$ rpki-client -vvvf rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft File: 9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft (raw, json) Hash identifier: V8DfUMHPECgT/JgesiPifVTDsbQYv2/el73ptXNYLA0= Subject key identifier: 44:56:9E:3E:AD:68:01:68:95:ED:E5:22:FD:8D:00:C9:17:46:64:5F Authority key identifier: 9B:61:7E:3E:89:75:C5:E8:37:FD:E8:E7:E3:A6:F7:F2:B0:7D:F2:FA Certificate issuer: /CN=9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA Certificate serial: 327FFB98346D015B4EE0DC07BD68DE2A495B3FB1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 14:05:43 +0000 Manifest this update: Wed 04 Nov 2026 14:00:43 +0000 Manifest next update: Thu 05 Nov 2026 17:55:43 +0000 Files and hashes: 1: 9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl (hash: QQDtLdTeZd+OUbY4rVxi/y9bGeXwZVXWBvmLCc1yZZs=) 2: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (hash: Y6VzFaG2FbyNdRwLMR4BvXhR1/TPWS0MIZ86oCceOfk=) 3: 3130332e34332e32352e302f32342d3234203d3e20313339343139.roa (hash: jbUXyMJGAUe8ArHS1H74yui1bmkFdiNku010i13gDLM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 17:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:7f:fb:98:34:6d:01:5b:4e:e0:dc:07:bd:68:de:2a:49:5b:3f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA Validity Not Before: Nov 4 14:00:43 2026 GMT Not After : Nov 5 17:55:43 2026 GMT Subject: CN=44569E3EAD68016895EDE522FD8D00C91746645F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:87:18:24:ec:60:64:9e:94:5b:8f:d3:1e:25: 72:b0:ae:46:1e:1a:9d:b1:bc:38:14:69:5a:13:e7: 36:f5:a0:af:db:75:d1:9d:46:8b:04:21:62:39:86: f3:2e:08:7f:43:c8:6c:8b:f9:5d:ae:ea:87:e4:d1: ff:61:50:eb:ae:19:f9:68:5b:89:59:9b:f8:99:a9: 5b:b5:b4:61:64:8a:49:3a:49:54:39:84:b1:cd:20: a3:ce:f8:f3:35:6f:25:76:18:3a:1e:a9:7c:0e:94: 48:b2:5e:97:5c:2b:c0:d7:99:ae:65:85:ce:63:61: 03:7c:37:14:9b:87:b2:e3:a4:b3:f6:15:c6:48:98: a6:f2:57:32:a9:4f:30:79:12:4e:b5:56:39:fd:91: 9a:e2:a3:e0:4d:7e:95:84:9a:ad:7a:b5:b2:6f:34: e0:a0:6c:da:e5:d3:6b:4a:d5:fc:2b:d4:80:f9:f9: 52:5e:ae:e4:e9:7b:35:bc:39:b3:bd:78:35:13:e9: ed:3a:7e:db:3a:67:fc:37:bb:a4:3f:33:d5:6a:db: 22:e8:a7:40:12:64:19:07:cc:fc:02:01:99:00:ed: 7a:36:42:a6:03:35:f8:33:23:ed:0e:f0:ca:63:ab: 85:b4:09:2f:0d:c2:57:d3:07:65:f7:bf:35:42:d5: 6b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:56:9E:3E:AD:68:01:68:95:ED:E5:22:FD:8D:00:C9:17:46:64:5F X509v3 Authority Key Identifier: keyid:9B:61:7E:3E:89:75:C5:E8:37:FD:E8:E7:E3:A6:F7:F2:B0:7D:F2:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:65:9b:cf:ce:d4:16:ce:fc:8a:dd:a8:d7:db:a2:d5:c5:26: cf:d2:a7:a1:a3:44:8c:5f:c7:73:2b:c1:e7:fb:ce:92:d2:0a: c4:f6:69:5d:3c:86:e1:51:ae:00:8e:b9:40:38:85:6f:c8:a6: 97:5f:ca:05:08:3c:14:ec:b8:84:7b:42:32:d1:c6:96:e5:9f: 15:bd:9a:a3:a5:04:8e:a0:6f:02:92:6f:02:6e:50:04:1a:ea: ef:b2:3a:48:10:10:8e:37:e3:b6:c6:29:85:7d:1f:b8:a7:f0: 20:d9:77:1a:10:6a:e5:ae:42:21:90:d9:fd:ab:83:6d:a5:59: 0c:72:0b:6a:0d:5d:9e:25:b6:04:ef:5c:b6:d8:67:07:5a:fa: c3:6a:d9:5f:86:6c:9d:59:3a:30:4e:a7:db:3e:ec:62:5d:9a: d7:ce:f6:e6:5c:d0:f4:91:ce:53:35:6a:6c:d4:58:2d:d3:4a: 01:ea:26:ac:3c:01:f6:e2:2f:26:a7:97:a7:8f:d1:b8:21:15: db:a3:b9:6a:8d:eb:22:c2:30:44:61:6c:0a:9b:7f:73:ff:2a: 65:7d:ed:65:81:1a:eb:e5:a4:37:67:cb:51:76:54:72:76:9e: d2:99:3c:ad:ae:ad:0d:ac:11:ad:13:2e:d0:20:86:74:e7:ba: a1:b2:31:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMn/7mDRtAVtO4NwHvWjeKklbP7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI2MTdFM0U4OTc1QzVFODM3RkRFOEU3RTNBNkY3RjJC MDdERjJGQTAeFw0yNjExMDQxNDAwNDNaFw0yNjExMDUxNzU1NDNaMDMxMTAvBgNV BAMTKDQ0NTY5RTNFQUQ2ODAxNjg5NUVERTUyMkZEOEQwMEM5MTc0NjY0NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCehxgk7GBknpRbj9MeJXKwrkYe Gp2xvDgUaVoT5zb1oK/bddGdRosEIWI5hvMuCH9DyGyL+V2u6ofk0f9hUOuuGflo W4lZm/iZqVu1tGFkikk6SVQ5hLHNIKPO+PM1byV2GDoeqXwOlEiyXpdcK8DXma5l hc5jYQN8NxSbh7LjpLP2FcZImKbyVzKpTzB5Ek61Vjn9kZrio+BNfpWEmq16tbJv NOCgbNrl02tK1fwr1ID5+VJeruTpezW8ObO9eDUT6e06fts6Z/w3u6Q/M9Vq2yLo p0ASZBkHzPwCAZkA7Xo2QqYDNfgzI+0O8Mpjq4W0CS8NwlfTB2X3vzVC1WubAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURFaePq1oAWiV7eUi/Y0AyRdGZF8wHwYDVR0j BBgwFoAUm2F+Pol1xeg3/ejn46b38rB98vowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDIwODNkNDQtNzgzNS00NDNkLTg1M2EtMGE3OWNmMDBlOTUwLzAvOUI2MTdFM0U4 OTc1QzVFODM3RkRFOEU3RTNBNkY3RjJCMDdERjJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QjYxN0UzRTg5NzVDNUU4MzdGREU4RTdFM0E2RjdGMkIwN0RG MkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDIwODNkNDQtNzgzNS00NDNkLTg1 M2EtMGE3OWNmMDBlOTUwLzAvOUI2MTdFM0U4OTc1QzVFODM3RkRFOEU3RTNBNkY3 RjJCMDdERjJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtlm8/O1BbO/IrdqNfbotXFJs/Sp6GjRIxf x3Mrwef7zpLSCsT2aV08huFRrgCOuUA4hW/IppdfygUIPBTsuIR7QjLRxpblnxW9 mqOlBI6gbwKSbwJuUAQa6u+yOkgQEI4347bGKYV9H7in8CDZdxoQauWuQiGQ2f2r g22lWQxyC2oNXZ4ltgTvXLbYZwda+sNq2V+GbJ1ZOjBOp9s+7GJdmtfO9uZc0PSR zlM1amzUWC3TSgHqJqw8AfbiLyanl6eP0bghFdujuWqN6yLCMERhbAqbf3P/KmV9 7WWBGuvlpDdny1F2VHJ2ntKZPK2urQ2sEa0TLtAghnTnuqGyMcA= -----END CERTIFICATE-----Generated at Thu Nov 5 05:23:27 2026 by rpki-client