$ rpki-client -vvvf rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft File: A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft (raw, json) Hash identifier: b77qraaaB1DODYBah/tBrSXFEtOIyhdMK1s203781Yc= Subject key identifier: 18:19:3A:6B:AA:90:3D:DC:F7:0E:7B:09:36:BE:6F:26:1C:3E:71:0B Authority key identifier: A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F Certificate issuer: /CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F Certificate serial: 56D6FC606556838BFD0DFFBA067CAA294F5FAAE9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 16:43:48 +0000 Manifest this update: Mon 02 Nov 2026 16:38:48 +0000 Manifest next update: Tue 03 Nov 2026 20:40:48 +0000 Files and hashes: 1: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: lknjz+xGrn74yDQTZoQhv/KjNKL2zVYWd4Swco59gWA=) 2: A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl (hash: Zdn2u1V00NCPTkckaz9eBRJUwXjqxhV4xA6y8hNzBg8=) 3: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: mTSHlFZAxZWWAKZzsiMuSqeFq/VKg23JR+BpuxRfCT8=) 4: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: Il2995+O34HRt5QUYak7wmOSE/xt1UwsadzXH7aEOYo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d6:fc:60:65:56:83:8b:fd:0d:ff:ba:06:7c:aa:29:4f:5f:aa:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F Validity Not Before: Nov 2 16:38:48 2026 GMT Not After : Nov 3 20:40:48 2026 GMT Subject: CN=18193A6BAA903DDCF70E7B0936BE6F261C3E710B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4e:26:ad:6c:46:8e:af:6f:ad:dd:02:23:32: 7d:81:2d:ae:80:5e:24:de:2a:00:6f:97:f5:f4:b3: d2:54:87:fd:62:c4:f9:74:ff:aa:65:a7:66:b2:13: 55:3d:4e:0d:a5:ad:db:94:6d:b1:f8:a8:51:75:5d: 89:e4:d5:3f:6b:af:71:57:cd:6d:4d:79:15:3c:28: 27:28:66:ea:da:fa:62:b7:86:f6:db:bc:d1:86:a4: ae:43:19:4b:ba:2b:e4:63:4c:78:aa:85:43:a7:46: b1:6a:ca:6f:ca:2d:e6:f1:4b:d4:26:a5:f1:71:a3: 8c:40:09:2f:ce:fb:8f:0b:a7:a1:18:fc:1a:50:99: f4:ca:59:38:1a:bd:35:a0:7d:67:36:76:25:c6:71: f7:8b:dd:8c:9f:a9:72:59:e6:85:2f:cc:81:c6:89: 6c:bf:6b:e6:4e:f4:2a:56:2b:a6:68:04:36:d3:29: 33:7e:6c:95:6a:ef:72:cc:81:f7:85:ec:e7:72:cc: 03:1c:24:44:e9:57:ad:be:10:38:52:fe:df:55:5e: 72:e8:e7:0a:db:47:b5:10:05:49:a0:8d:07:50:9a: c0:f1:cb:dd:32:7c:ae:08:c4:18:71:68:df:bf:8b: 52:a6:0f:24:89:4a:5b:61:cf:18:81:fa:8d:56:58: a5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:19:3A:6B:AA:90:3D:DC:F7:0E:7B:09:36:BE:6F:26:1C:3E:71:0B X509v3 Authority Key Identifier: keyid:A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:21:99:5e:88:36:5e:de:d7:5c:4c:d5:6f:5d:bf:85:3c:33: 6e:1c:df:0d:a0:74:ce:68:09:34:2f:8e:8f:43:20:22:3a:82: ee:db:61:c0:66:09:4a:b9:96:fb:5b:c5:56:a9:3c:9a:fa:f9: d3:22:1a:07:6e:b7:60:38:d1:53:6a:87:59:37:4a:69:e9:f4: 13:eb:77:35:86:1c:2a:e2:76:25:38:93:98:b9:2e:45:56:c4: a8:fb:c2:e0:3a:5c:3f:82:44:1a:77:05:1a:13:a9:57:c1:a2: fe:12:db:79:1a:df:03:3b:40:25:38:2d:a0:ba:6e:9e:7a:40: 02:83:63:dd:23:0e:76:9a:94:6f:64:c9:2b:71:62:13:ea:c8: 16:13:5e:2b:12:35:33:7b:49:ab:c4:04:3c:10:dc:27:38:36: 39:ec:80:8c:10:6c:28:92:75:a4:28:45:45:c9:71:b6:54:de: ba:f3:66:13:92:b1:78:54:6e:e5:71:f7:12:9f:eb:3c:e0:5d: e5:62:4f:ec:98:f1:ff:ac:4b:4c:be:61:b0:58:63:9e:8e:f9: 69:81:50:04:87:af:6d:02:7a:36:18:ab:b0:fc:5c:69:3f:b1: e6:55:fd:92:2e:30:73:2c:2e:6c:8f:85:a0:a3:7f:d1:8b:3a: 62:a1:a5:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVtb8YGVWg4v9Df+6BnyqKU9fqukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOEQyQzQ1RDgyMEMxRkM0MEJDRjAzQjlCMTA2OTk5 OTJEOEIyRjAeFw0yNjExMDIxNjM4NDhaFw0yNjExMDMyMDQwNDhaMDMxMTAvBgNV BAMTKDE4MTkzQTZCQUE5MDNERENGNzBFN0IwOTM2QkU2RjI2MUMzRTcxMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuTiatbEaOr2+t3QIjMn2BLa6A XiTeKgBvl/X0s9JUh/1ixPl0/6plp2ayE1U9Tg2lrduUbbH4qFF1XYnk1T9rr3FX zW1NeRU8KCcoZura+mK3hvbbvNGGpK5DGUu6K+RjTHiqhUOnRrFqym/KLebxS9Qm pfFxo4xACS/O+48Lp6EY/BpQmfTKWTgavTWgfWc2diXGcfeL3YyfqXJZ5oUvzIHG iWy/a+ZO9CpWK6ZoBDbTKTN+bJVq73LMgfeF7OdyzAMcJETpV62+EDhS/t9VXnLo 5wrbR7UQBUmgjQdQmsDxy90yfK4IxBhxaN+/i1KmDySJSlthzxiB+o1WWKVfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGBk6a6qQPdz3DnsJNr5vJhw+cQswHwYDVR0j BBgwFoAUqejSxF2CDB/EC88DubEGmZktiy8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDgxZDU0Y2ItNTdhOS00YTE2LWE3MGUtYzVmNjAyNGUxMzlkLzAvQTlFOEQyQzQ1 RDgyMEMxRkM0MEJDRjAzQjlCMTA2OTk5OTJEOEIyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BOUU4RDJDNDVEODIwQzFGQzQwQkNGMDNCOUIxMDY5OTk5MkQ4 QjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQTlFOEQyQzQ1RDgyMEMxRkM0MEJDRjAzQjlCMTA2 OTk5OTJEOEIyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQhmV6INl7e11xM1W9dv4U8M24c3w2gdM5o CTQvjo9DICI6gu7bYcBmCUq5lvtbxVapPJr6+dMiGgdut2A40VNqh1k3Smnp9BPr dzWGHCridiU4k5i5LkVWxKj7wuA6XD+CRBp3BRoTqVfBov4S23ka3wM7QCU4LaC6 bp56QAKDY90jDnaalG9kyStxYhPqyBYTXisSNTN7SavEBDwQ3Cc4NjnsgIwQbCiS daQoRUXJcbZU3rrzZhOSsXhUbuVx9xKf6zzgXeViT+yY8f+sS0y+YbBYY56O+WmB UASHr20CejYYq7D8XGk/seZV/ZIuMHMsLmyPhaCjf9GLOmKhpcg= -----END CERTIFICATE-----Generated at Mon Nov 2 22:32:55 2026 by rpki-client