$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft File: 9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft (raw, json) Hash identifier: wy6qlIwnU7jn6Ut0KxMsisr6Z+d2TGlkRHYObDmp36k= Subject key identifier: 66:B6:19:65:9E:5C:23:AA:B2:9C:AE:BE:74:2A:52:C0:EE:87:3B:A7 Authority key identifier: 93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C Certificate issuer: /CN=9370AF17CF894C561A727E816DE3B11D5D8AAD9C Certificate serial: 0D39A64F3C6973BF142BFEB8E905F74447675355 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft Manifest number: F2 Signing time: Fri 30 Oct 2026 21:11:57 +0000 Manifest this update: Fri 30 Oct 2026 21:06:57 +0000 Manifest next update: Sat 31 Oct 2026 21:11:57 +0000 Files and hashes: 1: 3130332e3138362e33332e302f32342d3234203d3e20313439363930.roa (hash: 66uNmMCT6fkEdO81aZRWkTBSkfQiCejM3k2UxZQSC6k=) 2: 3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa (hash: rp1e1zzn4/8hrijf1AXdkJbP5FeTjYw1wnI20jUxS/k=) 3: 9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl (hash: +W9JG8P8LdN+v+N3GYCsKbvGhLlkRghBfqmS6bjlw6s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 21:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:39:a6:4f:3c:69:73:bf:14:2b:fe:b8:e9:05:f7:44:47:67:53:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9370AF17CF894C561A727E816DE3B11D5D8AAD9C Validity Not Before: Oct 30 21:06:57 2026 GMT Not After : Oct 31 21:11:57 2026 GMT Subject: CN=66B619659E5C23AAB29CAEBE742A52C0EE873BA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4a:e1:8b:37:3d:30:fd:16:f4:85:a3:75:4f: 16:a4:66:97:ad:98:ec:50:97:6e:92:2b:78:87:3c: 5f:24:78:2f:12:a4:56:2d:af:be:58:e7:71:44:b4: 02:5a:b4:bf:0d:12:70:75:5b:7b:25:c0:e0:ce:e4: c8:b6:31:2f:9d:ec:c8:b1:1e:c2:fa:db:42:c1:98: fd:3a:56:9b:f2:6f:0d:7c:36:ad:74:d9:10:42:d2: cc:b8:5c:20:fa:8b:d8:5b:1d:92:1c:99:95:ba:05: da:8a:19:e3:a7:5b:13:eb:f3:16:c8:13:5a:23:40: 83:fd:ec:92:0a:83:4f:87:74:b7:3c:fe:d2:c3:72: f5:8f:98:71:18:37:85:67:9e:81:8e:38:16:54:b8: 44:1b:1b:50:db:8b:60:25:21:97:4a:d2:d8:a7:fc: d7:ab:8e:f1:de:78:e6:73:e2:0d:5d:7a:10:d1:eb: f9:75:f2:bf:04:be:a5:ce:2e:57:21:59:0c:90:ad: 6a:fa:b3:a5:ad:95:8e:22:3f:02:21:2c:5d:9d:fb: 3f:c9:66:ce:0b:b7:9c:dd:ac:c6:15:ea:d3:90:b9: cc:c5:45:59:13:28:ac:00:e8:61:7f:dd:15:87:1f: 33:6d:70:32:e4:a8:94:68:0b:cf:25:af:05:65:62: 88:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B6:19:65:9E:5C:23:AA:B2:9C:AE:BE:74:2A:52:C0:EE:87:3B:A7 X509v3 Authority Key Identifier: keyid:93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:92:9d:23:36:74:d8:b1:d9:c8:4a:ad:55:bc:2c:75:e6:6d: 