$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft File: B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft (raw, json) Hash identifier: DzzTeKrid0ExjRsiWuF4Eln/SHdfV/EXjZtNFVhYmcs= Subject key identifier: 90:84:3A:BE:7D:6F:D9:61:14:F6:8E:28:95:71:E7:1C:A7:74:F5:B5 Authority key identifier: B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC Certificate issuer: /CN=B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC Certificate serial: 790717475433082111D9B0EC5B0290D3828904A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft Manifest number: FA Signing time: Wed 04 Nov 2026 09:50:28 +0000 Manifest this update: Wed 04 Nov 2026 09:45:28 +0000 Manifest next update: Thu 05 Nov 2026 10:40:28 +0000 Files and hashes: 1: 3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (hash: DOdXqvIf8YC77FzkFbP1ZhH9lDDTTUCUrQuHHws44kQ=) 2: B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl (hash: BbomjY5H51u/a5zMqJYK/e9eMxkZ08MPxpioG71+dtc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 10:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:07:17:47:54:33:08:21:11:d9:b0:ec:5b:02:90:d3:82:89:04:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC Validity Not Before: Nov 4 09:45:28 2026 GMT Not After : Nov 5 10:40:28 2026 GMT Subject: CN=90843ABE7D6FD96114F68E289571E71CA774F5B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c9:18:01:1b:23:94:97:21:22:dc:9e:e9:dc: 28:34:73:a6:ac:f1:28:de:dc:23:8e:51:bd:e0:37: a6:9b:51:31:a8:5f:8a:13:d1:35:fa:b5:3d:3c:ed: f2:50:73:ba:20:4b:76:e0:06:b2:b3:56:a3:8a:92: 9e:c3:eb:c8:70:2f:2c:d3:a4:40:4b:e5:b2:a2:e4: 75:4a:3a:c6:5f:15:a5:19:a7:5f:cd:7f:f9:f7:63: b4:26:6d:20:d7:4d:5e:32:95:47:0b:cc:c7:e3:b6: 49:01:fd:81:e3:b6:dc:49:f0:76:be:a1:ac:dd:0e: d6:0c:58:5c:21:ef:90:0f:bf:5d:65:e8:b7:b7:3d: 43:1f:15:80:3c:ee:e0:5d:3a:8e:89:5b:9d:eb:41: 50:5f:71:12:29:3b:0e:5c:7e:05:46:4a:a3:ee:a9: 35:fe:c7:66:d2:f5:68:66:ef:9f:00:e5:e0:03:45: 95:0e:c2:57:45:5d:38:55:0f:b6:f8:9f:71:33:f0: 20:5b:24:f8:1a:6b:4a:16:56:b4:bb:cb:91:c5:bf: db:e5:d5:6d:e6:de:c4:b4:b7:1d:71:8f:d5:0b:d7: d3:28:39:6d:4b:2c:07:09:7f:dd:c5:1b:b7:78:d8: 8d:d7:9f:7a:98:f7:7e:82:e9:e5:af:6b:ae:6e:b7: 1d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:84:3A:BE:7D:6F:D9:61:14:F6:8E:28:95:71:E7:1C:A7:74:F5:B5 X509v3 Authority Key Identifier: keyid:B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:7e:0b:17:9d:2b:1d:63:b8:90:85:40:90:d1:7a:9c:bc:22: 