$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft File: C09B0826A8950269AAA9592F3B0B65A3232333C5.mft (raw, json) Hash identifier: frArDMWAkmUVn1J5lV1cxh0Xd3Lze43dcJcEYwtv+6k= Subject key identifier: C6:9D:F0:AE:E1:2C:49:4A:58:69:DC:E8:59:06:4C:38:EC:07:FF:2C Authority key identifier: C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 Certificate issuer: /CN=C09B0826A8950269AAA9592F3B0B65A3232333C5 Certificate serial: 5A23F5F4399B63095A26CB0FDA03C0944949B103 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 15:37:34 +0000 Manifest this update: Mon 02 Nov 2026 15:32:34 +0000 Manifest next update: Tue 03 Nov 2026 18:05:34 +0000 Files and hashes: 1: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: u7ID+/zmEfkiBk9A2DOk1aoUvKs6xhyBLUvlSwziv+4=) 2: C09B0826A8950269AAA9592F3B0B65A3232333C5.crl (hash: hXzIxjZ1DEGgap4i25pd9YqLbGyXs+1FHWifjCTtWQo=) 3: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: /OlYgkp/JUv7mWTKG1jRIEEEMwF4cVrVtCICjMapFuQ=) 4: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: qD0/6TXIm8wKpNkYb5k3M2VEq1Hkh2ZvC2u1LPq71Ck=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:23:f5:f4:39:9b:63:09:5a:26:cb:0f:da:03:c0:94:49:49:b1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C09B0826A8950269AAA9592F3B0B65A3232333C5 Validity Not Before: Nov 2 15:32:34 2026 GMT Not After : Nov 3 18:05:34 2026 GMT Subject: CN=C69DF0AEE12C494A5869DCE859064C38EC07FF2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ca:b1:f9:f3:68:45:83:46:76:7f:06:86:10: 73:9c:61:ad:92:0c:83:c0:d1:6d:d9:8a:2b:7f:2e: 37:69:9f:6b:fb:67:00:04:da:0d:9f:53:bc:6c:e7: 32:e2:4c:86:68:68:93:01:92:51:c0:5f:25:51:cf: 38:25:5a:43:b0:bb:ce:8d:cc:11:f6:0b:48:91:06: f5:48:8e:b0:42:30:ac:22:78:e7:65:93:1f:c9:d8: 32:bb:41:da:87:4a:15:94:7f:26:12:ec:56:82:d1: 9e:01:1a:d7:ad:b6:d7:50:2c:96:ae:2c:af:45:bf: 1a:fc:0a:1f:2a:ea:2b:d9:63:e2:79:bd:3e:18:4d: d5:6d:3f:d9:2a:a5:73:8b:b5:20:dc:93:cb:de:87: 14:1c:3e:19:0f:8b:d2:32:32:97:64:68:21:b6:8e: c2:77:57:04:04:9e:40:f9:59:92:7d:37:73:aa:1a: 8a:2e:98:97:b1:55:ce:5d:5c:b0:64:a5:9e:56:88: 21:76:6f:fe:47:ff:9c:f6:08:d5:86:bd:a9:3d:23: 3d:5b:11:b7:dc:6a:3c:e4:a8:b7:ec:83:61:88:de: 69:8a:25:cf:31:f5:d7:8d:83:ab:25:e7:d6:dd:fb: dd:b2:c8:c7:06:9e:f0:7a:04:17:0c:5c:b3:ce:4c: 67:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9D:F0:AE:E1:2C:49:4A:58:69:DC:E8:59:06:4C:38:EC:07:FF:2C X509v3 Authority Key Identifier: keyid:C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:82:07:b0:82:d8:23:51:bd:cd:ca:81:ed:74:44:3a:d3:7e: 