$ rpki-client -vvvf rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft File: D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft (raw, json) Hash identifier: /Hisopb1lDLWd9NzIYfRK7AGpeq+YM1izUOZKBWCr1A= Subject key identifier: 3B:79:F8:91:A5:65:6C:98:82:A7:F5:6D:6B:72:77:2A:3C:73:F3:BA Authority key identifier: D9:E4:B9:E5:C2:0C:5D:24:54:5E:4B:37:44:B7:24:23:24:23:ED:B7 Certificate issuer: /CN=D9E4B9E5C20C5D24545E4B3744B724232423EDB7 Certificate serial: 3AE7B1D3B283AB34CCCA64689869538F8A51E308 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft Manifest number: F6 Signing time: Sun 01 Nov 2026 14:25:23 +0000 Manifest this update: Sun 01 Nov 2026 14:20:23 +0000 Manifest next update: Mon 02 Nov 2026 17:37:23 +0000 Files and hashes: 1: D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl (hash: iv0hDM+Z6C1iAIoCQjUhW9xGK3oStDkgdsnJCDUplkA=) 2: 3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa (hash: OK8J5tFKOjzZkYFlXmJIuP/RnOPH7Dha6p0ILyYgDYQ=) 3: 323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa (hash: cHfAqVSrYWCvGTjmxTN9VKckgkvEOepk7bQUQ5YDUTM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 17:37:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e7:b1:d3:b2:83:ab:34:cc:ca:64:68:98:69:53:8f:8a:51:e3:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9E4B9E5C20C5D24545E4B3744B724232423EDB7 Validity Not Before: Nov 1 14:20:23 2026 GMT Not After : Nov 2 17:37:23 2026 GMT Subject: CN=3B79F891A5656C9882A7F56D6B72772A3C73F3BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:64:ce:40:45:c2:94:a0:03:28:71:91:6c:1a: 6c:c1:50:a6:bc:32:1c:e7:35:1d:06:a8:45:f3:a9: a0:f5:d4:51:f8:33:02:a3:07:19:d2:2e:b1:10:a1: 49:19:68:0b:7c:2a:60:3a:51:4a:a3:72:fe:94:90: 36:d6:ac:49:a1:91:db:06:c7:3e:cf:7d:67:91:7e: 0c:7d:84:53:5d:01:d3:74:be:c3:3c:05:a6:a0:5e: 09:17:b1:26:5e:a5:bf:f7:17:61:48:fb:e7:93:7d: 38:f6:71:a9:5b:76:c6:78:e6:25:3e:1b:3b:52:0d: 9f:c5:71:a3:52:04:24:50:22:f3:bd:ae:59:5b:2e: ec:90:0d:80:9a:cd:15:8e:04:3b:04:c2:73:cd:a4: db:65:6c:f3:43:3c:fa:b5:dd:55:98:69:db:c3:cc: ba:2d:64:86:79:8a:49:f9:ce:12:2a:fb:41:5b:6e: ed:24:17:fc:93:ab:f6:a3:f0:93:ef:be:b3:d1:6b: c5:a8:e0:c6:67:62:00:83:cb:43:ee:4d:e4:d8:86: 8d:c8:f9:70:d1:9a:bc:b9:bc:6a:4a:6f:25:42:90: 9d:16:97:29:06:9b:f5:5a:6c:0f:ca:4b:18:62:71: f9:eb:00:f8:6f:cd:1d:d7:33:7a:e9:9f:e1:ee:4e: d4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:79:F8:91:A5:65:6C:98:82:A7:F5:6D:6B:72:77:2A:3C:73:F3:BA X509v3 Authority Key Identifier: keyid:D9:E4:B9:E5:C2:0C:5D:24:54:5E:4B:37:44:B7:24:23:24:23:ED:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:fd:33:7b:51:f2:3f:f3:ca:2c:a6:8d:9f:61:7f:bc:75:b1: d5:ba:fd:20:94:5e:19:27:3c:50:c0:fd:20:04:57:ef:ad:88: 67:70:45:24:99:e4:c9:9b:e8:c5:7f:4d:eb:3f:96:a8:99:b6: 76:0d:75:06:4d:b2:e7:96:f1:4a:e8:b6:df:ef:17:7d:45:cd: e5:5b:da:b0:24:f1:cd:fb:dd:13:b3:9b:82:fd:8b:41:ae:99: 24:f6:35:ea:71:d6:be:2f:68:a1:35:0d:e3:eb:83:0d:40:45: 68:ec:8b:d7:89:41:26:4d:41:aa:56:39:a7:7b:66:74:bf:4b: 3d:02:03:ac:04:81:6c:b7:e4:8d:9c:89:cb:d4:d4:92:44:8a: 8f:b2:39:4a:66:3c:ee:df:ac:80:14:b4:62:12:a6:b4:13:4d: ef:2d:ad:56:0d:ba:24:89:0a:6e:df:e6:92:6c:d5:3f:84:dc: 68:e1:b0:6f:ca:03:c3:a7:8b:f9:d0:38:bc:b1:39:5a:2b:73: 77:b4:e4:1e:54:83:27:a8:cc:cc:a6:bf:b9:a4:9d:1d:39:1b: d3:68:a8:25:65:9b:2b:e7:fa:2c:7b:03:e7:a9:41:86:1a:75: ae:9b:5f:8c:db:69:4b:9d:c6:ed:8f:f3:a5:f6:0f:ed:7a:ea: a9:05:1d:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOuex07KDqzTMymRomGlTj4pR4wgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFNEI5RTVDMjBDNUQyNDU0NUU0QjM3NDRCNzI0MjMy NDIzRURCNzAeFw0yNjExMDExNDIwMjNaFw0yNjExMDIxNzM3MjNaMDMxMTAvBgNV BAMTKDNCNzlGODkxQTU2NTZDOTg4MkE3RjU2RDZCNzI3NzJBM0M3M0YzQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZM5ARcKUoAMocZFsGmzBUKa8 MhznNR0GqEXzqaD11FH4MwKjBxnSLrEQoUkZaAt8KmA6UUqjcv6UkDbWrEmhkdsG xz7PfWeRfgx9hFNdAdN0vsM8BaagXgkXsSZepb/3F2FI++eTfTj2calbdsZ45iU+ GztSDZ/FcaNSBCRQIvO9rllbLuyQDYCazRWOBDsEwnPNpNtlbPNDPPq13VWYadvD zLotZIZ5ikn5zhIq+0Fbbu0kF/yTq/aj8JPvvrPRa8Wo4MZnYgCDy0PuTeTYho3I +XDRmry5vGpKbyVCkJ0WlykGm/VabA/KSxhicfnrAPhvzR3XM3rpn+HuTtRJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO3n4kaVlbJiCp/Vta3J3Kjxz87owHwYDVR0j BBgwFoAU2eS55cIMXSRUXks3RLckIyQj7bcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzBhMzkyZGMtMmU0ZS00NzcwLThmNjgtYmM2MWY4MGI3NGE3LzAvRDlFNEI5RTVD MjBDNUQyNDU0NUU0QjM3NDRCNzI0MjMyNDIzRURCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOUU0QjlFNUMyMEM1RDI0NTQ1RTRCMzc0NEI3MjQyMzI0MjNF REI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzBhMzkyZGMtMmU0ZS00NzcwLThm NjgtYmM2MWY4MGI3NGE3LzAvRDlFNEI5RTVDMjBDNUQyNDU0NUU0QjM3NDRCNzI0 MjMyNDIzRURCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKH9M3tR8j/zyiymjZ9hf7x1sdW6/SCUXhkn PFDA/SAEV++tiGdwRSSZ5Mmb6MV/Tes/lqiZtnYNdQZNsueW8Urott/vF31FzeVb 2rAk8c373ROzm4L9i0GumST2Nepx1r4vaKE1DePrgw1ARWjsi9eJQSZNQapWOad7 ZnS/Sz0CA6wEgWy35I2cicvU1JJEio+yOUpmPO7frIAUtGISprQTTe8trVYNuiSJ Cm7f5pJs1T+E3GjhsG/KA8Oni/nQOLyxOVorc3e05B5UgyeozMymv7mknR05G9No qCVlmyvn+ix7A+epQYYada6bX4zbaUudxu2P86X2D+166qkFHT4= -----END CERTIFICATE-----Generated at Mon Nov 2 05:55:34 2026 by rpki-client