$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft File: 9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft (raw, json) Hash identifier: 0sAu+UcjbDdvP3Q7SkvJCwnLgm3OTmuWPlZCTWpxm8g= Subject key identifier: 59:1C:D3:24:5B:C8:E6:0E:BA:A8:A1:C8:80:39:BB:A9:F8:77:F3:4E Authority key identifier: 9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0 Certificate issuer: /CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0 Certificate serial: 13A14F8BC3FB7697B5142041103752B7B7488DFD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 17:10:07 +0000 Manifest this update: Wed 04 Nov 2026 17:05:07 +0000 Manifest next update: Thu 05 Nov 2026 18:41:07 +0000 Files and hashes: 1: 9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl (hash: FbZ/4hJWxxsnYbzhd7AB7egsYQQP2WMX+2SyDcFMkpE=) 2: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: g3Z9fptq9GjJPdegO4ng7rY8ayX1C1nitJgBmqVwMJ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:a1:4f:8b:c3:fb:76:97:b5:14:20:41:10:37:52:b7:b7:48:8d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0 Validity Not Before: Nov 4 17:05:07 2026 GMT Not After : Nov 5 18:41:07 2026 GMT Subject: CN=591CD3245BC8E60EBAA8A1C88039BBA9F877F34E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:47:6e:e8:b2:1a:a5:04:9b:99:14:79:6f: 95:a9:6f:e6:07:a4:64:8c:cf:c7:36:ba:09:18:c6: 07:1a:a4:e4:6e:5d:b1:81:5c:67:5e:c4:7e:21:1d: 04:7c:65:c9:25:ac:4b:53:c6:81:4e:63:d2:4d:39: 81:af:07:93:41:70:d2:92:c1:c8:94:c2:0c:58:6e: b1:65:fa:62:45:c0:0b:fe:25:3f:14:68:27:cf:e6: 5d:dd:54:68:b5:bb:8d:33:06:bd:7c:e0:36:5f:1b: 26:f2:74:65:0e:74:48:c0:ea:8a:a5:f1:4a:87:89: 30:33:b0:09:9a:e0:48:d5:f7:11:33:44:0b:9c:8a: b6:b7:17:eb:64:27:65:14:46:81:05:ac:cc:72:ab: 4b:e2:f6:aa:49:3a:2e:42:0b:db:5e:47:4f:48:69: cb:f6:39:08:68:b2:e0:c5:92:54:b0:b5:06:a9:46: c2:85:22:91:cf:be:34:80:67:9e:43:a5:73:33:81: 05:bf:12:b7:8c:a5:f0:7d:20:1d:d2:0a:7f:b9:d4: 6b:a3:8f:a7:6e:a0:48:f7:16:ae:e6:0f:d3:27:34: 12:47:9a:e5:8d:ab:e7:f5:74:e9:45:ed:a3:4b:c4: 1e:8e:4a:92:bb:d7:e8:1c:94:d5:05:44:b9:3b:63: e3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1C:D3:24:5B:C8:E6:0E:BA:A8:A1:C8:80:39:BB:A9:F8:77:F3:4E X509v3 Authority Key Identifier: keyid:9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:69:1d:be:5d:1b:ca:d6:1f:0e:ec:e4:31:fe:6e:ae:0c:c1: 24:fd:30:39:40:5d:b6:7b:8e:bb:1e:6b:1e:bf:21:21:b4:91: 