22:3e:6b:a9:37:c7:84:53:bf:e9:08:88:eb:1f:95:2e:1b:2e: b6:cb:92:6c:a1:57:3d:06:48:ac:83:3e:8e:ab:69:36:f2:6a: b3:5b:d9:65:4f:5b:82:ba:5e:43:3d:93:5a:fc:56:cf:c5:2b: f8:e1:e0:cb:73:6b:69:3d:29:ad:a9:44:37:2b:54:03:2b:4e: 01:6b:2b:5f:07:e5:f2:8b:61:6a:67:ae:35:08:33:ad:3c:fc: 28:eb:3b:20:e3:cb:a3:90:0b:68:e1:7f:18:51:8a:fd:e9:dc: 0f:c7:47:ab:05:d3:8c:ea:1c:86:34:06:c3:cd:6e:e6:f0:3e: 88:5c:06:d7:cd:15:58:54:98:ad:7f:9e:39:b8:05:c1:73:55: 06:66:58:e7:20:68:90:77:f1:28:26:6f:70:34:1d:ba:d1:b6: 17:8b:f0:00:57:97:9e:b4:d2:88:60:85:d5:4f:cc:88:88:2c: 13:97:c3:b6:56:c2:c5:f0:33:fe:b2:e8:32:cf:fb:6b:d8:55: 93:50:5c:e8:84:e8:5b:63:3c:77:3c:ff:f0:36:25:a3:82:d3: 21:bb:82:01:aa:87:81:84:d9:83:7a:fb:b6:41:56:9e:fe:2e: ec:40:b9:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeQcXR1QzCCER2bDsWwKQ04KJBKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk5MDhGNTk0RTYzMEJFQTFFRUEwRERCRjRBMzBEQzhD RjEyN0NBQzAeFw0yNjExMDQwOTQ1MjhaFw0yNjExMDUxMDQwMjhaMDMxMTAvBgNV BAMTKDkwODQzQUJFN0Q2RkQ5NjExNEY2OEUyODk1NzFFNzFDQTc3NEY1QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFyRgBGyOUlyEi3J7p3Cg0c6as 8Sje3COOUb3gN6abUTGoX4oT0TX6tT087fJQc7ogS3bgBrKzVqOKkp7D68hwLyzT pEBL5bKi5HVKOsZfFaUZp1/Nf/n3Y7QmbSDXTV4ylUcLzMfjtkkB/YHjttxJ8Ha+ oazdDtYMWFwh75APv11l6Le3PUMfFYA87uBdOo6JW53rQVBfcRIpOw5cfgVGSqPu qTX+x2bS9Whm758A5eADRZUOwldFXThVD7b4n3Ez8CBbJPgaa0oWVrS7y5HFv9vl 1W3m3sS0tx1xj9UL19MoOW1LLAcJf93FG7d42I3Xn3qY936C6eWva65utx0XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkIQ6vn1v2WEU9o4olXHnHKd09bUwHwYDVR0j BBgwFoAUuZCPWU5jC+oe6g3b9KMNyM8SfKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZlY2M3MmEtZTk1NC00MzAyLTkyYzQtZjRmMjMwNzBiOTk3LzAvQjk5MDhGNTk0 RTYzMEJFQTFFRUEwRERCRjRBMzBEQzhDRjEyN0NBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTkwOEY1OTRFNjMwQkVBMUVFQTBEREJGNEEzMERDOENGMTI3 Q0FDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZlY2M3MmEtZTk1NC00MzAyLTky YzQtZjRmMjMwNzBiOTk3LzAvQjk5MDhGNTk0RTYzMEJFQTFFRUEwRERCRjRBMzBE QzhDRjEyN0NBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAB+CxedKx1juJCFQJDRepy8IiI+a6k3x4RT v+kIiOsflS4bLrbLkmyhVz0GSKyDPo6raTbyarNb2WVPW4K6XkM9k1r8Vs/FK/jh 4Mtza2k9Ka2pRDcrVAMrTgFrK18H5fKLYWpnrjUIM608/CjrOyDjy6OQC2jhfxhR iv3p3A/HR6sF04zqHIY0BsPNbubwPohcBtfNFVhUmK1/njm4BcFzVQZmWOcgaJB3 8Sgmb3A0HbrRtheL8ABXl5600ohghdVPzIiILBOXw7ZWwsXwM/6y6DLP+2vYVZNQ XOiE6FtjPHc8//A2JaOC0yG7ggGqh4GE2YN6+7ZBVp7+LuxAub8= -----END CERTIFICATE-----Generated at Thu Nov 5 01:03:18 2026 by rpki-client