$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft File: 9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft (raw, json) Hash identifier: CTbfRoT0K5irrhfwvBHddyn9VoVy9JhkmV+oGeHMtOQ= Subject key identifier: 80:0D:77:5C:AB:B7:35:D6:59:EE:AF:D9:38:18:63:E3:45:A5:91:A9 Authority key identifier: 9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0 Certificate issuer: /CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0 Certificate serial: 6161334FC82EA92844B56C14B4594D89FD78BA50 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 18:07:15 +0000 Manifest this update: Sat 14 Nov 2026 18:02:15 +0000 Manifest next update: Sun 15 Nov 2026 18:33:15 +0000 Files and hashes: 1: 9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl (hash: BbvjArGdvZppau3tNdClh4jfbvNBzU7jFSTzq/Ce0LA=) 2: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: g3Z9fptq9GjJPdegO4ng7rY8ayX1C1nitJgBmqVwMJ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:61:33:4f:c8:2e:a9:28:44:b5:6c:14:b4:59:4d:89:fd:78:ba:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0 Validity Not Before: Nov 14 18:02:15 2026 GMT Not After : Nov 15 18:33:15 2026 GMT Subject: CN=800D775CABB735D659EEAFD9381863E345A591A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4e:2d:89:ed:90:28:2f:83:29:19:72:78:41: 85:5b:bc:8c:23:ab:d1:cd:96:47:2b:54:0d:3a:16: 49:8e:75:f3:95:05:98:11:fb:31:2d:c8:b2:a1:b1: 91:0b:b7:42:d9:1c:62:f6:3a:8b:93:a9:16:24:24: 8f:23:c8:5d:7b:91:2a:85:b2:a3:36:d2:bc:c1:6c: ed:12:7a:97:a7:6a:fc:55:2b:5a:f8:d2:6e:f1:54: ce:09:54:a7:9b:d6:88:c5:db:9d:77:ca:d0:ab:e1: d7:89:6a:3e:38:e7:25:57:44:20:43:2a:90:29:e1: 0e:e4:4e:14:68:65:42:ce:28:9e:a6:f0:75:e6:e5: 31:00:e1:6a:aa:cb:1a:0d:a6:11:12:52:6f:0a:4f: 1b:13:09:3e:a3:19:8f:2f:d8:b0:08:00:74:91:11: 5c:28:67:16:19:02:0f:06:bc:a3:df:72:97:30:3a: 06:e7:a5:88:da:85:fd:e1:49:d4:6a:61:36:8c:18: a5:90:8f:fa:40:77:6a:0d:32:42:2e:60:1e:2d:32: 00:b4:f7:b3:3b:31:0c:8b:9d:3b:20:01:ad:52:39: 30:aa:33:2d:4b:9c:8c:c2:d6:de:7f:bf:a0:7a:1d: db:84:7a:27:b9:ac:c7:8e:e4:f0:97:4f:ed:8c:07: 53:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0D:77:5C:AB:B7:35:D6:59:EE:AF:D9:38:18:63:E3:45:A5:91:A9 X509v3 Authority Key Identifier: keyid:9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d7:0c:0a:97:fa:9f:87:2b:a3:59:05:b9:66:f5:fc:f3:84: ef:e4:98:0b:49:cd:c4:2a:6d:3f:4b:28:c9:15:15:2d:78:ef: 