$ rpki-client -vvvf rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft File: AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft (raw, json) Hash identifier: Ah5lzjycQ/osad3glsFaPME0Eq+m6eZjSc5SWKsnWwk= Subject key identifier: 0D:F1:1D:90:02:1E:39:E1:A8:FC:A8:DF:CF:7E:39:27:2F:79:CA:2D Authority key identifier: AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37 Certificate issuer: /CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37 Certificate serial: 7ABC5961033078451DF97A83EF486670057903EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 06:06:34 +0000 Manifest this update: Sat 24 Oct 2026 06:01:34 +0000 Manifest next update: Sun 25 Oct 2026 09:45:34 +0000 Files and hashes: 1: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: MBpWtzFzVmAP7u3hAToAKtcASLzko7oX/2bZT/TBbZI=) 2: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: IB2TICgSff4yJSUSSgF3kThtgWC7lQMHVpDuh17+3aE=) 3: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: tD1yHxjZ0j66bJ+DN66nXDU83oVTbucVL4RF+tJBNP8=) 4: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: n2RcvCuoWSBBk7Q2wacmccdD3jRe5Nf1cFF5qqE+n5A=) 5: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: yL78lQu3kyFHQYQI6cDLG1nKXK0O4QE98ItjWrrAi8Q=) 6: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: RDOvFNzz7ROaV6kZO6gJyA66/dh82eqn/Lc35nh0ous=) 7: AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl (hash: pR/LwlqRic7NWyArZKPIbp9p2RI6L+YvldTb0Nerow4=) 8: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: nFp9w2oHsKQ17yYOZXKNctJ4tyfP/KDNQ28RwxJQ/Q8=) 9: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: zr3xNZn6WC15a6rQMkorpvpeU21f6+HSwl15C2ZfIoY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:bc:59:61:03:30:78:45:1d:f9:7a:83:ef:48:66:70:05:79:03:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37 Validity Not Before: Oct 24 06:01:34 2026 GMT Not After : Oct 25 09:45:34 2026 GMT Subject: CN=0DF11D90021E39E1A8FCA8DFCF7E39272F79CA2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:32:dc:10:1f:b4:12:69:8c:cb:fe:e9:94: dc:63:83:62:4c:e6:4f:74:2c:2c:dd:ea:3b:c8:2f: 13:26:61:79:9e:1a:12:98:d6:2d:80:7a:fa:b4:f2: 62:18:48:36:11:26:08:4e:17:3e:af:62:07:44:58: 77:b8:82:57:05:55:48:66:83:5e:91:96:f6:39:f8: ec:79:95:fc:4f:b0:2d:50:e6:79:18:69:c0:12:f1: 66:f7:23:1c:cb:64:0a:a1:c4:c2:ec:92:9b:a6:db: 0f:f1:0a:cf:f1:b9:74:9b:c4:57:e6:07:bf:e7:8a: 40:3e:80:e4:a0:06:18:00:8a:b2:2d:1b:b1:1d:a5: f6:7e:85:55:ac:77:3e:35:79:34:ff:20:46:76:f1: a6:60:9c:df:b9:08:20:2f:22:f9:0c:a4:49:63:e0: 01:f9:20:75:98:17:e6:80:fb:6c:6b:eb:9a:9c:03: 05:02:e6:2c:21:49:ee:ae:89:46:e0:fe:ab:0b:d7: 84:9a:e4:74:1b:4e:31:ee:e1:4e:b5:77:30:5f:d4: d5:be:ed:38:84:b8:59:2b:f0:4e:e8:b9:65:d6:9c: b3:7c:8c:ad:c5:1b:60:c7:46:11:1e:a3:ca:a4:37: f8:4c:0f:db:87:09:46:bc:08:f2:62:0a:05:fc:ed: 17:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F1:1D:90:02:1E:39:E1:A8:FC:A8:DF:CF:7E:39:27:2F:79:CA:2D X509v3 Authority Key Identifier: keyid:AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:98:c4:01:37:b6:3c:88:83:3f:7a:d1:ed:41:5a:af:82:41: b1:6b:d9:bd:49:33:7b:a8:ee:80:1e:a2:5b:d8:bd:46:87:5b: d4:e6:6d:db:4a:77:d3:1a:28:47:39:a5:81:13:a1:e0:5e:a5: d5:a2:fe:ec:2d:c7:17:b0:f1:aa:8b:04:b4:7c:1d:58:ad:bd: fb:9f:3e:d9:fb:4e:5b:fe:d3:ac:3d:3d:88:29:d3:1f:85:36: a9:48:41:21:d0:48:6f:b2:a5:95:dc:8b:a8:8d:1e:df:a9:6c: 9d:0e:58:f4:a2:c0:62:ca:ae:15:74:11:12:0d:74:10:75:62: ae:96:05:e3:62:2d:59:10:7c:f6:5a:b2:f0:b9:b5:52:96:52: 10:c4:1b:bc:9b:e2:44:c1:5e:36:b6:a2:47:2c:1d:8a:99:c8: 0a:cd:17:83:6f:03:9d:1d:cd:3c:fb:0b:0b:de:e6:5f:96:94: 4d:14:e9:f5:61:86:26:ac:1b:f0:5a:19:23:7f:85:8f:62:dc: e4:34:c4:70:51:d3:29:ce:01:f7:aa:70:87:7c:98:40:8a:53: 11:8e:f3:e7:e8:75:3b:4a:b8:32:ae:cd:3a:41:95:94:97:cb: 19:b6:15:49:1a:79:0d:03:7b:88:bd:d0:21:c1:2f:7d:b5:99: 65:1c:86:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUerxZYQMweEUd+XqD70hmcAV5A+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQwOTUzMUY0REI3RDlENTA0MDk5OTk4OTEyNkI0RDJE OUZEN0YzNzAeFw0yNjEwMjQwNjAxMzRaFw0yNjEwMjUwOTQ1MzRaMDMxMTAvBgNV BAMTKDBERjExRDkwMDIxRTM5RTFBOEZDQThERkNGN0UzOTI3MkY3OUNBMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBzLcEB+0EmmMy/7plNxjg2JM 5k90LCzd6jvILxMmYXmeGhKY1i2Aevq08mIYSDYRJghOFz6vYgdEWHe4glcFVUhm g16RlvY5+Ox5lfxPsC1Q5nkYacAS8Wb3IxzLZAqhxMLskpum2w/xCs/xuXSbxFfm B7/nikA+gOSgBhgAirItG7EdpfZ+hVWsdz41eTT/IEZ28aZgnN+5CCAvIvkMpElj 4AH5IHWYF+aA+2xr65qcAwUC5iwhSe6uiUbg/qsL14Sa5HQbTjHu4U61dzBf1NW+ 7TiEuFkr8E7ouWXWnLN8jK3FG2DHRhEeo8qkN/hMD9uHCUa8CPJiCgX87RdlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDfEdkAIeOeGo/Kjfz345Jy95yi0wHwYDVR0j BBgwFoAUrQlTH0232dUECZmYkSa00tn9fzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVmZThmOWItOGMzNC00MzQyLWEwZmUtY2ExMDc1ZmJhNWZmLzAvQUQwOTUzMUY0 REI3RDlENTA0MDk5OTk4OTEyNkI0RDJEOUZEN0YzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDA5NTMxRjREQjdEOUQ1MDQwOTk5OTg5MTI2QjREMkQ5RkQ3 RjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQUQwOTUzMUY0REI3RDlENTA0MDk5OTk4OTEyNkI0 RDJEOUZEN0YzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJeYxAE3tjyIgz960e1BWq+CQbFr2b1JM3uo 7oAeolvYvUaHW9TmbdtKd9MaKEc5pYEToeBepdWi/uwtxxew8aqLBLR8HVitvfuf Ptn7Tlv+06w9PYgp0x+FNqlIQSHQSG+ypZXci6iNHt+pbJ0OWPSiwGLKrhV0ERIN dBB1Yq6WBeNiLVkQfPZasvC5tVKWUhDEG7yb4kTBXja2okcsHYqZyArNF4NvA50d zTz7Cwve5l+WlE0U6fVhhiasG/BaGSN/hY9i3OQ0xHBR0ynOAfeqcId8mECKUxGO 8+fodTtKuDKuzTpBlZSXyxm2FUkaeQ0De4i90CHBL321mWUchlM= -----END CERTIFICATE-----Generated at Sat Oct 24 12:47:10 2026 by rpki-client