$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft File: 9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft (raw, json) Hash identifier: RjOAEDqtkX3nrJEf3PmOIlF+YG+SHmFIII70Ll+ivoU= Subject key identifier: DD:E2:A2:EB:7D:74:C4:86:FA:10:B4:3A:D7:45:B2:89:F0:F4:10:90 Authority key identifier: 9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13 Certificate issuer: /CN=9A347241E9DA18B0BB748E5558F85DFA6AD14F13 Certificate serial: 55F9A46CF390CD26CA72BAD7BB17C469067695EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 20:12:47 +0000 Manifest this update: Tue 03 Nov 2026 20:07:47 +0000 Manifest next update: Wed 04 Nov 2026 20:20:47 +0000 Files and hashes: 1: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: wInMUXHOP8RJI5eoz/+Dc4x331OyQaS/P4AI/7E+Chw=) 2: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: vdwdHoa0dxzBT4qxWDgRcyQiniSgsgBOI6Tm2dJ4lDY=) 3: 9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl (hash: R6A7kp07nMTxFl6KO/JrN1piRtOOpIAEUF3IblxyrMg=) 4: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: PjTS4Hn+0nQcRzsQo6Ms0LRYKKTZlFXIqpYw+ixRnkk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 20:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:f9:a4:6c:f3:90:cd:26:ca:72:ba:d7:bb:17:c4:69:06:76:95:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A347241E9DA18B0BB748E5558F85DFA6AD14F13 Validity Not Before: Nov 3 20:07:47 2026 GMT Not After : Nov 4 20:20:47 2026 GMT Subject: CN=DDE2A2EB7D74C486FA10B43AD745B289F0F41090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:a5:98:3e:2f:08:28:eb:c0:68:af:c3:bb: 22:70:63:50:82:61:d7:a6:33:50:bc:75:57:b3:2c: c3:32:0d:f0:05:7f:06:5d:bb:63:f7:a9:9c:aa:fd: 0c:86:f9:18:ad:19:43:a3:c1:d4:45:7e:bc:40:92: 3f:b9:e4:a0:75:d0:95:50:bb:ba:ce:f2:ce:7e:ce: f2:4b:cd:22:48:48:84:15:05:27:c6:b6:fe:44:d7: 95:4f:53:8e:e1:2d:85:4a:03:77:d5:d8:2d:89:7c: 18:49:af:b7:28:45:fa:5b:99:b0:d4:1c:9b:70:99: 8b:08:63:fd:6c:f0:85:23:4b:0b:f4:ce:b3:36:0c: cb:84:67:a3:fb:ec:aa:be:81:8f:a2:0d:31:f3:a7: bf:5d:c1:a2:e2:83:82:8b:91:0f:9c:85:bd:d2:35: 80:21:f0:e1:ff:12:b9:17:25:1a:08:4a:ef:86:72: 20:3c:3f:76:c3:8a:3e:ad:0b:b8:f1:f9:1a:58:64: d8:d5:ee:05:ff:fb:50:80:4b:0a:47:eb:f2:24:ee: 74:41:f6:b6:6d:25:94:57:71:66:ab:76:9d:90:7c: 95:84:16:42:e0:3b:43:f3:d2:7e:7b:2c:b7:20:5f: a4:92:63:3c:42:fb:2e:c7:13:70:f4:f7:f6:d6:69: f5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E2:A2:EB:7D:74:C4:86:FA:10:B4:3A:D7:45:B2:89:F0:F4:10:90 X509v3 Authority Key Identifier: keyid:9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:20:da:62:2d:8f:a2:b8:42:1b:27:89:e6:28:fb:13:a4:bf: 37:43:b7:4f:b4:ac:46:1b:e9:92:a3:35:97:23:f1:e0:2e:7e: 61:3d:86:46:1e:fd:30:f4:b6:b9:4e:97:8f:aa:be:ca:4d:ed: 2d:63:eb:cd:3b:8f:2c:76:76:23:61:26:8c:40:e3:43:0c:b7: 6e:8f:3c:f0:0e:17:58:4e:1e:39:d4:2a:ba:4d:6d:23:52:3a: 0d:44:f5:5f:27:01:bd:a1:4e:cd:4a:88:35:c3:82:3b:ce:8f: 0a:2e:e1:fd:95:2b:ce:80:da:29:34:b1:a3:7f:66:d4:a5:b2: 00:c8:9d:7e:f7:38:c4:03:5b:05:14:e5:40:b9:a2:37:30:cd: a1:3c:18:a9:3f:bc:e8:8d:7c:66:ba:04:9c:7b:4f:42:b2:28: 04:d3:59:c3:81:e5:8b:81:d9:38:2c:e8:06:84:25:d8:5b:53: a9:a1:fd:40:08:57:cd:5e:9f:60:d8:c4:2f:99:59:8e:a1:6c: 02:0d:ef:b5:ba:05:91:7a:4f:56:10:ea:59:5e:50:8d:8c:30: 9e:8f:b8:97:8a:b6:1d:c7:f9:04:2a:4b:6d:b3:78:4d:ce:d8: b0:4f:51:ba:d3:3e:77:3b:87:b3:af:bf:0b:cb:7a:b4:00:56: bb:c6:0d:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVfmkbPOQzSbKcrrXuxfEaQZ2lewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEzNDcyNDFFOURBMThCMEJCNzQ4RTU1NThGODVERkE2 QUQxNEYxMzAeFw0yNjExMDMyMDA3NDdaFw0yNjExMDQyMDIwNDdaMDMxMTAvBgNV BAMTKERERTJBMkVCN0Q3NEM0ODZGQTEwQjQzQUQ3NDVCMjg5RjBGNDEwOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0eaWYPi8IKOvAaK/DuyJwY1CC YdemM1C8dVezLMMyDfAFfwZdu2P3qZyq/QyG+RitGUOjwdRFfrxAkj+55KB10JVQ u7rO8s5+zvJLzSJISIQVBSfGtv5E15VPU47hLYVKA3fV2C2JfBhJr7coRfpbmbDU HJtwmYsIY/1s8IUjSwv0zrM2DMuEZ6P77Kq+gY+iDTHzp79dwaLig4KLkQ+chb3S NYAh8OH/ErkXJRoISu+GciA8P3bDij6tC7jx+RpYZNjV7gX/+1CASwpH6/Ik7nRB 9rZtJZRXcWardp2QfJWEFkLgO0Pz0n57LLcgX6SSYzxC+y7HE3D09/bWafWnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3eKi6310xIb6ELQ610WyifD0EJAwHwYDVR0j BBgwFoAUmjRyQenaGLC7dI5VWPhd+mrRTxMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NkZDU3NzQtMzBkZC00YTAwLWIxYTktOWIxMjgyNjkzMGMyLzAvOUEzNDcyNDFF OURBMThCMEJCNzQ4RTU1NThGODVERkE2QUQxNEYxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTM0NzI0MUU5REExOEIwQkI3NDhFNTU1OEY4NURGQTZBRDE0 RjEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NkZDU3NzQtMzBkZC00YTAwLWIx YTktOWIxMjgyNjkzMGMyLzAvOUEzNDcyNDFFOURBMThCMEJCNzQ4RTU1NThGODVE RkE2QUQxNEYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADog2mItj6K4QhsnieYo+xOkvzdDt0+0rEYb 6ZKjNZcj8eAufmE9hkYe/TD0trlOl4+qvspN7S1j6807jyx2diNhJoxA40MMt26P PPAOF1hOHjnUKrpNbSNSOg1E9V8nAb2hTs1KiDXDgjvOjwou4f2VK86A2ik0saN/ ZtSlsgDInX73OMQDWwUU5UC5ojcwzaE8GKk/vOiNfGa6BJx7T0KyKATTWcOB5YuB 2Tgs6AaEJdhbU6mh/UAIV81en2DYxC+ZWY6hbAIN77W6BZF6T1YQ6lleUI2MMJ6P uJeKth3H+QQqS22zeE3O2LBPUbrTPnc7h7OvvwvLerQAVrvGDWc= -----END CERTIFICATE-----Generated at Wed Nov 4 11:03:22 2026 by rpki-client