8d:7d:44:25:b0:fb:43:7e:b0:ba:69:08:86:20:6d:c6:93:d8: ff:37:ee:6d:05:34:4b:5d:cf:db:d8:90:3e:b2:41:3d:be:2f: 60:80:bf:ba:36:f4:20:2e:bf:84:06:ae:f1:82:ce:44:57:d1: 4e:80:0e:14:ba:ab:57:b0:eb:ea:13:78:4a:df:e8:e5:df:2d: a1:1d:14:d5:1e:b3:64:2c:a1:c2:64:0d:66:07:ec:4b:e2:8e: 6f:8a:2b:c2:82:12:fc:e0:84:09:75:80:4e:d2:39:32:ea:2a: 84:a7:a9:aa:23:de:90:3a:80:3f:8f:13:5d:f5:90:d8:b3:ae: 6e:51:2c:16:eb:d3:5c:f6:40:29:6f:0f:68:21:a1:a6:01:b2: cf:a5:a2:a0:31:82:84:7d:d8:60:eb:71:16:61:25:69:ba:d6: 2a:ce:f6:90:a3:6d:5a:63:e2:7e:4b:0c:d9:b0:84:25:24:fd: 80:fc:fe:89:3c:90:03:be:76:ea:ca:70:75:87:e5:8f:21:f8: 7e:e6:10:3a:1d:c5:ec:ed:96:24:42:e8:15:ae:c5:62:8f:bd: c8:1a:55:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE6FPi8P7dpe1FCBBEDdSt7dIjf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ3MjhDQTMzMzA3MzY5MEYyQTdGNkI3N0QyQ0YzRkVB RTQ5QUFCMDAeFw0yNjExMDQxNzA1MDdaFw0yNjExMDUxODQxMDdaMDMxMTAvBgNV BAMTKDU5MUNEMzI0NUJDOEU2MEVCQUE4QTFDODgwMzlCQkE5Rjg3N0YzNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2+0du6LIapQSbmRR5b5Wpb+YH pGSMz8c2ugkYxgcapORuXbGBXGdexH4hHQR8ZcklrEtTxoFOY9JNOYGvB5NBcNKS wciUwgxYbrFl+mJFwAv+JT8UaCfP5l3dVGi1u40zBr184DZfGybydGUOdEjA6oql 8UqHiTAzsAma4EjV9xEzRAucira3F+tkJ2UURoEFrMxyq0vi9qpJOi5CC9teR09I acv2OQhosuDFklSwtQapRsKFIpHPvjSAZ55DpXMzgQW/EreMpfB9IB3SCn+51Guj j6duoEj3Fq7mD9MnNBJHmuWNq+f1dOlF7aNLxB6OSpK71+gclNUFRLk7Y+PXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWRzTJFvI5g66qKHIgDm7qfh3804wHwYDVR0j BBgwFoAUnXKMozMHNpDyp/a3fSzz/q5JqrAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU1ZTkxMzEtM2FiYy00YWJkLWJkOTItYTc1NWZhYjkxMzA1LzAvOUQ3MjhDQTMz MzA3MzY5MEYyQTdGNkI3N0QyQ0YzRkVBRTQ5QUFCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDcyOENBMzMzMDczNjkwRjJBN0Y2Qjc3RDJDRjNGRUFFNDlB QUIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU1ZTkxMzEtM2FiYy00YWJkLWJk OTItYTc1NWZhYjkxMzA1LzAvOUQ3MjhDQTMzMzA3MzY5MEYyQTdGNkI3N0QyQ0Yz RkVBRTQ5QUFCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhpHb5dG8rWHw7s5DH+bq4MwST9MDlAXbZ7 jrseax6/ISG0kY19RCWw+0N+sLppCIYgbcaT2P837m0FNEtdz9vYkD6yQT2+L2CA v7o29CAuv4QGrvGCzkRX0U6ADhS6q1ew6+oTeErf6OXfLaEdFNUes2QsocJkDWYH 7Evijm+KK8KCEvzghAl1gE7SOTLqKoSnqaoj3pA6gD+PE131kNizrm5RLBbr01z2 QClvD2ghoaYBss+loqAxgoR92GDrcRZhJWm61irO9pCjbVpj4n5LDNmwhCUk/YD8 /ok8kAO+durKcHWH5Y8h+H7mEDodxeztliRC6BWuxWKPvcgaVR0= -----END CERTIFICATE-----Generated at Thu Nov 5 01:17:09 2026 by rpki-client