6a:d7:eb:f0:bd:b7:6e:5b:9b:eb:06:ed:09:d2:1d:26:63:cf: 7b:45:02:8e:c1:35:a0:bf:56:85:4c:93:03:ab:c9:60:d9:82: 7f:40:f2:0d:07:00:6a:73:fe:6c:33:07:4c:36:17:b2:02:07: 30:9a:1a:83:a7:89:fb:c9:18:a6:f9:ff:6b:30:de:17:73:2b: 55:a1:08:71:05:12:6e:c0:d0:b4:71:ea:f6:ad:28:ba:53:bb: 50:f5:9c:6a:46:7d:a8:83:cb:9b:c2:8f:7e:a3:9f:31:7c:49: e1:46:78:27:30:d3:72:f5:81:b7:2a:a6:43:6e:e9:1c:f3:da: 92:4a:46:54:06:5b:73:a4:76:db:43:c8:58:b1:b5:7b:3f:5d: 9c:32:0f:f6:2a:a4:71:11:0c:28:8d:c5:63:d5:e6:e5:90:34: 56:4e:cd:4b:59:ea:b3:50:a3:65:bf:9b:7a:90:ff:bb:ab:76: 9c:d2:da:f0:a2:e0:4a:00:35:91:80:6d:23:35:c1:ce:5c:29: d9:30:24:72:5e:a9:6e:dc:b9:3e:c7:c4:4b:47:76:eb:7b:a3: f8:ca:14:bd:7d:7c:cd:53:e5:56:dd:d6:66:37:5b:b1:63:df: 1b:67:49:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDTmmTzxpc78UK/646QX3REdnU1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM3MEFGMTdDRjg5NEM1NjFBNzI3RTgxNkRFM0IxMUQ1 RDhBQUQ5QzAeFw0yNjEwMzAyMTA2NTdaFw0yNjEwMzEyMTExNTdaMDMxMTAvBgNV BAMTKDY2QjYxOTY1OUU1QzIzQUFCMjlDQUVCRTc0MkE1MkMwRUU4NzNCQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaSuGLNz0w/Rb0haN1TxakZpet mOxQl26SK3iHPF8keC8SpFYtr75Y53FEtAJatL8NEnB1W3slwODO5Mi2MS+d7Mix HsL620LBmP06Vpvybw18Nq102RBC0sy4XCD6i9hbHZIcmZW6BdqKGeOnWxPr8xbI E1ojQIP97JIKg0+HdLc8/tLDcvWPmHEYN4VnnoGOOBZUuEQbG1Dbi2AlIZdK0tin /NerjvHeeOZz4g1dehDR6/l18r8EvqXOLlchWQyQrWr6s6WtlY4iPwIhLF2d+z/J Zs4Lt5zdrMYV6tOQuczFRVkTKKwA6GF/3RWHHzNtcDLkqJRoC88lrwVlYoiBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZrYZZZ5cI6qynK6+dCpSwO6HO6cwHwYDVR0j BBgwFoAUk3CvF8+JTFYacn6BbeOxHV2KrZwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGNlOWY0M2QtMDhiYS00ZDAyLThmMzgtNzQ3MzJmMTVjZDhjLzAvOTM3MEFGMTdD Rjg5NEM1NjFBNzI3RTgxNkRFM0IxMUQ1RDhBQUQ5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzcwQUYxN0NGODk0QzU2MUE3MjdFODE2REUzQjExRDVEOEFB RDlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGNlOWY0M2QtMDhiYS00ZDAyLThm MzgtNzQ3MzJmMTVjZDhjLzAvOTM3MEFGMTdDRjg5NEM1NjFBNzI3RTgxNkRFM0Ix MUQ1RDhBQUQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2SnSM2dNix2chKrVW8LHXmbWrX6/C9t25b m+sG7QnSHSZjz3tFAo7BNaC/VoVMkwOryWDZgn9A8g0HAGpz/mwzB0w2F7ICBzCa GoOnifvJGKb5/2sw3hdzK1WhCHEFEm7A0LRx6vatKLpTu1D1nGpGfaiDy5vCj36j nzF8SeFGeCcw03L1gbcqpkNu6Rzz2pJKRlQGW3OkdttDyFixtXs/XZwyD/YqpHER DCiNxWPV5uWQNFZOzUtZ6rNQo2W/m3qQ/7urdpzS2vCi4EoANZGAbSM1wc5cKdkw JHJeqW7cuT7HxEtHdut7o/jKFL19fM1T5Vbd1mY3W7Fj3xtnSUU= -----END CERTIFICATE-----Generated at Sat Oct 31 10:58:52 2026 by rpki-client