$ rpki-client -vvvf rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft File: 9B2D9946FF043D1081C26FD38F0817310077BFC7.mft (raw, json) Hash identifier: 7JgDcfbtTLKoQvYjyV5MM4D6neKQsEiuPfsCLOu51x4= Subject key identifier: AB:BC:C0:61:EF:4D:91:B3:29:B6:A7:0B:B3:24:00:73:17:38:D5:32 Authority key identifier: 9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7 Certificate issuer: /CN=9B2D9946FF043D1081C26FD38F0817310077BFC7 Certificate serial: 1F8C7521E20D34D46382F5859FE49A7568B9B9C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 14:26:04 +0000 Manifest this update: Mon 02 Nov 2026 14:21:04 +0000 Manifest next update: Tue 03 Nov 2026 16:45:04 +0000 Files and hashes: 1: 3136302e32322e39322e302f32342d3234203d3e20313532383335.roa (hash: oePR/73r7MSIzHQUks2lMsK7CVUF0CNaDFGyG/xqYVQ=) 2: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (hash: nWvsjEg3FhCbHhiH6HxunuDCxB9lgrvkKOpoSSa7E9Q=) 3: 9B2D9946FF043D1081C26FD38F0817310077BFC7.crl (hash: RaOwT5AK2+ObKoKIdIRubibE6qRrgeLqc122MmUPxAw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.crl rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:8c:75:21:e2:0d:34:d4:63:82:f5:85:9f:e4:9a:75:68:b9:b9:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2D9946FF043D1081C26FD38F0817310077BFC7 Validity Not Before: Nov 2 14:21:04 2026 GMT Not After : Nov 3 16:45:04 2026 GMT Subject: CN=ABBCC061EF4D91B329B6A70BB32400731738D532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ed:1f:b0:c7:e3:da:54:50:69:62:d8:e5:39: 04:3b:eb:8b:62:05:8d:e6:58:a4:29:d7:ac:ca:48: 36:4c:32:85:90:04:d0:2f:22:34:92:1d:da:a0:09: b9:9c:cd:27:9e:0a:39:b1:8d:f0:3c:bd:2b:1c:8d: df:b4:30:6d:cf:23:65:0c:8b:4d:87:d9:ed:8d:85: 23:5f:fe:54:a2:dd:e0:a2:57:cf:bb:6f:1c:d5:c3: d9:e1:c0:b5:49:1b:2d:3c:70:34:fc:c8:d0:0c:d8: 64:05:cb:05:06:3c:27:59:fc:a5:73:95:68:77:4b: 54:42:d4:9e:52:f8:da:c4:ad:0f:e8:cf:7e:93:62: b2:c0:a5:e3:47:70:c1:03:92:ee:a9:0c:be:16:42: 3e:79:5d:88:db:78:07:ff:47:41:18:77:a3:28:62: 58:e3:88:6c:25:cf:4e:93:b3:7c:49:4a:f4:28:b6: 46:c2:3e:d9:d9:fa:19:3a:12:da:64:75:14:54:52: 8f:a6:25:d1:a7:af:b9:94:83:9b:10:ae:b7:1c:81: c3:24:87:e4:aa:7f:ef:a1:23:35:05:47:eb:c5:c7: 03:8d:48:1e:bb:f3:12:bb:4f:f9:b2:a1:10:2e:f8: 9c:0f:b9:38:c8:80:4e:63:d9:b1:5e:bf:30:61:c3: da:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BC:C0:61:EF:4D:91:B3:29:B6:A7:0B:B3:24:00:73:17:38:D5:32 X509v3 Authority Key Identifier: keyid:9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:8c:5f:a2:f9:16:25:d8:23:d2:0e:47:a0:3c:52:e9:85:d7: 