$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft File: 9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft (raw, json) Hash identifier: rv/qxXGZQOOEvlDyzJ9o2aoXRayHKbBEr3jfJeyZk2M= Subject key identifier: 5D:2A:A8:B8:A9:5D:C9:46:80:57:FA:6F:A3:7E:29:3E:EC:79:19:72 Authority key identifier: 9A:EB:58:DC:D8:2B:E9:C8:49:6A:50:61:29:6B:76:9F:D6:CE:57:23 Certificate issuer: /CN=9AEB58DCD82BE9C8496A5061296B769FD6CE5723 Certificate serial: 133EEA97A8681A9551D693DE742B99B9F3BD28CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 17:19:21 +0000 Manifest this update: Tue 03 Nov 2026 17:14:21 +0000 Manifest next update: Wed 04 Nov 2026 18:51:21 +0000 Files and hashes: 1: 3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (hash: R4MBAYAEX9Tv0xootJiGEA1eln9suXnVGRSSaR5WyEA=) 2: 9AEB58DCD82BE9C8496A5061296B769FD6CE5723.crl (hash: XEXBR1I1bq83daObtCn0n9TnkOpIibyG1kbTh2iWLTE=) 3: 3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (hash: G6mJxfPd30UDcz5ag6UPMmbiQqjncxx0XmGW9whSIV4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.crl rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 18:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:3e:ea:97:a8:68:1a:95:51:d6:93:de:74:2b:99:b9:f3:bd:28:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AEB58DCD82BE9C8496A5061296B769FD6CE5723 Validity Not Before: Nov 3 17:14:21 2026 GMT Not After : Nov 4 18:51:21 2026 GMT Subject: CN=5D2AA8B8A95DC9468057FA6FA37E293EEC791972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b7:e5:f9:f2:25:ce:a1:cb:e7:3a:46:7f:a5: 9b:53:f5:e8:fc:8d:e0:b3:d1:12:2a:a1:c7:86:57: 8b:b9:e5:ee:26:59:c0:08:ae:e9:be:c0:1f:5c:3c: b3:b8:bf:31:05:6d:53:50:ba:c2:cf:89:ba:30:e2: 44:90:82:df:8a:3d:3c:88:41:78:b7:9b:a5:44:be: 69:3d:80:c5:74:bf:db:75:e4:c7:28:38:b2:7b:73: c7:e3:2c:e4:df:3e:f2:71:35:0f:fa:78:55:9b:9a: b5:89:63:58:d9:2e:c6:fe:66:62:5b:fe:36:2e:66: 59:ee:bd:2f:b3:00:6c:01:4f:20:93:b4:63:3a:f8: 2f:f7:0d:3d:0f:4e:e4:7d:bf:47:c6:fd:1c:ff:45: 87:8e:5f:86:33:cb:ac:a5:6e:3f:4d:6c:3e:10:2b: 04:45:d8:b2:4c:2a:1e:c7:fb:d4:60:c6:84:70:5a: 20:f3:bd:7e:90:58:ee:5e:3f:a6:a4:3e:f9:cc:e2: af:8c:54:b9:18:64:d2:c5:b9:30:e3:f6:e2:49:28: b8:47:0b:7e:0b:dd:f0:9d:6f:30:ae:7b:ff:df:d1: 6d:c2:a9:89:23:ca:6f:8b:91:50:c8:23:d1:8e:61: c0:3a:95:52:fe:b5:e8:44:04:9d:59:16:02:19:9c: f1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2A:A8:B8:A9:5D:C9:46:80:57:FA:6F:A3:7E:29:3E:EC:79:19:72 X509v3 Authority Key Identifier: keyid:9A:EB:58:DC:D8:2B:E9:C8:49:6A:50:61:29:6B:76:9F:D6:CE:57:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:88:5b:fb:d6:63:b5:b5:8d:c7:75:84:3e:45:2e:61:95:99: 