$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft File: B9281144646657214FE1ADE5A3228E100E340E53.mft (raw, json) Hash identifier: 2jh4MJPhJ2/7FrSRkMnquZ8CcsgJvI8Qet0LPQmOzOw= Subject key identifier: 68:06:BE:B6:27:95:64:1C:26:0F:A4:B4:F5:0B:01:65:19:61:BD:76 Authority key identifier: B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 Certificate issuer: /CN=B9281144646657214FE1ADE5A3228E100E340E53 Certificate serial: 5D4960B5F78810C793DADFA52EB4909CF30971B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft Manifest number: DE Signing time: Wed 14 Oct 2026 13:27:05 +0000 Manifest this update: Wed 14 Oct 2026 13:22:05 +0000 Manifest next update: Thu 15 Oct 2026 15:23:05 +0000 Files and hashes: 1: B9281144646657214FE1ADE5A3228E100E340E53.crl (hash: C1Vs10OLtWxIE19Y7sG5yn801PFc5Uqp3vhTY+0ppx4=) 2: 3130332e3138302e302e302f32342d3234203d3e2039333431.roa (hash: Ve4ocQOUOq8AQ9gpm5lYh6lO9aEe09tZrNXe/azearo=) 3: 3130332e3138302e302e302f32332d3233203d3e2039333431.roa (hash: GkX4NBYIJf8jri1lDVBbCRWCXCtYyohsWxcf1tLEKh4=) 4: 3130332e3138302e312e302f32342d3234203d3e2039333431.roa (hash: Tgez0mY6SPOTnuCIKB3HlrvFNAAadTv4QI32lWtN/DI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 15:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:49:60:b5:f7:88:10:c7:93:da:df:a5:2e:b4:90:9c:f3:09:71:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9281144646657214FE1ADE5A3228E100E340E53 Validity Not Before: Oct 14 13:22:05 2026 GMT Not After : Oct 15 15:23:05 2026 GMT Subject: CN=6806BEB62795641C260FA4B4F50B01651961BD76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:56:f0:e2:bc:2b:15:db:5c:19:6d:2a:10:69: 7e:5c:4a:53:d0:ea:72:3d:2f:f5:44:52:71:a1:c1: 25:dc:a1:ce:54:0f:22:54:11:d8:42:13:d8:81:38: db:0a:22:80:f4:91:65:f8:bb:6d:83:54:74:18:fa: 86:17:eb:fb:49:89:b6:64:72:ae:0a:0c:95:ba:a6: 6a:b1:9b:68:ee:54:53:05:7d:be:c4:cd:08:e2:6f: dd:6e:31:6b:06:42:47:37:fe:2e:76:b9:a7:e5:11: 48:e5:92:5c:23:60:ed:c9:3f:65:44:6e:be:e7:ee: 03:b0:4a:22:d1:1f:84:87:d0:8f:b4:f3:6b:ec:c0: 32:5f:15:8f:c5:f1:21:10:76:79:d1:9f:fe:e5:92: 5a:db:2b:82:16:b7:8f:35:92:61:23:7c:1e:0c:28: 56:19:5f:27:76:85:fe:4e:bd:bd:f3:17:56:66:57: af:66:62:b3:31:64:64:67:19:ba:c0:9e:bc:9d:73: c5:d7:d4:ad:6c:c4:4f:5a:7c:d5:76:ef:a9:c5:97: bd:7f:50:e9:37:b8:b7:b1:9a:e3:c6:e8:eb:fd:e3: 83:58:1a:74:93:64:8e:e3:7e:03:ed:20:07:3e:23: eb:da:f6:db:ac:2b:9f:21:6e:aa:fd:46:cc:e4:a4: 8a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:06:BE:B6:27:95:64:1C:26:0F:A4:B4:F5:0B:01:65:19:61:BD:76 X509v3 Authority Key Identifier: keyid:B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:40:b0:35:32:62:cf:92:da:1f:17:3a:8b:dd:ee:cd:66:b4: 12:c4:e4:3a:33:6f:a1:12:d3:25:0c:83:5f:b3:68:ba:76:7b: 66:b1:95:65:14:16:99:3e:28:a9:35:b6:1b:55:e1:c8:67:0c: 6f:78:13:0f:67:22:22:34:bd:59:46:18:6b:35:22:bd:a1:0c: 32:11:38:21:d3:8e:af:18:3b:d4:bb:b3:a0:d9:b4:cf:aa:e1: 63:3a:5f:64:18:50:71:9d:98:11:6c:8e:c9:3a:1c:77:fd:46: 9b:0e:42:45:d1:42:db:0f:99:91:77:03:99:96:3c:2e:ed:24: 96:10:f7:83:b9:b4:58:8d:02:d7:b5:b2:1b:e6:20:ec:18:90: 28:ef:74:c9:98:26:57:cb:2e:2a:42:70:c9:3a:76:f6:82:06: 4c:2c:8a:d3:56:c8:3f:40:44:56:ff:6c:cf:6d:d1:0e:bf:fd: 2b:dd:1b:b7:e2:a3:7d:76:25:16:2e:c7:81:ed:ff:a6:13:35: 6e:f0:77:07:62:67:6e:c9:f9:42:39:d4:d2:c4:83:8e:7a:dc: 77:c3:2c:da:f9:bf:1e:10:78:e6:98:b2:da:4e:d8:74:12:20: 10:28:0d:05:ac:42:e0:4b:b0:0e:34:2e:62:0e:a9:70:f2:23: 49:db:ad:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXUlgtfeIEMeT2t+lLrSQnPMJcbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAw RTM0MEU1MzAeFw0yNjEwMTQxMzIyMDVaFw0yNjEwMTUxNTIzMDVaMDMxMTAvBgNV BAMTKDY4MDZCRUI2Mjc5NTY0MUMyNjBGQTRCNEY1MEIwMTY1MTk2MUJENzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxVvDivCsV21wZbSoQaX5cSlPQ 6nI9L/VEUnGhwSXcoc5UDyJUEdhCE9iBONsKIoD0kWX4u22DVHQY+oYX6/tJibZk cq4KDJW6pmqxm2juVFMFfb7EzQjib91uMWsGQkc3/i52uaflEUjlklwjYO3JP2VE br7n7gOwSiLRH4SH0I+082vswDJfFY/F8SEQdnnRn/7lklrbK4IWt481kmEjfB4M KFYZXyd2hf5Ovb3zF1ZmV69mYrMxZGRnGbrAnrydc8XX1K1sxE9afNV276nFl71/ UOk3uLexmuPG6Ov944NYGnSTZI7jfgPtIAc+I+va9tusK58hbqr9RszkpIoPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaAa+tieVZBwmD6S09QsBZRlhvXYwHwYDVR0j BBgwFoAUuSgRRGRmVyFP4a3loyKOEA40DlMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E4YTlhODEtMGE1Mi00YTUwLWI3ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2 NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAwRTM0MEU1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTI4MTE0NDY0NjY1NzIxNEZFMUFERTVBMzIyOEUxMDBFMzQw RTUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E4YTlhODEtMGE1Mi00YTUwLWI3 ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhF MTAwRTM0MEU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpAsDUyYs+S2h8XOovd7s1mtBLE5Dozb6ES 0yUMg1+zaLp2e2axlWUUFpk+KKk1thtV4chnDG94Ew9nIiI0vVlGGGs1Ir2hDDIR OCHTjq8YO9S7s6DZtM+q4WM6X2QYUHGdmBFsjsk6HHf9RpsOQkXRQtsPmZF3A5mW PC7tJJYQ94O5tFiNAte1shvmIOwYkCjvdMmYJlfLLipCcMk6dvaCBkwsitNWyD9A RFb/bM9t0Q6//SvdG7fio312JRYux4Ht/6YTNW7wdwdiZ27J+UI51NLEg4563HfD LNr5vx4QeOaYstpO2HQSIBAoDQWsQuBLsA40LmIOqXDyI0nbras= -----END CERTIFICATE-----Generated at Thu Oct 15 00:17:33 2026 by rpki-client