$ rpki-client -vvvf rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft File: 9E6973F078195021DC7E37753A16BDC3BD2CE345.mft (raw, json) Hash identifier: 0jhPsv7G2ZnDHINZTyq2+UMFX3iS6Bzk/imQJtO/UCM= Subject key identifier: 16:A3:A1:17:18:68:6C:AC:14:9D:0E:83:70:C8:BA:DE:73:FA:A2:C1 Authority key identifier: 9E:69:73:F0:78:19:50:21:DC:7E:37:75:3A:16:BD:C3:BD:2C:E3:45 Certificate issuer: /CN=9E6973F078195021DC7E37753A16BDC3BD2CE345 Certificate serial: 5F09F3AB7030F262F1096CD136148C469796B7D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 10:31:20 +0000 Manifest this update: Wed 04 Nov 2026 10:26:20 +0000 Manifest next update: Thu 05 Nov 2026 10:45:20 +0000 Files and hashes: 1: 9E6973F078195021DC7E37753A16BDC3BD2CE345.crl (hash: AuFjOYbZ4WG1K36I5Q7sv1nlu7gKM/UDpOfheQuzZc4=) 2: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: rDhWNdSE+MiC9nWV9xic84xxhEExen6QKYzm8hSRAZY=) 3: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: 70nvBnU+j3RyzkTv1EtBoPc4XFT8NOWYE+TEopumrFA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.crl rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 10:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:09:f3:ab:70:30:f2:62:f1:09:6c:d1:36:14:8c:46:97:96:b7:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6973F078195021DC7E37753A16BDC3BD2CE345 Validity Not Before: Nov 4 10:26:20 2026 GMT Not After : Nov 5 10:45:20 2026 GMT Subject: CN=16A3A11718686CAC149D0E8370C8BADE73FAA2C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:69:3c:2a:5e:eb:6c:15:1f:55:b9:a2:67:4d: 9e:31:3e:27:37:77:76:58:5a:ef:c3:b9:66:50:99: d5:7e:9b:33:44:35:7a:3d:5a:15:aa:95:1c:84:b4: 29:2e:53:fe:3d:48:92:93:57:5a:be:3b:dd:82:72: db:f6:b8:a1:d5:07:4f:1f:d0:fd:16:d8:2b:24:fa: 61:fd:95:4a:1e:50:ce:5b:04:ef:f1:6a:76:31:41: 59:6b:f7:27:87:99:b6:f2:09:9b:73:36:ae:4e:58: 6e:f3:c8:98:f6:7f:4c:a5:4a:71:d2:37:e9:40:a9: e2:ab:0a:ae:f3:81:b9:9b:bd:83:eb:6f:5b:ca:9c: be:d2:2e:79:9b:de:c6:55:79:4f:43:62:e6:be:87: b7:d2:f1:c2:4d:d0:2d:47:77:d3:40:30:f6:cb:c8: 5d:d5:89:f6:b4:0a:11:0f:7b:23:b7:40:6c:50:86: 2b:f5:57:ea:64:60:e1:aa:35:b4:d4:9c:83:ef:61: ce:63:1e:ad:09:a6:f9:4c:1e:70:a0:16:d7:94:c6: 81:2c:3f:83:31:c0:bf:22:a4:eb:8a:65:7d:18:83: e5:a2:8a:6e:69:79:ff:44:76:f5:7e:a1:68:b4:01: 73:06:04:7d:59:6f:2a:4a:ed:c4:17:76:59:59:4c: 52:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A3:A1:17:18:68:6C:AC:14:9D:0E:83:70:C8:BA:DE:73:FA:A2:C1 X509v3 Authority Key Identifier: keyid:9E:69:73:F0:78:19:50:21:DC:7E:37:75:3A:16:BD:C3:BD:2C:E3:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:4d:7a:54:ad:f5:de:32:08:b2:a2:e3:23:d5:a7:67:dc:a0: 