e:ae:c8:a6:57:92:dd:04: 23:30:45:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc3OKLBe7RUZLM7GzXV0c+3XZCr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwRUJCMjAzRkZDMjM4OTRGMEIxQUM2RjQ1OTI0Q0Qx QkE1RjA4RDAeFw0yNjExMDkxNjE2MTVaFw0yNjExMTAxNzAzMTVaMDMxMTAvBgNV BAMTKDQ4QzJGNzMxRDg1NjFDREE5MTgwNDc0QzRBQ0JCMzczRkEyQ0FGNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmqUER4fxXDUIxQyE0nOVbz4cF 7IoNV2NQH9geW7FyBUVfxdOHoUWLuQvDfZof/7b7ThbbR9FfjT5lLuaqlFT3Z3lD j3VXNEqMey+z3C/Nni8NTxfdHh6blIgBPS7cyZjU8QDpj9ed77A73fHy3VA/M6WD 3FfGSlxBktUlxlc8je4oA3sRzm7M4ck8ivqYjgZYCEg0q16UaP4J2bmS+R6mMeQz G0qNdGaSo3gFATVPdyTPu0FnXMcKViT2giKHwFFvfXiInHNl8nY73U731LmJp/tl 2T3nQ/8hO2p3N+QgsCGyEKvx2Y05n6gtr2xeq4JG+RXSY5Sq6Krj+OX2TkL5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSML3MdhWHNqRgEdMSsuzc/osr2owHwYDVR0j BBgwFoAUhg67ID/8I4lPCxrG9FkkzRul8I0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVlYjQ1ZGUtNTE4My00YTNhLWIwNmQtOGJiOGQ0NTA2YjA2LzAvODYwRUJCMjAz RkZDMjM4OTRGMEIxQUM2RjQ1OTI0Q0QxQkE1RjA4RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjBFQkIyMDNGRkMyMzg5NEYwQjFBQzZGNDU5MjRDRDFCQTVG MDhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVlYjQ1ZGUtNTE4My00YTNhLWIw NmQtOGJiOGQ0NTA2YjA2LzAvODYwRUJCMjAzRkZDMjM4OTRGMEIxQUM2RjQ1OTI0 Q0QxQkE1RjA4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAqqcQT2WJTFp9yyDdjTmzuhSOT4CnzzRER 5aF2K1M7cH2i3U0t0wpoyjGWFDJHA4R04EX8EGp31bxxnJVSVLrkDaXRJn0v42aZ NYN7xnEjEPM9LYwVZ0XYLl2tM6ndKyaPOYta+dIkqL5y2ADiRUHURfI8sd32Kp3S mxL0wBMLEhMfp4EXglwjgw6zrQbamCqkSKAKanL4Qy9dv9rxEdhMtxFflcfE8md7 yMbJ4MZOBkZgm7vZnwRGEf05RPEFAMMX90WsjsXU6klyjeKiXkzdrH8/FYnJ0rnb OvGdlYWaFqwTi+dbaVgm8mkQJ+4lytLpw5lOrsimV5LdBCMwRdk= -----END CERTIFICATE-----Generated at Tue Nov 10 03:53:19 2026 by rpki-client