$ rpki-client -vvvf rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft File: AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft (raw, json) Hash identifier: +6UoZ/H5fCN/XoMJwDhVhs3gJ8adrov5arG+GpaCvCI= Subject key identifier: 00:7D:EE:00:0A:69:B7:0E:A0:95:86:6F:89:74:10:DB:80:DF:F2:F6 Authority key identifier: AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37 Certificate issuer: /CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37 Certificate serial: 3E9D3607B37CBAECACB29EB5E796702DF0DCDBDF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft Manifest number: FF Signing time: Mon 09 Nov 2026 18:18:32 +0000 Manifest this update: Mon 09 Nov 2026 18:13:32 +0000 Manifest next update: Tue 10 Nov 2026 20:44:32 +0000 Files and hashes: 1: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: zr3xNZn6WC15a6rQMkorpvpeU21f6+HSwl15C2ZfIoY=) 2: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: RDOvFNzz7ROaV6kZO6gJyA66/dh82eqn/Lc35nh0ous=) 3: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: IB2TICgSff4yJSUSSgF3kThtgWC7lQMHVpDuh17+3aE=) 4: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: tD1yHxjZ0j66bJ+DN66nXDU83oVTbucVL4RF+tJBNP8=) 5: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: n2RcvCuoWSBBk7Q2wacmccdD3jRe5Nf1cFF5qqE+n5A=) 6: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: nFp9w2oHsKQ17yYOZXKNctJ4tyfP/KDNQ28RwxJQ/Q8=) 7: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: MBpWtzFzVmAP7u3hAToAKtcASLzko7oX/2bZT/TBbZI=) 8: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: yL78lQu3kyFHQYQI6cDLG1nKXK0O4QE98ItjWrrAi8Q=) 9: AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl (hash: 8D0atgOnLSZbbixeICFmGWbu9I5yM8kDfTsO25xiqCA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 20:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:9d:36:07:b3:7c:ba:ec:ac:b2:9e:b5:e7:96:70:2d:f0:dc:db:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37 Validity Not Before: Nov 9 18:13:32 2026 GMT Not After : Nov 10 20:44:32 2026 GMT Subject: CN=007DEE000A69B70EA095866F897410DB80DFF2F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:04:06:ed:50:61:0e:27:52:81:ff:52:91:7a: 72:6c:75:46:c4:78:5a:12:19:e0:52:7e:7a:23:ce: cc:6a:8a:6d:16:78:11:76:98:16:04:fe:46:2b:ba: d4:13:f1:a7:8d:fc:92:8f:49:9d:18:13:52:6c:50: 1d:df:6e:9b:8e:2b:c6:d5:5c:15:23:29:16:c4:35: 83:f4:1f:69:21:3e:7a:cb:52:c6:b3:1d:51:5a:31: ed:2a:ec:7d:6e:9a:64:86:26:95:e9:f9:f2:2e:09: fc:a0:82:69:85:78:47:ee:9a:a0:33:b1:cd:ef:75: 62:ac:2e:9a:80:5a:4b:02:5f:4e:7e:df:1e:f6:7a: 23:10:81:4e:33:72:e2:95:90:72:a0:1b:a8:90:31: 7f:ae:53:62:b1:92:c4:5f:6e:6f:6f:9c:15:d1:7e: 33:9d:5b:c4:38:d7:15:4a:3e:13:cb:80:95:f6:72: 2b:67:1d:ab:9f:28:a2:7d:0a:e8:b1:1b:a0:56:2b: c6:24:02:5b:95:41:a9:bb:33:fb:82:f4:da:96:9a: cb:af:76:44:ff:ce:b4:76:4b:df:8a:06:6c:c9:e4: 77:fb:ca:ef:99:b5:fe:6b:3b:77:84:e9:06:a8:30: b1:cf:19:9e:be:aa:d5:23:a9:08:8b:06:55:3f:c6: 49:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7D:EE:00:0A:69:B7:0E:A0:95:86:6F:89:74:10:DB:80:DF:F2:F6 X509v3 Authority Key Identifier: keyid:AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:14:f9:65:74:fd:8a:48:ea:6f:3f:43:ab:64:b4:29:fb:d6: 9c:ef:be:b3:80:4a:7e:3f:2b:59:90:4c:07:70:eb:e4:49:41: 7f:f0:92:2d:55:a7:11:2f:6e:86:8b:1d:ac:95:ba:ea:d3:77: 04:44:cf:44:64:28:b3:a7:4f:14:10:0f:47:2c:99:96:a0:13: d9:fd:eb:28:3d:f0:99:3e:4d:72:8e:c9:b6:14:e1:04:ed:ff: 51:c8:e5:86:20:e0:19:54:29:93:9f:2f:df:bb:66:a8:5c:5d: 37:12:89:52:c5:22:46:36:76:d3:c9:17:95:66:01:65:d5:1a: f3:9b:33:d6:80:49:74:71:d2:95:39:f7:74:bb:55:1b:6f:39: 51:37:57:d2:77:04:92:b7:31:52:92:d0:04:12:37:a5:13:aa: 24:2e:bf:78:48:32:08:82:f8:0b:d4:5b:e1:3a:5b:a3:e1:22: 40:11:73:7d:4d:a4:02:f0:e9:f2:a9:bc:21:da:35:ab:a2:9e: 25:09:11:4b:49:66:f8:61:ad:5c:c4:85:a8:cf:c2:d5:f4:4a: d8:d1:c7:8e:f5:b0:59:3c:6a:98:06:13:47:4e:03:53:d6:fb: bb:bf:47:97:ab:46:a5:f9:10:91:8b:10:1a:74:d5:ed:73:26: 46:e4:b2:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPp02B7N8uuyssp6155ZwLfDc298wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQwOTUzMUY0REI3RDlENTA0MDk5OTk4OTEyNkI0RDJE OUZEN0YzNzAeFw0yNjExMDkxODEzMzJaFw0yNjExMTAyMDQ0MzJaMDMxMTAvBgNV BAMTKDAwN0RFRTAwMEE2OUI3MEVBMDk1ODY2Rjg5NzQxMERCODBERkYyRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTBAbtUGEOJ1KB/1KRenJsdUbE eFoSGeBSfnojzsxqim0WeBF2mBYE/kYrutQT8aeN/JKPSZ0YE1JsUB3fbpuOK8bV XBUjKRbENYP0H2khPnrLUsazHVFaMe0q7H1ummSGJpXp+fIuCfyggmmFeEfumqAz sc3vdWKsLpqAWksCX05+3x72eiMQgU4zcuKVkHKgG6iQMX+uU2KxksRfbm9vnBXR fjOdW8Q41xVKPhPLgJX2citnHaufKKJ9CuixG6BWK8YkAluVQam7M/uC9NqWmsuv dkT/zrR2S9+KBmzJ5Hf7yu+Ztf5rO3eE6QaoMLHPGZ6+qtUjqQiLBlU/xkkVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAH3uAApptw6glYZviXQQ24Df8vYwHwYDVR0j BBgwFoAUrQlTH0232dUECZmYkSa00tn9fzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVmZThmOWItOGMzNC00MzQyLWEwZmUtY2ExMDc1ZmJhNWZmLzAvQUQwOTUzMUY0 REI3RDlENTA0MDk5OTk4OTEyNkI0RDJEOUZEN0YzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDA5NTMxRjREQjdEOUQ1MDQwOTk5OTg5MTI2QjREMkQ5RkQ3 RjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQUQwOTUzMUY0REI3RDlENTA0MDk5OTk4OTEyNkI0 RDJEOUZEN0YzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4U+WV0/YpI6m8/Q6tktCn71pzvvrOASn4/ K1mQTAdw6+RJQX/wki1VpxEvboaLHayVuurTdwREz0RkKLOnTxQQD0csmZagE9n9 6yg98Jk+TXKOybYU4QTt/1HI5YYg4BlUKZOfL9+7ZqhcXTcSiVLFIkY2dtPJF5Vm AWXVGvObM9aASXRx0pU593S7VRtvOVE3V9J3BJK3MVKS0AQSN6UTqiQuv3hIMgiC +AvUW+E6W6PhIkARc31NpALw6fKpvCHaNauiniUJEUtJZvhhrVzEhajPwtX0StjR x471sFk8apgGE0dOA1PW+7u/R5erRqX5EJGLEBp01e1zJkbksj8= -----END CERTIFICATE-----Generated at Tue Nov 10 08:07:47 2026 by rpki-client