$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft File: 9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft (raw, json) Hash identifier: 7sOjISXOUfHljGe0/Tbgl8RYI+seE7hParg8jx7WOd4= Subject key identifier: CB:39:54:DA:7C:68:A7:B2:78:2E:9F:25:8F:BA:01:26:56:08:C8:6D Authority key identifier: 9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A Certificate issuer: /CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A Certificate serial: 2CC43BD881DF580523AA63D9EAE04CBB817FF018 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft Manifest number: FA Signing time: Wed 04 Nov 2026 15:58:23 +0000 Manifest this update: Wed 04 Nov 2026 15:53:23 +0000 Manifest next update: Thu 05 Nov 2026 16:18:23 +0000 Files and hashes: 1: 3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (hash: y7jgS/ZISqQ0Ejz5jszYlUpeJRIijdmrHPSpWEnYBQg=) 2: 3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa (hash: Dgai9I/TT4G/oQBQ3mEn1fS7dXTCrr7cZjoLYBavMXQ=) 3: 9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl (hash: xRsMAZpxkpivUKSw+OlSU4fxtCWmaibqqB0zL78wBJc=) 4: 3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa (hash: rpX5Z9CNMyEUL+veiVsOhDnQwGzSm68cJVDfJbI5SIE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 16:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c4:3b:d8:81:df:58:05:23:aa:63:d9:ea:e0:4c:bb:81:7f:f0:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A Validity Not Before: Nov 4 15:53:23 2026 GMT Not After : Nov 5 16:18:23 2026 GMT Subject: CN=CB3954DA7C68A7B2782E9F258FBA01265608C86D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:92:5d:38:e5:0e:c8:62:60:c4:57:8b:86:f2: 6e:8f:31:02:c9:fc:fa:fc:a5:b3:99:36:78:6d:4a: c3:54:e3:87:a1:16:50:5b:05:ea:46:91:01:3d:b4: c7:8e:2f:4b:19:cf:64:7a:9b:71:b7:3a:ed:08:c5: 8c:6c:2f:3a:dc:9c:a0:ba:1a:33:c2:fe:41:94:9c: be:e9:d7:58:f6:64:da:30:7d:27:23:21:e8:b1:04: d0:be:c8:6c:c4:aa:30:e3:8e:3d:49:93:ae:a5:8f: 13:17:e4:13:f0:6d:22:76:1e:17:44:93:6f:b6:85: 6b:6f:5b:39:36:56:3f:63:ce:75:20:02:95:9d:64: c2:38:34:2a:be:e5:f3:4b:2c:be:4d:33:ae:07:b0: 29:0b:5f:2b:a4:b7:1d:5d:84:bc:66:40:8a:93:94: 52:3d:cb:f4:f7:a6:43:2d:f0:e8:8d:bf:c5:cf:a1: f7:a3:e4:cb:d3:93:c8:69:a7:4e:00:e6:08:ad:9e: 7f:13:54:0f:cb:ab:d9:c4:79:06:9d:d0:d2:e4:15: 75:1d:ef:8d:a0:db:30:1b:63:d7:0b:28:46:23:11: 45:0b:81:e6:d2:4c:2e:b6:05:41:8f:1c:bc:4a:e7: c8:dc:f4:46:1d:09:17:72:1b:16:85:30:c3:f5:28: 57:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:39:54:DA:7C:68:A7:B2:78:2E:9F:25:8F:BA:01:26:56:08:C8:6D X509v3 Authority Key Identifier: keyid:9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:e1:92:2f:a7:ab:d9:f5:bb:6d:a7:9e:cf:37:cc:05:b3:24: ea:8b:9f:8d:6b:21:88:89:a4:8e:1b:9a:43:f8:f7:9e:45:5c: 62:fe:b6:4a:6c:dc:ec:d3:68:69:1d:f6:3b:52:83:53:5f:2c: f1:a6:6d:a6:d9:d1:f5:1a:e0:83:42:8f:f7:f1:fc:72:6a:7c: eb:2c:e6:f7:c5:3f:d7:8f:75:f8:3d:35:aa:e7:8a:9f:9b:02: ac:59:8c:39:29:40:2d:20:a3:65:31:1a:5f:3b:2b:e6:57:3d: 49:1c:05:54:74:e7:5b:d5:c1:54:4c:63:83:3b:b4:db:f7:2b: 3b:74:6c:ea:dc:32:a9:55:17:c7:fb:2d:7a:2a:1d:37:f0:62: 1a:a5:57:48:d4:f3:ca:f4:53:a4:51:27:11:10:8e:88:3c:59: d4:22:2c:f0:1c:4e:59:e0:16:db:43:41:09:ba:39:d8:4b:16: 8b:3c:56:75:b7:65:22:fe:1a:9e:fd:18:f1:e1:3c:e8:48:32: 26:2f:5c:7e:90:bb:45:21:f1:55:e3:a1:fe:ef:e1:5f:b0:e0: ef:0e:1e:0d:49:71:9f:5a:04:ac:0b:97:59:54:37:3d:13:12: 1b:f7:3e:c1:58:d6:b1:5e:98:d3:f4:6e:05:23:e8:81:2c:35: 19:e6:b8:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULMQ72IHfWAUjqmPZ6uBMu4F/8BgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBODgwMDU2RENGOUFEQjdBNzBENDYxRkY4MzA4NkQ4 RkU4ODk3QTAeFw0yNjExMDQxNTUzMjNaFw0yNjExMDUxNjE4MjNaMDMxMTAvBgNV BAMTKENCMzk1NERBN0M2OEE3QjI3ODJFOUYyNThGQkEwMTI2NTYwOEM4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxkl045Q7IYmDEV4uG8m6PMQLJ /Pr8pbOZNnhtSsNU44ehFlBbBepGkQE9tMeOL0sZz2R6m3G3Ou0IxYxsLzrcnKC6 GjPC/kGUnL7p11j2ZNowfScjIeixBNC+yGzEqjDjjj1Jk66ljxMX5BPwbSJ2HhdE k2+2hWtvWzk2Vj9jznUgApWdZMI4NCq+5fNLLL5NM64HsCkLXyuktx1dhLxmQIqT lFI9y/T3pkMt8OiNv8XPofej5MvTk8hpp04A5gitnn8TVA/Lq9nEeQad0NLkFXUd 742g2zAbY9cLKEYjEUULgebSTC62BUGPHLxK58jc9EYdCRdyGxaFMMP1KFfPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyzlU2nxop7J4Lp8lj7oBJlYIyG0wHwYDVR0j BBgwFoAUn6iABW3Pmtt6cNRh/4MIbY/oiXowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0NDI1MmItZDMwZS00YmRjLTgzMmYtYjM4YjA1YzdhMDM1LzAvOUZBODgwMDU2 RENGOUFEQjdBNzBENDYxRkY4MzA4NkQ4RkU4ODk3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkE4ODAwNTZEQ0Y5QURCN0E3MEQ0NjFGRjgzMDg2RDhGRTg4 OTdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0NDI1MmItZDMwZS00YmRjLTgz MmYtYjM4YjA1YzdhMDM1LzAvOUZBODgwMDU2RENGOUFEQjdBNzBENDYxRkY4MzA4 NkQ4RkU4ODk3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfhki+nq9n1u22nns83zAWzJOqLn41rIYiJ pI4bmkP4955FXGL+tkps3OzTaGkd9jtSg1NfLPGmbabZ0fUa4INCj/fx/HJqfOss 5vfFP9ePdfg9Narnip+bAqxZjDkpQC0go2UxGl87K+ZXPUkcBVR051vVwVRMY4M7 tNv3Kzt0bOrcMqlVF8f7LXoqHTfwYhqlV0jU88r0U6RRJxEQjog8WdQiLPAcTlng FttDQQm6OdhLFos8VnW3ZSL+Gp79GPHhPOhIMiYvXH6Qu0Uh8VXjof7v4V+w4O8O Hg1JcZ9aBKwLl1lUNz0TEhv3PsFY1rFemNP0bgUj6IEsNRnmuG0= -----END CERTIFICATE-----Generated at Thu Nov 5 07:52:21 2026 by rpki-client