$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft File: B9E54455BBADEE4051F79D907B7453E95F13B467.mft (raw, json) Hash identifier: ox5Wd2uCkjznnqMv30jQypOcjLdl6WVX0786TvCN/FU= Subject key identifier: 2E:39:B2:34:6A:91:C5:28:E4:CE:74:44:37:31:45:82:B2:FA:B6:AE Authority key identifier: B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67 Certificate issuer: /CN=B9E54455BBADEE4051F79D907B7453E95F13B467 Certificate serial: 2E96A952D8D427DB84BBF2464F5DCD62C029DF90 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 18:10:18 +0000 Manifest this update: Tue 03 Nov 2026 18:05:18 +0000 Manifest next update: Wed 04 Nov 2026 19:24:18 +0000 Files and hashes: 1: 3130332e36362e34372e302f32342d3234203d3e203233363934.roa (hash: 8BxjP7wp2ny7XMMIeYWn2YhapQVIdzgBdHrT8RAE1hI=) 2: 3130332e36362e34352e302f32342d3234203d3e203233363934.roa (hash: vFfmqz/S7K4aLguWPn5rp+ugEbZkxGvqsu4n1XKxUAg=) 3: B9E54455BBADEE4051F79D907B7453E95F13B467.crl (hash: gXl36CXMuk0AW+G6sOYRaRjEj8xingIx0Z0s46bgTEU=) 4: 323030313a6466323a623230303a3a2f34382d3438203d3e203233363934.roa (hash: /KOgzrDFq/tIyDOkqLi1nhsbulS+0UUYSYry8OoTmJg=) 5: 3130332e36362e34342e302f32332d3233203d3e203233363934.roa (hash: 7pPEEFuxF2xingEKFsHlopxNVPNMkufYI24t0NlMTEY=) 6: 3130332e36362e34362e302f32332d3233203d3e203233363934.roa (hash: wr2AUAIBj15wOmk+O8JERfUGMC5W1ujwy25yjBMhvGA=) 7: 3130332e36362e34342e302f32322d3232203d3e203233363934.roa (hash: 2snLe8yK3Bohn4tsm/dGVrhksjjX4tISeXo0oWw/2NQ=) 8: 3130332e36362e34342e302f32342d3234203d3e203233363934.roa (hash: Mm+87+26OdYLR0WzbeBFR1Yx08pPggtvOd7SnjyjkXk=) 9: 3130332e36362e34362e302f32342d3234203d3e203233363934.roa (hash: UedpVAHn21ooqLw8ovvpIgJ1soqSurJAxq23sQ+qlfw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:96:a9:52:d8:d4:27:db:84:bb:f2:46:4f:5d:cd:62:c0:29:df:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9E54455BBADEE4051F79D907B7453E95F13B467 Validity Not Before: Nov 3 18:05:18 2026 GMT Not After : Nov 4 19:24:18 2026 GMT Subject: CN=2E39B2346A91C528E4CE744437314582B2FAB6AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:56:fa:55:8e:c2:54:9b:f7:10:b7:4d:51:ad: 57:c7:29:6f:56:c5:a7:4f:e5:3f:44:c6:fc:6c:1e: 16:60:19:25:7d:db:82:0a:c8:03:8a:c6:e3:5d:1f: 18:d7:e8:42:60:ad:b9:50:93:04:04:65:f5:3d:b7: e1:bf:e7:a8:a8:a0:39:31:cf:d9:59:72:0d:eb:55: c4:13:fd:d9:97:ce:26:15:7a:51:c9:fd:be:b7:dc: 71:70:fa:62:0b:0b:2b:47:bb:0a:0b:00:a6:25:5e: f5:8c:7a:9c:a0:32:d4:65:5e:71:11:7d:0f:ba:31: e4:47:4e:22:9e:e7:00:8f:aa:ff:a7:5a:d6:94:55: 50:82:30:ec:b2:0d:cd:7f:db:3c:25:87:a5:45:ab: 47:1d:67:bb:cd:62:a5:1f:7f:14:ee:33:f6:df:62: c3:6f:fd:96:d2:90:85:a9:2c:6c:d1:d1:30:f6:04: 61:7f:12:25:b1:f8:44:76:79:d0:34:ec:e0:d9:7c: ad:88:81:85:1b:96:78:df:d6:28:f7:ec:f1:a2:5e: 8e:b6:f4:28:a9:90:c7:e6:ec:c4:a8:e7:09:10:ec: 