$ rpki-client -vvvf rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft File: 9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft (raw, json) Hash identifier: JfxNkxNtEeadUuMISYJBGacOKhnFFDjmRFg63lG/jVs= Subject key identifier: 8F:1B:A4:C2:EB:54:39:CC:A4:E3:B2:AA:40:87:BF:D8:ED:D7:C3:04 Authority key identifier: 9F:D7:FF:4D:3F:B3:73:40:FA:A8:C7:EE:71:D1:CB:9E:AF:08:59:C1 Certificate issuer: /CN=9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1 Certificate serial: 367FE064AD2F9D4DBF336015DCA39C170DF42437 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft Manifest number: EF Signing time: Wed 28 Oct 2026 08:51:14 +0000 Manifest this update: Wed 28 Oct 2026 08:46:14 +0000 Manifest next update: Thu 29 Oct 2026 09:17:14 +0000 Files and hashes: 1: 3230322e37332e32352e302f32342d3234203d3e20313431383932.roa (hash: ZdJ+uJ+H3LCclcBMDstVIbOnA5HzlWlzhGq8cMXXKag=) 2: 34332e3235322e3233362e302f32332d3234203d3e203535373031.roa (hash: 9/aJzkpwQD5bM8J0s7lmNbtmibtAmha33amC/3lwiTs=) 3: 34392e302e302e302f32322d3234203d3e203535373031.roa (hash: sLZQYwwJZGFMTL7izEAM/LPP1kYOTnZL+ruwm/tAWUw=) 4: 3230322e37332e32362e302f32342d3234203d3e20313431383932.roa (hash: 2Omj4R13yIfbTM8O99f4AEQ3eWdecD3Qz56Vk4+EoQE=) 5: 3230322e37332e32372e302f32342d3234203d3e203535373031.roa (hash: BAdz9q0heD7H4d5EINNzizZi9X7k9sip5rKeZrRgrbA=) 6: 34332e3235322e3233382e302f32342d3234203d3e203535373031.roa (hash: jervWvS7fVPh370uN91AucyVv2pORH48B5fUUflxIjw=) 7: 3230322e37332e32342e302f32342d3234203d3e203535373031.roa (hash: PInvCtxVVtioPbfgKwU3owF3bAZaDoVKCpPjomKqIrc=) 8: 3130332e31382e37362e302f32322d3234203d3e203535373031.roa (hash: ZIatr5akU/o2NWBe3N+oXda5TMJkC+DkwhEJDyTCXOU=) 9: 9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl (hash: BdWf5sMpVqsuIkKHTnGoNNKkhsd0IuqJyP/L+iMGuxY=) 10: 3130332e33312e3233322e302f32322d3234203d3e203535373031.roa (hash: LXq7hGEpfDwOU/0U2QR8rTojO84R6vUdH42Dh5XJwhA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 07:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:7f:e0:64:ad:2f:9d:4d:bf:33:60:15:dc:a3:9c:17:0d:f4:24:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1 Validity Not Before: Oct 28 08:46:14 2026 GMT Not After : Oct 29 09:17:14 2026 GMT Subject: CN=8F1BA4C2EB5439CCA4E3B2AA4087BFD8EDD7C304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:c1:4c:28:36:2e:0c:dc:f7:1b:39:dd:83: e6:fc:1d:0f:25:1d:c3:0e:d9:73:30:af:f1:2c:82: 88:ff:2f:4c:bc:e0:8d:fb:47:58:bd:9e:6f:6e:c8: 9d:0e:ad:ff:14:f0:91:15:78:7a:31:4a:1f:c1:54: 6c:e2:b4:f2:5f:a3:0e:15:dc:53:0b:a2:73:f5:4e: 98:f6:26:d1:55:cb:ae:25:7d:da:55:51:f0:45:63: e1:53:a4:bc:89:6d:bc:fd:51:b8:a2:c2:e5:1a:ea: 77:40:9a:11:a4:4c:f6:6b:7b:b6:f1:df:5c:77:79: 2d:fd:c3:f4:9c:28:61:2b:63:c3:db:65:5b:fb:94: 30:dc:c7:7e:da:80:e2:c2:7e:5e:72:10:f4:2e:87: d4:47:c1:cb:98:2a:01:5f:61:d3:bc:8c:4c:32:1b: 2b:9b:f1:24:ad:a5:16:ce:c2:2c:cd:86:f2:02:3b: 19:ed:a6:84:b2:33:39:f0:39:1b:08:69:f6:9d:0c: bc:10:b0:d7:01:60:e4:70:d9:65:22:bc:9f:a1:64: 61:85:ef:0a:da:75:69:44:3f:55:89:e5:a5:bc:26: 68:f6:9a:d9:26:62:93:3f:2b:63:61:d4:96:bf:f3: 69:d5:54:7f:b3:10:b1:6e:7f:b4:54:c8:23:e6:ac: 59:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1B:A4:C2:EB:54:39:CC:A4:E3:B2:AA:40:87:BF:D8:ED:D7:C3:04 X509v3 Authority Key Identifier: keyid:9F:D7:FF:4D:3F:B3:73:40:FA:A8:C7:EE:71:D1:CB:9E:AF:08:59:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:4d:01:3c:7e:53:c6:9f:77:f7:5d:2d:19:d7:ee:cb:5c:d8: b5:d9:e0:69:e4:b7:fa:05:52:c1:6b:55:8d:19:6b:3e:20:ed: ce:17:2e:d0:02:f8:36:16:a9:6e:78:bd:d8:99:a4:43:a1:cf: 33:2f:5a:55:bf:24:1e:c6:99:14:03:13:ce:bf:19:4f:93:24: f1:8a:78:4e:a0:42:1e:29:61:8b:ed:eb:ea:bb:35:c4:6a:f1: fa:2c:6b:3f:37:86:80:51:dc:ce:6c:68:31:e1:6e:59:81:2b: c4:7d:12:2e:22:74:5d:91:c4:f8:d3:78:67:71:1f:5b:45:f6: 39:eb:a9:69:81:42:cd:cb:0c:c3:75:97:55:e9:81:34:65:6e: 26:7a:82:09:12:5f:aa:c6:50:7f:65:09:25:2f:a2:80:00:5d: 60:f7:d8:5f:cb:d1:0c:19:65:61:6b:97:c2:c2:ca:c3:ce:6a: 44:e0:06:89:b0:ff:86:20:00:86:92:c7:6a:b2:2c:51:60:50: 4c:f4:06:e3:b9:1b:28:5e:0a:11:29:42:3e:df:fb:1c:aa:65: f2:7b:a8:a6:6f:b9:a0:bc:df:0e:3b:74:87:1b:e7:eb:4d:c4: e7:a4:d4:2b:cb:fe:1c:1e:9c:07:9f:12:57:02:d2:40:c8:1f: 54:19:05:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNn/gZK0vnU2/M2AV3KOcFw30JDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZEN0ZGNEQzRkIzNzM0MEZBQThDN0VFNzFEMUNCOUVB RjA4NTlDMTAeFw0yNjEwMjgwODQ2MTRaFw0yNjEwMjkwOTE3MTRaMDMxMTAvBgNV BAMTKDhGMUJBNEMyRUI1NDM5Q0NBNEUzQjJBQTQwODdCRkQ4RUREN0MzMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxD8FMKDYuDNz3Gzndg+b8HQ8l HcMO2XMwr/Esgoj/L0y84I37R1i9nm9uyJ0Orf8U8JEVeHoxSh/BVGzitPJfow4V 3FMLonP1Tpj2JtFVy64lfdpVUfBFY+FTpLyJbbz9UbiiwuUa6ndAmhGkTPZre7bx 31x3eS39w/ScKGErY8PbZVv7lDDcx37agOLCfl5yEPQuh9RHwcuYKgFfYdO8jEwy Gyub8SStpRbOwizNhvICOxntpoSyMznwORsIafadDLwQsNcBYORw2WUivJ+hZGGF 7wradWlEP1WJ5aW8Jmj2mtkmYpM/K2Nh1Ja/82nVVH+zELFuf7RUyCPmrFmRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjxukwutUOcyk47KqQIe/2O3XwwQwHwYDVR0j BBgwFoAUn9f/TT+zc0D6qMfucdHLnq8IWcEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjdkOWY4NTEtN2U3My00Mzg0LTk1MGUtOGJlOGUxNWZkM2VlLzAvOUZEN0ZGNEQz RkIzNzM0MEZBQThDN0VFNzFEMUNCOUVBRjA4NTlDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkQ3RkY0RDNGQjM3MzQwRkFBOEM3RUU3MUQxQ0I5RUFGMDg1 OUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjdkOWY4NTEtN2U3My00Mzg0LTk1 MGUtOGJlOGUxNWZkM2VlLzAvOUZEN0ZGNEQzRkIzNzM0MEZBQThDN0VFNzFEMUNC OUVBRjA4NTlDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9NATx+U8afd/ddLRnX7stc2LXZ4Gnkt/oF UsFrVY0Zaz4g7c4XLtAC+DYWqW54vdiZpEOhzzMvWlW/JB7GmRQDE86/GU+TJPGK eE6gQh4pYYvt6+q7NcRq8fosaz83hoBR3M5saDHhblmBK8R9Ei4idF2RxPjTeGdx H1tF9jnrqWmBQs3LDMN1l1XpgTRlbiZ6ggkSX6rGUH9lCSUvooAAXWD32F/L0QwZ ZWFrl8LCysPOakTgBomw/4YgAIaSx2qyLFFgUEz0BuO5GyheChEpQj7f+xyqZfJ7 qKZvuaC83w47dIcb5+tNxOek1CvL/hwenAefElcC0kDIH1QZBes= -----END CERTIFICATE-----Generated at Wed Oct 28 11:50:46 2026 by rpki-client