$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft File: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft (raw, json) Hash identifier: ZXdVZzYqm+h/YtCGVSmy031zmP7p68/eU6TeRaMQrs4= Subject key identifier: 89:C3:57:7C:09:C9:74:1B:55:7B:F5:47:FD:9C:7A:F0:37:AD:41:3A Authority key identifier: B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A Certificate issuer: /CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A Certificate serial: 4D258D9DCE3694EEDB6A5B0D410883252BE6CD14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 20:48:39 +0000 Manifest this update: Tue 03 Nov 2026 20:43:39 +0000 Manifest next update: Wed 04 Nov 2026 22:25:39 +0000 Files and hashes: 1: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: fDnmzf65jBSv74PMDMyNjaHpX/nCsTXRpP2C1qWxmnk=) 2: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl (hash: rjKa2h3g/Ynix//zjYsedi2JySTxNeballyTc0EnNQY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 22:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:25:8d:9d:ce:36:94:ee:db:6a:5b:0d:41:08:83:25:2b:e6:cd:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A Validity Not Before: Nov 3 20:43:39 2026 GMT Not After : Nov 4 22:25:39 2026 GMT Subject: CN=89C3577C09C9741B557BF547FD9C7AF037AD413A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9f:05:15:41:7e:3a:c4:72:d3:f0:66:a0:45: 64:cb:eb:b5:94:18:c4:b9:77:82:60:db:58:02:b1: e0:b7:41:d9:c6:d4:be:03:8f:d2:3d:60:9e:a6:04: 62:84:4b:11:aa:da:fb:7d:e2:f8:ca:04:f3:3d:4a: b4:83:de:b7:11:70:26:29:37:c2:52:2b:27:55:86: 5e:a4:04:2c:bc:64:f8:02:02:48:53:9b:df:cd:a7: db:29:33:2e:32:e0:0e:d1:5a:db:0a:08:52:8f:7f: a6:c4:67:65:12:da:f0:fb:39:e2:e7:a6:4d:0a:03: 28:a1:cd:33:65:9f:51:5b:10:8e:45:2b:63:75:a9: 93:29:4f:6d:5b:39:32:7c:26:83:33:49:35:c3:2a: 04:8a:6d:8a:ea:c8:59:a2:ca:b3:77:09:17:8d:0f: de:04:4e:06:fc:45:e8:b0:dd:4c:0e:cf:f4:a3:d0: 66:1e:a6:f9:95:96:65:0f:1d:6b:f2:bd:3f:02:6e: fa:06:8b:14:cc:5d:44:b9:19:2a:31:0f:bb:49:22: f8:d0:08:42:75:e7:04:f8:0f:a8:be:7c:1c:db:7c: 57:b5:16:11:93:cc:ed:71:51:e1:da:10:b2:fe:32: a2:db:b7:aa:4f:41:37:4c:90:91:50:10:87:e8:de: 2b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C3:57:7C:09:C9:74:1B:55:7B:F5:47:FD:9C:7A:F0:37:AD:41:3A X509v3 Authority Key Identifier: keyid:B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:c7:c2:2b:fb:e0:03:c9:7e:9e:1d:3d:5e:a3:64:f9:34:f8: a8:a1:5b:18:d7:1c:15:55:95:7a:25:42:86:3d:fc:30:8f:cd: 90:28:f8:09:4e:14:e1:86:28:90:3b:21:94:cd:e9:a0:1c:eb: cb:b1:c1:51:5c:ef:fe:ad:e9:33:f8:dc:30:b6:30:25:ab:9f: db:44:34:b0:08:13:04:5b:cf:07:10:c3:80:e5:f2:7a:37:f6: e9:d0:ec:7f:8f:be:df:a5:6d:53:6b:04:c1:de:9d:00:b6:38: a8:ea:58:32:27:ce:33:0d:3c:a4:c8:4b:cb:7b:ac:f5:30:9f: 44:fb:4b:e3:08:96:20:d4:9e:fe:5e:e2:83:c9:31:dd:f1:48: e4:5e:b5:02:be:9b:77:4f:8d:32:22:98:f0:95:46:c8:d5:9a: b0:9c:fc:40:54:41:19:8c:e2:cf:b1:57:c5:01:37:cf:5c:15: 98:20:f0:b0:af:6b:89:76:f7:47:cd:0b:ed:54:0e:7b:5e:de: 82:e4:f1:c0:7b:ed:0f:3d:e2:84:30:9d:a5:68:f0:b4:31:1b: cc:b1:9c:dc:71:54:4b:fa:64:48:2d:77:36:e5:0a:50:83:48: a3:27:a1:82:7c:5b:7a:aa:2d:1d:07:8b:dc:2e:c4:b6:86:90: 90:1b:a7:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTSWNnc42lO7balsNQQiDJSvmzRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCOEE2MUQ4RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3NkFD NUZBRDI5QTAeFw0yNjExMDMyMDQzMzlaFw0yNjExMDQyMjI1MzlaMDMxMTAvBgNV BAMTKDg5QzM1NzdDMDlDOTc0MUI1NTdCRjU0N0ZEOUM3QUYwMzdBRDQxM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMnwUVQX46xHLT8GagRWTL67WU GMS5d4Jg21gCseC3QdnG1L4Dj9I9YJ6mBGKESxGq2vt94vjKBPM9SrSD3rcRcCYp N8JSKydVhl6kBCy8ZPgCAkhTm9/Np9spMy4y4A7RWtsKCFKPf6bEZ2US2vD7OeLn pk0KAyihzTNln1FbEI5FK2N1qZMpT21bOTJ8JoMzSTXDKgSKbYrqyFmiyrN3CReN D94ETgb8Reiw3UwOz/Sj0GYepvmVlmUPHWvyvT8CbvoGixTMXUS5GSoxD7tJIvjQ CEJ15wT4D6i+fBzbfFe1FhGTzO1xUeHaELL+MqLbt6pPQTdMkJFQEIfo3ivdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUicNXfAnJdBtVe/VH/Zx68DetQTowHwYDVR0j BBgwFoAUubimHY6lUgzyjo5cJFAXasX60powDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE0MTc2MDgtMTZiOC00NDk3LTgxZTMtOTQ3ZDc4ZGJjZjExLzAvQjlCOEE2MUQ4 RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3NkFDNUZBRDI5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9COUI4QTYxRDhFQTU1MjBDRjI4RThFNUMyNDUwMTc2QUM1RkFE MjlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvQjlCOEE2MUQ4RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3 NkFDNUZBRDI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAPHwiv74APJfp4dPV6jZPk0+KihWxjXHBVV lXolQoY9/DCPzZAo+AlOFOGGKJA7IZTN6aAc68uxwVFc7/6t6TP43DC2MCWrn9tE NLAIEwRbzwcQw4Dl8no39unQ7H+Pvt+lbVNrBMHenQC2OKjqWDInzjMNPKTIS8t7 rPUwn0T7S+MIliDUnv5e4oPJMd3xSORetQK+m3dPjTIimPCVRsjVmrCc/EBUQRmM 4s+xV8UBN89cFZgg8LCva4l290fNC+1UDnte3oLk8cB77Q894oQwnaVo8LQxG8yx nNxxVEv6ZEgtdzblClCDSKMnoYJ8W3qqLR0Hi9wuxLaGkJAbp5g= -----END CERTIFICATE-----Generated at Wed Nov 4 09:32:48 2026 by rpki-client