$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft File: C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft (raw, json) Hash identifier: 2GUTG4XJKLtR5+fAOW11D/uMhsDGob60NktWE1ZoVHg= Subject key identifier: 57:80:E8:35:AD:85:F1:A3:67:9B:68:3C:62:E3:65:96:00:A7:71:21 Authority key identifier: C9:BA:0F:8C:78:B3:A4:E5:D2:8E:CD:1C:51:7D:C9:84:38:50:87:CA Certificate issuer: /CN=C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA Certificate serial: 52871CE23E0E842893FC7F5838EAE1809F522757 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft Manifest number: EF Signing time: Wed 28 Oct 2026 06:38:20 +0000 Manifest this update: Wed 28 Oct 2026 06:33:20 +0000 Manifest next update: Thu 29 Oct 2026 09:31:20 +0000 Files and hashes: 1: 3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa (hash: 45s4cJ7R43K0N6OFbVA9LlP5PkcF712Aofyn3c/ko+0=) 2: 3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa (hash: qWv000ASHZPLikMYj8Wss1d2EPIqC0119NVLho36do8=) 3: C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl (hash: B60BKYMI6cM8xTP7v1JaSj9B45Jalus7l5rTa1+yh+A=) 4: 3130332e3136372e3136372e302f32342d3234203d3e20313431393834.roa (hash: Ivj60OCLGb1xn+8XUcVw7dceegfwRxZ/Fq0NrXLwLn4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 07:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:87:1c:e2:3e:0e:84:28:93:fc:7f:58:38:ea:e1:80:9f:52:27:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA Validity Not Before: Oct 28 06:33:20 2026 GMT Not After : Oct 29 09:31:20 2026 GMT Subject: CN=5780E835AD85F1A3679B683C62E3659600A77121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:17:05:d8:28:c6:e3:cb:9a:8a:8d:52:b9:30: 77:26:94:42:f3:90:20:23:40:d2:96:32:1f:70:77: c8:61:c9:25:dd:a2:dc:38:30:cf:08:c4:c4:70:ab: 8a:d0:bd:2b:14:9f:e7:ce:79:9c:84:7a:b9:21:41: f4:93:83:29:3e:d0:94:99:63:a1:01:73:19:4b:2f: cb:10:b3:09:c5:8a:0d:ee:62:40:54:e3:e7:0e:e2: 2c:29:e0:6f:7e:76:e3:ea:54:c6:78:a4:cc:29:56: 15:5e:55:7d:ca:9e:64:4f:d4:a5:c2:e6:ca:b1:e3: 93:56:dc:76:94:5a:e5:a5:25:c2:bc:e8:80:2e:a2: 20:cf:1c:62:21:4f:e3:63:a1:48:83:4a:eb:b9:4e: 3a:10:eb:80:66:d9:46:9a:71:6e:00:75:b6:87:e4: e4:b1:26:c9:6b:3e:6d:9a:c2:62:29:10:5e:3f:b1: 75:2c:74:8f:40:05:b5:29:d0:bd:a7:b7:ca:07:a3: 6d:4e:89:1d:53:d1:96:1b:d8:4f:d4:1e:bc:4e:69: b3:84:77:9f:0a:72:54:e4:59:6c:8b:8b:22:f1:fe: 2b:bf:e2:ae:97:38:80:9f:82:66:c0:2f:d5:a9:16: 30:0d:73:9e:37:d1:71:5d:c8:a9:49:a0:a5:86:ce: 4a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:80:E8:35:AD:85:F1:A3:67:9B:68:3C:62:E3:65:96:00:A7:71:21 X509v3 Authority Key Identifier: keyid:C9:BA:0F:8C:78:B3:A4:E5:D2:8E:CD:1C:51:7D:C9:84:38:50:87:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:25:fb:9f:70:3e:b7:e8:0b:bc:54:cf:2e:d5:3e:32:9d:2d: b8:3a:6b:5b:64:2c:29:80:e2:05:37:3d:db:ff:19:16:dc:a7: 7f:09:3e:87:67:55:52:fa:a5:f6:b5:a5:da:ec:2c:3d:5d:34: 34:50:4b:40:df:ea:01:be:8b:59:23:bd:66:35:a7:54:d5:96: 32:9a:8b:0f:56:c6:ac:32:91:67:1f:4e:bd:29:3b:31:e9:75: e4:b1:3c:83:b5:50:5a:f6:a1:84:e3:47:37:b8:3f:45:53:be: c8:98:c1:c1:6d:71:1d:bf:60:59:a9:42:fb:ad:92:f4:73:69: a1:07:20:af:19:24:1f:0e:80:59:97:8f:69:f6:18:ec:f6:81: 7a:f1:a5:49:f1:eb:6e:d8:b2:c6:1f:6d:0e:ce:58:9d:7a:37: a4:f0:6e:1b:d6:3d:a7:7d:62:73:e9:64:f9:0d:7b:e6:d4:be: e9:c4:96:80:ce:84:da:27:3c:cc:c0:9e:d3:a7:ad:fc:ac:26: 92:e1:25:2d:49:75:46:a5:98:43:5a:f3:06:3e:1e:d0:74:9c: 71:4c:9e:77:29:4e:d7:57:b3:e3:3b:ba:d0:64:e2:0f:79:b0: ad:14:96:31:45:ab:d1:fd:22:9c:8c:53:ff:cb:60:b2:3d:8d: aa:61:13:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUocc4j4OhCiT/H9YOOrhgJ9SJ1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTBGOEM3OEIzQTRFNUQyOEVDRDFDNTE3REM5ODQz ODUwODdDQTAeFw0yNjEwMjgwNjMzMjBaFw0yNjEwMjkwOTMxMjBaMDMxMTAvBgNV BAMTKDU3ODBFODM1QUQ4NUYxQTM2NzlCNjgzQzYyRTM2NTk2MDBBNzcxMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6FwXYKMbjy5qKjVK5MHcmlELz kCAjQNKWMh9wd8hhySXdotw4MM8IxMRwq4rQvSsUn+fOeZyEerkhQfSTgyk+0JSZ Y6EBcxlLL8sQswnFig3uYkBU4+cO4iwp4G9+duPqVMZ4pMwpVhVeVX3KnmRP1KXC 5sqx45NW3HaUWuWlJcK86IAuoiDPHGIhT+NjoUiDSuu5TjoQ64Bm2UaacW4AdbaH 5OSxJslrPm2awmIpEF4/sXUsdI9ABbUp0L2nt8oHo21OiR1T0ZYb2E/UHrxOabOE d58KclTkWWyLiyLx/iu/4q6XOICfgmbAL9WpFjANc5430XFdyKlJoKWGzkrbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV4DoNa2F8aNnm2g8YuNllgCncSEwHwYDVR0j BBgwFoAUyboPjHizpOXSjs0cUX3JhDhQh8owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU0MGNmODAtOTMxNS00MmMxLTg0NGUtYmIwMzYyMmEwNWMxLzAvQzlCQTBGOEM3 OEIzQTRFNUQyOEVDRDFDNTE3REM5ODQzODUwODdDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUJBMEY4Qzc4QjNBNEU1RDI4RUNEMUM1MTdEQzk4NDM4NTA4 N0NBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU0MGNmODAtOTMxNS00MmMxLTg0 NGUtYmIwMzYyMmEwNWMxLzAvQzlCQTBGOEM3OEIzQTRFNUQyOEVDRDFDNTE3REM5 ODQzODUwODdDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcl+59wPrfoC7xUzy7VPjKdLbg6a1tkLCmA 4gU3Pdv/GRbcp38JPodnVVL6pfa1pdrsLD1dNDRQS0Df6gG+i1kjvWY1p1TVljKa iw9WxqwykWcfTr0pOzHpdeSxPIO1UFr2oYTjRze4P0VTvsiYwcFtcR2/YFmpQvut kvRzaaEHIK8ZJB8OgFmXj2n2GOz2gXrxpUnx627YssYfbQ7OWJ16N6TwbhvWPad9 YnPpZPkNe+bUvunEloDOhNonPMzAntOnrfysJpLhJS1JdUalmENa8wY+HtB0nHFM nncpTtdXs+M7utBk4g95sK0UljFFq9H9IpyMU//LYLI9japhE30= -----END CERTIFICATE-----Generated at Wed Oct 28 22:48:58 2026 by rpki-client