$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft File: 08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft (raw, json) Hash identifier: C9uptRbnaw+h+3x41Team/PiwXyRthBXvVvb6OTVDdI= Subject key identifier: 15:05:1C:C3:9A:0F:28:1F:78:99:F8:7D:DF:13:72:97:84:A3:03:9C Authority key identifier: 08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB Certificate issuer: /CN=08DB1CB47690F1F6719A71A06B2EAFFC19B300FB Certificate serial: 0F34F5FEA0070A19F843158756281E17EF61BC92 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 13:09:35 +0000 Manifest this update: Wed 04 Nov 2026 13:04:35 +0000 Manifest next update: Thu 05 Nov 2026 16:01:35 +0000 Files and hashes: 1: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: Mcg9nbFeFqcbrXtsnWz+m6gsNfmlAcJQ2rPda7V7VVk=) 2: 08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl (hash: QebDq+OJrKCqccy0A3ZlDDauu+myggvoijhxZBQ1Omg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 16:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:34:f5:fe:a0:07:0a:19:f8:43:15:87:56:28:1e:17:ef:61:bc:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08DB1CB47690F1F6719A71A06B2EAFFC19B300FB Validity Not Before: Nov 4 13:04:35 2026 GMT Not After : Nov 5 16:01:35 2026 GMT Subject: CN=15051CC39A0F281F7899F87DDF13729784A3039C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:6a:4c:94:cc:60:f4:07:b4:85:14:6c:d3: 26:31:0b:33:d8:54:18:5c:46:3a:41:1d:ea:97:77: e3:2d:0e:74:db:09:ed:4f:5a:a0:41:af:97:a8:88: dc:9a:1e:c5:7d:c6:81:81:3a:e1:85:99:10:93:0a: 50:ae:23:13:b9:25:fa:05:af:9c:02:0e:a9:17:40: 2d:f6:59:30:34:ff:ec:1d:db:2e:9d:c9:06:0b:59: a3:ad:67:87:60:6b:3b:79:37:9f:80:5c:1c:ed:fe: ce:22:7d:ea:f8:33:8c:4e:b5:33:c4:75:2e:21:1d: f2:2f:d0:72:d7:75:df:0f:b6:13:a2:f8:00:b9:b8: ff:d7:ac:dc:8d:e5:4e:2d:97:63:d4:b2:ea:06:34: 29:36:d2:98:38:e0:73:ed:fc:bb:44:59:89:b0:b5: c8:f8:cc:54:da:25:d8:52:75:af:75:b8:25:bd:4c: 6d:a0:16:db:43:ec:76:09:1c:ba:b2:4d:53:82:95: 45:8a:42:3f:28:b8:8b:d3:71:a0:c1:e5:45:34:86: 1f:b4:23:4f:57:13:10:ec:e1:14:43:02:6f:17:9c: 5e:a3:f5:c9:e0:8a:c0:32:5d:e1:bb:56:5c:e0:23: 12:52:c4:88:27:f1:27:ea:68:d0:b7:1c:13:60:7b: 8c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:05:1C:C3:9A:0F:28:1F:78:99:F8:7D:DF:13:72:97:84:A3:03:9C X509v3 Authority Key Identifier: keyid:08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:a0:6d:e0:7a:69:2f:4c:d8:c9:84:95:0a:31:02:0b:a8:9f: b7:d0:93:89:42:70:4a:b3:20:6c:1f:f2:e7:8e:dd:58:2d:fd: 