56:2e:b3:2e:20:f9:72:37:7c:3b:fc:69:04:2e:28:d8:7e:4c: ae:19:68:6f:97:07:83:b2:ef:7a:8a:b0:a0:c9:9e:12:81:88: 36:97:cb:cd:83:d4:93:16:01:79:71:68:f1:c6:aa:13:11:f3: e2:bb:fd:f9:99:b9:e2:05:a4:e0:8a:43:13:22:41:ec:5b:fc: 0c:d8:26:f1:5c:f1:9a:38:59:1e:34:5f:f3:63:b5:18:57:5b: fa:d8:36:a9:16:65:4b:48:07:98:9d:91:b2:ca:1f:4d:cf:d9: d3:fa:b8:10:07:8d:7b:8b:74:3e:02:93:0d:e0:90:56:fb:7b: ea:a5:f4:1b:c5:ba:18:93:be:db:08:5b:83:14:19:db:2f:08: e2:6d:4d:6c:f3:d8:ad:0d:00:a1:31:6b:e9:b8:41:b7:1f:77: 57:4d:0e:77:9c:0a:64:c0:3c:13:d6:4e:4f:8d:8d:12:1a:3b: be:c5:f7:50:b4:e4:62:48:86:23:6d:18:eb:38:12:0b:1c:5b: f4:5b:a2:57:6d:b8:06:e7:ae:2b:e7:f9:5b:df:cd:f9:69:5c: 1c:8a:80:d2:c1:5f:5f:89:0c:9e:c3:57:02:0c:6c:2f:ef:b6: d6:a8:2a:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWiP19DmbYwlaJssP2gPAlElJsQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA5QjA4MjZBODk1MDI2OUFBQTk1OTJGM0IwQjY1QTMy MzIzMzNDNTAeFw0yNjExMDIxNTMyMzRaFw0yNjExMDMxODA1MzRaMDMxMTAvBgNV BAMTKEM2OURGMEFFRTEyQzQ5NEE1ODY5RENFODU5MDY0QzM4RUMwN0ZGMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyyrH582hFg0Z2fwaGEHOcYa2S DIPA0W3Ziit/Ljdpn2v7ZwAE2g2fU7xs5zLiTIZoaJMBklHAXyVRzzglWkOwu86N zBH2C0iRBvVIjrBCMKwieOdlkx/J2DK7QdqHShWUfyYS7FaC0Z4BGtetttdQLJau LK9Fvxr8Ch8q6ivZY+J5vT4YTdVtP9kqpXOLtSDck8vehxQcPhkPi9IyMpdkaCG2 jsJ3VwQEnkD5WZJ9N3OqGooumJexVc5dXLBkpZ5WiCF2b/5H/5z2CNWGvak9Iz1b EbfcajzkqLfsg2GI3mmKJc8x9deNg6sl59bd+92yyMcGnvB6BBcMXLPOTGenAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxp3wruEsSUpYadzoWQZMOOwH/ywwHwYDVR0j BBgwFoAUwJsIJqiVAmmqqVkvOwtloyMjM8UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjhkYzA4NDktODNmYi00Y2M4LThjMjEtYmU2Y2E3YTJlZDgzLzAvQzA5QjA4MjZB ODk1MDI2OUFBQTk1OTJGM0IwQjY1QTMyMzIzMzNDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMDlCMDgyNkE4OTUwMjY5QUFBOTU5MkYzQjBCNjVBMzIzMjMz M0M1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvQzA5QjA4MjZBODk1MDI2OUFBQTk1OTJGM0IwQjY1 QTMyMzIzMzNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuCB7CC2CNRvc3Kge10RDrTflYusy4g+XI3 fDv8aQQuKNh+TK4ZaG+XB4Oy73qKsKDJnhKBiDaXy82D1JMWAXlxaPHGqhMR8+K7 /fmZueIFpOCKQxMiQexb/AzYJvFc8Zo4WR40X/NjtRhXW/rYNqkWZUtIB5idkbLK H03P2dP6uBAHjXuLdD4Ckw3gkFb7e+ql9BvFuhiTvtsIW4MUGdsvCOJtTWzz2K0N AKExa+m4Qbcfd1dNDnecCmTAPBPWTk+NjRIaO77F91C05GJIhiNtGOs4EgscW/Rb oldtuAbnrivn+VvfzflpXByKgNLBX1+JDJ7DVwIMbC/vttaoKjE= -----END CERTIFICATE-----Generated at Mon Nov 2 21:16:52 2026 by rpki-client