$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft File: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft (raw, json) Hash identifier: g/eo82boO/Shv41XB+r2N2rAdemuaGZZWtE4hXEl5K0= Subject key identifier: 93:43:5F:A7:67:F4:F1:25:83:71:8F:44:4B:D7:90:14:46:17:05:BF Authority key identifier: 11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0 Certificate issuer: /CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0 Certificate serial: 064878CC575A2B91E6F8FBCE2705326D36694004 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft Manifest number: F4 Signing time: Mon 02 Nov 2026 00:38:23 +0000 Manifest this update: Mon 02 Nov 2026 00:33:23 +0000 Manifest next update: Tue 03 Nov 2026 03:37:23 +0000 Files and hashes: 1: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl (hash: dFHlKoNCzdlSUrhqHLEIkZ+O8Yfsc8Bm7uwJ5RvLECs=) 2: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: 50fnO1/znCwvGbIxgziShFyETpxwE5iSmjctpgUo0sk=) 3: 3130332e3130352e35362e302f32332d3234203d3e20313530393432.roa (hash: 5S0EMKp+phjv5D3h5CQupk3Ukx7EZA/OPjR06M5o2BQ=) 4: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: W3s/SdESd03hapvVNS8Tej6LatNo1tGxXixL2qrpljI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 03:37:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:48:78:cc:57:5a:2b:91:e6:f8:fb:ce:27:05:32:6d:36:69:40:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0 Validity Not Before: Nov 2 00:33:23 2026 GMT Not After : Nov 3 03:37:23 2026 GMT Subject: CN=93435FA767F4F12583718F444BD79014461705BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bd:38:a0:c5:54:95:13:9c:d6:e2:e0:c1:93: c6:31:c7:ef:fb:36:5e:34:38:08:0f:ee:f6:f7:21: 54:c3:6f:9e:9f:18:be:a4:d6:34:c6:68:e6:87:e8: a0:1a:26:0b:41:21:39:22:38:37:fa:d7:6a:a2:1c: 83:52:12:31:90:fe:78:81:ef:93:d6:41:53:8a:f6: 24:bf:d4:67:ba:89:b2:09:77:69:8c:fa:2c:a7:f3: 02:8d:f7:41:80:af:7b:95:75:31:a1:1f:31:9f:b7: 21:3c:43:96:4b:76:c6:f1:e3:53:44:b8:74:ad:4d: 6b:15:9f:05:3a:e3:4d:2c:61:e5:74:49:8e:4b:62: 15:99:af:a3:e8:a6:fb:15:ac:31:a3:f4:1a:23:b4: 78:5a:b3:37:b3:04:c7:c7:07:71:97:93:38:74:50: 9f:d1:f0:af:c2:88:7b:ee:e1:d6:f6:5e:74:e7:a5: 72:90:9d:8a:36:e5:cf:cf:30:0b:44:39:a2:41:97: 65:8b:10:8a:48:e1:34:ef:e8:7d:e8:be:13:1e:ba: c4:c3:c0:43:50:ff:06:8a:a4:51:7b:a6:20:b7:cc: 64:2b:54:e2:80:16:b0:23:d0:a8:1a:7d:ee:1b:b0: e8:9d:ca:54:6f:fe:40:bb:07:61:16:6e:b4:d7:26: 96:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:43:5F:A7:67:F4:F1:25:83:71:8F:44:4B:D7:90:14:46:17:05:BF X509v3 Authority Key Identifier: keyid:11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:d2:e3:70:78:65:1f:4a:fe:cd:f1:27:71:43:9c:5a:67:e5: 4b:f9:92:7c:f0:0c:4d:b7:24:5e:66:b2:e2:c6:84:cf:10:47: 32:4d:11:d4:09:07:61:2a:6d:57:2b:70:03:d2:6e:38:ab:be: 6c:88:65:f0:b8:7d:3a:0d:5c:09:83:6a:26:1c:ff:a1:b5:e0: 7a:8e:82:5b:59:04:07:46:0d:6c:c3:9b:0f:5f:dd:51:64:74: dc:0e:af:03:b7:ed:2d:97:a5:17:37:30:91:97:eb:6e:13:e3: 07:2b:3a:aa:c1:c8:73:a4:4a:9f:43:d0:31:35:fe:28:be:e4: 77:7e:dd:59:35:c6:b0:2e:0a:ad:17:d0:7e:1b:13:70:de:f6: f1:06:cd:d5:1c:dd:c0:18:2a:9f:9a:be:76:cd:57:b5:94:00: e0:20:93:d4:59:83:14:62:8f:b5:5c:8f:85:c3:27:b1:6c:28: ab:26:48:2e:11:80:a2:ef:48:4b:97:42:02:39:53:8c:01:d2: 53:df:b8:c0:7c:1b:51:da:08:cd:54:5c:95:c6:9f:64:5b:0e: 45:40:d8:c5:1f:62:20:79:7c:f2:f1:f3:af:63:ec:d7:04:48: 7d:72:6b:b6:54:f8:97:14:97:ee:df:46:26:ef:58:cd:57:03: a3:12:78:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBkh4zFdaK5Hm+PvOJwUybTZpQAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE5MDBFNDMxREY0Q0FERjVEODIyMEUxNzUzRENDQUQz QzE1NEVBMDAeFw0yNjExMDIwMDMzMjNaFw0yNjExMDMwMzM3MjNaMDMxMTAvBgNV BAMTKDkzNDM1RkE3NjdGNEYxMjU4MzcxOEY0NDRCRDc5MDE0NDYxNzA1QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpvTigxVSVE5zW4uDBk8Yxx+/7 Nl40OAgP7vb3IVTDb56fGL6k1jTGaOaH6KAaJgtBITkiODf612qiHINSEjGQ/niB 75PWQVOK9iS/1Ge6ibIJd2mM+iyn8wKN90GAr3uVdTGhHzGftyE8Q5ZLdsbx41NE uHStTWsVnwU6400sYeV0SY5LYhWZr6PopvsVrDGj9BojtHhaszezBMfHB3GXkzh0 UJ/R8K/CiHvu4db2XnTnpXKQnYo25c/PMAtEOaJBl2WLEIpI4TTv6H3ovhMeusTD wENQ/waKpFF7piC3zGQrVOKAFrAj0Kgafe4bsOidylRv/kC7B2EWbrTXJpZzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk0Nfp2f08SWDcY9ES9eQFEYXBb8wHwYDVR0j BBgwFoAUEZAOQx30yt9dgiDhdT3MrTwVTqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjk3Y2Y5YTAtZTkyNy00ODE0LTg0NDctOGIzYTAwMjc2MGE4LzAvMTE5MDBFNDMx REY0Q0FERjVEODIyMEUxNzUzRENDQUQzQzE1NEVBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTkwMEU0MzFERjRDQURGNUQ4MjIwRTE3NTNEQ0NBRDNDMTU0 RUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvMTE5MDBFNDMxREY0Q0FERjVEODIyMEUxNzUzREND QUQzQzE1NEVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbS43B4ZR9K/s3xJ3FDnFpn5Uv5knzwDE23 JF5msuLGhM8QRzJNEdQJB2EqbVcrcAPSbjirvmyIZfC4fToNXAmDaiYc/6G14HqO gltZBAdGDWzDmw9f3VFkdNwOrwO37S2XpRc3MJGX624T4wcrOqrByHOkSp9D0DE1 /ii+5Hd+3Vk1xrAuCq0X0H4bE3De9vEGzdUc3cAYKp+avnbNV7WUAOAgk9RZgxRi j7Vcj4XDJ7FsKKsmSC4RgKLvSEuXQgI5U4wB0lPfuMB8G1HaCM1UXJXGn2RbDkVA 2MUfYiB5fPLx869j7NcESH1ya7ZU+JcUl+7fRibvWM1XA6MSeJs= -----END CERTIFICATE-----Generated at Mon Nov 2 07:29:48 2026 by rpki-client