$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft File: 9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft (raw, json) Hash identifier: OSqTlJTFyPKuRT05OuO667Tm5VDENGd5DmjA1IVVIYo= Subject key identifier: 45:E2:FF:B2:D2:2B:8D:C4:57:A7:6C:3D:E6:C8:D6:77:86:DC:93:A7 Authority key identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 Certificate issuer: /CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4 Certificate serial: 3A85E1992059BC3BC2F1DDACC343875944B0BAEC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft Manifest number: DE Signing time: Sun 11 Oct 2026 05:23:34 +0000 Manifest this update: Sun 11 Oct 2026 05:18:34 +0000 Manifest next update: Mon 12 Oct 2026 09:11:34 +0000 Files and hashes: 1: 3130332e332e3231342e302f32342d3234203d3e20313431313436.roa (hash: tuXz1WBHQLGtpa6jqBSO+zM+s1veNX1L+r9GJ7yl5zg=) 2: 3230322e3135322e3139392e302f32342d3234203d3e203633383539.roa (hash: Dl92bN4KroHhoU6iZvn5AO9/ktEfnB98FdoOajolvAY=) 3: 3230322e3135322e3139322e302f32342d3234203d3e203633383539.roa (hash: XTetGunxO/9Wc2TDz5SU0JnFYRa4/o3IkFSSAxHr8JI=) 4: 3230322e3135322e3230302e302f32342d3234203d3e203633383539.roa (hash: 9UdGVYlr2BpuU278InwTpLs2aULPcIQvnjKIhkcrwaU=) 5: 3230322e3135322e3230332e302f32342d3234203d3e203633383539.roa (hash: C04D24vDTd3hbDV5iXxREwC6uGNthkwKxlbfLdfXE1E=) 6: 3230322e3135322e3230352e302f32342d3234203d3e203633383539.roa (hash: 3F7kj8HCI8p6ltHGhgDwoLn+Flb6Nk9tbs0IPGWDTJ8=) 7: 3230322e3135322e3139322e302f32302d3230203d3e203633383539.roa (hash: OA3ZBLGnXRs5yEnHCOfQPyg4orZ7KQmbwDe09LqHOqQ=) 8: 3130332e332e3231352e302f32342d3234203d3e20313331373435.roa (hash: XaXM0IZAp2Bc9rsMp3qaCo1vpdeZ4S8GCWtFW/rI5A0=) 9: 3230322e3135322e3230312e302f32342d3234203d3e203633383539.roa (hash: Kr9n+dToJ4+otMGr8yT+9Vb2SsgZx8Pi5NiSfTBJmck=) 10: 3230322e3135322e3139352e302f32342d3234203d3e203633383539.roa (hash: 85ocWH/CGllr8ECiudr/CN5VLg2ydbZ+Y4D2UVzB/yE=) 11: 3230322e3135322e3230372e302f32342d3234203d3e203633383539.roa (hash: nS2kYK0reE2AsGKi7EPWuF7aJpnOGuNLNpN/XmzL+PQ=) 12: 9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl (hash: Dd6nlVRe1aG8TL0ahTDBk+Ev/vPYYlM2hnIW/DwxO3A=) 13: 3230322e3135322e3139332e302f32342d3234203d3e203633383539.roa (hash: 8xUt88GWo5Lh7HpcZIOQiiNvwVYn6c3qls4txEwd5Aw=) 14: 3230322e3135322e3230322e302f32342d3234203d3e203633383539.roa (hash: ZN11kMbpQEiQxZkCv4YoKpVbtM+I8QNVgn3BqfSzPFM=) 15: 3230322e3135322e3139372e302f32342d3234203d3e203633383539.roa (hash: NlqJ6u6BebCxJ7bsse0gRH5h6BQukMf2w3tldo1PwRQ=) 16: 3130332e332e3231332e302f32342d3234203d3e203338313439.roa (hash: 4HkIjmLq+65ZiJXFH/gsCmpX9OJtzZO2CDLQtviREzo=) 17: 3230322e3135322e3230362e302f32342d3234203d3e203633383539.roa (hash: xIMJNAAfJUu4Zk7eKaIYdIfnGIAy47WR2He8EYWfO1w=) 18: 3230322e3135322e3139362e302f32342d3234203d3e203633383539.roa (hash: IiX5vZYV34MLgOX/GRxuakpCz+OmnJUby0rObSh/dR0=) 19: 3230322e3135322e3230342e302f32342d3234203d3e203633383539.roa (hash: K/9h13JeRi4nBdzHJKHwIX/OSCZT4xPejmG3KMLGGPE=) 20: 3230322e3135322e3139342e302f32342d3234203d3e203633383539.roa (hash: poZZqr8m1p0SwLGi1vxWI2MfuVBlouoArnZ43zLWj7A=) 21: 3130332e332e3231322e302f32342d3234203d3e203338313439.roa (hash: kD6oNGgLKqH7iqk+24uVETlxN5nYgl4ztpk81F99Ka8=) 22: 3230322e3135322e3139382e302f32342d3234203d3e203633383539.roa (hash: 9ukbLf5qQb1rXyNwLc+GXHdfVwvyPUN+V3xFvkC1PU8=) 23: 3130332e332e3231322e302f32322d3232203d3e203338313439.roa (hash: L+jEfJ+TYr8U2lsRIwq0B2JrZizijZUOAoo1oHmW+1s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:85:e1:99:20:59:bc:3b:c2:f1:dd:ac:c3:43:87:59:44:b0:ba:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4 Validity Not Before: Oct 11 05:18:34 2026 GMT Not After : Oct 12 09:11:34 2026 GMT Subject: CN=45E2FFB2D22B8DC457A76C3DE6C8D67786DC93A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f5:3e:86:7e:74:17:63:02:c8:23:40:fc:f0: f7:91:a8:92:a5:4b:c6:0d:98:94:27:bf:f1:cf:81: ec:e4:26:e3:b3:9a:9b:7b:7b:56:5d:4b:29:a9:3d: 27:89:bf:8e:32:fc:a4:7a:50:ed:92:3f:0f:e4:91: c5:d3:db:6c:21:04:be:15:5e:47:eb:58:9d:af:16: 05:cc:61:3f:6b:c8:d0:0f:97:6d:d0:ca:67:b7:9a: 8a:cf:6c:76:f6:f9:fa:00:cb:f7:06:85:a8:ef:ec: 48:6f:d9:6e:61:7c:13:cd:ec:78:47:54:9e:f8:b2: 68:4d:80:13:e2:7e:6f:a2:d9:c8:fd:98:63:92:17: 0e:ec:3c:ff:28:b6:93:35:4e:5b:ed:c0:0b:9b:2a: ab:47:a8:72:ed:17:63:3f:37:94:82:ee:a8:6b:b9: 2f:72:b9:d9:be:92:05:25:d5:50:94:77:5e:79:1f: 2a:13:a1:9d:28:f0:2c:cd:5b:78:4d:66:c0:eb:2e: 8a:48:6e:7a:59:a8:25:f7:fd:21:c4:76:38:5a:f4: cc:50:5a:7d:fa:b6:01:2f:4b:31:41:1b:e1:e4:5a: 12:92:1a:15:db:a1:59:fe:92:79:02:e2:3c:ab:14: 78:ab:d1:3a:94:6a:16:6e:43:3d:ac:f9:b7:8d:99: 74:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E2:FF:B2:D2:2B:8D:C4:57:A7:6C:3D:E6:C8:D6:77:86:DC:93:A7 X509v3 Authority Key Identifier: keyid:9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:da:ba:a3:76:32:66:d4:45:24:a2:2f:df:b8:aa:69:db:08: bd:1b:6f:59:98:ea:cb:2f:c4:ce:22:bc:1d:7c:41:1b:dc:a5: 