9b:ba:d7:42:b3:82:27:a0:ae:06:82:2c:3b:47:a2:72:3d:b6: 54:ef:66:91:62:3e:87:dd:f0:c6:a9:56:53:6a:b3:bc:5a:df: 7b:f3:49:1c:13:d6:28:25:83:57:b1:e5:be:ea:c5:80:2f:59: 31:b6:5c:88:fb:3d:14:99:c3:1c:83:31:ed:53:7a:c8:e3:60: f4:25:52:98:a4:63:ed:d7:25:c4:29:b3:24:97:08:36:4b:d6: e3:f1:a0:90:45:d8:af:4e:84:cd:ce:da:00:5b:9d:4d:04:a9: b2:c3:29:a2:36:29:91:e3:ec:ba:ce:87:ff:70:44:6a:f8:a3: 1d:d6:69:2b:18:d1:17:28:0d:76:8e:78:f1:78:6b:0f:2c:1b: 47:a9:e4:3f:6a:7c:71:49:60:a8:60:5e:d1:89:45:f0:cc:74: 3c:ca:bc:94:b2:83:e6:a1:97:47:74:ed:6c:47:f8:30:38:95: 15:b9:75:20:c0:51:fa:59:c8:e2:f5:86:69:9f:80:61:24:ef: b8:9d:40:94:45:7c:7a:60:d7:f8:fe:af:37:ce:99:a0:41:a4: 6c:50:7d:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYWEzT8guqShEtWwUtFlNif14ulAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ3MjhDQTMzMzA3MzY5MEYyQTdGNkI3N0QyQ0YzRkVB RTQ5QUFCMDAeFw0yNjExMTQxODAyMTVaFw0yNjExMTUxODMzMTVaMDMxMTAvBgNV BAMTKDgwMEQ3NzVDQUJCNzM1RDY1OUVFQUZEOTM4MTg2M0UzNDVBNTkxQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUTi2J7ZAoL4MpGXJ4QYVbvIwj q9HNlkcrVA06FkmOdfOVBZgR+zEtyLKhsZELt0LZHGL2OouTqRYkJI8jyF17kSqF sqM20rzBbO0SepenavxVK1r40m7xVM4JVKeb1ojF2513ytCr4deJaj445yVXRCBD KpAp4Q7kThRoZULOKJ6m8HXm5TEA4WqqyxoNphESUm8KTxsTCT6jGY8v2LAIAHSR EVwoZxYZAg8GvKPfcpcwOgbnpYjahf3hSdRqYTaMGKWQj/pAd2oNMkIuYB4tMgC0 97M7MQyLnTsgAa1SOTCqMy1LnIzC1t5/v6B6HduEeie5rMeO5PCXT+2MB1O3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgA13XKu3NdZZ7q/ZOBhj40WlkakwHwYDVR0j BBgwFoAUnXKMozMHNpDyp/a3fSzz/q5JqrAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU1ZTkxMzEtM2FiYy00YWJkLWJkOTItYTc1NWZhYjkxMzA1LzAvOUQ3MjhDQTMz MzA3MzY5MEYyQTdGNkI3N0QyQ0YzRkVBRTQ5QUFCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDcyOENBMzMzMDczNjkwRjJBN0Y2Qjc3RDJDRjNGRUFFNDlB QUIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU1ZTkxMzEtM2FiYy00YWJkLWJk OTItYTc1NWZhYjkxMzA1LzAvOUQ3MjhDQTMzMzA3MzY5MEYyQTdGNkI3N0QyQ0Yz RkVBRTQ5QUFCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrXDAqX+p+HK6NZBblm9fzzhO/kmAtJzcQq bT9LKMkVFS1475u610KzgiegrgaCLDtHonI9tlTvZpFiPofd8MapVlNqs7xa33vz SRwT1iglg1ex5b7qxYAvWTG2XIj7PRSZwxyDMe1TesjjYPQlUpikY+3XJcQpsySX CDZL1uPxoJBF2K9OhM3O2gBbnU0EqbLDKaI2KZHj7LrOh/9wRGr4ox3WaSsY0Rco DXaOePF4aw8sG0ep5D9qfHFJYKhgXtGJRfDMdDzKvJSyg+ahl0d07WxH+DA4lRW5 dSDAUfpZyOL1hmmfgGEk77idQJRFfHpg1/j+rzfOmaBBpGxQffI= -----END CERTIFICATE-----Generated at Sun Nov 15 11:15:31 2026 by rpki-client