$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft File: 9C227785E7A190271A628E29FFB9374BECA61154.mft (raw, json) Hash identifier: u3Q57p+Y3GWasiT/ObS/2TJadbixPI7BHsTyWUxaKbA= Subject key identifier: E2:7F:9E:BD:51:E2:ED:1B:F6:1F:E9:43:7A:E6:2A:1E:9B:EA:D1:66 Authority key identifier: 9C:22:77:85:E7:A1:90:27:1A:62:8E:29:FF:B9:37:4B:EC:A6:11:54 Certificate issuer: /CN=9C227785E7A190271A628E29FFB9374BECA61154 Certificate serial: 032DE9895FBAB467A7D02DB4EC62CC1C089A0006 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C227785E7A190271A628E29FFB9374BECA61154.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 07:27:33 +0000 Manifest this update: Wed 04 Nov 2026 07:22:33 +0000 Manifest next update: Thu 05 Nov 2026 10:09:33 +0000 Files and hashes: 1: 9C227785E7A190271A628E29FFB9374BECA61154.crl (hash: hi8XskfpRIW1S7aNyngcDE2VsosnD/08Lqs2i/RwcJw=) 2: 3130332e3132322e3230332e302f32342d3234203d3e20313338303733.roa (hash: OSktfcUOEhaPa/dtCu8RSESeObR9iQ/cknxFlh9rYYM=) 3: 3130332e3132322e3230322e302f32342d3234203d3e20313338303733.roa (hash: bJXWECjiuCYMun/6fgF6wLQ0iGSb4mFhCIoJYAqk5LQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.crl rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C227785E7A190271A628E29FFB9374BECA61154.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 10:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:2d:e9:89:5f:ba:b4:67:a7:d0:2d:b4:ec:62:cc:1c:08:9a:00:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C227785E7A190271A628E29FFB9374BECA61154 Validity Not Before: Nov 4 07:22:33 2026 GMT Not After : Nov 5 10:09:33 2026 GMT Subject: CN=E27F9EBD51E2ED1BF61FE9437AE62A1E9BEAD166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c8:bb:dc:a3:de:e1:a8:54:ca:a6:90:d3:d5: 00:5d:1b:da:8e:19:84:ff:ae:3a:5f:5f:88:47:b8: e6:d0:74:f2:14:f1:a2:8c:75:97:e3:84:89:80:94: 33:4b:f9:15:3f:1f:44:41:ed:56:46:be:34:d9:de: 9c:f4:bb:aa:ba:7a:7d:5c:5b:03:0a:06:37:c1:6d: 85:76:06:2a:2b:94:cc:8e:1a:5e:78:12:45:67:27: 78:63:65:9c:70:28:aa:51:a9:89:b8:9c:31:08:33: 6b:33:c8:1b:eb:51:40:46:81:9d:9c:5e:51:70:d5: 13:83:f9:5a:f1:5d:75:15:b2:d3:a1:7d:12:b2:2f: f3:dc:fe:f0:34:9a:f2:38:55:06:7f:38:04:75:fa: 47:6c:6a:e0:6f:f3:97:24:13:73:43:80:e0:2c:25: 7c:f5:14:2d:05:dd:a5:64:cc:7a:0f:a8:4e:f5:93: bf:f6:53:06:f1:3b:b2:91:08:97:23:38:f9:41:b7: c5:ee:a3:cd:08:9a:2b:af:3e:56:0e:51:b1:2b:89: cc:ff:fb:21:f5:6f:27:c5:ba:99:cc:6e:e9:0d:f7: bd:89:52:f0:e1:5e:8c:4c:79:6d:b9:ab:08:4a:99: 26:5b:2c:a3:df:ec:6d:52:7a:02:ee:71:51:55:5b: 7d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7F:9E:BD:51:E2:ED:1B:F6:1F:E9:43:7A:E6:2A:1E:9B:EA:D1:66 X509v3 Authority Key Identifier: keyid:9C:22:77:85:E7:A1:90:27:1A:62:8E:29:FF:B9:37:4B:EC:A6:11:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C227785E7A190271A628E29FFB9374BECA61154.