$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft File: 09F1FCE71540608DD361D20037B585CA6313B714.mft (raw, json) Hash identifier: aX+WwsupoPLzZQ3pIeaZCPLWpZjHLhZDMOSc0gO7DJs= Subject key identifier: A1:DF:37:8F:E5:10:49:8A:88:6B:CD:63:9E:CE:FB:75:62:C7:F7:53 Authority key identifier: 09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14 Certificate issuer: /CN=09F1FCE71540608DD361D20037B585CA6313B714 Certificate serial: 58FA041AC6A8B2006260FAC43F5C94965CCBD35A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 13:09:27 +0000 Manifest this update: Mon 02 Nov 2026 13:04:27 +0000 Manifest next update: Tue 03 Nov 2026 16:18:27 +0000 Files and hashes: 1: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (hash: Tdrs/9MxQFRJ04JmOuNBrPQeJZxfkO1jdYAYtxuEviE=) 2: 323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (hash: lNRKhcmiZUAq3a5jFdaJmEqXMHj1lj+pscOEkjDxix0=) 3: 09F1FCE71540608DD361D20037B585CA6313B714.crl (hash: XHYf4shneLKA2tt/+ytl4vDFmRTk+6LGJ5kpN63zxV0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:fa:04:1a:c6:a8:b2:00:62:60:fa:c4:3f:5c:94:96:5c:cb:d3:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F1FCE71540608DD361D20037B585CA6313B714 Validity Not Before: Nov 2 13:04:27 2026 GMT Not After : Nov 3 16:18:27 2026 GMT Subject: CN=A1DF378FE510498A886BCD639ECEFB7562C7F753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:88:5c:9a:85:db:47:5d:77:8c:6b:e4:38:b0: 16:30:56:74:f7:e8:34:bf:81:b9:1a:f5:b7:07:dc: 9d:5a:19:f1:85:93:2f:f0:e6:ad:55:a5:4f:24:9b: e1:4b:e6:ae:06:c0:2c:1f:48:fe:10:54:46:a2:db: d2:81:95:13:cf:6c:04:24:de:1b:e6:86:f3:91:8d: ed:26:2e:4e:06:4e:e8:8a:80:1f:bc:91:92:7f:f8: bc:c4:1d:7c:18:ea:59:37:f2:64:5d:60:4e:33:ce: 8b:a8:15:4c:72:4e:39:55:f6:e2:ba:63:ca:55:16: f9:b5:70:7d:f9:d9:4e:08:b2:29:89:f8:47:e9:23: a5:b5:77:9f:bc:e2:bb:3b:57:15:51:e1:43:de:18: fb:73:f5:95:bb:42:07:93:d6:51:ae:15:9c:c2:c7: d1:af:a6:cd:3c:9c:f8:1e:4d:7e:ca:18:56:01:cc: a8:d3:b7:ab:20:e1:53:61:95:eb:ae:7b:cb:90:49: 32:9f:72:e6:5c:ba:75:cb:00:be:c7:81:83:83:80: c6:51:37:e8:ef:0f:2b:e1:c9:7c:c9:f5:bb:69:10: a6:8a:a9:8a:93:db:53:57:7a:18:4b:14:a3:57:d6: cd:bf:81:d0:76:31:64:77:dc:a4:bb:f4:c0:a2:d5: 0b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DF:37:8F:E5:10:49:8A:88:6B:CD:63:9E:CE:FB:75:62:C7:F7:53 X509v3 Authority Key Identifier: keyid:09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:4c:86:24:10:2b:a0:ed:32:cf:09:4f:d9:a8:39:8a:a0:3d: 