$ rpki-client -vvvf rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft File: 9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft (raw, json) Hash identifier: zPcIPMYKUaq/DSx/LslyBTUWBwBFgwe2eSCgJDuu4Bw= Subject key identifier: 9E:7E:AB:14:77:58:5E:F4:55:FC:BA:F2:88:D9:64:54:4E:5E:B8:55 Authority key identifier: 9D:8E:FC:0D:64:AA:98:41:BE:1E:38:43:21:BB:2C:12:15:3F:F1:D9 Certificate issuer: /CN=9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9 Certificate serial: 27871863CBDFB0BBF110264FAE9ABE2C761F711A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft Manifest number: EA Signing time: Sat 24 Oct 2026 13:56:26 +0000 Manifest this update: Sat 24 Oct 2026 13:51:26 +0000 Manifest next update: Sun 25 Oct 2026 14:47:26 +0000 Files and hashes: 1: 3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa (hash: 1YCliMmBjyp95uqeBYgoOHcVWy+xU/Vfr+PcnyYk678=) 2: 9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl (hash: dqlDU7wKhGxEHG0P/pPg7ZWJee9e5OYj7iDlA0bt5h0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:87:18:63:cb:df:b0:bb:f1:10:26:4f:ae:9a:be:2c:76:1f:71:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9 Validity Not Before: Oct 24 13:51:26 2026 GMT Not After : Oct 25 14:47:26 2026 GMT Subject: CN=9E7EAB1477585EF455FCBAF288D964544E5EB855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3f:5f:a0:48:fe:22:c4:ae:a2:1f:ac:29:40: 01:4b:74:0e:8d:9a:49:5b:d9:f9:62:1a:ca:1f:b1: 76:dc:a8:bf:4d:b7:60:1b:6b:bd:df:44:fd:a6:c9: 98:bf:72:24:d5:01:a1:8d:98:dd:60:2a:0f:66:19: a6:e6:df:6f:6e:d9:5f:e2:34:17:b7:0f:05:6b:a4: 6b:d4:35:4c:2e:47:e4:26:4b:33:f3:e2:8e:55:be: df:06:8c:9e:aa:5e:87:43:8c:47:ad:3a:ad:c6:c0: 9d:da:e8:50:32:df:cc:f8:f8:77:01:e8:cf:3d:40: 1d:6a:5d:19:4a:03:d5:01:b0:d6:e1:e5:c2:b1:84: 88:7f:b2:71:d9:af:47:fc:1d:a5:f6:6d:93:00:b8: 6f:6c:3b:29:67:2b:e7:28:35:1f:8a:8e:cf:ec:87: d6:f0:83:13:e5:02:59:ce:bc:59:22:fd:71:cb:e1: b3:39:80:79:d0:42:71:19:67:03:bc:a8:1b:50:fb: d6:ba:8d:d7:1f:e3:dc:5e:26:af:fc:83:37:7f:3e: 47:59:ec:19:9c:a6:48:ef:a1:d1:c5:54:65:d0:ad: 9a:f8:36:ab:6f:26:c7:33:96:22:fb:6f:4b:4f:97: 54:56:fd:4f:2e:71:51:6a:dc:2d:05:d6:fd:ac:28: 3b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7E:AB:14:77:58:5E:F4:55:FC:BA:F2:88:D9:64:54:4E:5E:B8:55 X509v3 Authority Key Identifier: keyid:9D:8E:FC:0D:64:AA:98:41:BE:1E:38:43:21:BB:2C:12:15:3F:F1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:95:cc:69:3b:5e:8a:c7:c4:6f:be:60:aa:2f:4c:88:8c:6d: d0:7d:87:22:4b:91:5f:32:2c:3f:86:79:e9:32:02:22:66:79: 46:99:4b:9d:4e:f0:98:e6:56:58:38:91:1e:e9:89:cb:a3:56: eb:f3:c0:4f:80:af:f5:c7:68:47:0d:f0:84:3b:32:9c:d2:9a: 5f:c3:18:7e:d8:35:39:8e:ab:19:f6:1a:fb:9b:fd:24:52:77: e4:be:01:97:08:43:31:07:95:43:e8:83:22:64:9d:cc:e9:c8: 42:d3:5b:d2:d0:d1:24:c2:3b:ce:0a:e2:90:f4:d1:bf:11:ff: 97:84:52:3b:7a:11:6f:90:94:b2:5a:65:87:1b:66:c5:98:55: 67:62:a2:04:1e:82:48:ff:bf:43:19:65:0e:e9:06:42:9f:f2: 04:04:39:e7:50:c4:99:a3:dd:26:ae:fd:73:fd:4f:1f:88:95: b3:4c:69:01:14:e9:df:3b:d1:7d:20:f8:11:65:df:41:b8:5e: 6c:6e:1a:1c:75:1b:f0:dc:0b:c5:c2:f9:b2:9c:f6:82:0e:79: 4f:f1:c7:19:22:45:b2:e2:42:a2:29:5e:24:4a:80:0b:d4:79: f0:5d:82:1a:4d:7e:ec:7f:d1:18:10:95:d1:9a:41:fc:4b:1c: ab:db:12:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ4cYY8vfsLvxECZPrpq+LHYfcRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ4RUZDMEQ2NEFBOTg0MUJFMUUzODQzMjFCQjJDMTIx NTNGRjFEOTAeFw0yNjEwMjQxMzUxMjZaFw0yNjEwMjUxNDQ3MjZaMDMxMTAvBgNV BAMTKDlFN0VBQjE0Nzc1ODVFRjQ1NUZDQkFGMjg4RDk2NDU0NEU1RUI4NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhP1+gSP4ixK6iH6wpQAFLdA6N mklb2fliGsofsXbcqL9Nt2Aba73fRP2myZi/ciTVAaGNmN1gKg9mGabm329u2V/i NBe3DwVrpGvUNUwuR+QmSzPz4o5Vvt8GjJ6qXodDjEetOq3GwJ3a6FAy38z4+HcB 6M89QB1qXRlKA9UBsNbh5cKxhIh/snHZr0f8HaX2bZMAuG9sOylnK+coNR+Kjs/s h9bwgxPlAlnOvFki/XHL4bM5gHnQQnEZZwO8qBtQ+9a6jdcf49xeJq/8gzd/PkdZ 7BmcpkjvodHFVGXQrZr4NqtvJsczliL7b0tPl1RW/U8ucVFq3C0F1v2sKDvnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnn6rFHdYXvRV/LryiNlkVE5euFUwHwYDVR0j BBgwFoAUnY78DWSqmEG+HjhDIbssEhU/8dkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDFkNTFkNDEtYjZjYy00MjBhLWI1YTgtNjdjOGJkNmIwMmFmLzAvOUQ4RUZDMEQ2 NEFBOTg0MUJFMUUzODQzMjFCQjJDMTIxNTNGRjFEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDhFRkMwRDY0QUE5ODQxQkUxRTM4NDMyMUJCMkMxMjE1M0ZG MUQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDFkNTFkNDEtYjZjYy00MjBhLWI1 YTgtNjdjOGJkNmIwMmFmLzAvOUQ4RUZDMEQ2NEFBOTg0MUJFMUUzODQzMjFCQjJD MTIxNTNGRjFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKVzGk7XorHxG++YKovTIiMbdB9hyJLkV8y LD+GeekyAiJmeUaZS51O8JjmVlg4kR7picujVuvzwE+Ar/XHaEcN8IQ7MpzSml/D GH7YNTmOqxn2Gvub/SRSd+S+AZcIQzEHlUPogyJknczpyELTW9LQ0STCO84K4pD0 0b8R/5eEUjt6EW+QlLJaZYcbZsWYVWdiogQegkj/v0MZZQ7pBkKf8gQEOedQxJmj 3Sau/XP9Tx+IlbNMaQEU6d870X0g+BFl30G4XmxuGhx1G/DcC8XC+bKc9oIOeU/x xxkiRbLiQqIpXiRKgAvUefBdghpNfux/0RgQldGaQfxLHKvbEqY= -----END CERTIFICATE-----Generated at Sat Oct 24 20:48:50 2026 by rpki-client