$ rpki-client -vvvf rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft File: 9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft (raw, json) Hash identifier: aqY4TwVVBJgf2hKaOK7oBRfDO1pyA0P/e/sfAAYkU1o= Subject key identifier: CA:86:28:E2:4E:76:07:0E:9D:C8:DB:39:CC:AF:DC:77:07:6F:15:F4 Authority key identifier: 9A:42:83:F9:6B:70:1E:C6:0E:A4:5F:12:4F:88:81:9D:76:D7:E8:FC Certificate issuer: /CN=9A4283F96B701EC60EA45F124F88819D76D7E8FC Certificate serial: 1EAF4A15B73EFA8617B785E879BEE5D73DEAC210 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 12:19:11 +0000 Manifest this update: Sat 24 Oct 2026 12:14:11 +0000 Manifest next update: Sun 25 Oct 2026 16:07:11 +0000 Files and hashes: 1: 9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl (hash: Bp0QlP08NfNLaQcIJWNkS9u4NWR1kvWRA4y7cHA7gnY=) 2: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: lqSxCFv5WmyrxicOkawzjV/AVzQFgoIxemd6g7X5MqQ=) 3: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 8HBG0p89815vWKkauI6Wn4NeMLGP4fCVAgDc4tDqrGk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 16:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:af:4a:15:b7:3e:fa:86:17:b7:85:e8:79:be:e5:d7:3d:ea:c2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A4283F96B701EC60EA45F124F88819D76D7E8FC Validity Not Before: Oct 24 12:14:11 2026 GMT Not After : Oct 25 16:07:11 2026 GMT Subject: CN=CA8628E24E76070E9DC8DB39CCAFDC77076F15F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c1:d9:0c:80:e8:2e:c4:d3:9b:28:3a:a4:20: db:d0:b2:36:7f:95:16:00:ea:52:6a:0c:0b:54:1c: e7:47:2b:7a:80:3a:aa:e0:29:20:67:d4:8d:67:01: 59:19:03:f6:21:5a:85:f1:9a:09:f9:9c:7a:da:85: bf:59:2e:58:dd:b7:43:19:8d:d3:7c:1f:9b:46:53: f2:ad:3d:2b:9d:b1:70:58:b4:3e:ef:c0:b2:4d:16: 81:38:64:f4:b7:6e:76:c3:2c:1e:bc:b7:bc:48:36: 2c:19:c1:fc:09:c3:12:e9:62:03:2a:fd:9c:5a:a4: 12:1f:aa:3c:65:34:a5:86:cd:e5:3a:32:57:8a:bf: f0:af:b1:68:15:0a:5e:c7:37:45:f2:c0:5a:b5:c5: 2e:18:c1:aa:68:98:05:c4:52:e6:47:5f:7a:23:64: dd:a2:10:88:9e:11:98:86:d7:87:33:28:53:31:83: 9f:f0:9d:d0:41:d6:3c:fc:0f:67:bc:fc:9b:99:77: 59:5d:66:5d:f4:2e:30:6b:cb:8c:d4:25:5d:fc:1e: 9a:4d:87:a9:87:97:e0:78:c7:4a:33:df:2f:13:9d: b8:01:e8:4a:9c:6d:b0:7f:f3:37:7e:4e:e8:a6:6d: bd:cd:45:79:27:28:f2:93:5a:6a:18:39:8d:36:91: 6b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:86:28:E2:4E:76:07:0E:9D:C8:DB:39:CC:AF:DC:77:07:6F:15:F4 X509v3 Authority Key Identifier: keyid:9A:42:83:F9:6B:70:1E:C6:0E:A4:5F:12:4F:88:81:9D:76:D7:E8:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:3e:89:0b:1d:ad:66:82:cb:dc:01:07:66:31:0b:42:10:d3: 