$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft File: 0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft (raw, json) Hash identifier: japnAGA4vUlJd53cgtDukQ2OMNtR0tmJBQGuHWFc/H4= Subject key identifier: 94:3B:92:E9:A2:0B:00:53:20:E0:DB:BB:D2:E5:18:3E:73:AB:B8:CC Authority key identifier: 0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8 Certificate issuer: /CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8 Certificate serial: 4B2EEDD93A384BAC914D1A7279C090444AEB3F7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft Manifest number: FF Signing time: Mon 09 Nov 2026 07:09:32 +0000 Manifest this update: Mon 09 Nov 2026 07:04:32 +0000 Manifest next update: Tue 10 Nov 2026 10:30:32 +0000 Files and hashes: 1: 3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa (hash: cscNYPGsX1ZTL4zXvVeeKicXVJQf2gUl7CaS2wz5lho=) 2: 3130332e39382e3131382e302f32332d3233203d3e20313336383230.roa (hash: i6JN3toKQT5i4NNrRSH28JimRYw5XqvDzH+54AyAuPo=) 3: 3130332e39382e3131372e302f32342d3234203d3e20313336383230.roa (hash: /nw/dsQp3nfOBW0Do0NFqr3xduuQUXnkGUlyPsTQV10=) 4: 3130332e39382e3131362e302f32332d3233203d3e20313336383230.roa (hash: nzJ2KTaH0mWJ2JUT7TIQaEIs1V4rS2Hb5qe4oVuW+qY=) 5: 3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa (hash: wzbhyHWdZFf+4zRG4eljIzSQe2JUQdKqrkpbRniPBU4=) 6: 0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl (hash: 4qKoskhKX3oGohX3dToN8engdRatLTuWzpiIlTT5lok=) 7: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (hash: 5z0mLNjU28RRuMehTiGd0TZpTvoqOni8uwA3Q/9FXCA=) 8: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (hash: jwkbabyLyV6UKztbR0SZEz5ZRMUHBTd8adRm57dyw+w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 10:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:2e:ed:d9:3a:38:4b:ac:91:4d:1a:72:79:c0:90:44:4a:eb:3f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8 Validity Not Before: Nov 9 07:04:32 2026 GMT Not After : Nov 10 10:30:32 2026 GMT Subject: CN=943B92E9A20B005320E0DBBBD2E5183E73ABB8CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4f:b2:f9:28:a5:da:ad:5a:61:c5:4e:e5:4d: 0a:4b:32:34:95:6d:ce:d0:05:57:16:b2:17:ae:cd: 6a:14:4e:ff:14:ce:3f:a1:4c:ff:f5:e3:29:b1:a6: cf:7a:44:e5:e2:98:8b:d5:ee:40:2f:08:c2:d4:45: f3:a3:4b:77:a4:49:e3:01:a6:ca:b8:ec:47:35:37: 2f:73:44:f5:af:75:26:8a:73:c6:0f:a9:d8:a6:48: b7:28:04:82:3e:0b:4e:76:c7:13:4d:4d:7c:2d:ce: a2:a2:03:a1:9d:19:62:d6:87:26:21:86:e0:67:d4: 49:e7:48:7f:3b:29:cb:ef:99:34:e7:dc:f2:47:ac: 26:61:9f:d4:9b:a9:a8:c9:5f:0e:ce:a9:0b:6b:c2: f8:ed:1c:5a:9a:54:63:ff:93:ba:64:ec:a5:d5:df: d2:e4:a1:05:d8:3e:c1:bf:30:dd:13:d2:1a:64:72: 1d:27:6c:1d:4f:7c:ae:a0:47:da:6c:c7:8f:49:89: d0:05:c8:a7:43:ec:df:fe:29:02:d4:c4:22:fc:20: 55:71:70:e3:e6:a1:3c:8f:bc:61:64:c8:11:af:63: 9c:58:8e:fe:2d:d0:66:6c:16:9b:71:e5:5a:dd:17: df:d7:fe:0c:87:15:f6:2d:33:0e:30:47:86:ad:01: 30:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3B:92:E9:A2:0B:00:53:20:E0:DB:BB:D2:E5:18:3E:73:AB:B8:CC X509v3 Authority Key Identifier: keyid:0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:31:60:46:be:1c:23:4b:23:f7:09:43:d0:24:44:a3:65:ee: 26:75:0d:fe:92:0a:88:4d:64:44:2a:f5:30:d6:6a:98:5a:9a: ec:fa:b2:99:6a:96:79:8f:3a:94:cd:12:92:d5:d3:20:fb:79: f9:33:d1:b1:64:aa:0a:a7:69:8b:bb:90:04:37:3e:83:6e:02: 83:72:44:97:23:03:d5:9a:6f:49:d0:08:a1:f7:c2:76:e5:c2: 8b:18:58:77:e5:9b:f1:e7:3e:54:73:b9:83:92:8f:bc:1d:2d: 20:0b:65:69:86:18:03:4e:6b:50:b5:81:64:1d:91:7d:f8:be: 3f:8a:1e:b5:71:98:89:64:5a:20:30:45:f9:89:50:ba:f0:23: 8c:c8:7d:ef:be:ff:1d:6d:7d:39:de:77:8c:72:e8:b1:98:1f: dd:e0:cb:10:35:26:bf:e1:7c:54:2e:5f:ff:df:b7:df:e2:eb: 28:fc:a9:05:dd:6b:47:aa:94:37:a6:b6:a8:6b:5a:5c:26:d8: cb:e8:e9:b0:25:6f:76:6f:d4:8f:4a:b2:6b:fe:f9:1d:75:1a: 92:b4:60:85:8e:e9:d1:11:02:32:b7:9a:61:32:e5:12:64:50: 5f:0b:ca:b2:77:cc:2b:e7:23:e7:e6:08:0d:f3:41:03:54:5e: 0f:ea:25:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSy7t2To4S6yRTRpyecCQRErrP38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGRTJFQTEyQUMxNTZBRjc4QUMyRDlBNDU5QUYxNkUy MTc2RUVDODAeFw0yNjExMDkwNzA0MzJaFw0yNjExMTAxMDMwMzJaMDMxMTAvBgNV BAMTKDk0M0I5MkU5QTIwQjAwNTMyMEUwREJCQkQyRTUxODNFNzNBQkI4Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4T7L5KKXarVphxU7lTQpLMjSV bc7QBVcWsheuzWoUTv8Uzj+hTP/14ymxps96ROXimIvV7kAvCMLURfOjS3ekSeMB psq47Ec1Ny9zRPWvdSaKc8YPqdimSLcoBII+C052xxNNTXwtzqKiA6GdGWLWhyYh huBn1EnnSH87KcvvmTTn3PJHrCZhn9SbqajJXw7OqQtrwvjtHFqaVGP/k7pk7KXV 39LkoQXYPsG/MN0T0hpkch0nbB1PfK6gR9psx49JidAFyKdD7N/+KQLUxCL8IFVx cOPmoTyPvGFkyBGvY5xYjv4t0GZsFptx5VrdF9/X/gyHFfYtMw4wR4atATAlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlDuS6aILAFMg4Nu70uUYPnOruMwwHwYDVR0j BBgwFoAUD/4uoSrBVq94rC2aRZrxbiF27sgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NkNTM5NDgtZGRmMy00NDlhLWJmMmItY2YzZjdhZTE3NmQzLzAvMEZGRTJFQTEy QUMxNTZBRjc4QUMyRDlBNDU5QUYxNkUyMTc2RUVDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkZFMkVBMTJBQzE1NkFGNzhBQzJEOUE0NTlBRjE2RTIxNzZF RUM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NkNTM5NDgtZGRmMy00NDlhLWJm MmItY2YzZjdhZTE3NmQzLzAvMEZGRTJFQTEyQUMxNTZBRjc4QUMyRDlBNDU5QUYx NkUyMTc2RUVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUxYEa+HCNLI/cJQ9AkRKNl7iZ1Df6SCohN ZEQq9TDWaphamuz6splqlnmPOpTNEpLV0yD7efkz0bFkqgqnaYu7kAQ3PoNuAoNy RJcjA9Wab0nQCKH3wnblwosYWHflm/HnPlRzuYOSj7wdLSALZWmGGANOa1C1gWQd kX34vj+KHrVxmIlkWiAwRfmJULrwI4zIfe++/x1tfTned4xy6LGYH93gyxA1Jr/h fFQuX//ft9/i6yj8qQXda0eqlDemtqhrWlwm2Mvo6bAlb3Zv1I9Ksmv++R11GpK0 YIWO6dERAjK3mmEy5RJkUF8LyrJ3zCvnI+fmCA3zQQNUXg/qJTA= -----END CERTIFICATE-----Generated at Tue Nov 10 03:48:40 2026 by rpki-client