37:65:53:5c:e0:f4:66:e5:96:e8:d6:4c:7e:69:28:b2:29:57: 75:b6:aa:50:b1:35:1f:57:cb:0c:9a:72:a3:3e:9e:1c:1e:31: 46:46:51:29:ce:81:45:70:b9:3d:a8:d2:ba:5d:1b:99:f9:d5: 00:7b:ac:ed:42:f0:84:8b:17:34:a0:86:35:15:07:da:22:83: f1:75:df:2b:07:75:72:ba:22:9b:43:57:04:0d:aa:03:e1:67: 47:f1:96:79:22:aa:58:fe:31:43:5e:3c:ec:c2:b5:a7:5b:0e: 75:bf:9e:1e:cc:9a:e7:31:53:2e:24:d9:ca:f8:9c:39:e8:f5: 87:af:55:3e:55:a2:1f:17:bc:9d:fb:2b:f2:a7:a8:f8:ed:ad: f1:2b:5d:45:fe:b1:d2:42:02:dd:83:7f:57:3e:89:52:10:72: 64:20:a5:be:da:2c:a1:a7:9b:9b:f9:ac:d5:92:6e:2b:ee:15: 77:01:fb:78:82:26:5b:99:58:d3:d2:1c:b5:ed:35:74:d0:67: 56:23:e5:36:8f:15:5d:2d:0e:5f:c1:4a:a7:99:cc:af:1e:0e: 21:a7:ba:e6:de:82:26:51:68:06:2b:d3:85:0f:90:ca:20:72: 11:e1:ee:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWPoEGsaosgBiYPrEP1yUllzL01owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMUZDRTcxNTQwNjA4REQzNjFEMjAwMzdCNTg1Q0E2 MzEzQjcxNDAeFw0yNjExMDIxMzA0MjdaFw0yNjExMDMxNjE4MjdaMDMxMTAvBgNV BAMTKEExREYzNzhGRTUxMDQ5OEE4ODZCQ0Q2MzlFQ0VGQjc1NjJDN0Y3NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPiFyahdtHXXeMa+Q4sBYwVnT3 6DS/gbka9bcH3J1aGfGFky/w5q1VpU8km+FL5q4GwCwfSP4QVEai29KBlRPPbAQk 3hvmhvORje0mLk4GTuiKgB+8kZJ/+LzEHXwY6lk38mRdYE4zzouoFUxyTjlV9uK6 Y8pVFvm1cH352U4IsimJ+EfpI6W1d5+84rs7VxVR4UPeGPtz9ZW7QgeT1lGuFZzC x9Gvps08nPgeTX7KGFYBzKjTt6sg4VNhleuue8uQSTKfcuZcunXLAL7HgYODgMZR N+jvDyvhyXzJ9btpEKaKqYqT21NXehhLFKNX1s2/gdB2MWR33KS79MCi1QuBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUod83j+UQSYqIa81jns77dWLH91MwHwYDVR0j BBgwFoAUCfH85xVAYI3TYdIAN7WFymMTtxQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU1YWE5M2QtNzg3Yi00YTE3LTg3ZDAtN2VmNDFiMGYyZGVmLzAvMDlGMUZDRTcx NTQwNjA4REQzNjFEMjAwMzdCNTg1Q0E2MzEzQjcxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOUYxRkNFNzE1NDA2MDhERDM2MUQyMDAzN0I1ODVDQTYzMTNC NzE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU1YWE5M2QtNzg3Yi00YTE3LTg3 ZDAtN2VmNDFiMGYyZGVmLzAvMDlGMUZDRTcxNTQwNjA4REQzNjFEMjAwMzdCNTg1 Q0E2MzEzQjcxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVMhiQQK6DtMs8JT9moOYqgPTdlU1zg9Gbl lujWTH5pKLIpV3W2qlCxNR9XywyacqM+nhweMUZGUSnOgUVwuT2o0rpdG5n51QB7 rO1C8ISLFzSghjUVB9oig/F13ysHdXK6IptDVwQNqgPhZ0fxlnkiqlj+MUNePOzC tadbDnW/nh7MmucxUy4k2cr4nDno9YevVT5Voh8XvJ37K/KnqPjtrfErXUX+sdJC At2Df1c+iVIQcmQgpb7aLKGnm5v5rNWSbivuFXcB+3iCJluZWNPSHLXtNXTQZ1Yj 5TaPFV0tDl/BSqeZzK8eDiGnuubegiZRaAYr04UPkMogchHh7rc= -----END CERTIFICATE-----Generated at Mon Nov 2 21:16:48 2026 by rpki-client