$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft File: D931809BED9AF438E358376B71B803D5CE61B2F5.mft (raw, json) Hash identifier: oJnubPMabT1YDz57QzENzLJ4A/MaWjWLVEEA2ozLYk8= Subject key identifier: EF:54:F7:36:EA:8D:BB:1B:9D:69:06:BB:18:67:5E:6C:95:9B:24:02 Authority key identifier: D9:31:80:9B:ED:9A:F4:38:E3:58:37:6B:71:B8:03:D5:CE:61:B2:F5 Certificate issuer: /CN=D931809BED9AF438E358376B71B803D5CE61B2F5 Certificate serial: 5A77934B89C7FA90098929990AB8E2643816296F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft Manifest number: 0100 Signing time: Tue 10 Nov 2026 03:35:04 +0000 Manifest this update: Tue 10 Nov 2026 03:30:04 +0000 Manifest next update: Wed 11 Nov 2026 06:25:04 +0000 Files and hashes: 1: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: JqEBH5YvRn5xbIFqmvyQg68HK5OM9z3ELY7zjQkgJLI=) 2: D931809BED9AF438E358376B71B803D5CE61B2F5.crl (hash: z3ascinMTTjXyjOmOzzLyOsi3Dopm3QV/+40JGctScU=) 3: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: RKwP+mZy2zIyOi9W+fTg2udU4bmegNaF/ZtZIeSMp7c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.crl rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 06:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:77:93:4b:89:c7:fa:90:09:89:29:99:0a:b8:e2:64:38:16:29:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D931809BED9AF438E358376B71B803D5CE61B2F5 Validity Not Before: Nov 10 03:30:04 2026 GMT Not After : Nov 11 06:25:04 2026 GMT Subject: CN=EF54F736EA8DBB1B9D6906BB18675E6C959B2402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b8:60:53:32:14:3c:99:08:10:18:62:a0:a5: 36:6c:e6:f9:38:26:ac:74:71:2c:6c:aa:2d:a7:a2: 1c:a6:d0:d2:58:dd:87:f8:fd:26:c9:cc:b2:3a:90: 4d:e7:7c:64:e3:88:c1:c9:fe:db:9f:3b:1f:70:28: 12:9c:22:0c:df:77:07:af:be:62:de:f4:f8:ad:fc: 0f:cc:de:3c:e6:65:c2:c1:41:44:14:c7:cc:27:0f: eb:fb:4f:20:49:13:53:aa:33:2a:ff:bf:57:5b:94: 18:f7:7a:de:53:b8:71:89:4c:1c:45:4b:fe:7b:c5: 1d:63:46:9f:ac:21:95:e1:2c:6f:d0:e8:8c:72:75: b2:cb:c7:68:da:35:a8:a1:df:de:6b:33:0e:69:9a: 42:77:40:a2:1a:81:15:3b:d3:a5:f3:6c:d1:bc:bd: e8:ec:cb:cd:71:d3:ed:a1:c8:8a:85:22:42:f2:a0: 5c:9a:46:c7:c4:6e:19:20:ce:9f:34:3f:43:89:f2: 40:44:cc:8c:05:12:f4:4d:bb:2a:e5:ac:1a:ad:c6: 5d:34:1d:7f:73:25:24:f5:46:4e:19:f3:55:77:b4: c1:45:9b:40:56:db:6a:d5:c8:22:18:bd:92:b5:5e: 10:97:99:e1:56:0e:34:68:fb:e7:b9:a3:ba:73:d9: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:54:F7:36:EA:8D:BB:1B:9D:69:06:BB:18:67:5E:6C:95:9B:24:02 X509v3 Authority Key Identifier: keyid:D9:31:80:9B:ED:9A:F4:38:E3:58:37:6B:71:B8:03:D5:CE:61:B2:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:cb:b8:36:62:4f:3d:3c:77:46:a8:93:c1:47:28:7d:17:ac: 60:ef:b0:c3:bb:be:9b:0e:bb:6f:b2:57:8b:b5:83:1e:40:04: 3a:79:9e:eb:e6:bd:58:86:a6:a1:fe:f6:55:2d:24:7f:f9:85: bc:c4:e9:db:06:b3:e3:3a:69:a9:72:1d:b0:5e:7c:6b:7a:24: da:36:1a:e9:70:9e:f5:80:ee:c8:17:73:6f:c1:8c:49:a5:43: c9:f1:5f:50:7a:b3:6f:81:ba:b5:98:98:5c:97:51:6a:ed:31: b2:00:d7:e4:22:dd:ca:cd:2f:40:28:82:a5:e7:2c:42:4e:0c: fd:db:f4:87:04:24:a1:60:50:64:e6:2a:b8:04:db:78:e1:94: 7a:83:97:78:a7:e0:46:63:1a:e6:64:b3:8d:64:cc:70:19:86: f2:7f:8d:6f:e8:ab:c0:59:38:9b:2a:bb:1f:24:a8:a3:03:d6: 24:39:b5:31:3d:d9:85:62:4c:13:60:78:16:51:00:c5:7b:54: d2:05:9e:4f:d8:72:95:42:af:d4:ce:34:60:11:7d:d5:1e:d6: 39:67:16:b8:60:58:db:91:c8:1c:4c:27:a5:06:c5:e8:bb:b6: b4:1b:f1:8a:07:0f:98:67:a7:ac:e7:76:c0:01:2d:0d:11:6d: 47:db:39:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWneTS4nH+pAJiSmZCrjiZDgWKW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkzMTgwOUJFRDlBRjQzOEUzNTgzNzZCNzFCODAzRDVD RTYxQjJGNTAeFw0yNjExMTAwMzMwMDRaFw0yNjExMTEwNjI1MDRaMDMxMTAvBgNV BAMTKEVGNTRGNzM2RUE4REJCMUI5RDY5MDZCQjE4Njc1RTZDOTU5QjI0MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSuGBTMhQ8mQgQGGKgpTZs5vk4 Jqx0cSxsqi2nohym0NJY3Yf4/SbJzLI6kE3nfGTjiMHJ/tufOx9wKBKcIgzfdwev vmLe9Pit/A/M3jzmZcLBQUQUx8wnD+v7TyBJE1OqMyr/v1dblBj3et5TuHGJTBxF S/57xR1jRp+sIZXhLG/Q6IxydbLLx2jaNaih395rMw5pmkJ3QKIagRU706XzbNG8 vejsy81x0+2hyIqFIkLyoFyaRsfEbhkgzp80P0OJ8kBEzIwFEvRNuyrlrBqtxl00 HX9zJST1Rk4Z81V3tMFFm0BW22rVyCIYvZK1XhCXmeFWDjRo++e5o7pz2XGdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU71T3NuqNuxudaQa7GGdebJWbJAIwHwYDVR0j BBgwFoAU2TGAm+2a9DjjWDdrcbgD1c5hsvUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBlMTFmZmMtZTc1YS00YmY0LTg0NDgtYzY4ZTIwMzM1ZWU4LzAvRDkzMTgwOUJF RDlBRjQzOEUzNTgzNzZCNzFCODAzRDVDRTYxQjJGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOTMxODA5QkVEOUFGNDM4RTM1ODM3NkI3MUI4MDNENUNFNjFC MkY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0 NDgtYzY4ZTIwMzM1ZWU4LzAvRDkzMTgwOUJFRDlBRjQzOEUzNTgzNzZCNzFCODAz RDVDRTYxQjJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbLuDZiTz08d0aok8FHKH0XrGDvsMO7vpsO u2+yV4u1gx5ABDp5nuvmvViGpqH+9lUtJH/5hbzE6dsGs+M6aalyHbBefGt6JNo2 GulwnvWA7sgXc2/BjEmlQ8nxX1B6s2+BurWYmFyXUWrtMbIA1+Qi3crNL0AogqXn LEJODP3b9IcEJKFgUGTmKrgE23jhlHqDl3in4EZjGuZks41kzHAZhvJ/jW/oq8BZ OJsqux8kqKMD1iQ5tTE92YViTBNgeBZRAMV7VNIFnk/YcpVCr9TONGARfdUe1jln FrhgWNuRyBxMJ6UGxei7trQb8YoHD5hnp6zndsABLQ0RbUfbOZI= -----END CERTIFICATE-----Generated at Tue Nov 10 13:35:05 2026 by rpki-client