$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft File: E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft (raw, json) Hash identifier: O7tbBQIcHXLdjJTfVVBN/gZL0hPPJFxcLwAqIosu8Eg= Subject key identifier: 13:BE:25:F9:76:6B:48:8C:86:D2:EB:30:19:B4:E6:C6:85:F0:A2:E3 Authority key identifier: E9:EE:F0:8A:A8:35:6D:76:9B:A1:6B:98:1F:E6:9D:B5:DE:20:34:09 Certificate issuer: /CN=E9EEF08AA8356D769BA16B981FE69DB5DE203409 Certificate serial: 742D4C49504470D031CCEAC82D503EE0F99435D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 05:36:07 +0000 Manifest this update: Sun 15 Nov 2026 05:31:07 +0000 Manifest next update: Mon 16 Nov 2026 06:06:07 +0000 Files and hashes: 1: E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl (hash: FMyW4aCI6Fciv4/fqM8FzE0UijnYrdoxJc6C8zrbNmw=) 2: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: xCU5A2qMTm4OgALTP8opeqK/3efnC4H4bV18tfZlMHk=) 3: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: UaaNiDpFBSvOxzLMpx1eGc8touUo5VTmZX/HVEAL/G4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 06:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:2d:4c:49:50:44:70:d0:31:cc:ea:c8:2d:50:3e:e0:f9:94:35:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9EEF08AA8356D769BA16B981FE69DB5DE203409 Validity Not Before: Nov 15 05:31:07 2026 GMT Not After : Nov 16 06:06:07 2026 GMT Subject: CN=13BE25F9766B488C86D2EB3019B4E6C685F0A2E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:78:6a:b1:e4:57:59:0b:b4:f8:e7:ba:3b:12: 42:6c:2c:1c:38:aa:0f:ea:d2:40:19:83:3a:c3:6c: b1:83:97:e8:ee:de:84:31:38:9b:ef:73:cb:8d:6d: 1c:90:e2:d4:e4:be:ab:96:ef:12:81:5f:2f:0e:b0: a2:de:70:70:78:93:f3:8a:71:a9:31:d7:16:d7:bc: 0a:9b:f8:25:dd:e7:b9:5e:e1:f2:c8:e7:e2:28:0d: c8:1b:d1:d1:c0:24:99:52:2a:64:49:63:f7:cb:c2: 41:e1:5d:2b:51:97:65:b8:95:a5:7a:b7:76:95:4e: b3:c1:8b:86:d1:e8:9e:1b:26:5d:76:a5:35:33:2a: 29:b1:ba:6b:7f:48:cb:90:66:d3:f2:c0:aa:f2:24: 4e:c8:bc:c2:96:d2:d0:29:18:56:18:f0:f4:a0:ed: f4:f1:58:5e:3d:af:9d:78:c0:a0:52:5b:e0:1a:00: 5a:ef:09:f4:10:9d:72:4d:36:5b:95:bb:ee:da:a7: 24:ae:5d:ae:ba:ea:0e:fa:41:63:6f:76:23:78:79: 9d:06:7f:40:2e:53:67:d8:44:cc:95:e0:d7:98:07: 92:30:1f:cd:49:08:e6:2d:c5:2d:77:7e:55:2f:3b: b0:98:32:89:16:08:e6:5e:6b:c5:13:65:3b:26:89: dc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BE:25:F9:76:6B:48:8C:86:D2:EB:30:19:B4:E6:C6:85:F0:A2:E3 X509v3 Authority Key Identifier: keyid:E9:EE:F0:8A:A8:35:6D:76:9B:A1:6B:98:1F:E6:9D:B5:DE:20:34:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:6e:b6:2e:16:78:19:c2:27:26:fe:ed:22:37:d8:70:50:7b: 