$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft File: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft (raw, json) Hash identifier: 8sCjwhg8Am0uz8yTgbWaN/hEmIKx1zbzdf3shpZXoSg= Subject key identifier: 28:63:CB:EA:72:C8:7F:59:17:B5:30:8C:AE:2B:B1:BE:54:55:D1:AF Authority key identifier: 0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 Certificate issuer: /CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Certificate serial: 4D97E793D7FE58B941DC99A6205AB9F68D78E9FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft Manifest number: FF Signing time: Tue 10 Nov 2026 10:03:34 +0000 Manifest this update: Tue 10 Nov 2026 09:58:34 +0000 Manifest next update: Wed 11 Nov 2026 13:41:34 +0000 Files and hashes: 1: 3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa (hash: 7c9GFWm6MdcJLg2P6c+DTGg5L9Fs6wlnaF02bkc0nhw=) 2: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl (hash: lnXMnO+zWQspsGQoc2H0ACeuESjzqCug9w34lXxdEMY=) 3: 3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (hash: k9hB5TmUACjkJxeE951FHmSf1SEQX33K8sTdpuXO8BI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:97:e7:93:d7:fe:58:b9:41:dc:99:a6:20:5a:b9:f6:8d:78:e9:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Validity Not Before: Nov 10 09:58:34 2026 GMT Not After : Nov 11 13:41:34 2026 GMT Subject: CN=2863CBEA72C87F5917B5308CAE2BB1BE5455D1AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:17:44:9e:4b:f1:d1:81:6c:07:bc:83:0f:13: 55:20:20:a6:fa:d9:44:c5:cf:68:50:31:b5:9f:4b: cb:45:18:5f:dc:9d:80:ac:ec:19:2d:f6:66:75:ad: 00:d8:12:0c:1f:9c:97:a3:8c:67:e0:39:05:57:b7: 75:a9:76:fb:50:0b:ef:0e:a5:60:d6:4d:0f:6c:40: 42:9b:6b:14:32:e7:f1:92:07:2a:3f:f5:0b:cd:44: 29:9c:4c:9d:6b:93:7c:b5:ae:28:84:d1:f9:e3:9f: 61:05:80:37:d4:55:3d:a8:e6:01:3b:88:c5:70:f7: 10:7f:df:9f:be:f5:68:5e:6f:d5:7e:33:ce:3d:90: 81:7e:cd:d3:d1:c1:35:ce:56:d0:7c:28:97:db:55: a3:f1:30:a3:4a:c2:cc:b7:d1:9b:8e:4e:b6:c4:40: c0:0b:10:0d:d7:e6:39:9b:0e:1a:fa:d4:80:41:c2: 60:c9:48:7a:8f:b1:03:5f:46:ce:bd:71:c0:31:c9: da:e9:69:aa:cb:17:f7:aa:d5:d5:82:79:52:fd:70: 9c:5f:db:22:bf:36:8a:cd:52:b1:03:e4:b4:c4:bc: a4:1a:62:d3:94:19:db:80:47:46:a4:0d:5e:01:78: 40:fd:d2:f9:a3:ff:ed:1b:6a:4b:ad:23:e6:64:aa: 04:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:63:CB:EA:72:C8:7F:59:17:B5:30:8C:AE:2B:B1:BE:54:55:D1:AF X509v3 Authority Key Identifier: keyid:0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ee:a2:3d:56:5d:d3:fe:e9:36:17:fd:6a:83:ca:94:62:e4: 3a:77:eb:2f:64:53:b6:19:34:47:e8:8b:9d:8b:fb:9a:1c:a5: 3c:51:1f:b9:22:8c:56:8a:39:90:eb:25:e7:2d:79:6c:5c:64: f8:a7:4f:64:b1:85:55:df:53:27:6c:0f:56:45:1d:14:0c:0a: 0e:ac:aa:fc:21:6c:e1:2b:74:0b:7a:54:a0:3e:59:92:9c:4b: eb:13:8f:2f:51:56:4c:f4:cf:45:77:76:ab:f4:b7:38:cd:67: 89:37:a2:55:df:17:01:ea:54:9e:0e:de:6b:5f:3a:8d:5b:1e: c4:b3:2a:b5:80:b2:10:0a:15:8d:a7:a2:c3:96:93:06:ff:2c: bf:e7:7e:26:3a:37:ab:49:41:c2:0c:78:fd:b0:76:ab:80:7d: 34:e5:d8:a8:33:7a:3a:e5:29:c1:1c:f5:97:52:b5:65:fd:f8: cf:75:05:07:ba:28:56:a5:06:07:ce:2a:c7:21:7a:7f:e5:53: fc:83:b0:6a:be:9b:4b:f4:2b:d2:1e:26:bb:83:f1:6e:95:01: 7b:79:56:b6:02:3b:83:80:24:25:3e:41:e6:f4:cc:f5:50:4d: ec:2b:28:90:6c:e8:4f:f5:12:3b:e4:4d:20:d8:e1:0b:68:36: e2:f8:ab:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTZfnk9f+WLlB3JmmIFq59o146f0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RF RkU5QjVBMzAeFw0yNjExMTAwOTU4MzRaFw0yNjExMTExMzQxMzRaMDMxMTAvBgNV BAMTKDI4NjNDQkVBNzJDODdGNTkxN0I1MzA4Q0FFMkJCMUJFNTQ1NUQxQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmF0SeS/HRgWwHvIMPE1UgIKb6 2UTFz2hQMbWfS8tFGF/cnYCs7Bkt9mZ1rQDYEgwfnJejjGfgOQVXt3WpdvtQC+8O pWDWTQ9sQEKbaxQy5/GSByo/9QvNRCmcTJ1rk3y1riiE0fnjn2EFgDfUVT2o5gE7 iMVw9xB/35++9Wheb9V+M849kIF+zdPRwTXOVtB8KJfbVaPxMKNKwsy30ZuOTrbE QMALEA3X5jmbDhr61IBBwmDJSHqPsQNfRs69ccAxydrpaarLF/eq1dWCeVL9cJxf 2yK/NorNUrED5LTEvKQaYtOUGduAR0akDV4BeED90vmj/+0bakutI+ZkqgRBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKGPL6nLIf1kXtTCMriuxvlRV0a8wHwYDVR0j BBgwFoAUDyCwYBSdvzFoG0MhuoXWfe/ptaMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY4MmJjYTMtZTg1OC00ZDUyLWIxYTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAx NDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RFRkU5QjVBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjIwQjA2MDE0OURCRjMxNjgxQjQzMjFCQTg1RDY3REVGRTlC NUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY4MmJjYTMtZTg1OC00ZDUyLWIx YTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2 N0RFRkU5QjVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfuoj1WXdP+6TYX/WqDypRi5Dp36y9kU7YZ NEfoi52L+5ocpTxRH7kijFaKOZDrJecteWxcZPinT2SxhVXfUydsD1ZFHRQMCg6s qvwhbOErdAt6VKA+WZKcS+sTjy9RVkz0z0V3dqv0tzjNZ4k3olXfFwHqVJ4O3mtf Oo1bHsSzKrWAshAKFY2nosOWkwb/LL/nfiY6N6tJQcIMeP2wdquAfTTl2Kgzejrl KcEc9ZdStWX9+M91BQe6KFalBgfOKschen/lU/yDsGq+m0v0K9IeJruD8W6VAXt5 VrYCO4OAJCU+Qeb0zPVQTewrKJBs6E/1EjvkTSDY4QtoNuL4q6c= -----END CERTIFICATE-----Generated at Tue Nov 10 16:55:49 2026 by rpki-client