$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft File: 9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft (raw, json) Hash identifier: geA5EHqWNPKQQh9KaRDCEQt5lfX+LXFzDsl4bjk4MOQ= Subject key identifier: B3:F1:10:97:49:B6:64:0E:1A:C9:2D:F1:71:58:23:27:87:4B:60:EE Authority key identifier: 9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9 Certificate issuer: /CN=9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9 Certificate serial: 702FC7B0205CC5AA823A9C02E9AB02EF3A0A0AE9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 14:25:58 +0000 Manifest this update: Tue 03 Nov 2026 14:20:58 +0000 Manifest next update: Wed 04 Nov 2026 14:28:58 +0000 Files and hashes: 1: 9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl (hash: h7Z+Jf9iuRVxvJ2B4BQCgsKRSrT0bKrfDI2BG83Jt1c=) 2: 3136302e32322e3230382e302f32332d3234203d3e20313532383239.roa (hash: geTlR2xlRfEtN72u5a2Y4lLKK2jTFc1FYHlhZP1ErB8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 12:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:2f:c7:b0:20:5c:c5:aa:82:3a:9c:02:e9:ab:02:ef:3a:0a:0a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9 Validity Not Before: Nov 3 14:20:58 2026 GMT Not After : Nov 4 14:28:58 2026 GMT Subject: CN=B3F1109749B6640E1AC92DF171582327874B60EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:65:db:44:80:16:a3:16:14:ca:9f:04:fe:c6: 25:68:6e:46:32:13:b4:8e:60:ae:a2:ff:8c:b4:63: 0b:e2:37:6e:eb:89:b3:69:09:d5:b8:a1:c1:c9:7b: a1:03:92:de:60:e2:32:89:57:49:9e:0f:f3:b3:d1: 18:e0:c7:3f:0e:24:54:e2:64:e3:b8:67:23:70:fc: 95:cb:d6:d0:fd:f2:7d:5d:26:16:39:c6:92:74:b8: 19:40:7b:d7:fe:49:7e:b4:59:bb:fc:38:26:10:55: 91:e6:51:55:61:fd:0d:dd:04:dc:ab:d2:e6:11:70: e5:a4:c0:49:74:ad:a3:88:0a:b4:63:40:9e:8c:62: 77:4c:d4:b3:3d:e0:50:7e:eb:8c:0a:7b:fa:d3:df: bc:29:d7:5d:f5:4f:4a:1d:7d:22:0f:89:d5:e1:55: 6b:c9:11:b4:4f:03:90:18:f8:1e:62:dd:84:0d:bd: db:d6:3e:0a:2e:ec:7f:ad:a7:a6:90:90:2e:a1:82: bf:ea:83:84:84:ab:2c:6e:b9:a3:87:a4:fe:1d:9d: a4:5d:14:02:85:23:b0:d5:d1:85:a4:f8:03:21:4e: ad:75:ef:ee:91:60:10:b5:37:c4:e4:75:39:61:3f: 8a:14:a7:c7:bb:e9:f8:ab:0c:62:2b:fd:5b:8f:37: fe:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F1:10:97:49:B6:64:0E:1A:C9:2D:F1:71:58:23:27:87:4B:60:EE X509v3 Authority Key Identifier: keyid:9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:29:bd:fd:85:f5:76:9f:2c:07:90:94:64:cf:d3:16:33:7e: 