10:c0:70:38:82:0c:04:b2:2a:41:90:43:9a:50:ab: cc:92:6a:d5:15:4f:73:9d:3d:19:be:5e:6e:56:b8: 7a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:39:B2:34:6A:91:C5:28:E4:CE:74:44:37:31:45:82:B2:FA:B6:AE X509v3 Authority Key Identifier: keyid:B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:b0:0c:9d:6d:6a:0c:2e:46:47:07:9e:22:1e:b5:67:a1:26: dc:6c:c9:79:2b:5b:ef:05:20:29:39:25:7b:4a:36:e8:d4:84: 99:1d:4d:7d:e3:49:56:16:cd:52:2d:47:8c:95:a4:f1:c1:b9: 0a:6d:5c:e5:e9:4e:15:fb:7f:03:f2:04:f7:b4:92:af:d2:31: bf:ea:15:12:69:57:70:83:75:46:83:e8:f0:17:b9:fd:27:88: b8:37:61:eb:eb:80:ed:fe:f8:f6:95:a1:7c:ef:7c:c9:4b:80: c6:79:79:aa:5d:3b:b3:23:e0:74:4c:08:07:93:82:e5:8f:1e: c1:e2:14:42:45:c8:4a:a2:f2:56:31:cc:f0:29:5d:04:51:0c: 8d:34:26:c0:d2:35:b3:42:62:b0:b7:e1:74:44:14:ea:26:f2: 9d:f1:9b:ab:df:c8:28:c6:90:6c:25:df:ea:b5:05:8f:d3:28: 2c:bd:d7:20:83:33:28:30:66:b4:80:7a:c8:06:d1:99:91:97: db:2f:06:0e:b1:95:c1:f5:b2:2c:73:09:7c:4b:24:59:87:ab: 01:02:bc:7c:8e:33:0e:ea:37:a6:3a:f2:42:32:da:88:4e:36: 8b:c8:42:8c:d4:f7:d3:1b:9f:94:57:9d:23:ed:05:05:97:1a: e7:cd:8a:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULpapUtjUJ9uEu/JGT13NYsAp35AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlFNTQ0NTVCQkFERUU0MDUxRjc5RDkwN0I3NDUzRTk1 RjEzQjQ2NzAeFw0yNjExMDMxODA1MThaFw0yNjExMDQxOTI0MThaMDMxMTAvBgNV BAMTKDJFMzlCMjM0NkE5MUM1MjhFNENFNzQ0NDM3MzE0NTgyQjJGQUI2QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwVvpVjsJUm/cQt01RrVfHKW9W xadP5T9ExvxsHhZgGSV924IKyAOKxuNdHxjX6EJgrblQkwQEZfU9t+G/56iooDkx z9lZcg3rVcQT/dmXziYVelHJ/b633HFw+mILCytHuwoLAKYlXvWMepygMtRlXnER fQ+6MeRHTiKe5wCPqv+nWtaUVVCCMOyyDc1/2zwlh6VFq0cdZ7vNYqUffxTuM/bf YsNv/ZbSkIWpLGzR0TD2BGF/EiWx+ER2edA07ODZfK2IgYUblnjf1ij37PGiXo62 9CipkMfm7MSo5wkQ7BDAcDiCDASyKkGQQ5pQq8ySatUVT3OdPRm+Xm5WuHqrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULjmyNGqRxSjkznRENzFFgrL6tq4wHwYDVR0j BBgwFoAUueVEVbut7kBR952Qe3RT6V8TtGcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGI0Zjg1MTEtMDdiMy00YTYxLWJkMDQtMmU2NjVjOTI3OGZjLzAvQjlFNTQ0NTVC QkFERUU0MDUxRjc5RDkwN0I3NDUzRTk1RjEzQjQ2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUU1NDQ1NUJCQURFRTQwNTFGNzlEOTA3Qjc0NTNFOTVGMTNC NDY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGI0Zjg1MTEtMDdiMy00YTYxLWJk MDQtMmU2NjVjOTI3OGZjLzAvQjlFNTQ0NTVCQkFERUU0MDUxRjc5RDkwN0I3NDUz RTk1RjEzQjQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOwDJ1tagwuRkcHniIetWehJtxsyXkrW+8F ICk5JXtKNujUhJkdTX3jSVYWzVItR4yVpPHBuQptXOXpThX7fwPyBPe0kq/SMb/q FRJpV3CDdUaD6PAXuf0niLg3YevrgO3++PaVoXzvfMlLgMZ5eapdO7Mj4HRMCAeT guWPHsHiFEJFyEqi8lYxzPApXQRRDI00JsDSNbNCYrC34XREFOom8p3xm6vfyCjG kGwl3+q1BY/TKCy91yCDMygwZrSAesgG0ZmRl9svBg6xlcH1sixzCXxLJFmHqwEC vHyOMw7qN6Y68kIy2ohONovIQozU99Mbn5RXnSPtBQWXGufNikc= -----END CERTIFICATE-----Generated at Wed Nov 4 00:51:32 2026 by rpki-client