$ rpki-client -vvvf rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft File: 143B0FF235C900164875105AD0C37F3C7DB28151.mft (raw, json) Hash identifier: VND8r6y8bPmu9XOyV+xXQnOWEZuZlhwY4bdkGKoT6XE= Subject key identifier: 4B:74:FB:1A:B3:BC:65:39:CB:28:7D:C0:4B:DA:85:C6:5A:37:E8:3B Authority key identifier: 14:3B:0F:F2:35:C9:00:16:48:75:10:5A:D0:C3:7F:3C:7D:B2:81:51 Certificate issuer: /CN=143B0FF235C900164875105AD0C37F3C7DB28151 Certificate serial: 5B91C54B2C7271987FA0395E0A9973EAC0AB98F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 12:59:22 +0000 Manifest this update: Wed 04 Nov 2026 12:54:22 +0000 Manifest next update: Thu 05 Nov 2026 15:56:22 +0000 Files and hashes: 1: 3130332e36352e3233382e302f32342d3234203d3e20313335343531.roa (hash: nNVKvZ0ilopUJmLIwR3JaCCbYQBiWauo32pM1hDB2qM=) 2: 3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa (hash: hD2c2fRRpw85nnii8gI6DgDgE1ceI1WBb5qAu0bq2pA=) 3: 3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa (hash: kEo9J9YDEfycsSJU6o/UUiHq399l3gpS8mmcj4dD7Es=) 4: 143B0FF235C900164875105AD0C37F3C7DB28151.crl (hash: VISHVofZ+8witFyTj5ZhaxAdZHYrP2o9teLrMKlTQmA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.crl rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 15:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:91:c5:4b:2c:72:71:98:7f:a0:39:5e:0a:99:73:ea:c0:ab:98:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143B0FF235C900164875105AD0C37F3C7DB28151 Validity Not Before: Nov 4 12:54:22 2026 GMT Not After : Nov 5 15:56:22 2026 GMT Subject: CN=4B74FB1AB3BC6539CB287DC04BDA85C65A37E83B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:29:ff:0f:95:ea:d6:7a:69:bf:14:d2:15:ce: f7:cd:a6:66:c0:70:73:09:e4:10:ce:4a:6b:a3:18: 4f:97:30:27:39:82:89:24:e8:27:ac:70:b1:6e:81: db:07:a1:eb:71:17:cf:ea:50:fa:47:a3:65:e1:87: cd:3d:64:37:61:00:50:fb:9d:e4:d3:a1:d8:22:87: 4b:9b:3e:cd:16:21:3c:bf:90:3d:e4:ae:7f:b8:ca: fc:29:54:e0:c6:3c:c3:cf:72:a0:ef:ed:51:6e:1f: 9c:c7:28:8f:d8:53:78:04:01:02:0a:3d:70:7e:b4: e3:ac:c9:d0:32:e3:a3:6d:6b:3d:2e:cb:d8:a1:a3: 08:83:ed:2e:5c:02:0d:39:0f:64:06:d5:29:c9:30: 86:ae:02:f5:ff:64:0b:3d:15:88:2a:5d:20:29:bd: 0f:14:0d:11:6f:f4:d6:9b:01:e5:ef:30:87:f3:20: f5:87:70:e5:1e:8f:2f:7a:d8:f1:6c:46:86:33:fc: 61:69:b8:92:fd:c9:1a:82:de:bb:fd:70:b9:27:ce: 75:bc:e6:10:84:c9:5b:51:21:63:7d:2c:40:16:85: bc:2d:a6:5d:d9:0f:6b:eb:96:17:db:46:2d:df:79: 1a:8b:36:90:f0:d8:11:d2:7a:a6:e8:93:63:c0:fe: 56:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:74:FB:1A:B3:BC:65:39:CB:28:7D:C0:4B:DA:85:C6:5A:37:E8:3B X509v3 Authority Key Identifier: keyid:14:3B:0F:F2:35:C9:00:16:48:75:10:5A:D0:C3:7F:3C:7D:B2:81:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:8b:5b:5c:66:7b:6c:c2:45:8b:64:09:63:07:54:ff:f3:b6: 11:ae:28:55:8a:f1:51:8c:f9:91:e2:73:1f:de:bf:8b:01:58: 64:57:b8:21:e4:42:d8:d3:b0:bf:7c:25:62:fc:e0:11:34:59: f0:f1:31:c0:b5:ce:78:6b:32:8e:09:94:05:38:e4:cb:dd:cd: 07:5e:9f:79:b4:e6:a2:f5:c6:ed:f5:d2:a8:78:4c:2f:2f:36: 12:a3:f8:fa:54:ad:bc:00:e6:94:6a:7d:bf:81:06:65:ce:6b: b0:53:c2:ae:99:fd:cb:79:e0:61:fe:4a:3f:13:4a:b4:7b:45: c1:de:15:05:ac:85:48:cc:26:ea:33:c9:29:8e:4d:1b:d1:7d: 10:c7:52:14:63:25:f5:87:f2:15:d1:c5:1d:c9:fd:c4:64:34: 6f:e3:47:b3:e4:93:a6:79:b1:d1:de:47:3d:ee:77:6a:ff:67: 1a:49:e2:a8:07:35:f6:e6:37:f2:d2:cf:25:c6:07:90:0d:65: f2:0a:db:2f:98:a9:bd:51:b3:a2:a6:8c:ca:00:fa:6f:c1:9f: 95:2d:6c:e9:4a:84:95:14:1b:1d:bb:b3:fd:bc:cc:36:db:4e: 5f:c8:bb:b9:1d:f6:f8:eb:26:d0:c8:2e:7a:d9:26:76:4a:16: 80:e1:f9:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW5HFSyxycZh/oDleCplz6sCrmPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQzQjBGRjIzNUM5MDAxNjQ4NzUxMDVBRDBDMzdGM0M3 REIyODE1MTAeFw0yNjExMDQxMjU0MjJaFw0yNjExMDUxNTU2MjJaMDMxMTAvBgNV BAMTKDRCNzRGQjFBQjNCQzY1MzlDQjI4N0RDMDRCREE4NUM2NUEzN0U4M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsKf8PlerWemm/FNIVzvfNpmbA cHMJ5BDOSmujGE+XMCc5gokk6CescLFugdsHoetxF8/qUPpHo2Xhh809ZDdhAFD7 neTTodgih0ubPs0WITy/kD3krn+4yvwpVODGPMPPcqDv7VFuH5zHKI/YU3gEAQIK PXB+tOOsydAy46Ntaz0uy9ihowiD7S5cAg05D2QG1SnJMIauAvX/ZAs9FYgqXSAp vQ8UDRFv9NabAeXvMIfzIPWHcOUejy962PFsRoYz/GFpuJL9yRqC3rv9cLknznW8 5hCEyVtRIWN9LEAWhbwtpl3ZD2vrlhfbRi3feRqLNpDw2BHSeqbok2PA/lb3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS3T7GrO8ZTnLKH3AS9qFxlo36DswHwYDVR0j BBgwFoAUFDsP8jXJABZIdRBa0MN/PH2ygVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTFjMWQ1NmUtMTVjNi00YjY1LWE5YTgtZjkwYWQ2ZmJhMDkwLzAvMTQzQjBGRjIz NUM5MDAxNjQ4NzUxMDVBRDBDMzdGM0M3REIyODE1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDNCMEZGMjM1QzkwMDE2NDg3NTEwNUFEMEMzN0YzQzdEQjI4 MTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTFjMWQ1NmUtMTVjNi00YjY1LWE5 YTgtZjkwYWQ2ZmJhMDkwLzAvMTQzQjBGRjIzNUM5MDAxNjQ4NzUxMDVBRDBDMzdG M0M3REIyODE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCLW1xme2zCRYtkCWMHVP/zthGuKFWK8VGM +ZHicx/ev4sBWGRXuCHkQtjTsL98JWL84BE0WfDxMcC1znhrMo4JlAU45MvdzQde n3m05qL1xu310qh4TC8vNhKj+PpUrbwA5pRqfb+BBmXOa7BTwq6Z/ct54GH+Sj8T SrR7RcHeFQWshUjMJuozySmOTRvRfRDHUhRjJfWH8hXRxR3J/cRkNG/jR7Pkk6Z5 sdHeRz3ud2r/ZxpJ4qgHNfbmN/LSzyXGB5ANZfIK2y+Yqb1Rs6KmjMoA+m/Bn5Ut bOlKhJUUGx27s/28zDbbTl/Iu7kd9vjrJtDILnrZJnZKFoDh+X4= -----END CERTIFICATE-----Generated at Thu Nov 5 05:19:19 2026 by rpki-client