$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft File: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft (raw, json) Hash identifier: eXd88gYrzoYJz9bNiViONR1H8h+LHWrvd5xb5WGM6Ls= Subject key identifier: 7A:AD:4A:F3:BC:37:28:5B:53:16:9A:DD:E5:35:13:E8:37:A4:C0:9E Authority key identifier: B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A Certificate issuer: /CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A Certificate serial: 78E28C38A2E358DB9BBE3D7928CB927236E6BDBB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 14:26:12 +0000 Manifest this update: Wed 04 Nov 2026 14:21:12 +0000 Manifest next update: Thu 05 Nov 2026 14:36:12 +0000 Files and hashes: 1: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl (hash: XUFkKDUUM6E8FKP9oPDDYX9Tyr1jy2dMVUf7RPhGbOw=) 2: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: fDnmzf65jBSv74PMDMyNjaHpX/nCsTXRpP2C1qWxmnk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 14:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e2:8c:38:a2:e3:58:db:9b:be:3d:79:28:cb:92:72:36:e6:bd:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A Validity Not Before: Nov 4 14:21:12 2026 GMT Not After : Nov 5 14:36:12 2026 GMT Subject: CN=7AAD4AF3BC37285B53169ADDE53513E837A4C09E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fc:38:fa:f6:5f:9f:db:aa:23:67:29:73:f9: 43:01:0a:ac:e5:40:75:b2:46:b6:72:d1:43:6a:35: df:8e:2a:54:d3:33:14:ad:95:2f:b4:74:a8:43:59: 99:7e:a1:26:27:2b:85:1e:ba:38:fc:e1:54:5e:f6: 7a:67:2a:27:91:ff:62:87:88:ec:37:42:35:87:d0: 07:1c:f0:53:ae:62:39:7d:26:12:75:97:1b:98:d7: 07:43:d3:60:ad:a6:9f:0e:ca:a7:82:b8:bf:c8:db: 6a:1c:36:3b:a9:97:d0:ab:bb:bf:c3:e9:29:2e:dc: bc:bc:69:1c:b6:2b:ce:ac:0b:7f:07:f0:1e:84:e6: d6:4f:19:2b:ac:19:e4:a0:a4:d1:2f:fb:60:fb:d0: 16:79:01:20:f8:16:68:51:70:a7:d3:ca:bd:eb:15: cc:a0:fb:74:16:81:f3:a5:32:4e:52:75:80:61:e7: d3:43:ac:b1:46:f1:b8:d4:2e:ea:ce:6d:f8:77:fe: bb:a3:43:d3:7f:49:9a:bf:fe:69:19:ce:87:49:00: bc:eb:57:ae:2a:4a:f9:96:cd:dd:71:b6:75:ca:db: 0d:10:c2:66:53:d8:fb:6d:d0:80:cf:47:a6:8d:68: b0:8d:83:ac:43:50:15:76:56:cb:67:30:5f:48:d6: 34:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AD:4A:F3:BC:37:28:5B:53:16:9A:DD:E5:35:13:E8:37:A4:C0:9E X509v3 Authority Key Identifier: keyid:B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:cb:82:49:40:b2:c5:a5:c8:e0:28:b9:1f:39:e9:79:0c:c1: f7:01:b1:aa:1f:c8:c8:8c:32:f6:27:49:da:3b:79:3b:6b:26: 3d:7c:d5:2e:ea:0d:af:92:07:03:8a:ea:11:c3:1f:73:a5:db: d7:9b:7e:83:43:fb:f1:7c:b2:3b:de:c0:4b:6c:57:d5:78:66: 9b:8a:cc:a7:aa:fb:fb:bd:7b:15:83:d2:22:f3:16:d9:75:a3: c1:7c:62:0b:d7:b7:98:d8:19:8f:d9:03:6c:88:1d:e9:1f:e8: 9d:90:f3:9d:88:33:5b:5b:00:31:f4:c1:ac:82:81:f0:4b:ed: 95:5a:9e:da:ad:8c:12:c6:f1:e9:47:aa:9c:f9:f8:15:0c:18: cf:9c:83:8a:3b:7f:4b:3a:7a:f9:6b:a9:d2:68:de:bb:56:a2: b1:f3:7f:e7:a2:41:f6:4e:70:cb:aa:d1:92:65:96:1c:fa:3b: ae:e4:4d:fc:19:b9:ca:2f:e6:9a:5f:e8:31:4a:61:b5:dc:03: 6e:85:08:9f:0b:fb:22:0a:5d:90:d3:fd:a6:e3:0d:6f:e8:d8: 5b:ac:0a:fd:53:f0:8b:c7:cb:d3:03:92:6b:12:c8:2a:f1:ca: 98:84:1c:10:34:61:5a:fb:9c:50:19:bb:49:5f:1d:0c:92:de: db:4e:f1:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeOKMOKLjWNubvj15KMuScjbmvbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCOEE2MUQ4RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3NkFD NUZBRDI5QTAeFw0yNjExMDQxNDIxMTJaFw0yNjExMDUxNDM2MTJaMDMxMTAvBgNV BAMTKDdBQUQ0QUYzQkMzNzI4NUI1MzE2OUFEREU1MzUxM0U4MzdBNEMwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo/Dj69l+f26ojZylz+UMBCqzl QHWyRrZy0UNqNd+OKlTTMxStlS+0dKhDWZl+oSYnK4Ueujj84VRe9npnKieR/2KH iOw3QjWH0Acc8FOuYjl9JhJ1lxuY1wdD02Ctpp8OyqeCuL/I22ocNjupl9Cru7/D 6Sku3Ly8aRy2K86sC38H8B6E5tZPGSusGeSgpNEv+2D70BZ5ASD4FmhRcKfTyr3r Fcyg+3QWgfOlMk5SdYBh59NDrLFG8bjULurObfh3/rujQ9N/SZq//mkZzodJALzr V64qSvmWzd1xtnXK2w0QwmZT2Ptt0IDPR6aNaLCNg6xDUBV2VstnMF9I1jQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeq1K87w3KFtTFprd5TUT6DekwJ4wHwYDVR0j BBgwFoAUubimHY6lUgzyjo5cJFAXasX60powDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE0MTc2MDgtMTZiOC00NDk3LTgxZTMtOTQ3ZDc4ZGJjZjExLzAvQjlCOEE2MUQ4 RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3NkFDNUZBRDI5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9COUI4QTYxRDhFQTU1MjBDRjI4RThFNUMyNDUwMTc2QUM1RkFE MjlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvQjlCOEE2MUQ4RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3 NkFDNUZBRDI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvLgklAssWlyOAouR856XkMwfcBsaofyMiM MvYnSdo7eTtrJj181S7qDa+SBwOK6hHDH3Ol29ebfoND+/F8sjvewEtsV9V4ZpuK zKeq+/u9exWD0iLzFtl1o8F8YgvXt5jYGY/ZA2yIHekf6J2Q852IM1tbADH0wayC gfBL7ZVantqtjBLG8elHqpz5+BUMGM+cg4o7f0s6evlrqdJo3rtWorHzf+eiQfZO cMuq0ZJllhz6O67kTfwZucov5ppf6DFKYbXcA26FCJ8L+yIKXZDT/abjDW/o2Fus Cv1T8IvHy9MDkmsSyCrxypiEHBA0YVr7nFAZu0lfHQyS3ttO8Xg= -----END CERTIFICATE-----Generated at Thu Nov 5 05:23:33 2026 by rpki-client