$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft File: C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft (raw, json) Hash identifier: FM0m3cvoE9e9beBsrSdoKcq114Ii5QONKlZ+btSBzpo= Subject key identifier: A1:81:A6:98:C0:0A:9E:9E:5D:49:6E:0D:AC:2E:B7:06:7A:4B:62:92 Authority key identifier: C9:A0:E9:83:26:93:84:F0:0C:CE:85:7E:3A:8E:88:87:BE:9B:7F:C8 Certificate issuer: /CN=C9A0E983269384F00CCE857E3A8E8887BE9B7FC8 Certificate serial: 08165BCEF87163935409319563B96E529D03D48B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft Manifest number: EB Signing time: Sun 25 Oct 2026 17:54:00 +0000 Manifest this update: Sun 25 Oct 2026 17:49:00 +0000 Manifest next update: Mon 26 Oct 2026 19:22:00 +0000 Files and hashes: 1: C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl (hash: znxwrLKEQyfIZhcP9aHLhlz/KDyp/Y43jnnfe0IdZvs=) 2: 3130332e38312e3131302e302f32342d3234203d3e20313530393538.roa (hash: 1X7ytOOeZ7baYbrptPG956jTOlJu9VRB/BLTjRkOU00=) 3: 3130332e38312e3131312e302f32342d3234203d3e20313530393538.roa (hash: l+i6wCpyx98LrkN6bI1lbQddhWqft7YLNRfJYsyxYlA=) 4: 3130332e38312e3131302e302f32332d3234203d3e20313530393538.roa (hash: PAwVQ07BR901R53ceqUz7lmumWNjRRTL4GW80ND0yx0=) 5: 323030313a6466323a623263303a3a2f34382d3438203d3e20313530393538.roa (hash: DNfu6S0MfyEIbWVxydJYNYlQdSHELvJkaaSCCqoydj0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 19:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:16:5b:ce:f8:71:63:93:54:09:31:95:63:b9:6e:52:9d:03:d4:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9A0E983269384F00CCE857E3A8E8887BE9B7FC8 Validity Not Before: Oct 25 17:49:00 2026 GMT Not After : Oct 26 19:22:00 2026 GMT Subject: CN=A181A698C00A9E9E5D496E0DAC2EB7067A4B6292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8f:0f:9a:ef:4f:94:0c:93:fa:56:81:c9:0a: eb:a4:90:78:4a:34:06:21:83:ed:e6:67:ee:d8:ff: f9:78:5b:58:02:46:19:ee:11:df:c5:84:a7:c1:dc: 26:30:a4:2a:c4:99:ec:e6:94:72:7b:cb:3e:18:41: 72:7f:40:f1:61:c3:10:c2:dd:45:17:a6:6c:a5:17: 8c:a6:e3:a3:20:4a:6e:e0:2a:0f:58:08:c4:00:7a: ae:0b:50:1b:ad:e7:c9:35:c2:36:b1:aa:2f:f3:a5: 9d:af:dc:7c:b2:76:1b:3d:08:31:9d:73:7a:f2:a8: d7:bb:33:68:48:90:42:f0:a4:8a:a6:c8:81:7e:6a: 76:ad:eb:ce:c0:56:74:34:e9:85:9a:9b:60:f0:b5: 11:2a:bf:52:88:bb:17:96:97:a4:42:b4:24:c0:b5: 09:69:39:a5:2a:7b:08:80:8f:5e:94:bc:46:98:ac: 84:e1:6d:b6:6d:48:c6:cb:93:88:29:55:c7:7e:65: a5:88:a9:1a:92:53:af:12:26:96:78:c9:44:32:7d: bb:41:b8:c9:5a:88:0f:b3:0f:a0:33:15:91:28:32: 0d:f6:ba:87:69:72:0a:1c:4b:a9:4c:d3:49:b0:9e: ce:52:f8:d8:8a:d8:c3:d2:80:b4:36:63:df:1e:6f: 8a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:81:A6:98:C0:0A:9E:9E:5D:49:6E:0D:AC:2E:B7:06:7A:4B:62:92 