$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft File: B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft (raw, json) Hash identifier: W8A5xxvWaAi07OSxefuDn4Ux+84N6ZzNF1huExjeq2c= Subject key identifier: F8:B1:7F:5C:8E:33:40:9E:DA:66:7B:71:59:18:EE:A8:E9:41:7C:D9 Authority key identifier: B1:5D:91:00:DC:8B:30:29:A0:16:F5:09:C7:D3:DB:B1:84:80:5A:A1 Certificate issuer: /CN=B15D9100DC8B3029A016F509C7D3DBB184805AA1 Certificate serial: 071B1FEB9067709A35FBF691D2D792E8869794D2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B15D9100DC8B3029A016F509C7D3DBB184805AA1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 17:35:42 +0000 Manifest this update: Wed 04 Nov 2026 17:30:42 +0000 Manifest next update: Thu 05 Nov 2026 17:49:42 +0000 Files and hashes: 1: B15D9100DC8B3029A016F509C7D3DBB184805AA1.crl (hash: WHlvWOmL3u6Op/S5xz3x1OXLEyVCoTTgYKt0N4g2M7I=) 2: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: hdJk3P7tUKxgaAbM7WQzserDmvKDtOC0Ipsv3OLAf5g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.crl rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B15D9100DC8B3029A016F509C7D3DBB184805AA1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 17:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:1b:1f:eb:90:67:70:9a:35:fb:f6:91:d2:d7:92:e8:86:97:94:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B15D9100DC8B3029A016F509C7D3DBB184805AA1 Validity Not Before: Nov 4 17:30:42 2026 GMT Not After : Nov 5 17:49:42 2026 GMT Subject: CN=F8B17F5C8E33409EDA667B715918EEA8E9417CD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:28:3f:16:cf:25:b9:14:f3:ff:c9:dc:fa:f6: 2e:5b:84:27:48:0b:ba:7e:ef:77:b6:a9:cd:ea:0b: 31:d2:70:50:68:0c:ec:32:67:e0:f6:65:ee:3a:75: 32:f6:d7:c1:03:d7:2a:57:99:d0:fc:a9:09:25:4e: cb:34:e7:b3:09:88:1a:95:4f:c9:58:31:a2:03:b1: 40:ad:4c:31:54:ff:89:68:c3:62:80:38:fb:6d:73: 6b:19:52:a3:a9:85:4b:c3:5e:5d:61:80:84:df:a9: 3a:fc:91:16:cf:f4:c8:cf:1f:44:51:78:63:22:96: 60:af:8e:9a:ed:a0:7f:ac:ff:f3:13:4f:d2:3f:f6: 4c:e3:b6:11:b8:ec:44:56:2a:bd:dd:3d:12:03:4f: 38:71:e7:63:70:0f:f8:63:a8:7d:e0:31:27:df:f8: 03:90:1f:3f:f0:a9:bc:08:a6:3b:df:68:fb:bc:c0: 69:d1:ae:01:64:85:6d:18:bf:83:f6:ef:17:cd:5d: 77:ef:d8:26:19:40:f8:aa:2f:65:da:7b:ce:54:f7: b2:0b:fc:f0:46:fa:29:a6:8e:a2:d5:2e:11:e0:50: ed:e3:14:75:d9:c1:69:9d:ee:66:27:aa:d9:7a:d4: b1:ee:a4:94:bc:46:3f:96:2a:57:5f:24:a5:9f:32: ce:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B1:7F:5C:8E:33:40:9E:DA:66:7B:71:59:18:EE:A8:E9:41:7C:D9 X509v3 Authority Key Identifier: