$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft File: 9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft (raw, json) Hash identifier: QJC6GA8YstwZREYVIwMpfoBHD0qBk1vf1YHSI/gahBo= Subject key identifier: F3:AD:61:EA:E6:4D:24:1C:38:61:78:B3:0F:E4:F0:7B:0F:7B:AF:10 Authority key identifier: 9B:AA:D5:D1:F3:6F:59:43:A3:5A:6E:E8:00:1A:5E:5F:C2:4D:9B:1E Certificate issuer: /CN=9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E Certificate serial: 20C0A21EFEA54212727FB73DD0CF79CE48491372 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 21:24:24 +0000 Manifest this update: Tue 03 Nov 2026 21:19:24 +0000 Manifest next update: Thu 05 Nov 2026 00:08:24 +0000 Files and hashes: 1: 33362e35302e39362e302f32342d3234203d3e20313532333536.roa (hash: WdJUD9VymB093sIE0zYyqec++4X5oG27MXfWK367p8g=) 2: 9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl (hash: DK0Qvd8iuiMEaNvt3CsSVnexecGsd7p7tjbI/Be3hOc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 00:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c0:a2:1e:fe:a5:42:12:72:7f:b7:3d:d0:cf:79:ce:48:49:13:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E Validity Not Before: Nov 3 21:19:24 2026 GMT Not After : Nov 5 00:08:24 2026 GMT Subject: CN=F3AD61EAE64D241C386178B30FE4F07B0F7BAF10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:84:76:f3:70:54:3d:7a:c5:c8:2a:4e:61:aa: b9:4a:fa:7c:67:6b:36:51:6a:7a:37:c6:08:44:db: a8:7f:aa:12:a3:77:ec:21:ba:ae:67:a6:8b:74:b9: 05:b6:dd:7e:0b:64:cf:61:3d:15:d6:12:46:01:78: b8:99:69:88:93:e7:f3:f4:e3:41:1c:b9:5e:14:69: e1:03:ba:81:ad:33:da:70:00:e2:65:a5:c5:0a:d0: 20:be:16:98:c1:bc:6c:f7:6e:61:6d:d3:1d:49:49: bf:fc:bf:e3:2d:7b:f6:e8:c9:74:eb:67:13:16:8b: a2:04:f0:10:81:95:fd:c9:0d:96:8f:f6:f8:99:01: 94:9d:5e:7c:12:0f:7f:0f:cc:5d:55:cd:81:2e:5b: cc:eb:31:fd:f5:75:dc:7a:bc:9a:f7:91:95:7a:18: a5:cf:39:ed:cc:f7:7d:c4:75:60:25:79:6f:93:b4: 63:9f:91:6e:00:08:bd:21:fc:d2:01:e8:89:5c:8c: e1:39:dd:f9:f0:84:6c:88:64:f9:66:97:6b:37:e3: de:08:c4:43:1c:5a:8e:f1:f1:6e:6c:7d:22:74:a1: 7c:e3:a5:d7:2b:6f:ed:82:b7:44:97:8a:92:34:6d: 62:3a:9f:9d:0f:1d:2e:ca:39:7a:97:95:8a:07:bb: 76:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AD:61:EA:E6:4D:24:1C:38:61:78:B3:0F:E4:F0:7B:0F:7B:AF:10 X509v3 Authority Key Identifier: keyid:9B:AA:D5:D1:F3:6F:59:43:A3:5A:6E:E8:00:1A:5E:5F:C2:4D:9B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:66:4d:1e:70:a5:8d:b9:84:d3:e4:68:2c:1a:3e:4e:f9:6b: 