84:be:a9:8b:c3:2d:d4:bf:4d:83:75:ee:23:e9:49:96:9e:40: 87:47:20:23:d8:52:de:24:83:38:51:73:71:bc:da:e6:15:b6: 78:aa:7b:55:db:ad:a0:3c:3d:e8:89:24:53:ad:81:6f:0a:cc: 84:95:77:86:8f:4e:97:98:51:5c:cf:16:2c:ac:65:ae:c1:66: fe:af:d0:9d:c4:65:55:ec:0e:30:ee:28:81:f4:ca:ad:cd:eb: 0e:49:77:f6:f3:61:8a:73:28:34:34:d3:26:33:e2:2d:a8:98: fb:14:18:07:4e:8d:b6:ff:25:13:ce:55:b3:70:4e:b3:47:c4: c1:80:05:81:79:32:13:1f:7a:97:d0:18:69:e0:be:31:0b:6d: fc:25:7b:f7:48:7d:b9:f0:6c:45:e4:b5:40:68:6e:44:9d:8e: 62:25:42:82:fa:25:65:a5:00:6c:3b:9b:51:57:e5:0b:42:19: 22:e3:78:57:d8:36:9c:18:8a:df:05:46:94:e3:db:4a:68:42: ff:9c:31:1f:05:16:9d:8c:a9:9b:f6:10:25:cf:9f:e2:82:92: b6:d1:1e:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOoXhmSBZvDvC8d2sw0OHWUSwuuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFMUYxQkE4MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3 NEY0QUFDNDAeFw0yNjEwMTEwNTE4MzRaFw0yNjEwMTIwOTExMzRaMDMxMTAvBgNV BAMTKDQ1RTJGRkIyRDIyQjhEQzQ1N0E3NkMzREU2QzhENjc3ODZEQzkzQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW9T6GfnQXYwLII0D88PeRqJKl S8YNmJQnv/HPgezkJuOzmpt7e1ZdSympPSeJv44y/KR6UO2SPw/kkcXT22whBL4V XkfrWJ2vFgXMYT9ryNAPl23Qyme3morPbHb2+foAy/cGhajv7Ehv2W5hfBPN7HhH VJ74smhNgBPifm+i2cj9mGOSFw7sPP8otpM1TlvtwAubKqtHqHLtF2M/N5SC7qhr uS9yudm+kgUl1VCUd155HyoToZ0o8CzNW3hNZsDrLopIbnpZqCX3/SHEdjha9MxQ Wn36tgEvSzFBG+HkWhKSGhXboVn+knkC4jyrFHir0TqUahZuQz2s+beNmXQDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUReL/stIrjcRXp2w95sjWd4bck6cwHwYDVR0j BBgwFoAUm+HxuoCRYxpAm+k5vbBzMnT0qsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhlM2IzOWMtZGExMS00NWVlLWFhYjMtNWNiMTRlYzQ0NzBjLzAvOUJFMUYxQkE4 MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3NEY0QUFDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkUxRjFCQTgwOTE2MzFBNDA5QkU5MzlCREIwNzMzMjc0RjRB QUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDhlM2IzOWMtZGExMS00NWVlLWFh YjMtNWNiMTRlYzQ0NzBjLzAvOUJFMUYxQkE4MDkxNjMxQTQwOUJFOTM5QkRCMDcz MzI3NEY0QUFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjauqN2MmbURSSiL9+4qmnbCL0bb1mY6ssv xM4ivB18QRvcpYS+qYvDLdS/TYN17iPpSZaeQIdHICPYUt4kgzhRc3G82uYVtniq e1XbraA8PeiJJFOtgW8KzISVd4aPTpeYUVzPFiysZa7BZv6v0J3EZVXsDjDuKIH0 yq3N6w5Jd/bzYYpzKDQ00yYz4i2omPsUGAdOjbb/JRPOVbNwTrNHxMGABYF5MhMf epfQGGngvjELbfwle/dIfbnwbEXktUBobkSdjmIlQoL6JWWlAGw7m1FX5QtCGSLj eFfYNpwYit8FRpTj20poQv+cMR8FFp2MqZv2ECXPn+KCkrbRHn4= -----END CERTIFICATE-----Generated at Sun Oct 11 22:00:24 2026 by rpki-client