$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft File: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft (raw, json) Hash identifier: p3IUc5Ud5sI2XUevWvqfeJUNEV5ie4RYK7c4RIGL2Qw= Subject key identifier: A6:E9:70:18:B2:2C:62:86:C8:4F:50:F4:5A:71:47:7A:CE:D5:EE:3D Authority key identifier: 11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0 Certificate issuer: /CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0 Certificate serial: 69CD2526B41E46402EED4E59C1A6A6DFEBE14135 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft Manifest number: BC Signing time: Sun 20 Sep 2026 22:55:18 +0000 Manifest this update: Sun 20 Sep 2026 22:50:18 +0000 Manifest next update: Tue 22 Sep 2026 01:44:18 +0000 Files and hashes: 1: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: W3s/SdESd03hapvVNS8Tej6LatNo1tGxXixL2qrpljI=) 2: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl (hash: bldNiVjsjnQuz2DLxOjxSrgFbpCihMu/q9gRtrhF2rM=) 3: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: 50fnO1/znCwvGbIxgziShFyETpxwE5iSmjctpgUo0sk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:cd:25:26:b4:1e:46:40:2e:ed:4e:59:c1:a6:a6:df:eb:e1:41:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0 Validity Not Before: Sep 20 22:50:18 2026 GMT Not After : Sep 22 01:44:18 2026 GMT Subject: CN=A6E97018B22C6286C84F50F45A71477ACED5EE3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:33:eb:f0:60:59:f5:cf:7b:32:4a:9b:a8:1a: 50:d3:f5:6c:dc:66:eb:c9:4b:99:a7:e6:24:f2:4a: f0:a2:57:27:e4:60:bd:a7:37:a1:cf:b9:b5:b4:7e: ca:b4:e2:71:34:00:53:9f:ef:74:15:ab:7a:9b:5d: 95:74:ab:d4:8f:1f:ef:75:36:9d:2f:8c:62:80:05: 5d:71:8f:4f:0b:1c:7f:c3:0e:92:7a:7d:c6:b3:0c: e5:4f:11:61:c2:a5:bf:74:5c:48:f1:c9:10:9f:08: 5c:03:af:3c:dd:f1:e5:44:d1:d4:f8:4a:3f:78:f6: 9d:95:fc:ef:fd:c8:bd:1e:cb:55:e1:c0:bc:7a:bc: bb:8a:5c:e1:99:1d:89:54:e1:23:35:2e:4e:ae:7f: 9c:66:a6:eb:1a:a7:28:99:60:83:94:a2:bd:76:91: 83:7f:60:8d:f2:b9:1a:b8:c5:b3:b7:4b:64:24:e1: 5c:7b:d7:d5:30:18:a9:e9:16:68:35:37:a5:1b:59: e7:74:a3:ea:e1:07:42:1f:44:7a:6e:bc:1f:10:d6: 09:94:f0:bb:e2:16:d9:0a:ad:dc:6d:34:8a:bd:cf: 92:b3:85:54:6b:f4:35:71:e2:78:ef:23:f0:43:ea: a6:9c:e3:03:98:f2:13:2f:5a:ac:0e:bd:f5:8b:83: 1c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E9:70:18:B2:2C:62:86:C8:4F:50:F4:5A:71:47:7A:CE:D5:EE:3D X509v3 Authority Key Identifier: keyid:11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:24:ab:5a:8f:14:cb:c2:cc:26:10:2e:3c:4d:66:da:b2:43: 