38:5f:e9:5b:4a:89:f4:e4:5b:af:f2:a3:54:bd:c4:af:81:63: bc:4a:49:ad:68:03:95:b9:30:ee:7d:8e:21:63:5b:60:7c:ef: 65:18:bb:19:96:1f:80:f3:12:60:46:29:f8:38:db:39:43:72: b1:b4:75:39:ce:c2:71:17:3b:12:bf:6b:c7:b5:b5:dd:b6:23: 98:a9:b1:08:fe:27:cf:3d:d6:32:8e:97:d2:13:75:e9:13:03: 82:5a:2f:cc:d4:e6:a5:24:0c:35:7d:dd:6d:87:f4:c1:99:b6: 84:9c:12:fa:7e:98:ba:5e:d4:31:62:04:6b:24:e3:22:c1:81: 4a:ed:2b:8f:e0:28:e4:74:08:57:0d:4a:b8:e9:48:05:28:08: 4b:28:2b:55:95:74:76:d3:bc:87:29:25:c4:2e:f5:22:4d:a3: 97:ce:f1:3b:11:34:6d:c3:a2:ed:01:6e:bf:84:63:59:b3:38: e7:09:cc:40:79:e4:b2:b3:be:88:63:59:0f:ad:0f:52:0f:1a: 18:be:6c:fe:9f:68:fc:46:f5:f1:3b:51:fa:7a:6c:67:65:cb: f4:2f:35:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDzT1/qAHChn4QxWHVigeF+9hvJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEQjFDQjQ3NjkwRjFGNjcxOUE3MUEwNkIyRUFGRkMx OUIzMDBGQjAeFw0yNjExMDQxMzA0MzVaFw0yNjExMDUxNjAxMzVaMDMxMTAvBgNV BAMTKDE1MDUxQ0MzOUEwRjI4MUY3ODk5Rjg3RERGMTM3Mjk3ODRBMzAzOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7s2pMlMxg9Ae0hRRs0yYxCzPY VBhcRjpBHeqXd+MtDnTbCe1PWqBBr5eoiNyaHsV9xoGBOuGFmRCTClCuIxO5JfoF r5wCDqkXQC32WTA0/+wd2y6dyQYLWaOtZ4dgazt5N5+AXBzt/s4ifer4M4xOtTPE dS4hHfIv0HLXdd8PthOi+AC5uP/XrNyN5U4tl2PUsuoGNCk20pg44HPt/LtEWYmw tcj4zFTaJdhSda91uCW9TG2gFttD7HYJHLqyTVOClUWKQj8ouIvTcaDB5UU0hh+0 I09XExDs4RRDAm8XnF6j9cngisAyXeG7VlzgIxJSxIgn8SfqaNC3HBNge4wfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFQUcw5oPKB94mfh93xNyl4SjA5wwHwYDVR0j BBgwFoAUCNsctHaQ8fZxmnGgay6v/BmzAPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE3Zjc5YjAtYjllMy00YzNkLWExMTMtYjZjNmExOGFmNGQxLzAvMDhEQjFDQjQ3 NjkwRjFGNjcxOUE3MUEwNkIyRUFGRkMxOUIzMDBGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wOERCMUNCNDc2OTBGMUY2NzE5QTcxQTA2QjJFQUZGQzE5QjMw MEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE3Zjc5YjAtYjllMy00YzNkLWEx MTMtYjZjNmExOGFmNGQxLzAvMDhEQjFDQjQ3NjkwRjFGNjcxOUE3MUEwNkIyRUFG RkMxOUIzMDBGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANagbeB6aS9M2MmElQoxAguon7fQk4lCcEqz IGwf8ueO3Vgt/Thf6VtKifTkW6/yo1S9xK+BY7xKSa1oA5W5MO59jiFjW2B872UY uxmWH4DzEmBGKfg42zlDcrG0dTnOwnEXOxK/a8e1td22I5ipsQj+J8891jKOl9IT dekTA4JaL8zU5qUkDDV93W2H9MGZtoScEvp+mLpe1DFiBGsk4yLBgUrtK4/gKOR0 CFcNSrjpSAUoCEsoK1WVdHbTvIcpJcQu9SJNo5fO8TsRNG3Dou0Bbr+EY1mzOOcJ zEB55LKzvohjWQ+tD1IPGhi+bP6faPxG9fE7Ufp6bGdly/QvNbU= -----END CERTIFICATE-----Generated at Thu Nov 5 04:47:55 2026 by rpki-client