$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft File: 9C227785E7A190271A628E29FFB9374BECA61154.mft (raw, json) Hash identifier: g7o891EUDiC6sTw9879VUZVlWe18y9f5c77dQdM/zc8= Subject key identifier: 67:CD:86:72:D6:09:5C:60:BC:A6:11:0A:E5:17:FF:15:DC:CF:5E:6F Authority key identifier: 9C:22:77:85:E7:A1:90:27:1A:62:8E:29:FF:B9:37:4B:EC:A6:11:54 Certificate issuer: /CN=9C227785E7A190271A628E29FFB9374BECA61154 Certificate serial: 3672D2610AB690D4FF0A8C79A226C4E59AE44F87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C227785E7A190271A628E29FFB9374BECA61154.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft Manifest number: F3 Signing time: Sun 01 Nov 2026 10:25:26 +0000 Manifest this update: Sun 01 Nov 2026 10:20:26 +0000 Manifest next update: Mon 02 Nov 2026 12:06:26 +0000 Files and hashes: 1: 3130332e3132322e3230322e302f32342d3234203d3e20313338303733.roa (hash: bJXWECjiuCYMun/6fgF6wLQ0iGSb4mFhCIoJYAqk5LQ=) 2: 3130332e3132322e3230332e302f32342d3234203d3e20313338303733.roa (hash: OSktfcUOEhaPa/dtCu8RSESeObR9iQ/cknxFlh9rYYM=) 3: 9C227785E7A190271A628E29FFB9374BECA61154.crl (hash: ko4cLp/1DOkwF/MIaRCYMqn6HP75TaoLCloRIFn+9mQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.crl rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C227785E7A190271A628E29FFB9374BECA61154.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 12:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:72:d2:61:0a:b6:90:d4:ff:0a:8c:79:a2:26:c4:e5:9a:e4:4f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C227785E7A190271A628E29FFB9374BECA61154 Validity Not Before: Nov 1 10:20:26 2026 GMT Not After : Nov 2 12:06:26 2026 GMT Subject: CN=67CD8672D6095C60BCA6110AE517FF15DCCF5E6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:71:d7:08:d8:c1:6f:fb:14:e6:8c:d2:ac:7c: e9:e1:65:eb:3d:27:a7:b6:92:df:5a:4e:cd:58:78: 48:d5:c9:b0:1c:86:6c:e6:c5:10:52:94:3e:ad:c7: 2a:a2:cd:35:5e:8b:81:c0:ba:62:cb:00:c8:1c:47: 69:0a:6b:90:e8:25:24:ba:e5:5b:b0:4c:f2:0b:41: 99:14:99:43:21:49:f5:85:47:e0:d5:e1:55:8b:fe: a0:df:b1:ae:a0:21:f8:4f:0b:ce:5a:13:a8:1a:63: 44:c2:39:b0:60:ba:a7:78:fd:f0:b9:f6:78:2c:d4: 35:54:c3:f8:c6:b5:1a:e9:5a:95:2a:b1:4f:51:f7: da:a5:3c:04:dd:d8:65:97:c1:b9:54:2b:c7:0f:77: 60:e2:9d:9a:60:64:df:41:aa:51:bd:cd:f7:3e:c4: 79:e3:63:30:3c:29:45:f9:20:48:e1:e7:d9:26:5b: 53:e0:b0:fd:ba:68:82:0b:7e:82:ad:78:2b:a6:4d: f7:b6:47:07:5b:d5:22:0a:d8:23:1f:c7:c3:06:e6: 37:ca:68:24:1c:29:6c:1d:88:e5:70:d3:c6:f4:f4: c3:06:fb:cc:48:64:34:48:ea:79:ec:03:d8:e8:fe: c3:b6:d7:01:b5:1d:86:bd:21:ad:f8:c9:65:8f:4a: 9a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CD:86:72:D6:09:5C:60:BC:A6:11:0A:E5:17:FF:15:DC:CF:5E:6F X509v3 Authority Key Identifier: keyid:9C:22:77:85:E7:A1:90:27:1A:62:8E:29:FF:B9:37:4B:EC:A6:11:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C227785E7A190271A628E29FFB9374BECA61154.