$ rpki-client -vvvf rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft File: C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft (raw, json) Hash identifier: rp1ZZn+3zpxsPZobKVgFhcOSMMU1pYI3UP8dccY5oBk= Subject key identifier: 76:9C:BA:0D:6D:98:6E:15:4C:37:0C:C8:19:24:D1:D8:0A:FE:5F:4D Authority key identifier: C7:06:F9:00:08:D6:29:3E:5E:35:C7:B1:7D:D3:B4:14:EE:B9:A0:A0 Certificate issuer: /CN=C706F90008D6293E5E35C7B17DD3B414EEB9A0A0 Certificate serial: 7BA939577832476FB418BE081E32A9E19B806E9D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 10:37:09 +0000 Manifest this update: Sat 24 Oct 2026 10:32:09 +0000 Manifest next update: Sun 25 Oct 2026 13:18:09 +0000 Files and hashes: 1: 3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa (hash: YUSL8MaAWMcSEFSDLAAA9feKMtSwIZRFYTLiujhrL28=) 2: 3130332e3139312e3139362e302f32332d3234203d3e20313439393334.roa (hash: mQKueKTh7A3uQ/utWkeUKce0jX8tikpIauTi7aYCX5o=) 3: 3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa (hash: IZSn7ER9gKZENb7Yh0xyvq6Sz0bKmm3RwSLw7ctssto=) 4: C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl (hash: jlNwA8GXxbjjpTOs6TUJ7q0j9WLTemIeXKZLZ62AyYY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a9:39:57:78:32:47:6f:b4:18:be:08:1e:32:a9:e1:9b:80:6e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C706F90008D6293E5E35C7B17DD3B414EEB9A0A0 Validity Not Before: Oct 24 10:32:09 2026 GMT Not After : Oct 25 13:18:09 2026 GMT Subject: CN=769CBA0D6D986E154C370CC81924D1D80AFE5F4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c0:7f:75:5b:22:8f:08:9d:e9:90:83:49:eb: 6e:0b:49:8c:f8:28:6a:07:b7:c7:0d:dc:15:ef:b8: a1:b3:6a:cd:62:a7:ed:4c:58:1b:e6:5a:24:48:35: 6e:9c:ee:09:23:01:e2:d8:20:3f:02:4a:14:f8:04: 28:98:cc:9d:73:e5:77:01:21:18:d3:28:b1:36:10: c5:b6:87:7f:14:8e:fc:5a:cf:d9:c7:f7:46:0e:95: ec:9a:3a:91:df:d1:5e:72:7a:3c:13:e9:9f:09:e4: 04:42:24:2d:42:5f:68:a9:e1:28:ba:61:dc:2f:c5: 35:66:b2:23:96:60:f3:83:73:fd:e9:c4:24:b6:03: 5e:b2:80:e7:ca:d5:0c:8c:a0:35:82:b4:a4:5e:6d: 77:59:fa:0a:02:ef:d9:dd:c2:9a:90:fc:ad:a8:a8: 8f:33:4e:29:6c:4a:9c:a6:3b:47:72:18:98:0c:f0: 66:89:17:f4:6c:25:00:ae:bc:fc:80:9a:3e:75:1e: 83:e8:d3:05:00:77:46:98:c0:29:df:16:52:79:c4: 69:75:7f:a5:9c:c4:f0:27:90:a4:87:32:7b:de:7a: 92:79:e8:3d:38:5d:1c:57:57:f5:43:52:d2:26:5c: ee:7e:04:ad:52:6f:89:02:3d:80:2f:25:ad:2c:71: 35:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9C:BA:0D:6D:98:6E:15:4C:37:0C:C8:19:24:D1:D8:0A:FE:5F:4D X509v3 Authority Key Identifier: keyid:C7:06:F9:00:08:D6:29:3E:5E:35:C7:B1:7D:D3:B4:14:EE:B9:A0:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d5:58:0b:4e:da:2a:30:de:a5:2e:ef:1e:8f:17:12:6e:55: 20:fd:d4:fe:dd:91:f5:0e:36:f8:1a:f9:69:4c:ca:a1:cd:cb: 54:97:16:3b:c1:1a:42:7b:1d:97:fc:1f:4b:99:7b:6c:49:16: 32:6e:18:d1:9c:be:f7:b3:4e:64:53:f2:fd:08:16:e3:20:bd: ca:0b:b6:e7:3d:90:ec:2f:2d:de:0a:ae:9c:a1:17:96:26:a3: df:4f:eb:73:3a:70:c6:12:80:f4:39:b6:a5:d8:e6:47:fa:05: ea:f9:47:43:5b:fa:0c:91:db:11:d0:25:e1:09:67:87:8d:74: 54:68:5a:1b:1d:e8:68:92:e0:31:cd:32:e3:df:31:91:b2:a5: 27:58:92:33:53:e6:8f:a7:e8:ca:ea:a5:45:8a:03:24:ae:3c: 42:4e:1b:ab:4b:7a:08:66:e9:12:9a:a5:0a:cb:05:db:60:b7: cf:cc:47:26:85:8b:6f:d4:05:82:03:75:bf:25:61:28:b6:84: 08:d9:c7:d3:c0:1d:b4:8a:3e:51:1d:6c:f6:68:4f:91:6d:be: 6d:b3:df:ee:d3:1d:41:4a:ed:b4:14:60:49:18:b8:f8:b2:18: 3e:7d:8f:17:a9:34:f5:18:2f:b8:9b:c3:f6:06:45:3a:7c:67: 65:a2:71:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe6k5V3gyR2+0GL4IHjKp4ZuAbp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwNkY5MDAwOEQ2MjkzRTVFMzVDN0IxN0REM0I0MTRF RUI5QTBBMDAeFw0yNjEwMjQxMDMyMDlaFw0yNjEwMjUxMzE4MDlaMDMxMTAvBgNV BAMTKDc2OUNCQTBENkQ5ODZFMTU0QzM3MENDODE5MjREMUQ4MEFGRTVGNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWwH91WyKPCJ3pkINJ624LSYz4 KGoHt8cN3BXvuKGzas1ip+1MWBvmWiRINW6c7gkjAeLYID8CShT4BCiYzJ1z5XcB IRjTKLE2EMW2h38Ujvxaz9nH90YOleyaOpHf0V5yejwT6Z8J5ARCJC1CX2ip4Si6 YdwvxTVmsiOWYPODc/3pxCS2A16ygOfK1QyMoDWCtKRebXdZ+goC79ndwpqQ/K2o qI8zTilsSpymO0dyGJgM8GaJF/RsJQCuvPyAmj51HoPo0wUAd0aYwCnfFlJ5xGl1 f6WcxPAnkKSHMnveepJ56D04XRxXV/VDUtImXO5+BK1Sb4kCPYAvJa0scTULAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdpy6DW2YbhVMNwzIGSTR2Ar+X00wHwYDVR0j BBgwFoAUxwb5AAjWKT5eNcexfdO0FO65oKAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzVkNmVmZmYtODViMi00YWY0LTg5YWItNmQ5OGM5NTI3ZGE0LzAvQzcwNkY5MDAw OEQ2MjkzRTVFMzVDN0IxN0REM0I0MTRFRUI5QTBBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzA2RjkwMDA4RDYyOTNFNUUzNUM3QjE3REQzQjQxNEVFQjlB MEEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzVkNmVmZmYtODViMi00YWY0LTg5 YWItNmQ5OGM5NTI3ZGE0LzAvQzcwNkY5MDAwOEQ2MjkzRTVFMzVDN0IxN0REM0I0 MTRFRUI5QTBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfVWAtO2iow3qUu7x6PFxJuVSD91P7dkfUO Nvga+WlMyqHNy1SXFjvBGkJ7HZf8H0uZe2xJFjJuGNGcvvezTmRT8v0IFuMgvcoL tuc9kOwvLd4KrpyhF5Ymo99P63M6cMYSgPQ5tqXY5kf6Ber5R0Nb+gyR2xHQJeEJ Z4eNdFRoWhsd6GiS4DHNMuPfMZGypSdYkjNT5o+n6MrqpUWKAySuPEJOG6tLeghm 6RKapQrLBdtgt8/MRyaFi2/UBYIDdb8lYSi2hAjZx9PAHbSKPlEdbPZoT5Ftvm2z 3+7THUFK7bQUYEkYuPiyGD59jxepNPUYL7ibw/YGRTp8Z2WicVU= -----END CERTIFICATE-----Generated at Sat Oct 24 18:44:47 2026 by rpki-client