$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/1/0A1141F27C8CF3FDA6181400452397AC7AFBFC6B.mft File: 0A1141F27C8CF3FDA6181400452397AC7AFBFC6B.mft (raw, json) Hash identifier: tLawIzTSQTBsJv/LfGyMNJWyVdvZEIXnY96bi4UOKls= Subject key identifier: 29:5B:48:DB:5E:03:61:34:7D:7C:10:9C:C8:99:8E:A0:83:4F:D2:21 Authority key identifier: 0A:11:41:F2:7C:8C:F3:FD:A6:18:14:00:45:23:97:AC:7A:FB:FC:6B Certificate issuer: /CN=0A1141F27C8CF3FDA6181400452397AC7AFBFC6B Certificate serial: 0C9DEF100B4C841891948B7FEC2A5E6DE91A69F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A1141F27C8CF3FDA6181400452397AC7AFBFC6B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/1/0A1141F27C8CF3FDA6181400452397AC7AFBFC6B.mft Manifest number: 3C Signing time: Tue 10 Nov 2026 16:11:31 +0000 Manifest this update: Tue 10 Nov 2026 16:06:31 +0000 Manifest next update: Wed 11 Nov 2026 19:32:31 +0000 Files and hashes: 1: 323030313a6466363a616334303a3a2f34382d3438203d3e20313432323634.roa (hash: +3gV8b2rF3vOiGBL5wQvuRtyN84wash4iIEkJ8GUISk=) 2: 0A1141F27C8CF3FDA6181400452397AC7AFBFC6B.crl (hash: 4YZODYfGJ8S5Xevs1HfvwIrAIW1iGbKmcroWROAxUpE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/1/0A1141F27C8CF3FDA6181400452397AC7AFBFC6B.crl rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/1/0A1141F27C8CF3FDA6181400452397AC7AFBFC6B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A1141F27C8CF3FDA6181400452397AC7AFBFC6B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:9d:ef:10:0b:4c:84:18:91:94:8b:7f:ec:2a:5e:6d:e9:1a:69:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1141F27C8CF3FDA6181400452397AC7AFBFC6B Validity Not Before: Nov 10 16:06:31 2026 GMT Not After : Nov 11 19:32:31 2026 GMT Subject: CN=295B48DB5E0361347D7C109CC8998EA0834FD221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b6:8e:0a:5c:93:e6:6d:a2:76:3a:20:a8:b4: d0:2b:44:17:ae:63:f2:07:64:8c:a2:5b:22:c9:90: fe:86:df:2b:39:33:99:78:c0:9c:f9:b4:00:1c:7c: 7c:7c:de:91:3e:81:55:cb:b0:79:d4:4b:da:00:81: 82:12:e3:e8:e9:fd:52:c9:83:81:2e:78:bb:5b:27: c9:97:7f:00:7a:ad:75:e0:5c:85:5e:01:f7:9b:af: ab:44:77:3c:e8:8a:99:a1:4a:ed:0f:56:f5:29:ed: 16:dd:74:c2:45:80:a5:37:c3:be:78:3f:1c:04:0c: 53:26:74:2c:21:6a:07:42:2c:86:0c:1f:d8:90:f4: be:cb:14:f0:4c:1d:e4:a6:79:97:58:97:17:d9:78: 7b:a1:80:bb:0f:5c:3d:93:71:aa:86:a1:4c:bb:09: fc:01:97:42:e3:77:e1:cd:de:64:72:c1:0d:bd:76: 59:a5:78:72:e5:2b:c3:b3:48:f6:b5:cf:86:04:7e: 89:8b:6a:2b:e4:35:f8:f2:97:30:60:7b:01:ae:61: 76:e1:c4:bf:25:71:d3:de:d3:1e:ab:c4:6d:f3:22: 03:8d:c5:b9:81:15:34:c0:dc:ae:b7:b8:f8:b8:7d: fa:36:40:c9:93:1f:26:67:32:f5:64:6e:e7:72:60: ec:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5B:48:DB:5E:03:61:34:7D:7C:10:9C:C8:99:8E:A0:83:4F:D2:21 X509v3 Authority Key Identifier: keyid:0A:11:41:F2:7C:8C:F3:FD:A6:18:14:00:45:23:97:AC:7A:FB:FC:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/1/0A1141F27C8CF3FDA6181400452397AC7AFBFC6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A1141F27C8CF3FDA6181400452397AC7AFBFC6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/1/0A1141F27C8CF3FDA6181400452397AC7AFBFC6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:e1:b9:39:4f:aa:af:c1:f9:87:53:60:41:fb:3a:04:b3:bf: 2b:e8:56:22:36:29:f5:9c:f9:dc:55:3f:58:be:75:9b:44:1f: 63:bb:5a:dc:cd:87:ac:4c:0b:c8:d0:73:12:4d:c8:5a:7f:45: a3:c3:42:16:d0:3a:76:cd:ef:7a:1b:7b:74:a6:11:8a:18:79: 5f:aa:a8:31:1f:99:9b:41:eb:c2:4e:10:4b:5c:27:99:7c:f4: 8a:dd:35:be:8c:2c:d1:bb:b5:74:88:7b:2e:84:1c:0b:fc:6e: bb:4d:bf:7b:f8:79:0a:94:73:88:c7:ff:39:be:f1:70:1d:ff: 86:8e:22:97:2d:52:0f:84:43:97:ad:03:43:83:e4:ba:82:3a: cd:f8:ec:ed:c4:91:46:52:0c:44:41:f3:a3:2c:71:d4:ef:23: 74:d5:fa:09:0e:1b:6d:38:c2:1a:79:6a:77:52:62:a8:ea:e2: 75:1d:16:11:62:78:79:21:0a:9c:a0:0e:ac:f2:a9:b6:b2:d5: 0e:6e:9d:d3:60:8a:82:3a:f6:17:9e:e1:a9:05:f5:1c:b4:08: ca:6c:1b:0a:ce:83:34:16:1e:1a:c3:b2:14:14:6b:a1:9a:ad: 92:70:d9:ce:26:42:37:a0:0c:4e:bd:33:94:df:c6:7e:25:9a: 2c:5b:e4:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJ3vEAtMhBiRlIt/7CpebekaafgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExMTQxRjI3QzhDRjNGREE2MTgxNDAwNDUyMzk3QUM3 QUZCRkM2QjAeFw0yNjExMTAxNjA2MzFaFw0yNjExMTExOTMyMzFaMDMxMTAvBgNV BAMTKDI5NUI0OERCNUUwMzYxMzQ3RDdDMTA5Q0M4OTk4RUEwODM0RkQyMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcto4KXJPmbaJ2OiCotNArRBeu Y/IHZIyiWyLJkP6G3ys5M5l4wJz5tAAcfHx83pE+gVXLsHnUS9oAgYIS4+jp/VLJ g4EueLtbJ8mXfwB6rXXgXIVeAfebr6tEdzzoipmhSu0PVvUp7RbddMJFgKU3w754 PxwEDFMmdCwhagdCLIYMH9iQ9L7LFPBMHeSmeZdYlxfZeHuhgLsPXD2TcaqGoUy7 CfwBl0Ljd+HN3mRywQ29dlmleHLlK8OzSPa1z4YEfomLaivkNfjylzBgewGuYXbh xL8lcdPe0x6rxG3zIgONxbmBFTTA3K63uPi4ffo2QMmTHyZnMvVkbudyYOyPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKVtI214DYTR9fBCcyJmOoINP0iEwHwYDVR0j BBgwFoAUChFB8nyM8/2mGBQARSOXrHr7/GswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWY2ZjhjYmEtY2QyMy00MDlhLThiNDktNzczMGNmMmRkNzU0LzEvMEExMTQxRjI3 QzhDRjNGREE2MTgxNDAwNDUyMzk3QUM3QUZCRkM2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTExNDFGMjdDOENGM0ZEQTYxODE0MDA0NTIzOTdBQzdBRkJG QzZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY2ZjhjYmEtY2QyMy00MDlhLThi NDktNzczMGNmMmRkNzU0LzEvMEExMTQxRjI3QzhDRjNGREE2MTgxNDAwNDUyMzk3 QUM3QUZCRkM2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHhuTlPqq/B+YdTYEH7OgSzvyvoViI2KfWc +dxVP1i+dZtEH2O7WtzNh6xMC8jQcxJNyFp/RaPDQhbQOnbN73obe3SmEYoYeV+q qDEfmZtB68JOEEtcJ5l89IrdNb6MLNG7tXSIey6EHAv8brtNv3v4eQqUc4jH/zm+ 8XAd/4aOIpctUg+EQ5etA0OD5LqCOs347O3EkUZSDERB86MscdTvI3TV+gkOG204 whp5andSYqjq4nUdFhFieHkhCpygDqzyqbay1Q5undNgioI69hee4akF9Ry0CMps GwrOgzQWHhrDshQUa6GarZJw2c4mQjegDE69M5Tfxn4lmixb5Kg= -----END CERTIFICATE-----Generated at Wed Nov 11 00:41:16 2026 by rpki-client