X509v3 Authority Key Identifier: keyid:C9:A0:E9:83:26:93:84:F0:0C:CE:85:7E:3A:8E:88:87:BE:9B:7F:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:87:1e:99:f0:01:df:ed:5e:cc:51:c2:da:34:a9:ad:95:e2: 1b:7e:8b:25:94:e2:b7:43:e5:cf:3b:25:80:9c:69:21:19:f7: a6:29:fd:1c:a6:d5:09:a9:e9:89:9a:08:a1:f4:10:93:c1:ff: 29:ff:e2:f2:84:37:21:2a:41:67:84:49:f9:95:77:bb:5c:3d: 09:b9:84:fe:b3:c7:bd:a6:9d:59:62:94:2f:67:74:31:13:b0: e1:45:85:0e:d6:01:10:f1:bf:25:ae:b1:f3:c8:66:89:33:54: e5:92:58:70:ec:b8:9c:f3:d3:a6:f1:69:0e:1e:f4:e0:3e:a8: 95:f7:f4:ff:65:d5:67:a7:f0:10:ef:ad:0f:95:55:b3:a3:13: 16:2a:d5:46:3a:63:35:5d:8e:64:50:5c:c4:17:32:6a:e8:59: 5e:70:e3:ac:b4:b6:d9:4b:f2:17:88:31:b5:96:dc:bd:45:1f: 80:f2:8f:ab:68:31:21:05:c7:5c:29:38:cd:e3:96:19:75:22: 8e:26:1c:62:54:c2:77:18:4e:8e:65:4b:d3:89:78:90:32:d1: 06:72:cd:df:5f:c4:c9:77:4d:23:f4:e5:3f:30:5f:60:40:4e: 6f:ac:94:62:56:6a:75:4c:fb:c8:0b:70:41:0b:e5:f4:21:a9: 2a:cc:79:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCBZbzvhxY5NUCTGVY7luUp0D1IswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlBMEU5ODMyNjkzODRGMDBDQ0U4NTdFM0E4RTg4ODdC RTlCN0ZDODAeFw0yNjEwMjUxNzQ5MDBaFw0yNjEwMjYxOTIyMDBaMDMxMTAvBgNV BAMTKEExODFBNjk4QzAwQTlFOUU1RDQ5NkUwREFDMkVCNzA2N0E0QjYyOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDujw+a70+UDJP6VoHJCuukkHhK NAYhg+3mZ+7Y//l4W1gCRhnuEd/FhKfB3CYwpCrEmezmlHJ7yz4YQXJ/QPFhwxDC 3UUXpmylF4ym46MgSm7gKg9YCMQAeq4LUBut58k1wjaxqi/zpZ2v3Hyydhs9CDGd c3ryqNe7M2hIkELwpIqmyIF+anat687AVnQ06YWam2DwtREqv1KIuxeWl6RCtCTA tQlpOaUqewiAj16UvEaYrIThbbZtSMbLk4gpVcd+ZaWIqRqSU68SJpZ4yUQyfbtB uMlaiA+zD6AzFZEoMg32uodpcgocS6lM00mwns5S+NiK2MPSgLQ2Y98eb4o9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoYGmmMAKnp5dSW4NrC63BnpLYpIwHwYDVR0j BBgwFoAUyaDpgyaThPAMzoV+Oo6Ih76bf8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGYwYmNkYzMtMGZlYS00NzQ3LTk5MDctNjU2NDg2YmFlOGRhLzAvQzlBMEU5ODMy NjkzODRGMDBDQ0U4NTdFM0E4RTg4ODdCRTlCN0ZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUEwRTk4MzI2OTM4NEYwMENDRTg1N0UzQThFODg4N0JFOUI3 RkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGYwYmNkYzMtMGZlYS00NzQ3LTk5 MDctNjU2NDg2YmFlOGRhLzAvQzlBMEU5ODMyNjkzODRGMDBDQ0U4NTdFM0E4RTg4 ODdCRTlCN0ZDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeHHpnwAd/tXsxRwto0qa2V4ht+iyWU4rdD 5c87JYCcaSEZ96Yp/Rym1Qmp6YmaCKH0EJPB/yn/4vKENyEqQWeESfmVd7tcPQm5 hP6zx72mnVlilC9ndDETsOFFhQ7WARDxvyWusfPIZokzVOWSWHDsuJzz06bxaQ4e 9OA+qJX39P9l1Wen8BDvrQ+VVbOjExYq1UY6YzVdjmRQXMQXMmroWV5w46y0ttlL 8heIMbWW3L1FH4Dyj6toMSEFx1wpOM3jlhl1Io4mHGJUwncYTo5lS9OJeJAy0QZy zd9fxMl3TSP05T8wX2BATm+slGJWanVM+8gLcEEL5fQhqSrMeSQ= -----END CERTIFICATE-----Generated at Mon Oct 26 08:30:21 2026 by rpki-client