08:df:d6:78:f1:df:72:f1:27:dd:49:9e:b4:ff:89:44:e4:a1: ff:53:71:30:9f:a3:9e:7e:42:e3:55:7b:2a:76:98:8c:e2:9c: 59:b0:ec:1d:10:40:40:ae:5d:43:28:a8:f3:1d:64:39:91:ef: 64:54:9a:68:2d:c5:15:34:5d:35:b6:27:c4:9b:1d:c9:ec:19: 6f:99:9c:14:0b:f3:63:ba:82:16:96:4d:19:89:47:ba:a5:5f: 39:29:5e:73:61:46:00:e6:01:9e:1a:69:c0:a1:8d:d9:0d:eb: d2:90:69:98:af:1b:75:80:50:c5:8c:7f:4b:75:5d:05:25:e2: 7a:39:49:7c:4f:78:17:97:15:2c:3f:1e:cf:9d:c4:38:b9:1b: 87:95:fe:04:93:c9:d5:2c:25:00:d3:11:2f:20:1d:98:51:8f: 10:fa:9d:30:29:76:b2:ac:ac:53:73:e3:a5:ba:d6:a0:8b:49: fa:ba:29:d7:6a:e8:4e:32:59:07:47:81:26:6b:c1:bf:74:ba: fe:d7:05:c7:45:49:2d:8d:0a:f1:c7:c3:95:dd:b7:4a:62:0c: 17:81:6a:76:ab:61:05:93:02:10:d6:5f:40:77:65:6f:67:74: 84:f8:82:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUac0lJrQeRkAu7U5Zwaam3+vhQTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE5MDBFNDMxREY0Q0FERjVEODIyMEUxNzUzRENDQUQz QzE1NEVBMDAeFw0yNjA5MjAyMjUwMThaFw0yNjA5MjIwMTQ0MThaMDMxMTAvBgNV BAMTKEE2RTk3MDE4QjIyQzYyODZDODRGNTBGNDVBNzE0NzdBQ0VENUVFM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSM+vwYFn1z3sySpuoGlDT9Wzc ZuvJS5mn5iTySvCiVyfkYL2nN6HPubW0fsq04nE0AFOf73QVq3qbXZV0q9SPH+91 Np0vjGKABV1xj08LHH/DDpJ6fcazDOVPEWHCpb90XEjxyRCfCFwDrzzd8eVE0dT4 Sj949p2V/O/9yL0ey1XhwLx6vLuKXOGZHYlU4SM1Lk6uf5xmpusapyiZYIOUor12 kYN/YI3yuRq4xbO3S2Qk4Vx719UwGKnpFmg1N6UbWed0o+rhB0IfRHpuvB8Q1gmU 8LviFtkKrdxtNIq9z5KzhVRr9DVx4njvI/BD6qac4wOY8hMvWqwOvfWLgxwvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpulwGLIsYobIT1D0WnFHes7V7j0wHwYDVR0j BBgwFoAUEZAOQx30yt9dgiDhdT3MrTwVTqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjk3Y2Y5YTAtZTkyNy00ODE0LTg0NDctOGIzYTAwMjc2MGE4LzAvMTE5MDBFNDMx REY0Q0FERjVEODIyMEUxNzUzRENDQUQzQzE1NEVBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTkwMEU0MzFERjRDQURGNUQ4MjIwRTE3NTNEQ0NBRDNDMTU0 RUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvMTE5MDBFNDMxREY0Q0FERjVEODIyMEUxNzUzREND QUQzQzE1NEVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYkq1qPFMvCzCYQLjxNZtqyQwjf1njx33Lx J91JnrT/iUTkof9TcTCfo55+QuNVeyp2mIzinFmw7B0QQECuXUMoqPMdZDmR72RU mmgtxRU0XTW2J8SbHcnsGW+ZnBQL82O6ghaWTRmJR7qlXzkpXnNhRgDmAZ4aacCh jdkN69KQaZivG3WAUMWMf0t1XQUl4no5SXxPeBeXFSw/Hs+dxDi5G4eV/gSTydUs JQDTES8gHZhRjxD6nTApdrKsrFNz46W61qCLSfq6Kddq6E4yWQdHgSZrwb90uv7X BcdFSS2NCvHHw5Xdt0piDBeBanarYQWTAhDWX0B3ZW9ndIT4glY= -----END CERTIFICATE-----Generated at Mon Sep 21 04:10:53 2026 by rpki-client