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:19:47:ee:7b:8e:b8:71:3c:6f:ec:75:6c:7f:e1:a7:a2:b9: 56:15:7f:91:99:4a:ee:9c:32:a3:a7:c1:9c:b6:41:59:06:5e: f3:a0:87:32:09:c3:6c:05:e8:4f:90:fe:e5:de:18:84:3e:c2: 73:da:2e:a0:66:e8:2f:dd:04:38:c1:ac:ae:f8:3c:cb:30:bd: 74:3f:db:c5:b1:f0:81:a0:25:23:91:41:9c:1e:c1:f7:00:cb: eb:00:3c:8b:23:b3:11:fa:0c:57:6f:44:51:22:c5:5d:26:8a: 12:24:2a:40:b5:70:9c:40:a9:ae:1e:79:0c:7f:f9:71:92:24: ae:38:94:d9:5b:5e:dc:35:d6:ce:0e:df:54:6c:2b:bc:4c:91: 02:44:86:f6:2f:38:71:90:c0:86:a7:af:b8:34:36:c9:a8:08: d7:e0:73:68:ca:2c:2e:d9:d3:33:a9:ec:42:21:35:eb:d0:e6: 8f:2d:46:4d:bf:6e:ca:95:c9:eb:ee:12:47:38:96:7d:ae:9c: a7:1f:aa:a5:5a:43:fa:a5:52:b1:5a:e3:aa:5f:8e:b4:4c:4a: 3a:f0:a1:81:59:e4:28:42:a7:7e:01:19:d5:2e:e1:ac:2a:97: 20:cb:a1:cf:b5:d7:e4:5e:94:58:03:99:65:27:96:f8:ee:b6: 10:ea:76:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAy3piV+6tGen0C207GLMHAiaAAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMyMjc3ODVFN0ExOTAyNzFBNjI4RTI5RkZCOTM3NEJF Q0E2MTE1NDAeFw0yNjExMDQwNzIyMzNaFw0yNjExMDUxMDA5MzNaMDMxMTAvBgNV BAMTKEUyN0Y5RUJENTFFMkVEMUJGNjFGRTk0MzdBRTYyQTFFOUJFQUQxNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcyLvco97hqFTKppDT1QBdG9qO GYT/rjpfX4hHuObQdPIU8aKMdZfjhImAlDNL+RU/H0RB7VZGvjTZ3pz0u6q6en1c WwMKBjfBbYV2BiorlMyOGl54EkVnJ3hjZZxwKKpRqYm4nDEIM2szyBvrUUBGgZ2c XlFw1ROD+VrxXXUVstOhfRKyL/Pc/vA0mvI4VQZ/OAR1+kdsauBv85ckE3NDgOAs JXz1FC0F3aVkzHoPqE71k7/2UwbxO7KRCJcjOPlBt8Xuo80ImiuvPlYOUbEricz/ +yH1byfFupnMbukN972JUvDhXoxMeW25qwhKmSZbLKPf7G1SegLucVFVW31lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4n+evVHi7Rv2H+lDeuYqHpvq0WYwHwYDVR0j BBgwFoAUnCJ3heehkCcaYo4p/7k3S+ymEVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWQ0ZjYzZTQtNmZiMy00YjAzLWIyMTAtYjU2ODZjZDViMzk3LzAvOUMyMjc3ODVF N0ExOTAyNzFBNjI4RTI5RkZCOTM3NEJFQ0E2MTE1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QzIyNzc4NUU3QTE5MDI3MUE2MjhFMjlGRkI5Mzc0QkVDQTYx MTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWQ0ZjYzZTQtNmZiMy00YjAzLWIy MTAtYjU2ODZjZDViMzk3LzAvOUMyMjc3ODVFN0ExOTAyNzFBNjI4RTI5RkZCOTM3 NEJFQ0E2MTE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcZR+57jrhxPG/sdWx/4aeiuVYVf5GZSu6c MqOnwZy2QVkGXvOghzIJw2wF6E+Q/uXeGIQ+wnPaLqBm6C/dBDjBrK74PMswvXQ/ 28Wx8IGgJSORQZwewfcAy+sAPIsjsxH6DFdvRFEixV0mihIkKkC1cJxAqa4eeQx/ +XGSJK44lNlbXtw11s4O31RsK7xMkQJEhvYvOHGQwIanr7g0NsmoCNfgc2jKLC7Z 0zOp7EIhNevQ5o8tRk2/bsqVyevuEkc4ln2unKcfqqVaQ/qlUrFa46pfjrRMSjrw oYFZ5ChCp34BGdUu4awqlyDLoc+11+RelFgDmWUnlvjuthDqdrg= -----END CERTIFICATE-----Generated at Wed Nov 4 17:07:58 2026 by rpki-client