57:9f:a1:b9:98:5b:ea:cb:63:e1:22:a4:1a:5f:1e:20:23:d3: b0:9e:b5:00:cc:f0:d6:73:7c:de:d1:e4:93:f4:bb:2d:b4:c8: 48:68:a7:d3:ea:69:04:61:c8:60:8e:02:8d:5e:16:0a:ca:a4: 39:fb:87:0f:7b:cf:e2:8c:67:94:b9:b1:54:3c:de:67:a3:4a: 02:4c:97:42:35:c4:59:11:f2:9b:5d:f3:f8:cf:8c:ed:d0:4e: 7c:75:21:15:76:4d:28:8d:5e:16:d8:40:54:f4:3a:fb:49:d8: 4b:48:dd:87:0f:f4:fd:a2:c0:24:ce:05:23:3c:72:fc:ce:61: c6:3a:08:02:8e:d8:cb:46:5c:a2:19:d8:22:83:68:fa:69:de: 82:32:de:9b:34:88:7d:37:00:d3:f4:d1:93:de:87:f4:30:8b: 53:45:5b:e8:01:9d:5a:29:45:fe:48:ac:37:bc:ee:b9:d4:21: 33:3e:b4:68:f0:61:37:c9:49:38:c9:e5:88:52:28:18:99:4f: 04:cf:c8:9e:ba:54:c3:08:68:1f:77:b2:c4:76:10:13:e0:3f: 12:1d:5c:5d:2f:8a:1a:5e:80:ac:95:5b:03:43:11:c2:f5:21: cf:ef:bb:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHq9KFbc++oYXt4Xoeb7l1z3qwhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0MjgzRjk2QjcwMUVDNjBFQTQ1RjEyNEY4ODgxOUQ3 NkQ3RThGQzAeFw0yNjEwMjQxMjE0MTFaFw0yNjEwMjUxNjA3MTFaMDMxMTAvBgNV BAMTKENBODYyOEUyNEU3NjA3MEU5REM4REIzOUNDQUZEQzc3MDc2RjE1RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClwdkMgOguxNObKDqkINvQsjZ/ lRYA6lJqDAtUHOdHK3qAOqrgKSBn1I1nAVkZA/YhWoXxmgn5nHrahb9ZLljdt0MZ jdN8H5tGU/KtPSudsXBYtD7vwLJNFoE4ZPS3bnbDLB68t7xINiwZwfwJwxLpYgMq /ZxapBIfqjxlNKWGzeU6MleKv/CvsWgVCl7HN0XywFq1xS4YwapomAXEUuZHX3oj ZN2iEIieEZiG14czKFMxg5/wndBB1jz8D2e8/JuZd1ldZl30LjBry4zUJV38HppN h6mHl+B4x0oz3y8TnbgB6EqcbbB/8zd+Tuimbb3NRXknKPKTWmoYOY02kWvBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyoYo4k52Bw6dyNs5zK/cdwdvFfQwHwYDVR0j BBgwFoAUmkKD+WtwHsYOpF8ST4iBnXbX6PwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODMyYzgyM2QtYTRiNy00MDA1LTlhYjgtZDNiMmM4YmJmNzYzLzAvOUE0MjgzRjk2 QjcwMUVDNjBFQTQ1RjEyNEY4ODgxOUQ3NkQ3RThGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTQyODNGOTZCNzAxRUM2MEVBNDVGMTI0Rjg4ODE5RDc2RDdF OEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh YjgtZDNiMmM4YmJmNzYzLzAvOUE0MjgzRjk2QjcwMUVDNjBFQTQ1RjEyNEY4ODgx OUQ3NkQ3RThGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFU+iQsdrWaCy9wBB2YxC0IQ01efobmYW+rL Y+EipBpfHiAj07CetQDM8NZzfN7R5JP0uy20yEhop9PqaQRhyGCOAo1eFgrKpDn7 hw97z+KMZ5S5sVQ83mejSgJMl0I1xFkR8ptd8/jPjO3QTnx1IRV2TSiNXhbYQFT0 OvtJ2EtI3YcP9P2iwCTOBSM8cvzOYcY6CAKO2MtGXKIZ2CKDaPpp3oIy3ps0iH03 ANP00ZPeh/Qwi1NFW+gBnVopRf5IrDe87rnUITM+tGjwYTfJSTjJ5YhSKBiZTwTP yJ66VMMIaB93ssR2EBPgPxIdXF0vihpegKyVWwNDEcL1Ic/vu4U= -----END CERTIFICATE-----Generated at Sun Oct 25 01:29:22 2026 by rpki-client