$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft File: 0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft (raw, json) Hash identifier: jhs82U0ZgKRH6KU2svV0jjRVC8sS8VwqBr7olmnyBLg= Subject key identifier: F6:07:FE:69:FB:DF:BD:19:A8:7D:6F:19:D1:93:47:7A:7D:7B:A9:D1 Authority key identifier: 0A:9E:60:F4:AC:7A:C7:1E:24:68:93:5B:CA:5D:0D:97:0A:AC:E8:F6 Certificate issuer: /CN=0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6 Certificate serial: 6B9957377DDF049204C1BEE1BBAF89D1064B6A81 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 14:56:44 +0000 Manifest this update: Mon 02 Nov 2026 14:51:44 +0000 Manifest next update: Tue 03 Nov 2026 17:22:44 +0000 Files and hashes: 1: 0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl (hash: BiMT7c0yUuahMSVs5a3yPtQEpapVhZ8keTczV/Plm9c=) 2: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: ccmy2LH8bOvIWU+GPrMO4FL2775rB00lVz7jkl8O1gM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:99:57:37:7d:df:04:92:04:c1:be:e1:bb:af:89:d1:06:4b:6a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6 Validity Not Before: Nov 2 14:51:44 2026 GMT Not After : Nov 3 17:22:44 2026 GMT Subject: CN=F607FE69FBDFBD19A87D6F19D193477A7D7BA9D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c1:b9:3c:1a:68:84:fe:ad:25:b2:b5:38:79: 86:eb:a7:eb:c1:06:1b:1d:d6:cf:bc:81:ca:a5:34: 3e:52:3a:cd:82:2a:b4:51:e2:05:44:0f:b2:ac:b9: 1f:fa:3b:33:a1:78:16:08:19:37:5f:b0:34:a3:83: ca:1a:ad:41:75:59:0c:33:6b:44:a5:d1:0d:48:b8: 39:c9:22:30:97:a8:be:ab:f5:0c:e2:f9:dd:a3:cf: 41:7c:87:58:a6:03:83:2a:6b:e8:cc:67:24:b9:40: e2:de:04:c0:b8:5b:16:86:de:12:90:26:a4:0a:60: d2:06:34:f5:a1:93:4f:63:ab:35:fd:ed:0a:4e:d0: 06:e1:da:e2:8f:73:b3:ae:a9:70:8f:64:e4:5a:14: d6:f6:88:b4:36:ef:32:3e:0c:bb:ca:54:27:51:9c: ac:33:ae:47:6a:04:ae:33:8a:34:39:a2:96:79:51: e2:7b:4d:89:74:e8:12:f6:ae:19:e6:5c:61:35:5b: a8:cd:42:51:3d:ce:72:3e:81:af:a8:ec:4a:b5:7a: f5:44:35:f3:ee:50:d4:73:74:70:60:be:96:02:e6: 27:1a:76:a9:71:c7:08:8c:93:95:8e:4e:84:d7:4d: fc:a7:5a:43:ab:71:d2:a0:63:68:a4:85:e0:4e:19: fc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:07:FE:69:FB:DF:BD:19:A8:7D:6F:19:D1:93:47:7A:7D:7B:A9:D1 X509v3 Authority Key Identifier: keyid:0A:9E:60:F4:AC:7A:C7:1E:24:68:93:5B:CA:5D:0D:97:0A:AC:E8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:6c:08:a3:0b:73:e4:93:d2:2d:3a:5f:81:c7:1f:8b:9f:b0: 