$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft File: 9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft (raw, json) Hash identifier: YwooN8PI9aNEIYY++zkmI/VWWIaE52g1kuWQ2KCxgEA= Subject key identifier: 51:BF:0E:B1:BA:F4:2C:52:D7:8B:64:A8:62:3B:2E:BF:F5:5F:5F:7A Authority key identifier: 9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF Certificate issuer: /CN=9B995ECA9CF77E66AB04370A6C3562ADCD7413EF Certificate serial: 7F6656C4222AF763A8D814DA581A31099E133649 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft Manifest number: EB Signing time: Sun 25 Oct 2026 20:06:56 +0000 Manifest this update: Sun 25 Oct 2026 20:01:56 +0000 Manifest next update: Mon 26 Oct 2026 23:37:56 +0000 Files and hashes: 1: 3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa (hash: 0GXiVqHET4FIeA3plxHWjQU7xk7vNPKZIk6ziqpvvGY=) 2: 9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl (hash: jqCuPon2X8eYNXVAHHviD1btPjkWDYcy3R/FV8k7fTE=) 3: 3130332e3133302e38322e302f32332d3233203d3e20313530393636.roa (hash: oYvVYAWqY5/XajF618G7pKQtRtEqOMlHPhGTTZeide8=) 4: 3130332e3133302e38332e302f32342d3234203d3e20313530393636.roa (hash: +yASWV2qPXNVH0dMs+ql82F9yTnpzpBrn8UO30QUNqI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:66:56:c4:22:2a:f7:63:a8:d8:14:da:58:1a:31:09:9e:13:36:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B995ECA9CF77E66AB04370A6C3562ADCD7413EF Validity Not Before: Oct 25 20:01:56 2026 GMT Not After : Oct 26 23:37:56 2026 GMT Subject: CN=51BF0EB1BAF42C52D78B64A8623B2EBFF55F5F7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:85:7e:32:71:df:78:ad:50:3f:df:59:45:54: 7c:59:4c:77:5d:4e:d7:e3:7f:73:3d:f5:f8:cd:e4: 4e:cc:fa:2e:9d:8f:1d:2d:85:91:21:37:a6:08:75: 05:3d:9c:8a:c0:ed:e5:37:c5:48:f4:66:b5:60:15: 6f:9f:c3:b1:f7:4e:69:7b:92:26:fa:ea:5e:86:91: 62:0e:3c:53:f5:cc:53:06:9d:0e:fa:d3:f1:17:c4: 9f:fb:fe:66:cc:53:61:5c:f6:d8:6a:c2:87:8d:8e: 75:7d:01:4a:60:ee:75:18:72:f6:e1:c1:28:ad:28: 2b:56:92:c5:ec:59:be:cf:c0:85:51:73:87:95:b0: 63:b9:bc:c0:b3:63:af:ef:2b:b5:2c:fc:b6:68:18: 0d:27:56:90:cf:eb:d0:c3:a5:5e:33:8d:e5:48:38: 99:d9:cb:b6:de:4b:11:66:74:bf:58:9d:d7:64:62: 3f:15:69:73:ab:28:ad:b4:2f:c3:47:d5:09:8e:1b: 31:65:f7:23:ce:29:92:82:e5:e3:e8:6a:7a:33:18: 2a:ca:ea:5b:b0:c8:46:fd:d2:31:cd:40:bd:54:4f: c2:b6:74:6d:19:bb:54:f0:c6:12:e6:5a:f2:03:57: c6:f7:4e:16:85:de:fe:de:0d:56:48:a9:62:cf:dd: 47:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BF:0E:B1:BA:F4:2C:52:D7:8B:64:A8:62:3B:2E:BF:F5:5F:5F:7A X509v3 Authority Key Identifier: keyid:9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:54:9d:40:d5:c6:5b:6a:bc:b6:e4:c7:ef:a6:c7:ed:6f:4e: 18:34:24:8b:b0:23:f9:e1:b3:3c:77:ae:b0:b7:04:30:d3:bc: 7a:07:14:c7:bf:7b:2e:6c:c8:5f:1e:c5:a8:bf:6c:9b:57:c4: e3:16:b7:61:02:42:6b:95:db:99:ce:68:67:c1:bc:c6:a5:2d: 24:9b:be:96:6d:a3:85:e8:97:69:5c:79:dd:39:0e:9e:ea:4e: b8:ed:66:cb:3c:34:62:69:fa:08:b5:aa:e7:e5:f0:49:7d:e9: 10:00:9f:c8:59:bf:2d:74:57:75:1e:71:0c:81:25:4c:f7:e7: fa:c7:8a:15:f4:08:82:27:e4:96:06:c2:e8:9d:5d:55:af:46: f8:44:b4:fe:cd:31:94:50:77:58:ca:fe:b0:41:0d:02:6c:74: 4e:5f:34:d2:ac:9d:09:98:a7:90:dc:94:e9:06:a2:a8:20:d0: c6:a1:37:19:7b:14:34:01:32:25:c7:3b:0c:95:1c:07:62:9d: ff:1a:9a:f7:be:28:b7:fa:4f:e8:6a:0f:18:cb:df:8c:7d:f8: e2:c0:58:75:45:02:d8:2c:cd:d0:12:12:de:a1:ed:2b:53:8d: bd:78:b9:d1:2d:c8:20:50:86:de:13:5f:23:0d:73:56:ff:f2: 19:e4:fb:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2ZWxCIq92Oo2BTaWBoxCZ4TNkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI5OTVFQ0E5Q0Y3N0U2NkFCMDQzNzBBNkMzNTYyQURD RDc0MTNFRjAeFw0yNjEwMjUyMDAxNTZaFw0yNjEwMjYyMzM3NTZaMDMxMTAvBgNV BAMTKDUxQkYwRUIxQkFGNDJDNTJENzhCNjRBODYyM0IyRUJGRjU1RjVGN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hX4ycd94rVA/31lFVHxZTHdd Ttfjf3M99fjN5E7M+i6djx0thZEhN6YIdQU9nIrA7eU3xUj0ZrVgFW+fw7H3Tml7 kib66l6GkWIOPFP1zFMGnQ760/EXxJ/7/mbMU2Fc9thqwoeNjnV9AUpg7nUYcvbh wSitKCtWksXsWb7PwIVRc4eVsGO5vMCzY6/vK7Us/LZoGA0nVpDP69DDpV4zjeVI OJnZy7beSxFmdL9YnddkYj8VaXOrKK20L8NH1QmOGzFl9yPOKZKC5ePoanozGCrK 6luwyEb90jHNQL1UT8K2dG0Zu1TwxhLmWvIDV8b3ThaF3v7eDVZIqWLP3UdLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUb8Osbr0LFLXi2SoYjsuv/VfX3owHwYDVR0j BBgwFoAUm5leypz3fmarBDcKbDVirc10E+8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE4NzA2NGItNWYyNy00MjcwLTkwZTQtOTlmNDNhZTg0ZGI3LzAvOUI5OTVFQ0E5 Q0Y3N0U2NkFCMDQzNzBBNkMzNTYyQURDRDc0MTNFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85Qjk5NUVDQTlDRjc3RTY2QUIwNDM3MEE2QzM1NjJBRENENzQx M0VGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE4NzA2NGItNWYyNy00MjcwLTkw ZTQtOTlmNDNhZTg0ZGI3LzAvOUI5OTVFQ0E5Q0Y3N0U2NkFCMDQzNzBBNkMzNTYy QURDRDc0MTNFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRUnUDVxltqvLbkx++mx+1vThg0JIuwI/nh szx3rrC3BDDTvHoHFMe/ey5syF8exai/bJtXxOMWt2ECQmuV25nOaGfBvMalLSSb vpZto4Xol2lced05Dp7qTrjtZss8NGJp+gi1qufl8El96RAAn8hZvy10V3UecQyB JUz35/rHihX0CIIn5JYGwuidXVWvRvhEtP7NMZRQd1jK/rBBDQJsdE5fNNKsnQmY p5DclOkGoqgg0MahNxl7FDQBMiXHOwyVHAdinf8amve+KLf6T+hqDxjL34x9+OLA WHVFAtgszdASEt6h7StTjb14udEtyCBQht4TXyMNc1b/8hnk+8A= -----END CERTIFICATE-----Generated at Mon Oct 26 03:10:25 2026 by rpki-client