98:79:04:93:97:26:ef:ee:fe:fc:bd:78:3e:28:03:39:35:4b: 8c:ed:c3:62:35:d0:fd:2e:3e:da:67:3b:b4:c7:1b:31:cd:33: 39:34:4d:6e:19:81:ce:bf:49:a2:e4:11:d8:f6:51:0d:a5:84: 1a:ef:23:3b:43:fa:15:86:08:d3:0f:88:e9:1c:ce:9a:b0:2b: b6:62:b2:55:1b:b0:ca:db:2c:2b:56:dc:e4:dd:5c:49:2f:8b: c5:df:e7:45:a1:70:bc:d2:df:a3:cf:9b:0c:c3:98:c1:91:37: b9:1d:2c:a4:75:65:ed:66:7e:df:da:13:73:c5:63:57:7f:85: 24:74:9c:fb:1d:bd:6a:5b:c8:5d:95:85:fb:c7:97:83:28:6d: 53:6d:24:6a:09:d4:84:08:5d:75:8b:06:d5:7d:f4:9b:df:96: e7:16:42:ab:c2:0d:4c:7c:24:bb:05:a3:d8:42:10:38:70:e8: cc:b5:85:7d:28:94:73:34:8a:55:95:e1:c5:70:e5:e3:aa:dd: b6:6d:c8:03:b7:ba:de:f3:9d:72:77:54:f4:d6:84:66:63:9e: be:df:9d:d0:61:46:a2:09:06:0c:6a:8f:6d:78:c3:58:5e:00: a8:76:dc:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEz7ql6hoGpVR1pPedCuZufO9KM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFFQjU4RENEODJCRTlDODQ5NkE1MDYxMjk2Qjc2OUZE NkNFNTcyMzAeFw0yNjExMDMxNzE0MjFaFw0yNjExMDQxODUxMjFaMDMxMTAvBgNV BAMTKDVEMkFBOEI4QTk1REM5NDY4MDU3RkE2RkEzN0UyOTNFRUM3OTE5NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCt+X58iXOocvnOkZ/pZtT9ej8 jeCz0RIqoceGV4u55e4mWcAIrum+wB9cPLO4vzEFbVNQusLPibow4kSQgt+KPTyI QXi3m6VEvmk9gMV0v9t15McoOLJ7c8fjLOTfPvJxNQ/6eFWbmrWJY1jZLsb+ZmJb /jYuZlnuvS+zAGwBTyCTtGM6+C/3DT0PTuR9v0fG/Rz/RYeOX4Yzy6ylbj9NbD4Q KwRF2LJMKh7H+9RgxoRwWiDzvX6QWO5eP6akPvnM4q+MVLkYZNLFuTDj9uJJKLhH C34L3fCdbzCue//f0W3CqYkjym+LkVDII9GOYcA6lVL+tehEBJ1ZFgIZnPFBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXSqouKldyUaAV/pvo34pPux5GXIwHwYDVR0j BBgwFoAUmutY3Ngr6chJalBhKWt2n9bOVyMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjc0MTgwMTMtMTY3OS00OTZiLTgwZjYtMmQwNWNjNWJlNzJmLzAvOUFFQjU4RENE ODJCRTlDODQ5NkE1MDYxMjk2Qjc2OUZENkNFNTcyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QUVCNThEQ0Q4MkJFOUM4NDk2QTUwNjEyOTZCNzY5RkQ2Q0U1 NzIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjc0MTgwMTMtMTY3OS00OTZiLTgw ZjYtMmQwNWNjNWJlNzJmLzAvOUFFQjU4RENEODJCRTlDODQ5NkE1MDYxMjk2Qjc2 OUZENkNFNTcyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCIW/vWY7W1jcd1hD5FLmGVmZh5BJOXJu/u /vy9eD4oAzk1S4ztw2I10P0uPtpnO7THGzHNMzk0TW4Zgc6/SaLkEdj2UQ2lhBrv IztD+hWGCNMPiOkczpqwK7ZislUbsMrbLCtW3OTdXEkvi8Xf50WhcLzS36PPmwzD mMGRN7kdLKR1Ze1mft/aE3PFY1d/hSR0nPsdvWpbyF2VhfvHl4MobVNtJGoJ1IQI XXWLBtV99JvflucWQqvCDUx8JLsFo9hCEDhw6My1hX0olHM0ilWV4cVw5eOq3bZt yAO3ut7znXJ3VPTWhGZjnr7fndBhRqIJBgxqj214w1heAKh23B0= -----END CERTIFICATE-----Generated at Wed Nov 4 09:12:28 2026 by rpki-client