$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft File: B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft (raw, json) Hash identifier: naBzBWQsdqkyIsy9KyR0rD2/OwhhuN9aIc/0Hej+nNc= Subject key identifier: 53:97:97:30:0A:41:E1:E1:E7:04:C4:9E:6D:5B:90:87:EF:0A:5D:97 Authority key identifier: B6:3B:54:AD:0E:76:4D:B5:25:0C:E7:F1:2E:DB:43:2F:0C:02:89:7C Certificate issuer: /CN=B63B54AD0E764DB5250CE7F12EDB432F0C02897C Certificate serial: 2E6AC50C3CD2B7338467B8256B86780EC04BCFF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 09:05:31 +0000 Manifest this update: Sun 15 Nov 2026 09:00:31 +0000 Manifest next update: Mon 16 Nov 2026 13:03:31 +0000 Files and hashes: 1: 3130332e35352e32382e302f32342d3234203d3e20313530343837.roa (hash: Xlw4ZgOA9dxklZxuwsm7BdQVTv81WEpzZ+FyUCbJp8U=) 2: 3130332e35352e32392e302f32342d3234203d3e20313530343837.roa (hash: zDvSDZMoY6Znb5y3IJOyYf9v6rjB8P6HkgrYk/e4IOY=) 3: B63B54AD0E764DB5250CE7F12EDB432F0C02897C.crl (hash: qf8HkZ78dPReTJCv1ffSsY2wK2QFrEiKVA7kqaZ8Cso=) 4: 3130332e35352e32382e302f32332d3234203d3e20313530343837.roa (hash: EOraKN7NbhJxKTOduQMxHR15n6cFJJTiK2diztwSbic=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.crl rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:6a:c5:0c:3c:d2:b7:33:84:67:b8:25:6b:86:78:0e:c0:4b:cf:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B63B54AD0E764DB5250CE7F12EDB432F0C02897C Validity Not Before: Nov 15 09:00:31 2026 GMT Not After : Nov 16 13:03:31 2026 GMT Subject: CN=539797300A41E1E1E704C49E6D5B9087EF0A5D97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1c:6a:30:ba:60:de:89:c4:00:d9:ab:3a:f5: fd:15:ae:35:99:93:2b:69:f7:d9:01:4a:a2:c0:15: ed:0c:e5:36:92:ca:38:bb:8a:68:91:25:66:bd:f5: 7c:a1:2b:3c:ec:da:63:ff:ef:88:f1:b7:99:4f:b3: 6b:54:5f:68:b6:be:ba:52:cb:aa:a0:b2:47:e0:e5: e3:d2:7e:19:5e:3c:30:13:18:25:07:71:7f:59:95: 23:c3:cf:e1:1d:e1:42:09:b1:83:76:8a:51:f3:f2: 65:63:f5:ff:28:b9:e5:b3:da:43:aa:4b:53:66:f4: 82:f6:cf:eb:b0:a8:ca:cb:e7:57:26:e9:d1:f1:00: d7:90:38:7c:38:fe:1c:0b:2a:dd:06:71:9e:bc:c7: 81:5d:a4:ec:32:05:1a:da:f3:a5:f8:25:89:21:3b: 94:93:a2:70:ff:0b:d5:4b:0c:dc:1d:2b:5a:00:5a: 4b:c0:3f:4c:0d:ac:34:8e:e9:bd:f1:55:e5:8d:58: 1f:98:95:92:32:a3:7a:9c:7f:4f:e9:57:8d:4c:84: 0a:ff:73:c5:30:18:a8:ea:83:36:58:56:0c:9b:32: 32:07:80:60:fe:50:3e:d7:c5:09:75:3d:4c:43:8f: b2:d7:a3:56:a4:48:88:fa:11:c8:b7:63:9f:e0:98: 7b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:97:97:30:0A:41:E1:E1:E7:04:C4:9E:6D:5B:90:87:EF:0A:5D:97 X509v3 Authority Key Identifier: keyid:B6:3B:54:AD:0E:76:4D:B5:25:0C:E7:F1:2E:DB:43:2F:0C:02:89:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:9e:64:a1:df:b5:a7:ed:57:86:3c:b7:1f:24:79:24:b4:39: 41:3c:fc:fa:91:11:be:4d:67:59:71:6a:1d:22:c0:45:b4:df: e0:61:3c:a2:12:f2:85:9a:16:84:e9:07:7c:73:9b:2d:90:f5: cc:24:13:6d:15:56:1b:a9:2c:3a:3d:a0:6c:c9:52:d4:4e:fe: 5c:b2:11:31:71:04:c5:07:d8:05:ac:93:24:77:2d:2d:2b:21: 75:f0:33:be:d5:46:df:87:e3:cd:c8:9c:8c:e8:3a:41:01:98: 98:07:46:ba:f0:b1:5f:e2:0e:df:fc:d1:e5:c9:2c:55:03:a5: 88:5d:c7:2a:12:23:b0:ff:b7:2a:e4:e5:13:74:9b:60:9b:d2: 44:17:b6:24:6f:79:6f:ac:3a:00:ef:e2:6c:2c:26:28:5d:fe: d7:29:dc:46:ed:08:d2:16:b0:96:a5:01:83:85:2d:e9:96:0e: f6:fb:bc:68:4f:5a:33:75:7d:9b:93:d0:e5:d8:95:7f:76:04: 4c:22:30:94:69:da:1a:c4:76:21:cd:23:9b:53:15:21:07:99: dd:4f:af:a3:5a:66:ff:2d:2b:98:f0:6b:23:39:5e:39:c5:0a: 36:3e:73:be:47:8f:34:cf:e3:b5:22:6d:54:9d:22:8a:a5:02: 42:7c:f4:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULmrFDDzStzOEZ7gla4Z4DsBLz/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYzQjU0QUQwRTc2NERCNTI1MENFN0YxMkVEQjQzMkYw QzAyODk3QzAeFw0yNjExMTUwOTAwMzFaFw0yNjExMTYxMzAzMzFaMDMxMTAvBgNV BAMTKDUzOTc5NzMwMEE0MUUxRTFFNzA0QzQ5RTZENUI5MDg3RUYwQTVEOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1HGowumDeicQA2as69f0VrjWZ kytp99kBSqLAFe0M5TaSyji7imiRJWa99XyhKzzs2mP/74jxt5lPs2tUX2i2vrpS y6qgskfg5ePSfhlePDATGCUHcX9ZlSPDz+Ed4UIJsYN2ilHz8mVj9f8oueWz2kOq S1Nm9IL2z+uwqMrL51cm6dHxANeQOHw4/hwLKt0GcZ68x4FdpOwyBRra86X4JYkh O5STonD/C9VLDNwdK1oAWkvAP0wNrDSO6b3xVeWNWB+YlZIyo3qcf0/pV41MhAr/ c8UwGKjqgzZYVgybMjIHgGD+UD7XxQl1PUxDj7LXo1akSIj6Eci3Y5/gmHvHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU5eXMApB4eHnBMSebVuQh+8KXZcwHwYDVR0j BBgwFoAUtjtUrQ52TbUlDOfxLttDLwwCiXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTUwNDc5M2MtYzIwOS00NjlhLThlM2MtZWIzZjVhODM4NjNmLzAvQjYzQjU0QUQw RTc2NERCNTI1MENFN0YxMkVEQjQzMkYwQzAyODk3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjNCNTRBRDBFNzY0REI1MjUwQ0U3RjEyRURCNDMyRjBDMDI4 OTdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTUwNDc5M2MtYzIwOS00NjlhLThl M2MtZWIzZjVhODM4NjNmLzAvQjYzQjU0QUQwRTc2NERCNTI1MENFN0YxMkVEQjQz MkYwQzAyODk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACaeZKHftaftV4Y8tx8keSS0OUE8/PqREb5N Z1lxah0iwEW03+BhPKIS8oWaFoTpB3xzmy2Q9cwkE20VVhupLDo9oGzJUtRO/lyy ETFxBMUH2AWskyR3LS0rIXXwM77VRt+H483InIzoOkEBmJgHRrrwsV/iDt/80eXJ LFUDpYhdxyoSI7D/tyrk5RN0m2Cb0kQXtiRveW+sOgDv4mwsJihd/tcp3EbtCNIW sJalAYOFLemWDvb7vGhPWjN1fZuT0OXYlX92BEwiMJRp2hrEdiHNI5tTFSEHmd1P r6NaZv8tK5jwayM5XjnFCjY+c75HjzTP47UibVSdIoqlAkJ89Nk= -----END CERTIFICATE-----Generated at Sun Nov 15 20:57:03 2026 by rpki-client