$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft File: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft (raw, json) Hash identifier: uMxTZHFR+8nAdKhlM3J24uefY/o7h7WDo9+2s4mAuSQ= Subject key identifier: E6:89:57:1D:8B:54:B3:FA:A8:45:8A:E2:A3:F0:C7:CE:A9:31:D6:A6 Authority key identifier: 11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0 Certificate issuer: /CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0 Certificate serial: 456F2ED12D0548440FF30A31EC54987649CA7193 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 23:22:51 +0000 Manifest this update: Wed 16 Sep 2026 23:17:51 +0000 Manifest next update: Fri 18 Sep 2026 03:05:51 +0000 Files and hashes: 1: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: W3s/SdESd03hapvVNS8Tej6LatNo1tGxXixL2qrpljI=) 2: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl (hash: O+7K2FQx+z5q7DY98TSyqfiXN2IWukQLymn6tQnAFS0=) 3: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: 50fnO1/znCwvGbIxgziShFyETpxwE5iSmjctpgUo0sk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:6f:2e:d1:2d:05:48:44:0f:f3:0a:31:ec:54:98:76:49:ca:71:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0 Validity Not Before: Sep 16 23:17:51 2026 GMT Not After : Sep 18 03:05:51 2026 GMT Subject: CN=E689571D8B54B3FAA8458AE2A3F0C7CEA931D6A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:df:9d:55:f8:e1:48:a5:77:e1:82:00:18:b7: b8:8a:e2:5e:f5:59:60:c1:6f:07:98:9a:fc:71:e8: c1:28:10:8e:6a:80:24:ff:c9:f0:37:84:d5:61:06: 92:ad:79:a6:26:b8:be:52:3a:c3:b8:be:0b:93:ca: 35:09:c0:2f:81:a2:64:c4:a5:5e:3f:2a:64:5f:82: 31:2b:96:b6:73:85:ba:0f:3a:7c:5d:55:63:b8:75: 4c:06:50:68:33:fb:fb:c2:b0:49:8e:14:4b:f5:1d: 1a:c6:17:77:a7:36:00:42:ba:d6:f5:54:b7:a5:ab: 19:6c:bf:22:0d:a0:dd:af:eb:d0:58:b8:4f:30:ad: d1:83:a4:3e:59:84:78:fc:2d:07:67:fd:ce:b8:3a: fd:33:15:5a:d9:10:33:0d:f2:09:88:6f:52:60:1b: d2:b7:e0:97:69:38:b7:66:10:c7:61:0b:6b:64:d9: e8:aa:db:6d:01:dd:9f:39:5c:55:cd:96:2b:ee:34: 07:d3:41:24:7a:d7:c0:75:43:0a:5e:5e:03:06:a4: bc:29:0d:6e:c9:72:ee:05:43:d8:5d:02:a6:97:ce: b1:de:35:06:b1:23:eb:c1:79:80:14:03:86:50:42: 02:2f:b3:e2:95:42:59:87:ab:9c:22:19:fc:a7:90: 26:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:89:57:1D:8B:54:B3:FA:A8:45:8A:E2:A3:F0:C7:CE:A9:31:D6:A6 X509v3 Authority Key Identifier: keyid:11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:33:9e:89:19:63:34:aa:75:58:cb:7f:f2:39:b0:f6:16:18: b4:53:60:97:9e:5a:b9:cd:af:6c:4a:83:7e:f2:44:05:f9:33: 1f:28:96:c8:fb:80:f1:b3:1c:47:0e:bc:37:86:00:a0:bd:c4: f1:06:ef:c0:07:82:91:f4:59:a2:e0:e3:82:be:a5:44:47:d8: a1:22:f7:0f:45:91:ee:0c:f5:cf:4f:9d:fd:6d:11:02:cd:24: 29:23:c6:c6:8e:f7:87:4e:7c:c6:2a:59:4c:4d:66:16:41:5a: 75:87:68:59:00:d1:52:f2:f2:4d:80:5f:16:f5:3b:f7:bf:b5: 79:38:42:30:67:31:f9:66:bf:10:b6:10:9d:ec:a0:42:aa:05: ce:9d:f5:52:ab:37:be:b2:23:d7:41:03:5e:30:ab:13:4a:3a: 27:99:eb:a9:18:44:b5:72:b9:ac:4c:25:03:ab:fb:70:0d:d9: d6:5e:fd:42:8d:ad:2b:76:18:5e:3d:b1:31:86:92:40:07:14: 95:c4:b1:d0:e1:18:20:07:92:e4:e3:20:6f:91:9c:21:dd:d4: 46:64:4b:c6:0e:29:10:5a:3d:5d:38:a1:97:30:88:d8:bb:99: ab:b1:36:40:28:74:19:12:94:75:c4:68:dd:9a:67:ca:c6:81: 03:58:b5:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURW8u0S0FSEQP8wox7FSYdknKcZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE5MDBFNDMxREY0Q0FERjVEODIyMEUxNzUzRENDQUQz QzE1NEVBMDAeFw0yNjA5MTYyMzE3NTFaFw0yNjA5MTgwMzA1NTFaMDMxMTAvBgNV BAMTKEU2ODk1NzFEOEI1NEIzRkFBODQ1OEFFMkEzRjBDN0NFQTkzMUQ2QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX351V+OFIpXfhggAYt7iK4l71 WWDBbweYmvxx6MEoEI5qgCT/yfA3hNVhBpKteaYmuL5SOsO4vguTyjUJwC+BomTE pV4/KmRfgjErlrZzhboPOnxdVWO4dUwGUGgz+/vCsEmOFEv1HRrGF3enNgBCutb1 VLelqxlsvyINoN2v69BYuE8wrdGDpD5ZhHj8LQdn/c64Ov0zFVrZEDMN8gmIb1Jg G9K34JdpOLdmEMdhC2tk2eiq220B3Z85XFXNlivuNAfTQSR618B1QwpeXgMGpLwp DW7Jcu4FQ9hdAqaXzrHeNQaxI+vBeYAUA4ZQQgIvs+KVQlmHq5wiGfynkCaBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5olXHYtUs/qoRYrio/DHzqkx1qYwHwYDVR0j BBgwFoAUEZAOQx30yt9dgiDhdT3MrTwVTqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjk3Y2Y5YTAtZTkyNy00ODE0LTg0NDctOGIzYTAwMjc2MGE4LzAvMTE5MDBFNDMx REY0Q0FERjVEODIyMEUxNzUzRENDQUQzQzE1NEVBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTkwMEU0MzFERjRDQURGNUQ4MjIwRTE3NTNEQ0NBRDNDMTU0 RUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvMTE5MDBFNDMxREY0Q0FERjVEODIyMEUxNzUzREND QUQzQzE1NEVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUznokZYzSqdVjLf/I5sPYWGLRTYJeeWrnN r2xKg37yRAX5Mx8olsj7gPGzHEcOvDeGAKC9xPEG78AHgpH0WaLg44K+pURH2KEi 9w9Fke4M9c9Pnf1tEQLNJCkjxsaO94dOfMYqWUxNZhZBWnWHaFkA0VLy8k2AXxb1 O/e/tXk4QjBnMflmvxC2EJ3soEKqBc6d9VKrN76yI9dBA14wqxNKOieZ66kYRLVy uaxMJQOr+3AN2dZe/UKNrSt2GF49sTGGkkAHFJXEsdDhGCAHkuTjIG+RnCHd1EZk S8YOKRBaPV04oZcwiNi7mauxNkAodBkSlHXEaN2aZ8rGgQNYtdA= -----END CERTIFICATE-----Generated at Thu Sep 17 15:08:00 2026 by rpki-client