$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft File: B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft (raw, json) Hash identifier: qhHXMtQKJkiPIG3xmZnAwy7v45JoThRVT23BgBaFXQA= Subject key identifier: B5:E8:52:52:3D:09:5C:AB:15:73:3C:EB:E6:4F:D3:71:03:E0:53:01 Authority key identifier: B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC Certificate issuer: /CN=B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC Certificate serial: 38B4769292CB0F39B85ABEFE1F2E855BC7BE6F2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft Manifest number: 0109 Signing time: Sun 15 Nov 2026 11:12:58 +0000 Manifest this update: Sun 15 Nov 2026 11:07:58 +0000 Manifest next update: Mon 16 Nov 2026 15:02:58 +0000 Files and hashes: 1: 3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (hash: DOdXqvIf8YC77FzkFbP1ZhH9lDDTTUCUrQuHHws44kQ=) 2: B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl (hash: Rn018It5YDIUhJnZWc6j7ZMEgUuX0F1SaiYZoNCY/g0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b4:76:92:92:cb:0f:39:b8:5a:be:fe:1f:2e:85:5b:c7:be:6f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC Validity Not Before: Nov 15 11:07:58 2026 GMT Not After : Nov 16 15:02:58 2026 GMT Subject: CN=B5E852523D095CAB15733CEBE64FD37103E05301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ce:19:fa:c3:c7:e3:d5:17:03:0d:bc:b3:48: d8:b9:e6:f5:ce:ca:83:e7:c6:f3:95:ab:8c:d2:c2: c8:84:cb:38:68:d3:29:1c:af:fb:4c:35:45:9f:e5: f2:5c:81:d6:b0:53:63:a5:8f:43:bf:e1:72:24:c9: 4e:6d:36:84:4d:9c:8a:64:61:e3:95:ee:45:be:9e: 68:1d:f2:73:55:02:13:23:b3:82:14:e7:b5:19:b4: f4:35:8e:89:50:1e:11:1d:3d:6f:d0:d9:a2:0b:c8: 6a:8d:03:53:85:31:6f:2a:be:2c:73:22:73:db:c7: 3a:4e:7a:3f:18:34:ed:79:bf:b1:a2:04:e8:26:8f: f9:14:b8:5a:49:e2:33:bb:77:11:fe:38:51:1d:e5: 8e:72:8c:f6:3c:1c:a7:d3:4b:06:81:31:23:8a:f6: 8a:33:8a:85:23:04:64:f9:59:ce:54:be:03:fd:70: 4c:78:3c:a5:70:10:03:1c:d9:22:f6:27:4b:97:e8: f4:55:4f:79:3b:c1:b1:a9:34:c3:43:6f:3f:fa:f1: 70:0c:d4:9c:e8:c1:12:57:39:9b:d3:87:26:ae:07: 48:8d:f7:41:13:ac:1a:1c:dd:66:d4:61:6c:7f:56: 5b:43:f7:d0:25:fa:c3:9b:be:0e:66:19:e0:53:8c: 59:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E8:52:52:3D:09:5C:AB:15:73:3C:EB:E6:4F:D3:71:03:E0:53:01 X509v3 Authority Key Identifier: keyid:B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:40:54:4f:aa:83:30:d8:eb:04:4d:9f:c1:72:74:3a:29:28: 71:df:d3:64:f8:7c:d9:fc:96:e8:50:d3:ba:5f:cc:c6:f9:e9: f7:c0:4c:ac:5c:31:ff:11:cc:a7:dc:ee:6c:6a:c0:4b:bf:95: 99:81:b9:c3:c4:13:d4:b5:7e:10:75:85:e8:37:38:d4:57:93: 3d:11:84:cd:fc:cf:50:a6:13:61:42:72:f3:9b:7d:c5:80:78: 2e:6b:9c:1e:96:db:3f:db:6f:fa:ef:d7:6b:1b:0c:bc:e4:fe: e3:bd:8c:a1:e9:5a:c5:e2:48:c7:9e:6a:91:ae:89:78:5c:9c: 11:c4:b6:8b:4c:c5:9f:fc:85:27:4c:96:83:e8:03:ae:f5:99: 2c:7c:d1:55:24:66:c9:5a:a3:67:73:52:44:0e:a7:a0:0c:c4: 42:23:c6:43:40:fc:4a:06:31:89:d7:cf:5d:a1:a8:78:6b:d5: cd:89:4e:9b:e1:6d:54:c2:89:16:c9:d0:bf:c8:b1:38:1d:ff: 29:74:af:49:9a:40:64:f6:bd:0c:2a:a8:c3:63:58:47:c9:40: 75:a5:fa:a6:51:29:8d:1a:42:d4:6f:78:c4:9f:87:ab:43:89: 87:03:ef:ee:ba:8e:c5:e1:e7:c9:35:f2:75:2c:d6:0d:da:69: 63:fd:d9:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOLR2kpLLDzm4Wr7+Hy6FW8e+byswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk5MDhGNTk0RTYzMEJFQTFFRUEwRERCRjRBMzBEQzhD RjEyN0NBQzAeFw0yNjExMTUxMTA3NThaFw0yNjExMTYxNTAyNThaMDMxMTAvBgNV BAMTKEI1RTg1MjUyM0QwOTVDQUIxNTczM0NFQkU2NEZEMzcxMDNFMDUzMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLzhn6w8fj1RcDDbyzSNi55vXO yoPnxvOVq4zSwsiEyzho0ykcr/tMNUWf5fJcgdawU2Olj0O/4XIkyU5tNoRNnIpk YeOV7kW+nmgd8nNVAhMjs4IU57UZtPQ1jolQHhEdPW/Q2aILyGqNA1OFMW8qvixz InPbxzpOej8YNO15v7GiBOgmj/kUuFpJ4jO7dxH+OFEd5Y5yjPY8HKfTSwaBMSOK 9oozioUjBGT5Wc5UvgP9cEx4PKVwEAMc2SL2J0uX6PRVT3k7wbGpNMNDbz/68XAM 1JzowRJXOZvThyauB0iN90ETrBoc3WbUYWx/VltD99Al+sObvg5mGeBTjFkjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtehSUj0JXKsVczzr5k/TcQPgUwEwHwYDVR0j BBgwFoAUuZCPWU5jC+oe6g3b9KMNyM8SfKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZlY2M3MmEtZTk1NC00MzAyLTkyYzQtZjRmMjMwNzBiOTk3LzAvQjk5MDhGNTk0 RTYzMEJFQTFFRUEwRERCRjRBMzBEQzhDRjEyN0NBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTkwOEY1OTRFNjMwQkVBMUVFQTBEREJGNEEzMERDOENGMTI3 Q0FDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZlY2M3MmEtZTk1NC00MzAyLTky YzQtZjRmMjMwNzBiOTk3LzAvQjk5MDhGNTk0RTYzMEJFQTFFRUEwRERCRjRBMzBE QzhDRjEyN0NBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtAVE+qgzDY6wRNn8FydDopKHHf02T4fNn8 luhQ07pfzMb56ffATKxcMf8RzKfc7mxqwEu/lZmBucPEE9S1fhB1heg3ONRXkz0R hM38z1CmE2FCcvObfcWAeC5rnB6W2z/bb/rv12sbDLzk/uO9jKHpWsXiSMeeapGu iXhcnBHEtotMxZ/8hSdMloPoA671mSx80VUkZslao2dzUkQOp6AMxEIjxkNA/EoG MYnXz12hqHhr1c2JTpvhbVTCiRbJ0L/IsTgd/yl0r0maQGT2vQwqqMNjWEfJQHWl +qZRKY0aQtRveMSfh6tDiYcD7+66jsXh58k18nUs1g3aaWP92eM= -----END CERTIFICATE-----Generated at Sun Nov 15 18:11:26 2026 by rpki-client