$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft File: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft (raw, json) Hash identifier: eq8sXQpEtylqUfNIyJsvv8Nh08CsICbN4LZIfN7lwn0= Subject key identifier: 2F:FF:30:2C:E2:59:DE:80:65:97:CD:30:24:DE:16:B2:5E:58:DA:D2 Authority key identifier: 11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0 Certificate issuer: /CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0 Certificate serial: 0FC77F1C165541484F8501FF593E25D37772902F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 16:39:56 +0000 Manifest this update: Sun 15 Nov 2026 16:34:56 +0000 Manifest next update: Mon 16 Nov 2026 19:51:56 +0000 Files and hashes: 1: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: 50fnO1/znCwvGbIxgziShFyETpxwE5iSmjctpgUo0sk=) 2: 3130332e3130352e35362e302f32332d3234203d3e20313530393432.roa (hash: 5S0EMKp+phjv5D3h5CQupk3Ukx7EZA/OPjR06M5o2BQ=) 3: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: W3s/SdESd03hapvVNS8Tej6LatNo1tGxXixL2qrpljI=) 4: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl (hash: FqnazqB9s4yeVMnvDEmF4z+3KAyOlZI8lSXl0jCQgdk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c7:7f:1c:16:55:41:48:4f:85:01:ff:59:3e:25:d3:77:72:90:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0 Validity Not Before: Nov 15 16:34:56 2026 GMT Not After : Nov 16 19:51:56 2026 GMT Subject: CN=2FFF302CE259DE806597CD3024DE16B25E58DAD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b0:4f:d6:2a:6c:22:a8:cc:7e:2b:1b:fe:28: 69:d5:09:ba:ba:53:0f:11:dd:ae:a0:70:f9:04:30: 82:b1:b1:39:6d:8f:9a:ae:2c:12:93:ab:36:0b:c4: 8d:de:1f:7f:14:ef:41:ae:42:93:ca:73:45:89:6e: fb:01:dd:40:28:d5:24:a0:22:82:88:9b:4f:e5:c3: d2:1c:58:18:40:a2:86:81:37:51:a1:a3:09:99:15: 66:f0:9e:38:86:c8:59:75:fd:67:92:c7:24:22:05: 43:4f:03:c2:31:ed:a0:51:85:21:1c:4f:59:9e:d1: 2f:d8:af:08:12:08:02:49:30:a7:af:1a:b0:0e:39: 92:cc:2d:1b:8b:ee:f6:68:34:ad:c9:f6:23:43:60: 65:48:d3:43:4a:c3:51:93:40:88:6a:1c:1e:20:13: 22:c2:1b:53:4a:00:41:53:54:7a:30:81:0e:76:53: 4b:95:94:4a:34:3c:1e:9d:e1:75:61:9a:2c:4f:cf: f7:c5:68:21:db:7a:29:da:57:ec:78:38:79:08:9d: 50:10:8d:05:cd:39:9b:84:31:ae:14:c9:08:79:87: 61:6a:b4:e6:04:ee:62:0a:c5:96:6d:56:bd:12:d6: 33:a2:40:07:f0:bf:b9:2e:1e:4f:3e:f8:16:10:70: 0b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FF:30:2C:E2:59:DE:80:65:97:CD:30:24:DE:16:B2:5E:58:DA:D2 X509v3 Authority Key Identifier: keyid:11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f6:2d:05:67:05:70:83:0e:76:a3:ec:47:3f:de:29:a3:8f: 22:56:07:ac:5e:5c:aa:c3:17:91:39:3e:49:24:59:cf:4d:c9: c6:e7:6a:0a:6d:40:c2:16:fa:d4:87:ca:85:10:a4:8d:b4:ea: d3:c7:86:1c:bd:39:6e:27:58:f2:0d:4b:76:58:92:d8:67:dd: 0f:55:bd:9c:34:43:e9:e3:3b:13:d4:b1:13:3c:37:ca:d3:47: e0:6e:f2:2b:b7:92:1b:69:5f:7f:14:35:ae:3e:ed:13:2a:91: 35:c8:b1:e6:6a:f1:fa:59:c0:e3:b6:53:d4:ab:24:dd:5c:07: ea:d4:bf:d6:6b:08:20:77:94:01:d0:3d:fa:11:29:9e:a2:b8: fe:d7:11:23:ee:29:88:c6:2a:c3:53:d7:ce:08:95:b2:90:c9: ba:76:69:72:27:b1:a1:e9:1c:4b:13:7e:f7:dc:f6:6e:70:26: be:13:dc:83:eb:55:c4:49:cf:96:d1:c5:33:13:5b:2a:24:d1: 52:c5:13:52:a3:8e:ab:44:58:fd:79:2b:a7:f7:58:58:d3:d5: fd:0b:20:26:b8:fd:89:76:53:c9:77:de:4b:4d:43:07:53:e8: 0b:4d:34:21:c8:c2:38:3d:8b:49:2a:63:4e:7d:66:f8:5a:12: f6:fb:8e:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD8d/HBZVQUhPhQH/WT4l03dykC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE5MDBFNDMxREY0Q0FERjVEODIyMEUxNzUzRENDQUQz QzE1NEVBMDAeFw0yNjExMTUxNjM0NTZaFw0yNjExMTYxOTUxNTZaMDMxMTAvBgNV BAMTKDJGRkYzMDJDRTI1OURFODA2NTk3Q0QzMDI0REUxNkIyNUU1OERBRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhsE/WKmwiqMx+Kxv+KGnVCbq6 Uw8R3a6gcPkEMIKxsTltj5quLBKTqzYLxI3eH38U70GuQpPKc0WJbvsB3UAo1SSg IoKIm0/lw9IcWBhAooaBN1GhowmZFWbwnjiGyFl1/WeSxyQiBUNPA8Ix7aBRhSEc T1me0S/YrwgSCAJJMKevGrAOOZLMLRuL7vZoNK3J9iNDYGVI00NKw1GTQIhqHB4g EyLCG1NKAEFTVHowgQ52U0uVlEo0PB6d4XVhmixPz/fFaCHbeinaV+x4OHkInVAQ jQXNOZuEMa4UyQh5h2FqtOYE7mIKxZZtVr0S1jOiQAfwv7kuHk8++BYQcAtpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL/8wLOJZ3oBll80wJN4Wsl5Y2tIwHwYDVR0j BBgwFoAUEZAOQx30yt9dgiDhdT3MrTwVTqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjk3Y2Y5YTAtZTkyNy00ODE0LTg0NDctOGIzYTAwMjc2MGE4LzAvMTE5MDBFNDMx REY0Q0FERjVEODIyMEUxNzUzRENDQUQzQzE1NEVBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTkwMEU0MzFERjRDQURGNUQ4MjIwRTE3NTNEQ0NBRDNDMTU0 RUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvMTE5MDBFNDMxREY0Q0FERjVEODIyMEUxNzUzREND QUQzQzE1NEVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/2LQVnBXCDDnaj7Ec/3imjjyJWB6xeXKrD F5E5PkkkWc9NycbnagptQMIW+tSHyoUQpI206tPHhhy9OW4nWPINS3ZYkthn3Q9V vZw0Q+njOxPUsRM8N8rTR+Bu8iu3khtpX38UNa4+7RMqkTXIseZq8fpZwOO2U9Sr JN1cB+rUv9ZrCCB3lAHQPfoRKZ6iuP7XESPuKYjGKsNT184IlbKQybp2aXInsaHp HEsTfvfc9m5wJr4T3IPrVcRJz5bRxTMTWyok0VLFE1KjjqtEWP15K6f3WFjT1f0L ICa4/Yl2U8l33ktNQwdT6AtNNCHIwjg9i0kqY059ZvhaEvb7ji4= -----END CERTIFICATE-----Generated at Sun Nov 15 21:52:49 2026 by rpki-client