$ rpki-client -vvvf rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft File: A9E3887289ED85663942126250F7D66CD58FE1F5.mft (raw, json) Hash identifier: by8TnYEcXY4cHY9Sz1GOv2OmSYGKrZHZAvNlDyaTOPQ= Subject key identifier: CC:4B:F3:D4:85:84:8F:75:D4:68:17:6A:74:D5:39:79:87:9D:D4:D4 Authority key identifier: A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5 Certificate issuer: /CN=A9E3887289ED85663942126250F7D66CD58FE1F5 Certificate serial: 5CAECA8504306C11218074112BE08368B95C2B6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft Manifest number: EB Signing time: Sun 25 Oct 2026 03:43:30 +0000 Manifest this update: Sun 25 Oct 2026 03:38:30 +0000 Manifest next update: Mon 26 Oct 2026 05:51:30 +0000 Files and hashes: 1: 3130332e3136362e3132322e302f32332d3233203d3e20313431393435.roa (hash: JytxgR9jZstQPJBZYCIpgiXASID1MDjbIa5qz0t9YDc=) 2: A9E3887289ED85663942126250F7D66CD58FE1F5.crl (hash: DZu2Nij+rSta1rQmTSQWSI9LiddqnNnBQuvgPkDsVvA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.crl rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ae:ca:85:04:30:6c:11:21:80:74:11:2b:e0:83:68:b9:5c:2b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E3887289ED85663942126250F7D66CD58FE1F5 Validity Not Before: Oct 25 03:38:30 2026 GMT Not After : Oct 26 05:51:30 2026 GMT Subject: CN=CC4BF3D485848F75D468176A74D53979879DD4D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fe:5d:03:de:e9:15:7a:15:5e:77:29:56:36: dc:9d:fc:a0:d8:9e:a6:41:19:c2:3d:a6:9f:87:90: df:3e:77:2f:3e:f2:85:aa:09:3b:63:d2:d4:9c:5c: c6:1b:da:c0:5b:af:80:81:6c:77:74:75:e0:38:33: 35:1d:51:dc:bd:ec:83:9e:73:fa:74:b9:cf:d9:cd: 12:f8:e3:0c:d0:e8:d6:3a:e1:a2:77:1f:7e:eb:82: 16:18:ed:fd:a5:36:71:14:03:2f:0d:dd:01:5e:80: 52:76:42:35:93:ed:58:73:b8:cc:b7:a9:7d:56:69: 84:0d:79:3b:0b:ea:d5:e8:6b:02:16:73:cf:b6:6a: e0:7b:12:bf:86:b7:a8:ab:ba:93:17:a2:ae:28:f1: c6:95:52:81:ac:a8:f5:da:58:4f:31:cd:2b:d3:37: 66:64:40:c1:f8:3d:b2:e6:92:60:05:eb:18:7a:95: 1b:db:d1:77:3a:52:48:26:c8:fe:2d:7a:c5:e3:08: 03:95:c9:32:70:4b:a1:73:2f:ba:c3:b9:b6:c4:b4: 59:ad:99:ed:1e:70:62:f3:b8:42:93:ec:6b:13:51: 6b:65:56:ac:aa:e1:60:51:01:74:36:10:4b:0a:05: 77:5c:8b:2e:39:79:5f:c0:e3:96:78:a9:99:61:7f: 3b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4B:F3:D4:85:84:8F:75:D4:68:17:6A:74:D5:39:79:87:9D:D4:D4 X509v3 Authority Key Identifier: keyid:A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:72:97:10:ef:4e:8a:01:3a:77:2f:76:be:82:1e:ef:0b:9b: 