keyid:B1:5D:91:00:DC:8B:30:29:A0:16:F5:09:C7:D3:DB:B1:84:80:5A:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B15D9100DC8B3029A016F509C7D3DBB184805AA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:20:6f:d5:32:10:71:c3:3f:05:85:c5:c6:24:3c:a0:91:f2: 56:2b:21:2e:94:54:14:90:cc:2c:b0:f7:30:ca:1e:61:bf:d3: 26:18:ec:a2:5d:1d:f2:61:b1:2b:a9:8e:0a:5e:93:a4:c9:4c: 10:e3:82:c4:f5:ed:bd:71:6b:fc:f3:b8:82:63:df:af:55:41: 5a:b0:02:0f:1e:75:01:d4:fd:c0:23:c7:72:ad:70:fd:6d:9c: f7:02:73:98:5d:30:fe:d8:30:d2:5d:20:5e:ac:27:21:ed:7b: 81:6d:3c:9f:4d:37:03:19:a8:5e:ba:c8:a0:b2:8e:a5:24:d2: bf:72:20:b1:2d:c2:eb:b0:51:ca:ad:c2:8b:0f:f9:e0:a2:48: a6:77:64:86:0b:72:e1:6c:09:82:71:be:8d:f3:74:0b:99:1e: 03:48:64:d9:52:15:34:62:09:4e:8f:7a:dc:65:18:58:ee:20: c1:c8:3f:0e:64:78:50:7d:3a:e8:fa:17:2c:fe:9e:a3:fd:dc: 75:6e:15:f3:35:b8:c2:b5:7f:bc:9d:73:55:62:86:85:e6:0c: 6f:95:b4:e4:93:15:91:88:c8:8e:b7:48:0f:08:a0:15:b6:39: db:40:6c:0b:be:c7:10:13:a4:89:c7:f3:bf:f7:71:3f:44:3a: be:c3:2d:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBxsf65BncJo1+/aR0teS6IaXlNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE1RDkxMDBEQzhCMzAyOUEwMTZGNTA5QzdEM0RCQjE4 NDgwNUFBMTAeFw0yNjExMDQxNzMwNDJaFw0yNjExMDUxNzQ5NDJaMDMxMTAvBgNV BAMTKEY4QjE3RjVDOEUzMzQwOUVEQTY2N0I3MTU5MThFRUE4RTk0MTdDRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgKD8WzyW5FPP/ydz69i5bhCdI C7p+73e2qc3qCzHScFBoDOwyZ+D2Ze46dTL218ED1ypXmdD8qQklTss057MJiBqV T8lYMaIDsUCtTDFU/4low2KAOPttc2sZUqOphUvDXl1hgITfqTr8kRbP9MjPH0RR eGMilmCvjprtoH+s//MTT9I/9kzjthG47ERWKr3dPRIDTzhx52NwD/hjqH3gMSff +AOQHz/wqbwIpjvfaPu8wGnRrgFkhW0Yv4P27xfNXXfv2CYZQPiqL2Xae85U97IL /PBG+immjqLVLhHgUO3jFHXZwWmd7mYnqtl61LHupJS8Rj+WKldfJKWfMs6BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+LF/XI4zQJ7aZntxWRjuqOlBfNkwHwYDVR0j BBgwFoAUsV2RANyLMCmgFvUJx9PbsYSAWqEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzlkZTBjMzktODRkNS00NDA1LTk1NGQtNGQzZDcxMjY5M2NlLzAvQjE1RDkxMDBE QzhCMzAyOUEwMTZGNTA5QzdEM0RCQjE4NDgwNUFBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTVEOTEwMERDOEIzMDI5QTAxNkY1MDlDN0QzREJCMTg0ODA1 QUExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzlkZTBjMzktODRkNS00NDA1LTk1 NGQtNGQzZDcxMjY5M2NlLzAvQjE1RDkxMDBEQzhCMzAyOUEwMTZGNTA5QzdEM0RC QjE4NDgwNUFBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQgb9UyEHHDPwWFxcYkPKCR8lYrIS6UVBSQ zCyw9zDKHmG/0yYY7KJdHfJhsSupjgpek6TJTBDjgsT17b1xa/zzuIJj369VQVqw Ag8edQHU/cAjx3KtcP1tnPcCc5hdMP7YMNJdIF6sJyHte4FtPJ9NNwMZqF66yKCy jqUk0r9yILEtwuuwUcqtwosP+eCiSKZ3ZIYLcuFsCYJxvo3zdAuZHgNIZNlSFTRi CU6PetxlGFjuIMHIPw5keFB9Ouj6Fyz+nqP93HVuFfM1uMK1f7ydc1VihoXmDG+V tOSTFZGIyI63SA8IoBW2OdtAbAu+xxATpInH87/3cT9EOr7DLQY= -----END CERTIFICATE-----Generated at Thu Nov 5 04:48:00 2026 by rpki-client