42:30:eb:c0:e6:75:b5:22:dc:ce:cc:f4:23:90:ad:91:2b:17: 31:cb:cd:fe:7e:2c:b6:4e:cb:e5:99:57:d6:6b:f5:a4:81:9f: 42:3a:34:6f:49:e3:a2:6d:b5:f4:b5:8f:24:1b:43:e9:41:79: 80:99:c4:57:f3:3c:79:1a:55:93:54:7f:d3:ee:94:84:c6:02: c1:ea:54:d4:41:6b:27:2f:ca:40:1f:a0:01:d2:c9:05:a1:f4: b5:a1:54:98:31:f1:27:dc:d6:2b:ae:28:41:14:72:18:e6:2b: 77:4d:9b:29:ee:13:c8:7d:0e:a5:80:24:41:7e:4d:d5:1f:6a: 1b:17:05:2b:7e:7f:91:2c:a7:5c:1a:d0:2c:35:ea:f4:10:31: dd:5b:82:4f:a1:fc:f2:a7:37:3b:21:53:54:83:b4:dc:3d:dc: 7d:52:6f:d8:fd:84:93:f8:b7:be:2f:bc:88:2f:d7:01:de:9c: 7a:61:dc:8f:c3:d9:11:e4:9e:bd:4a:9a:af:03:46:b9:cf:f3: 44:b6:a0:d5:c6:10:36:f0:00:3e:38:06:81:f6:5e:92:76:19: b8:33:0f:db:70:a0:0c:29:39:e1:17:db:29:c7:a1:b7:f7:e6: 85:6e:45:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdC1MSVBEcNAxzOrILVA+4PmUNdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlFRUYwOEFBODM1NkQ3NjlCQTE2Qjk4MUZFNjlEQjVE RTIwMzQwOTAeFw0yNjExMTUwNTMxMDdaFw0yNjExMTYwNjA2MDdaMDMxMTAvBgNV BAMTKDEzQkUyNUY5NzY2QjQ4OEM4NkQyRUIzMDE5QjRFNkM2ODVGMEEyRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDeGqx5FdZC7T457o7EkJsLBw4 qg/q0kAZgzrDbLGDl+ju3oQxOJvvc8uNbRyQ4tTkvquW7xKBXy8OsKLecHB4k/OK cakx1xbXvAqb+CXd57le4fLI5+IoDcgb0dHAJJlSKmRJY/fLwkHhXStRl2W4laV6 t3aVTrPBi4bR6J4bJl12pTUzKimxumt/SMuQZtPywKryJE7IvMKW0tApGFYY8PSg 7fTxWF49r514wKBSW+AaAFrvCfQQnXJNNluVu+7apySuXa666g76QWNvdiN4eZ0G f0AuU2fYRMyV4NeYB5IwH81JCOYtxS13flUvO7CYMokWCOZea8UTZTsmidwpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE74l+XZrSIyG0uswGbTmxoXwouMwHwYDVR0j BBgwFoAU6e7wiqg1bXaboWuYH+adtd4gNAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWZkZTFmMGUtMjMxZi00NGNlLTkwYzMtMzJhY2RmOWQyNmMwLzAvRTlFRUYwOEFB ODM1NkQ3NjlCQTE2Qjk4MUZFNjlEQjVERTIwMzQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOUVFRjA4QUE4MzU2RDc2OUJBMTZCOTgxRkU2OURCNURFMjAz NDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWZkZTFmMGUtMjMxZi00NGNlLTkw YzMtMzJhY2RmOWQyNmMwLzAvRTlFRUYwOEFBODM1NkQ3NjlCQTE2Qjk4MUZFNjlE QjVERTIwMzQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEButi4WeBnCJyb+7SI32HBQe0Iw68DmdbUi 3M7M9COQrZErFzHLzf5+LLZOy+WZV9Zr9aSBn0I6NG9J46JttfS1jyQbQ+lBeYCZ xFfzPHkaVZNUf9PulITGAsHqVNRBaycvykAfoAHSyQWh9LWhVJgx8Sfc1iuuKEEU chjmK3dNmynuE8h9DqWAJEF+TdUfahsXBSt+f5Esp1wa0Cw16vQQMd1bgk+h/PKn NzshU1SDtNw93H1Sb9j9hJP4t74vvIgv1wHenHph3I/D2RHknr1Kmq8DRrnP80S2 oNXGEDbwAD44BoH2XpJ2GbgzD9twoAwpOeEX2ynHobf35oVuRTE= -----END CERTIFICATE-----Generated at Sun Nov 15 15:19:30 2026 by rpki-client