33:f4:e1:79:b3:45:21:23:26:e3:e2:3b:d3:b6:61:6f:e7:80: d1:6e:88:22:7a:e4:90:8d:6e:4d:42:2c:52:61:95:e2:4f:d3: 2d:5c:61:e0:ce:42:6b:88:6f:a8:aa:4e:42:48:96:28:94:72: 3d:c5:17:16:5b:79:1d:41:d0:c2:88:de:6f:4e:d4:aa:7b:75: 41:c5:6f:2f:5a:c7:31:d5:90:8e:a8:f7:d0:d7:6b:e1:38:a2: 4f:1f:66:81:23:16:62:f9:72:0e:6a:7e:25:80:18:ca:4b:58: f7:dc:1e:d6:7c:4c:95:27:ff:b4:5f:94:14:29:b6:b0:e2:be: 98:aa:63:a3:c7:93:db:90:e6:3f:b2:33:65:d2:3c:2a:fc:49: 2c:cd:bb:f5:cd:2f:a0:a2:51:6d:8a:4f:48:b6:57:c1:7b:32: f9:2b:80:9e:b3:b0:4e:4a:9a:a4:5c:20:bf:12:d3:9f:d3:4e: b3:53:7c:d0:d0:75:53:32:e9:b7:ea:a0:2f:65:9b:f9:ca:e1: d2:04:f3:9d:26:8c:a0:2f:6a:d7:90:3b:44:d8:50:6a:d1:67: ae:99:8c:3b:16:39:71:d1:72:fd:e4:f2:5e:75:14:da:db:5f: a9:2a:9a:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXK7KhQQwbBEhgHQRK+CDaLlcK28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFMzg4NzI4OUVEODU2NjM5NDIxMjYyNTBGN0Q2NkNE NThGRTFGNTAeFw0yNjEwMjUwMzM4MzBaFw0yNjEwMjYwNTUxMzBaMDMxMTAvBgNV BAMTKENDNEJGM0Q0ODU4NDhGNzVENDY4MTc2QTc0RDUzOTc5ODc5REQ0RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo/l0D3ukVehVedylWNtyd/KDY nqZBGcI9pp+HkN8+dy8+8oWqCTtj0tScXMYb2sBbr4CBbHd0deA4MzUdUdy97IOe c/p0uc/ZzRL44wzQ6NY64aJ3H37rghYY7f2lNnEUAy8N3QFegFJ2QjWT7VhzuMy3 qX1WaYQNeTsL6tXoawIWc8+2auB7Er+Gt6irupMXoq4o8caVUoGsqPXaWE8xzSvT N2ZkQMH4PbLmkmAF6xh6lRvb0Xc6UkgmyP4tesXjCAOVyTJwS6FzL7rDubbEtFmt me0ecGLzuEKT7GsTUWtlVqyq4WBRAXQ2EEsKBXdciy45eV/A45Z4qZlhfzt/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzEvz1IWEj3XUaBdqdNU5eYed1NQwHwYDVR0j BBgwFoAUqeOIconthWY5QhJiUPfWbNWP4fUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTQzY2M2YTgtZTdhYS00ZjM3LWJkMDgtZjJlYjU3ZTg4NzM2LzAvQTlFMzg4NzI4 OUVEODU2NjM5NDIxMjYyNTBGN0Q2NkNENThGRTFGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOUUzODg3Mjg5RUQ4NTY2Mzk0MjEyNjI1MEY3RDY2Q0Q1OEZF MUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTQzY2M2YTgtZTdhYS00ZjM3LWJk MDgtZjJlYjU3ZTg4NzM2LzAvQTlFMzg4NzI4OUVEODU2NjM5NDIxMjYyNTBGN0Q2 NkNENThGRTFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRylxDvTooBOncvdr6CHu8LmzP04XmzRSEj JuPiO9O2YW/ngNFuiCJ65JCNbk1CLFJhleJP0y1cYeDOQmuIb6iqTkJIliiUcj3F FxZbeR1B0MKI3m9O1Kp7dUHFby9axzHVkI6o99DXa+E4ok8fZoEjFmL5cg5qfiWA GMpLWPfcHtZ8TJUn/7RflBQptrDivpiqY6PHk9uQ5j+yM2XSPCr8SSzNu/XNL6Ci UW2KT0i2V8F7MvkrgJ6zsE5KmqRcIL8S05/TTrNTfNDQdVMy6bfqoC9lm/nK4dIE 850mjKAvateQO0TYUGrRZ66ZjDsWOXHRcv3k8l51FNrbX6kqmu4= -----END CERTIFICATE-----Generated at Sun Oct 25 09:26:35 2026 by rpki-client