$ rpki-client -vvvf rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft File: A9E3887289ED85663942126250F7D66CD58FE1F5.mft (raw, json) Hash identifier: FgJord3pq1fNkY5xf4ME5oQCzXlkpYZNL6gXWN+oZbI= Subject key identifier: B4:50:F0:DC:8D:4E:59:9D:C4:20:AC:CD:46:BB:8E:3C:7F:FA:78:C0 Authority key identifier: A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5 Certificate issuer: /CN=A9E3887289ED85663942126250F7D66CD58FE1F5 Certificate serial: 6BE6E3D22C898B0F4C3F8650519B0EFA5FC68544 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft Manifest number: EC Signing time: Sun 25 Oct 2026 21:54:07 +0000 Manifest this update: Sun 25 Oct 2026 21:49:07 +0000 Manifest next update: Mon 26 Oct 2026 23:52:07 +0000 Files and hashes: 1: 3130332e3136362e3132322e302f32332d3233203d3e20313431393435.roa (hash: JytxgR9jZstQPJBZYCIpgiXASID1MDjbIa5qz0t9YDc=) 2: A9E3887289ED85663942126250F7D66CD58FE1F5.crl (hash: Z79+V6LbxGmEf+YfdQDJnDKPj2meqnnODagf6kbfVIg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.crl rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e6:e3:d2:2c:89:8b:0f:4c:3f:86:50:51:9b:0e:fa:5f:c6:85:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E3887289ED85663942126250F7D66CD58FE1F5 Validity Not Before: Oct 25 21:49:07 2026 GMT Not After : Oct 26 23:52:07 2026 GMT Subject: CN=B450F0DC8D4E599DC420ACCD46BB8E3C7FFA78C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ba:04:1a:e1:c9:a5:cd:e6:82:8a:7e:e2:00: 99:94:ca:6d:d2:e1:66:8c:28:02:7d:10:0d:72:cc: bd:97:17:ac:7d:ce:af:45:d8:34:f7:e9:6f:cd:eb: a7:f2:5e:1a:0c:d4:7b:fb:e3:51:0c:3f:8f:43:7c: a1:af:de:7d:d9:02:74:85:85:34:f7:35:ad:31:4d: 95:46:49:1b:6e:84:18:68:40:04:2d:d6:19:fc:2a: a2:94:43:4d:92:25:5a:6f:53:3e:a2:42:8c:0c:63: 8f:88:76:6a:1f:12:1c:23:89:38:15:09:fe:59:45: 32:d2:e4:7c:1a:4f:40:ab:91:5d:95:34:be:26:e2: c3:7b:7d:f0:86:89:12:12:f0:f7:4a:80:3d:9b:90: fb:fb:f2:9b:ac:5d:cf:94:5b:19:ef:8d:cb:0d:d2: d9:91:c9:94:30:17:ed:7c:36:b3:60:8f:6c:8d:75: 31:77:dd:34:ca:09:3b:88:7b:dd:f5:3c:47:fe:1b: d7:5a:b1:02:4b:9f:81:60:d7:04:fb:5f:48:44:c4: 55:d8:e4:7d:19:e9:8e:7c:eb:79:3b:c9:82:8b:b1: ed:01:1d:17:7d:fb:8f:7d:af:6e:53:31:cb:ac:2c: 61:cd:00:26:90:96:96:61:c5:57:5f:21:e7:10:a7: 62:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:50:F0:DC:8D:4E:59:9D:C4:20:AC:CD:46:BB:8E:3C:7F:FA:78:C0 X509v3 Authority Key Identifier: keyid:A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c3:fd:81:bd:fd:9f:6a:d9:94:d3:47:99:84:04:40:6d:b8: 