$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft File: 9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft (raw, json) Hash identifier: JQhmrf06yN6du31UfRJWy+ZHyf+Y7kUdKUcvZWQr7zY= Subject key identifier: 52:F7:C8:AC:C5:37:51:42:0D:A1:98:8F:29:B0:94:FE:61:85:B6:88 Authority key identifier: 9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00 Certificate issuer: /CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800 Certificate serial: 4AF3720A606E25D7885322905D5F940EAAD88B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft Manifest number: ED Signing time: Tue 27 Oct 2026 00:15:34 +0000 Manifest this update: Tue 27 Oct 2026 00:10:34 +0000 Manifest next update: Wed 28 Oct 2026 02:49:34 +0000 Files and hashes: 1: 3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (hash: 2N+TEQ769mQU4C1i4Rld3w1DT7X5Tq5lgzhroXjz5Hg=) 2: 9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl (hash: YRSfG5+CTdPvLysUB42J/brZj0TkMEaqxug6CAEqkI8=) 3: 3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (hash: J9RbUPOqUx6qGs/3TSnBbVnRso5umnmyOklAgJwt1Js=) 4: 3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (hash: WkzU0ifpIbp5OQ/6TDxMH+vwFG2tqv2mqNzHskMqmF0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 02:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f3:72:0a:60:6e:25:d7:88:53:22:90:5d:5f:94:0e:aa:d8:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800 Validity Not Before: Oct 27 00:10:34 2026 GMT Not After : Oct 28 02:49:34 2026 GMT Subject: CN=52F7C8ACC53751420DA1988F29B094FE6185B688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b2:94:68:10:bf:12:d1:29:12:66:82:9d:01: 7d:6c:f4:56:0d:09:b5:3b:dc:9d:2d:43:1b:68:6f: e3:2b:d6:91:2b:7a:8a:e3:3d:12:b2:b8:2e:fc:9c: ac:74:de:6e:ef:91:65:21:17:06:45:fa:2b:ba:d4: 7b:27:5d:49:40:73:fa:f5:f0:c8:3b:45:8f:5e:74: 95:db:2c:18:9e:00:3e:92:dc:5d:8b:ca:47:fc:ef: 85:9e:12:ac:2e:d8:72:77:a5:ed:91:40:3c:6f:21: 44:f2:ff:a0:fb:93:21:b7:4e:75:7a:08:b4:de:3c: 06:1e:97:7a:91:e0:ca:09:98:58:46:08:c5:45:44: 53:5c:2d:7b:82:b1:08:4c:3f:a9:86:86:92:d6:ce: 24:fc:a0:50:55:71:78:b6:5b:bf:ea:37:23:fa:86: 42:97:f0:6a:02:83:74:3d:aa:17:af:2a:0b:ea:ab: 58:6a:91:14:02:6b:b8:68:0c:ce:44:bc:b5:86:04: 83:db:0a:2f:50:2c:3c:49:79:79:0b:51:53:6a:f4: a6:8f:f6:e6:0e:70:7c:e0:b4:d1:f1:68:79:9a:d2: 69:3f:5c:05:1d:a9:b6:12:a5:54:04:30:43:6f:40: 8e:71:aa:79:62:36:f8:a6:4f:34:3b:6d:2a:19:85: 8d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F7:C8:AC:C5:37:51:42:0D:A1:98:8F:29:B0:94:FE:61:85:B6:88 X509v3 Authority Key Identifier: keyid:9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:b6:d1:56:9f:92:6d:08:83:25:8d:23:6a:48:0f:48:39:36: 78:0c:50:4a:f8:e4:fb:6e:36:9e:79:fc:37:d6:6e:a9:c2:71: b1:de:e3:9f:0f:a8:73:b9:63:87:13:cf:55:88:62:df:85:f8: da:f7:6b:46:27:12:e9:0c:cf:1f:24:a8:10:5a:99:34:04:f2: 1d:f4:38:34:71:3d:55:8d:d3:7f:a8:dd:a3:a3:ac:dc:5b:55: 58:fc:1f:31:46:bc:85:5b:55:d7:a0:96:69:c5:12:ac:49:35: d9:92:c9:ac:a0:ab:e8:9e:84:53:db:7b:6e:d1:2a:ae:37:86: 20:bb:82:a2:cd:34:2f:e6:6a:13:e9:7c:c6:94:81:2b:75:2c: e4:8b:8d:38:b0:9d:25:c0:83:90:1c:2e:e0:53:af:b8:e5:64: eb:7e:3a:fe:1a:a8:e1:b8:c7:43:ee:6b:02:11:ad:c5:72:fa: 31:9b:a3:6d:43:d8:0a:4b:e4:28:00:4f:1f:8e:bd:e4:88:b2: 6f:f5:55:e2:f2:12:2e:26:99:6f:7a:3e:50:7f:aa:06:c0:44: 19:d9:a8:cb:fa:2c:d0:b1:1a:d5:6f:4e:70:85:e9:ff:ba:55: c7:81:92:9e:ca:46:d5:27:4d:96:71:83:6d:62:3b:92:e1:01: 16:01:b9:9b -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITSvNyCmBuJdeIUyKQXV+UDqrYizANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg5QkQ3NTk5OTIzQjhGQjhDODNBQjNCMzAyODdGQkNDNkE5 ODc0ODAwMB4XDTI2MTAyNzAwMTAzNFoXDTI2MTAyODAyNDkzNFowMzExMC8GA1UE AxMoNTJGN0M4QUNDNTM3NTE0MjBEQTE5ODhGMjlCMDk0RkU2MTg1QjY4ODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMaylGgQvxLRKRJmgp0BfWz0Vg0J tTvcnS1DG2hv4yvWkSt6iuM9ErK4LvycrHTebu+RZSEXBkX6K7rUeyddSUBz+vXw yDtFj150ldssGJ4APpLcXYvKR/zvhZ4SrC7Ycnel7ZFAPG8hRPL/oPuTIbdOdXoI tN48Bh6XepHgygmYWEYIxUVEU1wte4KxCEw/qYaGktbOJPygUFVxeLZbv+o3I/qG QpfwagKDdD2qF68qC+qrWGqRFAJruGgMzkS8tYYEg9sKL1AsPEl5eQtRU2r0po/2 5g5wfOC00fFoeZrSaT9cBR2pthKlVAQwQ29AjnGqeWI2+KZPNDttKhmFjUUCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBRS98isxTdRQg2hmI8psJT+YYW2iDAfBgNVHSME GDAWgBSb11mZI7j7jIOrOzAof7zGqYdIADAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80 YjM4OGY2ZS05OTc0LTQ0NTctYWY0Yi01YzljODJmNTBlOTcvMC85QkQ3NTk5OTIz QjhGQjhDODNBQjNCMzAyODdGQkNDNkE5ODc0ODAwLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzlCRDc1OTk5MjNCOEZCOEM4M0FCM0IzMDI4N0ZCQ0M2QTk4NzQ4 MDAuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80YjM4OGY2ZS05OTc0LTQ0NTctYWY0 Yi01YzljODJmNTBlOTcvMC85QkQ3NTk5OTIzQjhGQjhDODNBQjNCMzAyODdGQkND NkE5ODc0ODAwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEA27bRVp+SbQiDJY0jakgPSDk2eAxQSvjk+242 nnn8N9ZuqcJxsd7jnw+oc7ljhxPPVYhi34X42vdrRicS6QzPHySoEFqZNATyHfQ4 NHE9VY3Tf6jdo6Os3FtVWPwfMUa8hVtV16CWacUSrEk12ZLJrKCr6J6EU9t7btEq rjeGILuCos00L+ZqE+l8xpSBK3Us5IuNOLCdJcCDkBwu4FOvuOVk6346/hqo4bjH Q+5rAhGtxXL6MZujbUPYCkvkKABPH4695Iiyb/VV4vISLiaZb3o+UH+qBsBEGdmo y/os0LEa1W9OcIXp/7pVx4GSnspG1SdNlnGDbWI7kuEBFgG5mw== -----END CERTIFICATE-----Generated at Tue Oct 27 11:08:49 2026 by rpki-client