$ rpki-client -vvvf rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft File: B9306D640F988742BB1CB2B19AB9D729636922A3.mft (raw, json) Hash identifier: kDHC5pXORtM+6nzEXH0TIsVuYNnnImutK3fWSbaBnEw= Subject key identifier: EC:7D:16:B2:45:AD:9A:07:68:0F:CA:30:35:65:F0:BC:76:A4:1F:BE Authority key identifier: B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3 Certificate issuer: /CN=B9306D640F988742BB1CB2B19AB9D729636922A3 Certificate serial: 027EE363EF2C50E866BB6721E6FD947234C7E4A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft Manifest number: E9 Signing time: Sun 25 Oct 2026 09:02:46 +0000 Manifest this update: Sun 25 Oct 2026 08:57:46 +0000 Manifest next update: Mon 26 Oct 2026 10:15:46 +0000 Files and hashes: 1: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: axp2eq8WjJ3oyW6DrRyrSevP2DkGuYbEvHXLlB0V2P0=) 2: B9306D640F988742BB1CB2B19AB9D729636922A3.crl (hash: 6OTGl0i53Zi2AIulMEPcLelkpc1Cvo1CBYQZoketNrY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7e:e3:63:ef:2c:50:e8:66:bb:67:21:e6:fd:94:72:34:c7:e4:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9306D640F988742BB1CB2B19AB9D729636922A3 Validity Not Before: Oct 25 08:57:46 2026 GMT Not After : Oct 26 10:15:46 2026 GMT Subject: CN=EC7D16B245AD9A07680FCA303565F0BC76A41FBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6d:78:d0:2a:08:29:39:9a:e8:46:4b:2e:67: 27:71:bc:b7:f3:80:e7:d3:79:95:27:09:1d:f7:ba: 1b:fe:97:7b:67:4d:d4:b0:7f:4a:29:2f:3e:82:46: ae:96:3b:a3:30:2b:20:e0:1b:a6:7e:d5:9d:78:93: 7b:1b:fa:4c:24:6c:75:d7:73:dc:ff:d7:82:20:37: 72:ae:bf:fb:f3:5c:b3:67:ff:7e:1d:67:4f:01:11: 58:62:08:d0:b9:b2:30:cc:58:05:0c:4c:b8:ac:21: ba:d4:4f:c6:ff:8b:84:e0:87:0a:db:18:5e:f5:c6: e9:ea:73:26:cb:4d:0f:93:f7:3b:09:2f:42:2f:c5: b4:52:82:76:a5:26:0e:93:d8:fa:19:a8:37:94:3c: c1:66:67:d1:82:b2:36:42:3a:08:f4:ab:a6:f9:c8: c5:c5:de:2f:bb:16:50:cf:5e:1d:7a:90:eb:fe:f9: 35:37:d6:e6:46:50:89:73:fd:70:22:5d:05:9f:21: d2:b8:25:ff:87:fe:9a:ba:91:ce:50:de:c8:02:0f: 12:04:67:1f:a5:12:6e:54:f3:ff:bb:5c:d0:a1:ed: d0:01:d7:97:67:41:f0:85:6f:05:c5:e2:dc:5c:a5: 54:ae:df:85:a4:4c:4b:c6:ac:0f:d1:17:80:a3:22: 60:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7D:16:B2:45:AD:9A:07:68:0F:CA:30:35:65:F0:BC:76:A4:1F:BE X509v3 Authority Key Identifier: keyid:B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:2d:a2:19:45:96:c9:b3:9d:b4:d6:61:61:fa:71:0e:99:61: 56:66:c6:b3:4d:ba:7d:12:3d:96:44:56:75:ca:2b:92:34:a9: 