$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft File: 9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft (raw, json) Hash identifier: jg5ni7J8w9acyntfCOK6EvYv9GvoR3ZlFNCoFV8wVcw= Subject key identifier: 30:B3:55:75:E4:D4:23:79:83:D7:83:E7:4D:90:43:61:76:BC:E8:75 Authority key identifier: 9C:47:04:20:4D:F8:9C:A1:B4:1C:1A:06:44:39:95:B3:CC:E3:86:CB Certificate issuer: /CN=9C4704204DF89CA1B41C1A06443995B3CCE386CB Certificate serial: 1D05BB7BDA22FD9735BEAD411D27E1EB100A7BAA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft Manifest number: 017B Signing time: Sun 01 Nov 2026 00:12:52 +0000 Manifest this update: Sun 01 Nov 2026 00:07:52 +0000 Manifest next update: Mon 02 Nov 2026 01:59:52 +0000 Files and hashes: 1: AS23693.roa (hash: fd+rJW2Yj6maI0ruqBjn/av1BJ/W2YoD9jfqLXDN7KQ=) 2: 9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl (hash: 1fAsh3x+6VtQkJXoXU8rYz+LD2eFY7rNR0R4KLrBt6c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 01:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:05:bb:7b:da:22:fd:97:35:be:ad:41:1d:27:e1:eb:10:0a:7b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C4704204DF89CA1B41C1A06443995B3CCE386CB Validity Not Before: Nov 1 00:07:52 2026 GMT Not After : Nov 2 01:59:52 2026 GMT Subject: CN=30B35575E4D4237983D783E74D90436176BCE875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2c:25:20:61:71:4b:79:01:f3:fc:3c:d0:a7: 9d:bc:85:63:37:0c:5a:7e:0b:99:f9:35:a3:33:32: 17:61:78:c8:6e:25:60:21:81:b5:21:2d:83:75:e9: fa:28:f4:65:58:b7:5d:3a:2a:37:5f:7a:46:c3:26: c8:8c:6a:c6:04:a6:88:0a:be:2f:81:af:17:44:f3: b8:09:59:4f:d5:2f:5b:1a:30:3d:7e:aa:7d:39:a0: aa:3b:6f:b6:f8:de:f2:b0:1a:88:2e:c5:be:16:f9: 3c:83:92:c8:b0:16:1b:97:83:85:3c:de:2a:91:ba: f2:02:14:3a:05:47:94:21:44:84:b1:77:32:9a:69: 50:ac:96:14:05:b3:bc:a6:ff:aa:a0:86:e8:1a:db: 34:be:c5:1c:5d:5a:9e:5a:89:d9:4d:3e:a2:af:8f: c9:9c:85:c1:14:e6:64:27:d0:49:19:d1:c6:d1:e3: fa:69:a2:30:34:45:c1:0a:94:19:36:36:c3:f8:21: 63:0d:e7:f7:d6:c0:99:0c:bc:89:6f:6d:ab:44:90: a2:4f:66:b7:0f:be:de:e9:f3:db:1c:31:8c:c1:bd: cb:ba:1e:1e:c7:5b:e4:3d:4a:17:7f:db:88:db:97: 52:d2:bc:82:dd:74:e2:79:55:de:cd:01:d1:8e:26: 32:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B3:55:75:E4:D4:23:79:83:D7:83:E7:4D:90:43:61:76:BC:E8:75 X509v3 Authority Key Identifier: keyid:9C:47:04:20:4D:F8:9C:A1:B4:1C:1A:06:44:39:95:B3:CC:E3:86:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:cf:26:d9:91:27:cf:b1:8a:40:e8:80:9d:c2:1d:0a:96:70: a6:f9:8f:3a:46:5c:1f:cd:9d:9d:c9:14:20:46:d1:e7:38:3c: e0:b8:b8:f8:f8:a4:4a:97:5e:92:15:41:ca:97:a2:b5:87:56: c3:8d:80:40:36:f9:66:d3:ee:d0:ae:bd:49:b7:ae:47:12:30: bf:fe:74:ac:f3:44:2d:99:44:bf:c9:28:6c:49:89:5b:18:e5: d9:90:2b:ef:cd:24:25:b3:c9:6e:d4:b5:c6:f2:30:6f:80:80: a3:fc:69:46:fb:66:29:5a:e5:da:3c:2d:1b:95:8c:ee:22:2c: 97:0c:77:12:e7:6a:bd:27:69:79:a4:8b:46:b9:8e:90:55:34: 0d:a0:fa:68:49:ec:3d:55:fb:f8:c1:a0:9a:96:8d:dc:23:91: d6:b9:03:57:5a:8e:d8:5b:26:0b:8f:24:97:0f:a0:fb:74:d6: 41:35:cd:f8:c1:e0:e5:98:00:ea:eb:82:4b:c4:44:0d:5a:14: 14:83:49:54:4e:e5:b2:4f:1e:e1:cd:f2:f2:60:5f:a3:78:42: 87:44:26:c4:90:e6:d3:c5:08:96:e1:31:26:dc:33:d0:a4:f0: 08:b7:57:3d:49:e1:03:98:1a:b5:da:eb:2a:3a:c6:81:c0:79: 85:19:6e:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHQW7e9oi/Zc1vq1BHSfh6xAKe6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM0NzA0MjA0REY4OUNBMUI0MUMxQTA2NDQzOTk1QjND Q0UzODZDQjAeFw0yNjExMDEwMDA3NTJaFw0yNjExMDIwMTU5NTJaMDMxMTAvBgNV BAMTKDMwQjM1NTc1RTRENDIzNzk4M0Q3ODNFNzREOTA0MzYxNzZCQ0U4NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDALCUgYXFLeQHz/DzQp528hWM3 DFp+C5n5NaMzMhdheMhuJWAhgbUhLYN16foo9GVYt106KjdfekbDJsiMasYEpogK vi+BrxdE87gJWU/VL1saMD1+qn05oKo7b7b43vKwGoguxb4W+TyDksiwFhuXg4U8 3iqRuvICFDoFR5QhRISxdzKaaVCslhQFs7ym/6qghuga2zS+xRxdWp5aidlNPqKv j8mchcEU5mQn0EkZ0cbR4/ppojA0RcEKlBk2NsP4IWMN5/fWwJkMvIlvbatEkKJP ZrcPvt7p89scMYzBvcu6Hh7HW+Q9Shd/24jbl1LSvILddOJ5Vd7NAdGOJjLDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMLNVdeTUI3mD14PnTZBDYXa86HUwHwYDVR0j BBgwFoAUnEcEIE34nKG0HBoGRDmVs8zjhsswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzMyOGYyNGUtZGM3Zi00NTYyLWE1MWQtZTJlMzhjMzY3N2QxLzAvOUM0NzA0MjA0 REY4OUNBMUI0MUMxQTA2NDQzOTk1QjNDQ0UzODZDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QzQ3MDQyMDRERjg5Q0ExQjQxQzFBMDY0NDM5OTVCM0NDRTM4 NkNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvOUM0NzA0MjA0REY4OUNBMUI0MUMxQTA2NDQzOTk1 QjNDQ0UzODZDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPPJtmRJ8+xikDogJ3CHQqWcKb5jzpGXB/N nZ3JFCBG0ec4POC4uPj4pEqXXpIVQcqXorWHVsONgEA2+WbT7tCuvUm3rkcSML/+ dKzzRC2ZRL/JKGxJiVsY5dmQK+/NJCWzyW7UtcbyMG+AgKP8aUb7Zila5do8LRuV jO4iLJcMdxLnar0naXmki0a5jpBVNA2g+mhJ7D1V+/jBoJqWjdwjkda5A1dajthb JguPJJcPoPt01kE1zfjB4OWYAOrrgkvERA1aFBSDSVRO5bJPHuHN8vJgX6N4QodE JsSQ5tPFCJbhMSbcM9Ck8Ai3Vz1J4QOYGrXa6yo6xoHAeYUZbl0= -----END CERTIFICATE-----Generated at Sun Nov 1 19:40:33 2026 by rpki-client