78:a0:96:3e:bd:df:e4:38:d3:32:1b:40:7a:5c:65:df:33:82: e7:b8:35:bb:dc:ac:ed:c0:88:bf:ef:56:9c:25:b9:81:f1:a0: 12:f2:8b:ea:3f:ee:c6:7a:e3:58:08:43:b4:45:4c:c1:e2:9c: 69:5c:c4:bf:98:6f:be:17:a9:14:d9:2e:e0:5e:ac:27:7b:f9: 1e:8f:40:0d:36:02:10:86:e2:a1:73:e2:0d:f2:28:5d:98:c5: 41:99:29:3c:8a:02:f5:da:43:85:b9:40:04:9f:0f:13:18:56: 5f:98:45:3d:0f:fa:2e:94:54:38:ab:9f:d8:61:85:cd:ea:da: 36:b0:d4:bf:65:76:b9:68:f9:45:40:e3:9c:94:1a:fc:10:4d: e5:0c:46:7f:82:28:c1:83:19:97:77:14:d8:40:c3:40:bf:38: ff:39:02:a3:d6:70:db:95:57:d4:4a:6f:4d:28:0b:a4:2f:41: df:35:23:78:5d:98:9f:18:fd:d3:29:79:09:ba:e4:df:cd:a8: fb:c0:1c:e4:d7:ff:d0:9e:c5:76:c2:8c:32:d2:c2:aa:42:4f: b4:46:a0:fd:59:03:b1:9f:0b:18:19:92:a4:6d:24:7a:58:02: 73:2a:65:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa5lXN33fBJIEwb7hu6+J0QZLaoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE5RTYwRjRBQzdBQzcxRTI0Njg5MzVCQ0E1RDBEOTcw QUFDRThGNjAeFw0yNjExMDIxNDUxNDRaFw0yNjExMDMxNzIyNDRaMDMxMTAvBgNV BAMTKEY2MDdGRTY5RkJERkJEMTlBODdENkYxOUQxOTM0NzdBN0Q3QkE5RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKwbk8GmiE/q0lsrU4eYbrp+vB Bhsd1s+8gcqlND5SOs2CKrRR4gVED7KsuR/6OzOheBYIGTdfsDSjg8oarUF1WQwz a0Sl0Q1IuDnJIjCXqL6r9Qzi+d2jz0F8h1imA4Mqa+jMZyS5QOLeBMC4WxaG3hKQ JqQKYNIGNPWhk09jqzX97QpO0Abh2uKPc7OuqXCPZORaFNb2iLQ27zI+DLvKVCdR nKwzrkdqBK4zijQ5opZ5UeJ7TYl06BL2rhnmXGE1W6jNQlE9znI+ga+o7Eq1evVE NfPuUNRzdHBgvpYC5icadqlxxwiMk5WOToTXTfynWkOrcdKgY2ikheBOGfzlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9gf+afvfvRmofW8Z0ZNHen17qdEwHwYDVR0j BBgwFoAUCp5g9Kx6xx4kaJNbyl0Nlwqs6PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0Zjc5MzQtY2RjNy00MDgyLTgzZmItZGY3ZDRmODIxOWFmLzAvMEE5RTYwRjRB QzdBQzcxRTI0Njg5MzVCQ0E1RDBEOTcwQUFDRThGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wQTlFNjBGNEFDN0FDNzFFMjQ2ODkzNUJDQTVEMEQ5NzBBQUNF OEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzAvMEE5RTYwRjRBQzdBQzcxRTI0Njg5MzVCQ0E1RDBE OTcwQUFDRThGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9sCKMLc+ST0i06X4HHH4ufsHiglj693+Q4 0zIbQHpcZd8zgue4NbvcrO3AiL/vVpwluYHxoBLyi+o/7sZ641gIQ7RFTMHinGlc xL+Yb74XqRTZLuBerCd7+R6PQA02AhCG4qFz4g3yKF2YxUGZKTyKAvXaQ4W5QASf DxMYVl+YRT0P+i6UVDirn9hhhc3q2jaw1L9ldrlo+UVA45yUGvwQTeUMRn+CKMGD GZd3FNhAw0C/OP85AqPWcNuVV9RKb00oC6QvQd81I3hdmJ8Y/dMpeQm65N/NqPvA HOTX/9CexXbCjDLSwqpCT7RGoP1ZA7GfCxgZkqRtJHpYAnMqZfc= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:34 2026 by rpki-client