8b:1a:33:35:13:43:45:88:84:78:e2:13:47:5c:9c:19:eb:63: c7:a9:40:b2:12:e2:1b:e3:53:74:b4:05:f0:5d:ed:9b:a4:9a: 94:14:8b:73:0b:99:9e:73:62:9d:ae:95:98:eb:60:4d:51:6c: 7b:09:5b:28:27:d3:ac:a9:c8:25:e6:d8:c0:63:36:96:e5:9f: 42:31:17:c8:d2:b2:71:55:fd:2e:24:0e:9b:c7:a7:70:cb:98: 6d:61:15:fe:a5:6b:18:be:59:48:8d:90:37:0d:1d:f6:3d:cb: c1:d2:82:77:40:49:79:45:82:e7:cb:bb:e4:aa:96:c5:fa:a2: 95:cc:2c:99:f3:59:43:fe:8b:ee:8f:1a:95:20:24:e8:cb:96: 8c:2a:8b:dd:e1:c4:68:8d:64:03:ef:0b:85:24:8e:11:7d:ab: 40:e3:da:40:a6:ad:3e:fd:e7:3c:ba:aa:9b:ca:70:ef:14:01: 0c:06:6e:5c:4e:78:3b:ea:8a:bb:04:b0:09:bd:d8:3c:11:d9: 20:0e:48:34:1c:46:13:0c:2e:f5:0f:b0:6d:fe:56:08:87:13: 94:8e:c4:1c:b0:a0:a3:8a:44:14:c1:7d:43:03:99:23:96:34: 53:12:63:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMCiHv6lQhJyf7c90M95zkhJE3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJBQUQ1RDFGMzZGNTk0M0EzNUE2RUU4MDAxQTVFNUZD MjREOUIxRTAeFw0yNjExMDMyMTE5MjRaFw0yNjExMDUwMDA4MjRaMDMxMTAvBgNV BAMTKEYzQUQ2MUVBRTY0RDI0MUMzODYxNzhCMzBGRTRGMDdCMEY3QkFGMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKhHbzcFQ9esXIKk5hqrlK+nxn azZRano3xghE26h/qhKjd+whuq5npot0uQW23X4LZM9hPRXWEkYBeLiZaYiT5/P0 40EcuV4UaeEDuoGtM9pwAOJlpcUK0CC+FpjBvGz3bmFt0x1JSb/8v+Mte/boyXTr ZxMWi6IE8BCBlf3JDZaP9viZAZSdXnwSD38PzF1VzYEuW8zrMf31ddx6vJr3kZV6 GKXPOe3M933EdWAleW+TtGOfkW4ACL0h/NIB6IlcjOE53fnwhGyIZPlml2s3494I xEMcWo7x8W5sfSJ0oXzjpdcrb+2Ct0SXipI0bWI6n50PHS7KOXqXlYoHu3aFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU861h6uZNJBw4YXizD+Twew97rxAwHwYDVR0j BBgwFoAUm6rV0fNvWUOjWm7oABpeX8JNmx4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ5MGQ4NmItMGIwZC00NTZmLTg0MWEtYmZkYjlkODA3ZmI3LzAvOUJBQUQ1RDFG MzZGNTk0M0EzNUE2RUU4MDAxQTVFNUZDMjREOUIxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkFBRDVEMUYzNkY1OTQzQTM1QTZFRTgwMDFBNUU1RkMyNEQ5 QjFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ5MGQ4NmItMGIwZC00NTZmLTg0 MWEtYmZkYjlkODA3ZmI3LzAvOUJBQUQ1RDFGMzZGNTk0M0EzNUE2RUU4MDAxQTVF NUZDMjREOUIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANmTR5wpY25hNPkaCwaPk75a4saMzUTQ0WI hHjiE0dcnBnrY8epQLIS4hvjU3S0BfBd7ZukmpQUi3MLmZ5zYp2ulZjrYE1RbHsJ Wygn06ypyCXm2MBjNpbln0IxF8jSsnFV/S4kDpvHp3DLmG1hFf6laxi+WUiNkDcN HfY9y8HSgndASXlFgufLu+SqlsX6opXMLJnzWUP+i+6PGpUgJOjLlowqi93hxGiN ZAPvC4UkjhF9q0Dj2kCmrT795zy6qpvKcO8UAQwGblxOeDvqirsEsAm92DwR2SAO SDQcRhMMLvUPsG3+VgiHE5SOxBywoKOKRBTBfUMDmSOWNFMSY7w= -----END CERTIFICATE-----Generated at Wed Nov 4 17:04:04 2026 by rpki-client