$ rpki-client -vvvf rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft File: A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft (raw, json) Hash identifier: KHRSTzsPH3m+eWaC7NQenifEnp5eaIXH1Osbb6L1jH8= Subject key identifier: 37:6D:F5:D1:BE:64:B7:C1:C8:0F:5A:74:02:13:94:B2:60:9D:E8:57 Authority key identifier: A9:78:8B:28:1E:44:81:BB:EF:C7:DC:CD:C6:D1:8C:F4:D3:6B:3D:6E Certificate issuer: /CN=A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E Certificate serial: 08AF50405B2558CFC5669062E094B3AAA8C7E463 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft Manifest number: EB Signing time: Sun 25 Oct 2026 07:00:03 +0000 Manifest this update: Sun 25 Oct 2026 06:55:03 +0000 Manifest next update: Mon 26 Oct 2026 10:03:03 +0000 Files and hashes: 1: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: LzRdfO8uQHGjjJx+IZG72L+49qDt2LuDV7Qzeoi9vMg=) 2: A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.crl (hash: Tea+XcMrp2Pg9xSw/Vj6+6iGtO49b4XaW0k6SuALe5I=) 3: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: +X4DdSQ9xtq8kPseZiuCwH6E+1VNqzzRG0A2Dn7OrXc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.crl rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 10:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:af:50:40:5b:25:58:cf:c5:66:90:62:e0:94:b3:aa:a8:c7:e4:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E Validity Not Before: Oct 25 06:55:03 2026 GMT Not After : Oct 26 10:03:03 2026 GMT Subject: CN=376DF5D1BE64B7C1C80F5A74021394B2609DE857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:35:ef:84:4e:ef:98:9f:dc:0d:c3:79:ee:8d: 68:3c:7e:c1:0c:59:96:58:88:57:94:03:ff:b2:aa: 7e:92:3e:62:21:97:0d:51:d8:62:20:42:68:ec:f3: e7:cf:c5:d3:0b:5f:69:a9:32:e5:57:fc:bd:d0:25: a0:6f:38:8b:57:25:43:59:56:8f:7b:bd:e0:4a:d7: a9:df:7b:af:fc:25:b3:97:6d:cd:f2:47:fe:c5:1a: 49:01:68:f9:81:b7:25:1e:5b:78:3e:fa:d9:e9:21: b5:89:d9:68:67:93:23:ab:96:7f:52:96:25:5b:68: 3e:24:ca:6b:73:4d:cd:ae:15:f0:19:02:f2:5b:e7: 85:79:7f:99:99:7d:11:38:1b:f8:80:0c:63:68:9a: 98:e2:7f:33:00:e9:41:45:a3:70:1f:8f:9a:07:49: d9:f6:1e:9a:2e:ac:c0:58:90:fc:89:d6:d2:15:4f: e9:13:bf:19:55:fb:c4:40:85:cc:e4:f6:a4:b9:d9: 35:c8:5c:91:78:13:95:f8:8b:2f:f7:ed:b4:3b:65: ed:41:90:9c:45:66:05:41:29:ec:7f:81:a3:a5:1e: 3b:da:4b:fd:3e:74:2e:a4:e0:68:f2:0e:c0:dc:c4: ec:59:b4:a0:04:ec:e7:2e:2d:be:1e:a9:f3:48:c9: c5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6D:F5:D1:BE:64:B7:C1:C8:0F:5A:74:02:13:94:B2:60:9D:E8:57 X509v3 Authority Key Identifier: keyid:A9:78:8B:28:1E:44:81:BB:EF:C7:DC:CD:C6:D1:8C:F4:D3:6B:3D:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:28:25:b1:8f:2e:ff:50:ef:59:10:e6:7e:cb:13:65:d5:c1: b5:07:c1:30:3b:4d:bf:17:4a:05:ef:24:73:f3:b8:29:2f:a2: 87:d2:69:e4:bb:8f:fd:d3:97:fe:16:f0:5f:64:97:8d:76:a6: 72:22:bc:77:26:f9:8b:86:25:30:d5:f0:1a:14:f6:e7:96:ae: 6f:83:6d:0a:19:67:18:eb:9c:86:ed:27:c9:14:1b:4e:7f:4e: d5:b1:f5:04:5c:03:cf:a7:f8:dc:31:af:fa:9a:b1:92:45:35: 9e:ae:82:58:ca:4c:9e:05:b8:0c:cb:f8:65:14:28:b6:ca:38: 12:d1:cf:19:30:ba:e1:3b:5f:a2:89:72:de:05:39:83:b9:d7: b2:fd:7d:cf:c9:48:7c:e8:e6:60:98:f8:20:82:df:b2:94:c5: 3f:c7:27:a3:d1:6d:d3:cb:04:20:45:a6:e9:66:00:d3:0e:2e: 8d:25:d3:8c:6c:69:15:59:e7:d9:16:6f:07:95:46:c2:77:e4: 31:d9:5b:12:75:61:62:91:f6:5c:c2:fa:04:01:42:45:32:a7: c6:3e:1e:ae:34:04:b4:ef:86:92:81:a8:20:5b:78:8d:3c:05: 6d:1d:61:27:9a:5b:88:2b:f9:24:9f:69:46:9a:fb:33:80:d7: d5:ef:8e:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCK9QQFslWM/FZpBi4JSzqqjH5GMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk3ODhCMjgxRTQ0ODFCQkVGQzdEQ0NEQzZEMThDRjRE MzZCM0Q2RTAeFw0yNjEwMjUwNjU1MDNaFw0yNjEwMjYxMDAzMDNaMDMxMTAvBgNV BAMTKDM3NkRGNUQxQkU2NEI3QzFDODBGNUE3NDAyMTM5NEIyNjA5REU4NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRNe+ETu+Yn9wNw3nujWg8fsEM WZZYiFeUA/+yqn6SPmIhlw1R2GIgQmjs8+fPxdMLX2mpMuVX/L3QJaBvOItXJUNZ Vo97veBK16nfe6/8JbOXbc3yR/7FGkkBaPmBtyUeW3g++tnpIbWJ2WhnkyOrln9S liVbaD4kymtzTc2uFfAZAvJb54V5f5mZfRE4G/iADGNompjifzMA6UFFo3Afj5oH Sdn2HpourMBYkPyJ1tIVT+kTvxlV+8RAhczk9qS52TXIXJF4E5X4iy/37bQ7Ze1B kJxFZgVBKex/gaOlHjvaS/0+dC6k4GjyDsDcxOxZtKAE7OcuLb4eqfNIycX/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN2310b5kt8HID1p0AhOUsmCd6FcwHwYDVR0j BBgwFoAUqXiLKB5Egbvvx9zNxtGM9NNrPW4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjkyMjY5NDgtYjFhMS00Mjk0LTkxNTAtNmFmMGUwYmViZmI4LzAvQTk3ODhCMjgx RTQ0ODFCQkVGQzdEQ0NEQzZEMThDRjREMzZCM0Q2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTc4OEIyODFFNDQ4MUJCRUZDN0RDQ0RDNkQxOENGNEQzNkIz RDZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjkyMjY5NDgtYjFhMS00Mjk0LTkx NTAtNmFmMGUwYmViZmI4LzAvQTk3ODhCMjgxRTQ0ODFCQkVGQzdEQ0NEQzZEMThD RjREMzZCM0Q2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgoJbGPLv9Q71kQ5n7LE2XVwbUHwTA7Tb8X SgXvJHPzuCkvoofSaeS7j/3Tl/4W8F9kl412pnIivHcm+YuGJTDV8BoU9ueWrm+D bQoZZxjrnIbtJ8kUG05/TtWx9QRcA8+n+Nwxr/qasZJFNZ6ugljKTJ4FuAzL+GUU KLbKOBLRzxkwuuE7X6KJct4FOYO517L9fc/JSHzo5mCY+CCC37KUxT/HJ6PRbdPL BCBFpulmANMOLo0l04xsaRVZ59kWbweVRsJ35DHZWxJ1YWKR9lzC+gQBQkUyp8Y+ Hq40BLTvhpKBqCBbeI08BW0dYSeaW4gr+SSfaUaa+zOA19XvjgU= -----END CERTIFICATE-----Generated at Mon Oct 26 02:22:12 2026 by rpki-client