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:82:11:39:01:48:d8:a5:b9:b0:2f:9a:fb:bf:af:be:a0:e7: 43:5a:1d:91:c1:0b:e3:51:5e:6b:bb:c4:69:e3:72:df:19:85: d2:39:30:12:2b:23:14:63:14:0a:37:35:cc:2c:d2:03:11:4f: 82:8d:6b:0e:d4:74:c2:8e:db:87:88:c0:94:82:ba:c5:65:6c: f4:02:6b:76:33:49:5b:33:a0:af:2a:3e:b2:82:93:e0:12:80: 39:12:0e:0e:e0:78:3b:17:a8:7c:5c:ed:c9:45:a7:18:86:af: 9d:d0:13:0b:28:0e:c9:24:28:26:af:ea:61:76:50:2d:31:88: 34:54:f2:e6:69:06:9e:83:07:11:d9:7f:cd:8a:fb:df:aa:c6: 3d:4c:0a:14:1c:9b:ec:80:b1:c6:51:47:8f:c6:fb:2f:0f:2b: f9:6b:0d:8d:a0:bd:d5:36:69:ff:27:29:35:bc:c2:5c:8b:74: 09:d7:91:1f:eb:43:b3:55:37:84:17:d4:c9:9b:ec:83:26:78: fa:3e:ba:36:f7:e8:5a:a7:f2:1e:57:59:47:65:75:4a:2e:c0: 8e:d6:d2:0e:dc:c6:50:4a:cb:f9:dc:e3:bb:bb:1b:58:c2:51: aa:9e:6b:e7:11:1d:92:92:3d:ba:fd:a4:b9:48:78:08:35:60: 67:b6:e5:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNnLSYQq2kNT/Cox5oibE5ZrkT4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMyMjc3ODVFN0ExOTAyNzFBNjI4RTI5RkZCOTM3NEJF Q0E2MTE1NDAeFw0yNjExMDExMDIwMjZaFw0yNjExMDIxMjA2MjZaMDMxMTAvBgNV BAMTKDY3Q0Q4NjcyRDYwOTVDNjBCQ0E2MTEwQUU1MTdGRjE1RENDRjVFNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUcdcI2MFv+xTmjNKsfOnhZes9 J6e2kt9aTs1YeEjVybAchmzmxRBSlD6txyqizTVei4HAumLLAMgcR2kKa5DoJSS6 5VuwTPILQZkUmUMhSfWFR+DV4VWL/qDfsa6gIfhPC85aE6gaY0TCObBguqd4/fC5 9ngs1DVUw/jGtRrpWpUqsU9R99qlPATd2GWXwblUK8cPd2DinZpgZN9BqlG9zfc+ xHnjYzA8KUX5IEjh59kmW1PgsP26aIILfoKteCumTfe2Rwdb1SIK2CMfx8MG5jfK aCQcKWwdiOVw08b09MMG+8xIZDRI6nnsA9jo/sO21wG1HYa9Ia34yWWPSpqHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ82GctYJXGC8phEK5Rf/FdzPXm8wHwYDVR0j BBgwFoAUnCJ3heehkCcaYo4p/7k3S+ymEVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWQ0ZjYzZTQtNmZiMy00YjAzLWIyMTAtYjU2ODZjZDViMzk3LzAvOUMyMjc3ODVF N0ExOTAyNzFBNjI4RTI5RkZCOTM3NEJFQ0E2MTE1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QzIyNzc4NUU3QTE5MDI3MUE2MjhFMjlGRkI5Mzc0QkVDQTYx MTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWQ0ZjYzZTQtNmZiMy00YjAzLWIy MTAtYjU2ODZjZDViMzk3LzAvOUMyMjc3ODVFN0ExOTAyNzFBNjI4RTI5RkZCOTM3 NEJFQ0E2MTE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCCETkBSNilubAvmvu/r76g50NaHZHBC+NR Xmu7xGnjct8ZhdI5MBIrIxRjFAo3Ncws0gMRT4KNaw7UdMKO24eIwJSCusVlbPQC a3YzSVszoK8qPrKCk+ASgDkSDg7geDsXqHxc7clFpxiGr53QEwsoDskkKCav6mF2 UC0xiDRU8uZpBp6DBxHZf82K+9+qxj1MChQcm+yAscZRR4/G+y8PK/lrDY2gvdU2 af8nKTW8wlyLdAnXkR/rQ7NVN4QX1Mmb7IMmePo+ujb36Fqn8h5XWUdldUouwI7W 0g7cxlBKy/nc47u7G1jCUaqea+cRHZKSPbr9pLlIeAg1YGe25Y0= -----END CERTIFICATE-----Generated at Mon Nov 2 00:48:41 2026 by rpki-client