40:a6:a8:cd:d9:f9:cb:0f:66:25:ee:fd:fc:df:6e:1d:7b:2b: cb:0c:3f:73:3a:82:56:99:3f:69:d0:0a:9c:20:cf:66:12:b4: 34:28:cc:b4:3a:d4:14:e6:c5:30:d4:66:f1:f2:1c:37:17:12: bf:81:fd:e2:f4:14:ab:fc:b5:41:17:b8:8f:c3:a3:98:a5:bd: 14:26:ac:9b:45:81:5e:79:1b:87:cf:8f:df:e5:a9:73:eb:c0: fe:46:c7:8e:d0:f5:11:d5:2d:9c:18:01:1f:fe:1e:2d:b7:db: 69:a4:74:57:ac:4d:47:a3:56:c9:74:6c:96:7b:3a:f7:56:29: 7e:53:d7:98:ef:85:e5:dc:e5:c7:13:af:5b:db:f1:51:f2:20: 85:e1:ee:85:bc:4f:3e:e1:70:cc:ed:e9:6d:46:68:74:62:7c: 12:94:72:0f:19:e4:9e:6d:02:45:ea:08:6d:f3:4a:2f:be:9a: 94:aa:4e:6c:ef:3d:c8:70:fe:14:f0:f6:07:cc:c9:d7:b0:19: 33:f7:9c:a8:3d:2f:ac:c4:e5:d3:79:0a:d3:1b:49:43:46:aa: 03:a7:be:ff:cd:ff:f1:7e:34:74:06:fe:24:b0:2f:9f:88:8f: 31:2f:b1:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH4x1IeINNNRjgvWFn+SadWi5ucUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyRDk5NDZGRjA0M0QxMDgxQzI2RkQzOEYwODE3MzEw MDc3QkZDNzAeFw0yNjExMDIxNDIxMDRaFw0yNjExMDMxNjQ1MDRaMDMxMTAvBgNV BAMTKEFCQkNDMDYxRUY0RDkxQjMyOUI2QTcwQkIzMjQwMDczMTczOEQ1MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb7R+wx+PaVFBpYtjlOQQ764ti BY3mWKQp16zKSDZMMoWQBNAvIjSSHdqgCbmczSeeCjmxjfA8vSscjd+0MG3PI2UM i02H2e2NhSNf/lSi3eCiV8+7bxzVw9nhwLVJGy08cDT8yNAM2GQFywUGPCdZ/KVz lWh3S1RC1J5S+NrErQ/oz36TYrLApeNHcMEDku6pDL4WQj55XYjbeAf/R0EYd6Mo YljjiGwlz06Ts3xJSvQotkbCPtnZ+hk6EtpkdRRUUo+mJdGnr7mUg5sQrrccgcMk h+Sqf++hIzUFR+vFxwONSB678xK7T/myoRAu+JwPuTjIgE5j2bFevzBhw9qNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq7zAYe9NkbMptqcLsyQAcxc41TIwHwYDVR0j BBgwFoAUmy2ZRv8EPRCBwm/TjwgXMQB3v8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJkMjliMzItM2EyOS00YTE0LWJjOWItYzc2YTAwN2NhMDMyLzAvOUIyRDk5NDZG RjA0M0QxMDgxQzI2RkQzOEYwODE3MzEwMDc3QkZDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85QjJEOTk0NkZGMDQzRDEwODFDMjZGRDM4RjA4MTczMTAwNzdC RkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJkMjliMzItM2EyOS00YTE0LWJj OWItYzc2YTAwN2NhMDMyLzAvOUIyRDk5NDZGRjA0M0QxMDgxQzI2RkQzOEYwODE3 MzEwMDc3QkZDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOKMX6L5FiXYI9IOR6A8UumF10CmqM3Z+csP ZiXu/fzfbh17K8sMP3M6glaZP2nQCpwgz2YStDQozLQ61BTmxTDUZvHyHDcXEr+B /eL0FKv8tUEXuI/Do5ilvRQmrJtFgV55G4fPj9/lqXPrwP5Gx47Q9RHVLZwYAR/+ Hi2322mkdFesTUejVsl0bJZ7OvdWKX5T15jvheXc5ccTr1vb8VHyIIXh7oW8Tz7h cMzt6W1GaHRifBKUcg8Z5J5tAkXqCG3zSi++mpSqTmzvPchw/hTw9gfMydewGTP3 nKg9L6zE5dN5CtMbSUNGqgOnvv/N//F+NHQG/iSwL5+IjzEvsTw= -----END CERTIFICATE-----Generated at Mon Nov 2 21:13:24 2026 by rpki-client