46:e8:50:e5:3a:ae:fc:ce:56:7e:20:70:ac:94:a9:4b:11:30: 2f:4c:72:a3:c8:21:7f:3d:ed:d6:db:b2:e1:66:94:30:07:8b: 40:d5:23:82:ee:59:e6:a0:c1:c9:4c:8b:f3:b1:b5:e4:36:56: fd:5a:fb:5e:00:03:d9:0a:50:7c:a7:90:e2:6e:ad:a3:b8:b1: 89:09:d2:57:59:36:cb:fa:e2:d9:6e:57:47:fe:39:ee:9d:18: 34:7c:cd:07:f0:3c:95:5b:33:f9:07:c9:d5:87:b7:8b:e4:7c: 82:c7:76:b4:ac:58:af:5c:90:fe:2b:c2:0a:d5:63:ae:a5:a5: 22:bb:65:3b:29:c5:b2:26:60:84:e9:8f:08:53:c3:8e:5c:0c: f1:b7:a0:ad:b5:be:26:cc:81:96:06:87:2c:2a:83:8a:00:62: 90:4e:26:d4:ae:f1:00:e6:ce:92:17:ba:49:f6:8e:08:07:1d: d5:06:bb:c5:fe:d7:7e:30:16:5e:78:3f:5c:7c:f2:37:02:3e: bb:ef:28:62:ff:e3:b9:03:7e:51:72:c6:cc:cf:0d:1c:7f:d0: a8:d7:45:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAn7jY+8sUOhmu2ch5v2UcjTH5KEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkzMDZENjQwRjk4ODc0MkJCMUNCMkIxOUFCOUQ3Mjk2 MzY5MjJBMzAeFw0yNjEwMjUwODU3NDZaFw0yNjEwMjYxMDE1NDZaMDMxMTAvBgNV BAMTKEVDN0QxNkIyNDVBRDlBMDc2ODBGQ0EzMDM1NjVGMEJDNzZBNDFGQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNbXjQKggpOZroRksuZydxvLfz gOfTeZUnCR33uhv+l3tnTdSwf0opLz6CRq6WO6MwKyDgG6Z+1Z14k3sb+kwkbHXX c9z/14IgN3Kuv/vzXLNn/34dZ08BEVhiCNC5sjDMWAUMTLisIbrUT8b/i4Tghwrb GF71xunqcybLTQ+T9zsJL0IvxbRSgnalJg6T2PoZqDeUPMFmZ9GCsjZCOgj0q6b5 yMXF3i+7FlDPXh16kOv++TU31uZGUIlz/XAiXQWfIdK4Jf+H/pq6kc5Q3sgCDxIE Zx+lEm5U8/+7XNCh7dAB15dnQfCFbwXF4txcpVSu34WkTEvGrA/RF4CjImAnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7H0WskWtmgdoD8owNWXwvHakH74wHwYDVR0j BBgwFoAUuTBtZA+Yh0K7HLKxmrnXKWNpIqMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNiMmVlNzQtOGMzYy00YmMzLWI2ZmItZjM1YjIwMGEyMGViLzAvQjkzMDZENjQw Rjk4ODc0MkJCMUNCMkIxOUFCOUQ3Mjk2MzY5MjJBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTMwNkQ2NDBGOTg4NzQyQkIxQ0IyQjE5QUI5RDcyOTYzNjky MkEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNiMmVlNzQtOGMzYy00YmMzLWI2 ZmItZjM1YjIwMGEyMGViLzAvQjkzMDZENjQwRjk4ODc0MkJCMUNCMkIxOUFCOUQ3 Mjk2MzY5MjJBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAtohlFlsmznbTWYWH6cQ6ZYVZmxrNNun0S PZZEVnXKK5I0qUboUOU6rvzOVn4gcKyUqUsRMC9McqPIIX897dbbsuFmlDAHi0DV I4LuWeagwclMi/OxteQ2Vv1a+14AA9kKUHynkOJuraO4sYkJ0ldZNsv64tluV0f+ Oe6dGDR8zQfwPJVbM/kHydWHt4vkfILHdrSsWK9ckP4rwgrVY66lpSK7ZTspxbIm YITpjwhTw45cDPG3oK21vibMgZYGhywqg4oAYpBOJtSu8QDmzpIXukn2jggHHdUG u8X+134wFl54P1x88jcCPrvvKGL/47kDflFyxszPDRx/0KjXRWE= -----END CERTIFICATE-----Generated at Sun Oct 25 12:03:44 2026 by rpki-client