$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft File: 0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft (raw, json) Hash identifier: VjZlzT+9nrvISxxt/vxOpqGbDAioHb9rsPKNoRFMDPU= Subject key identifier: A9:BA:D2:25:B6:58:F4:35:AD:7F:22:8B:29:A8:B6:B4:74:CE:54:C3 Authority key identifier: 0A:9E:60:F4:AC:7A:C7:1E:24:68:93:5B:CA:5D:0D:97:0A:AC:E8:F6 Certificate issuer: /CN=0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6 Certificate serial: 0E114568081871261A83D28FF4859AD6754ABEA5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft Manifest number: FB Signing time: Sat 07 Nov 2026 00:56:22 +0000 Manifest this update: Sat 07 Nov 2026 00:51:22 +0000 Manifest next update: Sun 08 Nov 2026 01:49:22 +0000 Files and hashes: 1: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: ccmy2LH8bOvIWU+GPrMO4FL2775rB00lVz7jkl8O1gM=) 2: 0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl (hash: 8BstmM8jyciuoTU6VLiFbx131IK6CZtJfH/g39ekYug=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 01:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:11:45:68:08:18:71:26:1a:83:d2:8f:f4:85:9a:d6:75:4a:be:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6 Validity Not Before: Nov 7 00:51:22 2026 GMT Not After : Nov 8 01:49:22 2026 GMT Subject: CN=A9BAD225B658F435AD7F228B29A8B6B474CE54C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:56:90:77:0d:04:6b:e6:e9:d5:9b:63:55:e8: dc:67:7c:a1:d8:dc:58:56:82:c2:7b:39:3d:c3:59: b1:8a:67:85:c8:a3:5a:a1:71:50:0c:4a:2c:d4:95: 5f:b7:4d:0c:82:67:84:74:a7:d7:78:97:74:d3:5d: 7b:6b:46:c5:96:d0:32:25:f8:ab:0b:88:49:53:fa: c4:31:cc:f6:cc:28:5a:9f:b4:b2:dd:4b:62:da:f3: 63:47:89:07:3d:28:ce:b7:c3:f3:d9:19:f8:4d:65: 47:5d:e6:1e:e0:27:ae:94:4d:d9:ee:6a:ad:50:6a: 47:4d:8d:05:7a:97:ea:6f:1d:27:25:8b:00:eb:7b: ef:3c:48:f4:96:d9:44:90:cc:00:0c:d1:1f:64:0d: 62:bd:c9:c9:28:18:35:b9:53:ce:7f:b2:50:9d:38: 53:c4:10:26:a2:71:2e:74:8f:09:bd:53:84:81:fd: 7e:b4:cc:9a:8d:2e:98:25:6b:10:be:1d:d5:2d:71: 8d:c0:15:5d:e3:2a:ff:c7:72:b9:0f:fd:f8:92:07: 6a:90:58:9e:08:8e:7e:13:8d:e5:a2:1c:b1:ca:24: 7c:9f:dd:09:c9:d2:d3:a2:d5:49:68:6a:62:bb:2c: 63:5e:66:b8:2b:d5:1d:4f:37:e7:60:d1:86:d2:1d: 39:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BA:D2:25:B6:58:F4:35:AD:7F:22:8B:29:A8:B6:B4:74:CE:54:C3 X509v3 Authority Key Identifier: keyid:0A:9E:60:F4:AC:7A:C7:1E:24:68:93:5B:CA:5D:0D:97:0A:AC:E8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:6f:73:4d:27:b2:13:53:88:89:de:27:10:07:80:7a:96:e5: ec:9e:5f:f1:18:87:96:4f:86:dc:b0:8e:ea:fa:1d:1c:54:9c: f3:d4:fb:b3:ab:77:bf:84:12:9e:d8:b1:2c:50:a9:f1:a7:09: be:c2:70:7e:83:1b:7e:a2:a3:86:76:26:76:f8:91:50:5e:dd: ee:92:24:90:8f:6b:13:4b:39:ed:ba:37:20:9b:bc:32:d6:9e: 9f:2c:8b:a6:0d:a0:77:cf:ed:3d:7c:c6:9c:5c:26:ce:22:f5: fe:45:cf:9e:fc:8d:16:92:d9:44:86:ff:ea:9a:4d:4b:2d:d4: ba:cd:94:95:23:d1:e8:3a:67:24:c4:8e:dd:40:a9:ca:5f:98: 9d:fe:51:37:c8:5d:e3:46:52:93:85:a5:e3:03:7b:58:b9:4f: 2b:c1:6a:e4:1a:15:29:2e:8c:36:aa:f6:f5:9a:d3:7b:0b:92: 71:69:18:89:ff:5e:60:f2:fe:a8:8f:58:a4:6d:31:95:9d:f3: ca:23:bd:a2:65:56:a6:fd:21:f7:7e:70:e9:17:9f:75:63:0c: 85:e1:a8:4c:26:69:eb:ec:bd:d6:a9:b7:46:cc:cd:44:8d:89: 63:f3:e7:0d:ab:48:80:f3:6c:99:a4:05:61:cc:93:14:1c:71: 0b:96:0b:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhFFaAgYcSYag9KP9IWa1nVKvqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE5RTYwRjRBQzdBQzcxRTI0Njg5MzVCQ0E1RDBEOTcw QUFDRThGNjAeFw0yNjExMDcwMDUxMjJaFw0yNjExMDgwMTQ5MjJaMDMxMTAvBgNV BAMTKEE5QkFEMjI1QjY1OEY0MzVBRDdGMjI4QjI5QThCNkI0NzRDRTU0QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrVpB3DQRr5unVm2NV6NxnfKHY 3FhWgsJ7OT3DWbGKZ4XIo1qhcVAMSizUlV+3TQyCZ4R0p9d4l3TTXXtrRsWW0DIl +KsLiElT+sQxzPbMKFqftLLdS2La82NHiQc9KM63w/PZGfhNZUdd5h7gJ66UTdnu aq1QakdNjQV6l+pvHScliwDre+88SPSW2USQzAAM0R9kDWK9yckoGDW5U85/slCd OFPEECaicS50jwm9U4SB/X60zJqNLpglaxC+HdUtcY3AFV3jKv/HcrkP/fiSB2qQ WJ4Ijn4TjeWiHLHKJHyf3QnJ0tOi1UloamK7LGNeZrgr1R1PN+dg0YbSHTmJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqbrSJbZY9DWtfyKLKai2tHTOVMMwHwYDVR0j BBgwFoAUCp5g9Kx6xx4kaJNbyl0Nlwqs6PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0Zjc5MzQtY2RjNy00MDgyLTgzZmItZGY3ZDRmODIxOWFmLzAvMEE5RTYwRjRB QzdBQzcxRTI0Njg5MzVCQ0E1RDBEOTcwQUFDRThGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wQTlFNjBGNEFDN0FDNzFFMjQ2ODkzNUJDQTVEMEQ5NzBBQUNF OEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzAvMEE5RTYwRjRBQzdBQzcxRTI0Njg5MzVCQ0E1RDBE OTcwQUFDRThGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlvc00nshNTiIneJxAHgHqW5eyeX/EYh5ZP htywjur6HRxUnPPU+7Ord7+EEp7YsSxQqfGnCb7CcH6DG36io4Z2Jnb4kVBe3e6S JJCPaxNLOe26NyCbvDLWnp8si6YNoHfP7T18xpxcJs4i9f5Fz578jRaS2USG/+qa TUst1LrNlJUj0eg6ZyTEjt1AqcpfmJ3+UTfIXeNGUpOFpeMDe1i5TyvBauQaFSku jDaq9vWa03sLknFpGIn/XmDy/qiPWKRtMZWd88ojvaJlVqb9Ifd+cOkXn3VjDIXh qEwmaevsvdapt0bMzUSNiWPz5w2rSIDzbJmkBWHMkxQccQuWC5k= -----END CERTIFICATE-----Generated at Sat Nov 7 17:02:46 2026 by rpki-client