$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft File: 9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft (raw, json) Hash identifier: rDUHLtQ59ZkrDTI7iJtxHyo95LeOeaGRyqulAZm+a68= Subject key identifier: 23:43:ED:AD:52:99:3F:00:ED:C2:97:21:51:B5:6F:76:F3:90:B1:23 Authority key identifier: 9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F Certificate issuer: /CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F Certificate serial: 3DC4D53114D044065408FCA624C953F9DF32E91B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft Manifest number: F6 Signing time: Sun 01 Nov 2026 22:25:46 +0000 Manifest this update: Sun 01 Nov 2026 22:20:46 +0000 Manifest next update: Mon 02 Nov 2026 22:35:46 +0000 Files and hashes: 1: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: q/9H11WTYoKvscn357helrrghEhYAd3OjlCKI1SD+L4=) 2: 9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl (hash: RT0gFV/TqF7LKMnp2RKfUXQNZv9tz1ETsCNX8OxaYzA=) 3: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: iowBD0aCpON/4cxOj5FQqoJWjlXtvZSA6Ncm7S12+nI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 22:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c4:d5:31:14:d0:44:06:54:08:fc:a6:24:c9:53:f9:df:32:e9:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F Validity Not Before: Nov 1 22:20:46 2026 GMT Not After : Nov 2 22:35:46 2026 GMT Subject: CN=2343EDAD52993F00EDC2972151B56F76F390B123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1b:f0:00:42:dd:75:01:37:da:97:3e:84:d0: ad:03:63:31:19:c8:6b:da:80:81:1e:69:0e:93:25: f9:c4:60:17:2c:62:94:6d:13:b2:07:68:de:9e:48: dd:c3:86:2a:e3:45:44:23:c6:12:12:ec:6f:15:04: ac:d6:a9:1c:73:9e:75:f5:c7:86:5f:6e:3b:ec:c9: 68:68:a2:ac:5f:d4:b6:68:2d:ef:97:a7:8f:45:b8: fa:cd:2b:36:3a:26:0a:40:8c:09:7c:84:9a:eb:8a: d0:89:51:f2:26:a1:b9:1c:92:cc:58:80:53:f3:a2: 84:84:9c:1d:a6:95:72:7c:86:32:0b:d0:ec:d6:3f: ab:13:b3:61:cf:9a:1c:09:8f:6c:37:f9:36:15:5b: 11:e3:c2:6c:22:ad:4f:c2:8b:3d:ab:01:07:5a:d5: 14:40:2a:ae:03:29:29:5e:21:f9:89:05:3e:77:73: c5:82:32:81:d0:77:e8:6f:90:fe:c7:ab:85:84:3b: 88:d4:7d:62:48:bb:4f:02:e8:30:91:4e:17:d8:a3: 79:38:a1:e3:c0:8a:00:78:29:2a:33:c6:fc:d1:d4: b8:cc:d4:7f:33:6e:c1:73:f9:f3:df:ca:4b:5b:de: 76:6e:a8:89:f0:3d:a8:89:f9:96:c4:8f:78:28:40: 66:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:43:ED:AD:52:99:3F:00:ED:C2:97:21:51:B5:6F:76:F3:90:B1:23 X509v3 Authority Key Identifier: keyid:9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ca:d4:10:42:ff:f5:92:7a:56:e3:e2:ae:8b:ce:b4:21:58: 