26:39:b5:96:7d:a0:27:3e:a9:26:a2:be:07:b8:16:04:e6:0c: 38:b7:78:b7:b1:7b:73:27:a9:2f:1c:d7:f5:7c:3d:65:c9:6b: a9:02:52:f1:22:47:b2:68:51:6f:bf:49:0f:e9:31:6c:5b:ae: 1a:77:56:5b:54:01:3c:83:89:b4:e3:a2:a5:69:ba:a3:d3:08: 5d:c2:a6:80:f9:fd:7c:81:2c:1d:64:2d:03:06:5c:c8:4f:9c: fc:9a:f7:5d:24:33:85:3b:35:3a:ad:2b:87:04:1e:61:20:43: 10:db:5a:21:07:c6:ba:d4:b6:42:b1:78:f5:d5:16:49:67:e5: f6:9b:86:20:92:49:27:e7:4b:35:f9:5b:e7:72:e3:6e:39:24: 9d:f0:54:de:21:cd:a3:6f:12:60:88:fd:96:09:22:c1:fa:b6: 08:37:6f:e1:d6:97:48:e8:8b:b8:1d:97:5c:ee:74:eb:c4:4d: 98:98:75:24:c6:39:c4:8a:cb:03:15:85:6a:df:7c:05:c6:c5: 74:78:4a:53:af:8e:bf:bf:37:5e:8e:cd:38:c2:bd:bc:0d:fe: 4c:6d:0c:5c:21:0a:57:c0:9d:1d:96:2b:73:2f:ff:42:bb:b0: 16:2f:bb:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXwnzq3Aw8mLxCWzRNhSMRpeWt9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2OTczRjA3ODE5NTAyMURDN0UzNzc1M0ExNkJEQzNC RDJDRTM0NTAeFw0yNjExMDQxMDI2MjBaFw0yNjExMDUxMDQ1MjBaMDMxMTAvBgNV BAMTKDE2QTNBMTE3MTg2ODZDQUMxNDlEMEU4MzcwQzhCQURFNzNGQUEyQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgaTwqXutsFR9VuaJnTZ4xPic3 d3ZYWu/DuWZQmdV+mzNENXo9WhWqlRyEtCkuU/49SJKTV1q+O92Cctv2uKHVB08f 0P0W2Csk+mH9lUoeUM5bBO/xanYxQVlr9yeHmbbyCZtzNq5OWG7zyJj2f0ylSnHS N+lAqeKrCq7zgbmbvYPrb1vKnL7SLnmb3sZVeU9DYua+h7fS8cJN0C1Hd9NAMPbL yF3Vifa0ChEPeyO3QGxQhiv1V+pkYOGqNbTUnIPvYc5jHq0JpvlMHnCgFteUxoEs P4MxwL8ipOuKZX0Yg+Wiim5pef9EdvV+oWi0AXMGBH1ZbypK7cQXdllZTFLrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFqOhFxhobKwUnQ6DcMi63nP6osEwHwYDVR0j BBgwFoAUnmlz8HgZUCHcfjd1Oha9w70s40UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjdkYjIzYjctOTE1OS00NmM3LTg4NTMtMDY2NTRhZTQ3YWVkLzAvOUU2OTczRjA3 ODE5NTAyMURDN0UzNzc1M0ExNkJEQzNCRDJDRTM0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RTY5NzNGMDc4MTk1MDIxREM3RTM3NzUzQTE2QkRDM0JEMkNF MzQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjdkYjIzYjctOTE1OS00NmM3LTg4 NTMtMDY2NTRhZTQ3YWVkLzAvOUU2OTczRjA3ODE5NTAyMURDN0UzNzc1M0ExNkJE QzNCRDJDRTM0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpNelSt9d4yCLKi4yPVp2fcoCY5tZZ9oCc+ qSaivge4FgTmDDi3eLexe3MnqS8c1/V8PWXJa6kCUvEiR7JoUW+/SQ/pMWxbrhp3 VltUATyDibTjoqVpuqPTCF3CpoD5/XyBLB1kLQMGXMhPnPya910kM4U7NTqtK4cE HmEgQxDbWiEHxrrUtkKxePXVFkln5fabhiCSSSfnSzX5W+dy4245JJ3wVN4hzaNv EmCI/ZYJIsH6tgg3b+HWl0joi7gdl1zudOvETZiYdSTGOcSKywMVhWrffAXGxXR4 SlOvjr+/N16OzTjCvbwN/kxtDFwhClfAnR2WK3Mv/0K7sBYvu+g= -----END CERTIFICATE-----Generated at Thu Nov 5 05:26:42 2026 by rpki-client