2e:c5:fb:de:cb:6d:42:59:1f:f3:e2:0d:be:21:f7:5f:53:0e: a4:7d:36:36:98:bf:9a:c2:43:2e:46:c0:25:0b:92:6f:8f:26: a0:1f:19:3e:b6:eb:17:2f:a4:7e:14:d6:0d:1f:f0:3c:89:13: 26:e6:ad:1e:c1:09:fc:25:4e:c3:97:75:73:50:6a:cd:ca:21: 1f:0a:c0:00:b3:de:24:f7:2c:a4:b4:a1:15:3b:6d:46:0c:d4: 02:41:e0:4c:1c:b2:92:3f:ec:6e:f9:d3:ae:4e:67:8c:9c:a0: 5e:67:55:de:64:30:00:d2:59:61:9f:18:86:d4:b1:b1:5e:8f: 90:75:31:cf:fb:66:56:7d:d6:b5:da:3b:93:0f:1a:d5:ce:44: e2:d3:8d:af:af:b9:7c:95:e3:2d:0f:53:f6:9a:63:52:d8:0c: 5c:bd:8a:a0:ba:f4:ab:17:ae:1d:95:30:1d:01:e9:26:1f:f4: 44:d9:82:93:ea:53:d9:64:94:c9:f6:9b:4f:e3:86:65:2a:28: 61:4b:8c:87:5f:7b:cd:c5:b8:8f:c4:6b:c8:e5:0e:f4:97:81: da:53:49:d3:42:a4:f0:20:ff:5f:c0:ac:d0:fa:a7:98:37:2d: 53:35:c7:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa+bj0iyJiw9MP4ZQUZsO+l/GhUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFMzg4NzI4OUVEODU2NjM5NDIxMjYyNTBGN0Q2NkNE NThGRTFGNTAeFw0yNjEwMjUyMTQ5MDdaFw0yNjEwMjYyMzUyMDdaMDMxMTAvBgNV BAMTKEI0NTBGMERDOEQ0RTU5OURDNDIwQUNDRDQ2QkI4RTNDN0ZGQTc4QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ugQa4cmlzeaCin7iAJmUym3S 4WaMKAJ9EA1yzL2XF6x9zq9F2DT36W/N66fyXhoM1Hv741EMP49DfKGv3n3ZAnSF hTT3Na0xTZVGSRtuhBhoQAQt1hn8KqKUQ02SJVpvUz6iQowMY4+IdmofEhwjiTgV Cf5ZRTLS5HwaT0CrkV2VNL4m4sN7ffCGiRIS8PdKgD2bkPv78pusXc+UWxnvjcsN 0tmRyZQwF+18NrNgj2yNdTF33TTKCTuIe931PEf+G9dasQJLn4Fg1wT7X0hExFXY 5H0Z6Y5863k7yYKLse0BHRd9+499r25TMcusLGHNACaQlpZhxVdfIecQp2LtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtFDw3I1OWZ3EIKzNRruOPH/6eMAwHwYDVR0j BBgwFoAUqeOIconthWY5QhJiUPfWbNWP4fUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTQzY2M2YTgtZTdhYS00ZjM3LWJkMDgtZjJlYjU3ZTg4NzM2LzAvQTlFMzg4NzI4 OUVEODU2NjM5NDIxMjYyNTBGN0Q2NkNENThGRTFGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOUUzODg3Mjg5RUQ4NTY2Mzk0MjEyNjI1MEY3RDY2Q0Q1OEZF MUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTQzY2M2YTgtZTdhYS00ZjM3LWJk MDgtZjJlYjU3ZTg4NzM2LzAvQTlFMzg4NzI4OUVEODU2NjM5NDIxMjYyNTBGN0Q2 NkNENThGRTFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXD/YG9/Z9q2ZTTR5mEBEBtuC7F+97LbUJZ H/PiDb4h919TDqR9NjaYv5rCQy5GwCULkm+PJqAfGT626xcvpH4U1g0f8DyJEybm rR7BCfwlTsOXdXNQas3KIR8KwACz3iT3LKS0oRU7bUYM1AJB4EwcspI/7G75065O Z4ycoF5nVd5kMADSWWGfGIbUsbFej5B1Mc/7ZlZ91rXaO5MPGtXOROLTja+vuXyV 4y0PU/aaY1LYDFy9iqC69KsXrh2VMB0B6SYf9ETZgpPqU9lklMn2m0/jhmUqKGFL jIdfe83FuI/Ea8jlDvSXgdpTSdNCpPAg/1/ArND6p5g3LVM1x+k= -----END CERTIFICATE-----Generated at Mon Oct 26 01:45:55 2026 by rpki-client