15:4d:10:39:95:39:39:bd:2c:41:36:34:2d:da:6d:5a:79:a1: 36:ce:b1:f8:66:5d:9d:3a:b6:c1:17:3b:25:b3:c3:4e:72:2c: 0e:0c:6c:7f:aa:ad:d9:13:08:5c:c4:40:db:db:6c:ea:ba:42: 3a:8e:33:b7:93:e1:de:3d:4f:59:27:80:96:93:11:38:c2:de: 3e:5e:e5:b2:27:4c:fa:0c:2f:28:41:e6:a7:a3:4a:17:b2:69: c8:e5:66:37:5f:21:bb:dc:c6:b2:97:91:96:8e:f6:7f:3e:f5: 1a:48:31:58:76:9f:fc:3a:77:a8:ba:af:1b:a8:83:20:42:75: 9b:e3:a2:66:87:1a:fe:d3:bf:27:88:72:f0:23:68:fc:6a:bf: 68:a0:f5:c2:b4:54:94:98:ad:5c:43:d0:28:6a:c0:c0:87:37: 59:88:c3:03:fe:19:76:8e:69:2c:7d:c3:26:b5:0f:bf:05:67: 1c:96:b7:5c:64:f8:d5:33:6d:9d:3f:fa:8f:27:9c:ab:98:25: c4:c2:cb:76:ff:42:2d:57:b6:80:b1:7e:80:aa:d5:31:ee:2a: 2e:d9:49:f5:eb:99:ff:fa:ac:52:db:d2:1a:88:52:c0:f7:02: 75:4a:d9:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPcTVMRTQRAZUCPymJMlT+d8y6RswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJDRjI2MUYxRUVCRDBBOTYxNDg3NjFGQTJFOThFOTNG QkFGQjA2RjAeFw0yNjExMDEyMjIwNDZaFw0yNjExMDIyMjM1NDZaMDMxMTAvBgNV BAMTKDIzNDNFREFENTI5OTNGMDBFREMyOTcyMTUxQjU2Rjc2RjM5MEIxMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwG/AAQt11ATfalz6E0K0DYzEZ yGvagIEeaQ6TJfnEYBcsYpRtE7IHaN6eSN3DhirjRUQjxhIS7G8VBKzWqRxznnX1 x4ZfbjvsyWhooqxf1LZoLe+Xp49FuPrNKzY6JgpAjAl8hJrritCJUfImobkcksxY gFPzooSEnB2mlXJ8hjIL0OzWP6sTs2HPmhwJj2w3+TYVWxHjwmwirU/Ciz2rAQda 1RRAKq4DKSleIfmJBT53c8WCMoHQd+hvkP7Hq4WEO4jUfWJIu08C6DCRThfYo3k4 oePAigB4KSozxvzR1LjM1H8zbsFz+fPfyktb3nZuqInwPaiJ+ZbEj3goQGYpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI0PtrVKZPwDtwpchUbVvdvOQsSMwHwYDVR0j BBgwFoAUm88mHx7r0KlhSHYfoumOk/uvsG8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIzNGVmMWQtNzM0ZC00YzcxLThiYTctZDMxZTE2OGI2MzJjLzAvOUJDRjI2MUYx RUVCRDBBOTYxNDg3NjFGQTJFOThFOTNGQkFGQjA2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkNGMjYxRjFFRUJEMEE5NjE0ODc2MUZBMkU5OEU5M0ZCQUZC MDZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvOUJDRjI2MUYxRUVCRDBBOTYxNDg3NjFGQTJFOThF OTNGQkFGQjA2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDK1BBC//WSelbj4q6LzrQhWBVNEDmVOTm9 LEE2NC3abVp5oTbOsfhmXZ06tsEXOyWzw05yLA4MbH+qrdkTCFzEQNvbbOq6QjqO M7eT4d49T1kngJaTETjC3j5e5bInTPoMLyhB5qejSheyacjlZjdfIbvcxrKXkZaO 9n8+9RpIMVh2n/w6d6i6rxuogyBCdZvjomaHGv7TvyeIcvAjaPxqv2ig9cK0VJSY rVxD0ChqwMCHN1mIwwP+GXaOaSx9wya1D78FZxyWt1xk+NUzbZ0/+o8nnKuYJcTC y3b/Qi1XtoCxfoCq1THuKi7ZSfXrmf/6rFLb0hqIUsD3AnVK2ZU= -----END CERTIFICATE-----Generated at Mon Nov 2 16:27:20 2026 by rpki-client