50:2d:b3:6e:d6:47:d5:f0:5a:a2:97:32:be:e6:8c:38:2e:02: 85:3e:26:f4:7b:29:b2:c7:11:c4:d2:47:d0:da:dc:f2:1b:6f: cf:15:38:8f:04:2f:5d:ac:9c:83:88:c7:b9:6a:ce:70:d9:56: 42:fc:59:e8:bc:f1:45:f8:96:e5:89:17:4c:9f:a5:c1:b7:3d: 91:02:ed:fc:34:92:25:e3:17:cd:c3:96:60:9e:ab:21:73:d4: 5b:f4:eb:d9:0b:72:46:84:bf:e4:f3:9f:cd:eb:40:94:d2:2f: 0e:29:9c:56:81:07:77:8c:c1:f2:9e:02:82:0d:54:81:d3:61: 23:d1:f7:8d:bd:05:18:7f:29:89:b6:15:57:a9:ad:58:6c:91: c1:f7:03:f9:ad:a7:22:8b:4c:8e:02:8a:75:77:24:f1:47:67: e4:96:4d:a3:7c:e2:bf:5e:de:f1:77:92:4c:a5:36:24:74:1a: 24:b9:b2:40:a8:47:eb:10:42:d9:3a:9a:d3:c2:92:b0:0c:5e: 46:12:8f:c3:0f:f6:7c:8b:5b:1f:6f:50:b0:30:05:2a:41:ca: 42:57:3b:cc:82:da:3d:74:21:cd:a7:d5:ca:e1:0b:ff:d5:d8: 4e:b7:1e:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcC/HsCBcxaqCOpwC6asC7zoKCukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMyM0ZCM0U4Qjg1OTYxRkQ0OEJDNzgwREFGNDRDRUZC NjQ3QzZFOTAeFw0yNjExMDMxNDIwNThaFw0yNjExMDQxNDI4NThaMDMxMTAvBgNV BAMTKEIzRjExMDk3NDlCNjY0MEUxQUM5MkRGMTcxNTgyMzI3ODc0QjYwRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRZdtEgBajFhTKnwT+xiVobkYy E7SOYK6i/4y0YwviN27ribNpCdW4ocHJe6EDkt5g4jKJV0meD/Oz0Rjgxz8OJFTi ZOO4ZyNw/JXL1tD98n1dJhY5xpJ0uBlAe9f+SX60Wbv8OCYQVZHmUVVh/Q3dBNyr 0uYRcOWkwEl0raOICrRjQJ6MYndM1LM94FB+64wKe/rT37wp1131T0odfSIPidXh VWvJEbRPA5AY+B5i3YQNvdvWPgou7H+tp6aQkC6hgr/qg4SEqyxuuaOHpP4dnaRd FAKFI7DV0YWk+AMhTq117+6RYBC1N8TkdTlhP4oUp8e76firDGIr/VuPN/6XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs/EQl0m2ZA4ayS3xcVgjJ4dLYO4wHwYDVR0j BBgwFoAUnCP7PouFlh/Ui8eA2vRM77ZHxukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNjYjUwYjAtNDNjYy00OGQwLTkxZjQtMDViYmRlN2FjMWQwLzAvOUMyM0ZCM0U4 Qjg1OTYxRkQ0OEJDNzgwREFGNDRDRUZCNjQ3QzZFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85QzIzRkIzRThCODU5NjFGRDQ4QkM3ODBEQUY0NENFRkI2NDdD NkU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvOUMyM0ZCM0U4Qjg1OTYxRkQ0OEJDNzgwREFGNDRD RUZCNjQ3QzZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkpvf2F9XafLAeQlGTP0xYzflAts27WR9Xw WqKXMr7mjDguAoU+JvR7KbLHEcTSR9Da3PIbb88VOI8EL12snIOIx7lqznDZVkL8 Wei88UX4luWJF0yfpcG3PZEC7fw0kiXjF83DlmCeqyFz1Fv069kLckaEv+Tzn83r QJTSLw4pnFaBB3eMwfKeAoINVIHTYSPR9429BRh/KYm2FVeprVhskcH3A/mtpyKL TI4CinV3JPFHZ+SWTaN84r9e3vF3kkylNiR0GiS5skCoR+sQQtk6mtPCkrAMXkYS j8MP9nyLWx9vULAwBSpBykJXO8yC2j10Ic2n1crhC//V2E63Hj4= -----END CERTIFICATE-----Generated at Tue Nov 3 22:42:09 2026 by rpki-client