$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft File: B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft (raw, json) Hash identifier: yakWlFQUAVojRzJD5XJz/TExgUhYFJHXxJBTHa0tC84= Subject key identifier: A5:6E:47:FB:C4:E0:40:4E:95:3C:0B:0F:29:1A:A5:14:9D:1C:B6:51 Authority key identifier: B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09 Certificate issuer: /CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709 Certificate serial: 4CED7469017F22895A519509F79BD23370307609 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 16:24:34 +0000 Manifest this update: Sat 24 Oct 2026 16:19:34 +0000 Manifest next update: Sun 25 Oct 2026 18:15:34 +0000 Files and hashes: 1: 3130332e3136362e3232362e302f32342d3234203d3e20313431393539.roa (hash: Pavi+Ibkd+bl9I6ebmoiu+/5SxrpK9sFhLxy2ZXQkGw=) 2: B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl (hash: k48ctgMSF7L+GX459Zm+EBEt9IryR2dXbpF5GXZ8KKQ=) 3: 3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa (hash: vGdo0aPhNFfXshch3eNd6YkNvIG8QzHxW2xedSDSTPc=) 4: 323430313a346661303a3a2f33322d3438203d3e20313431393539.roa (hash: YSkaXkoDpu4xkOc0DMYpS2KAoSxyKN+Gksem+MM/1ic=) 5: 3130332e3136362e3232362e302f32332d3234203d3e20313431393539.roa (hash: WrcnjDvM2bO2wuu3OCRivgLaRSs+xddaOJ50D9MbO8U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 18:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ed:74:69:01:7f:22:89:5a:51:95:09:f7:9b:d2:33:70:30:76:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709 Validity Not Before: Oct 24 16:19:34 2026 GMT Not After : Oct 25 18:15:34 2026 GMT Subject: CN=A56E47FBC4E0404E953C0B0F291AA5149D1CB651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:46:a8:6b:87:cd:1d:e7:20:52:46:dd:17:72: e5:f1:7d:78:66:b5:9d:a7:2d:64:04:55:99:d5:66: e9:2e:6d:8c:cd:7c:28:1b:38:96:dd:f6:45:b7:4c: 67:7d:85:6c:71:96:47:79:25:d9:33:d3:a8:5a:9b: 66:bf:ae:ee:5b:e1:98:01:3c:c3:7a:79:2f:43:9f: 28:2c:e2:8f:b2:4a:90:70:d3:96:4b:c9:67:2e:06: 62:c5:b6:f0:30:f7:4f:33:0a:7a:77:9a:c0:e5:ac: 98:53:12:01:9b:32:ef:9b:07:2f:a0:5d:dc:58:81: c2:cb:19:00:fa:f3:9c:e1:db:ee:7d:93:87:47:ad: 09:2b:0d:0e:8b:67:32:6a:5b:1e:73:16:94:74:62: 5d:51:c0:9f:1b:49:78:70:f7:a4:78:e4:bc:11:47: 16:a3:ac:fb:19:14:9f:c3:42:d1:d6:35:5e:29:93: 41:d0:8c:7b:7e:10:31:15:93:99:aa:a0:8e:16:e6: 5d:28:2e:4b:db:ee:b1:3c:97:8c:16:2a:9f:03:82: 0a:51:3a:6e:48:5b:29:73:af:41:04:4d:d3:f7:1d: ae:c7:ef:a1:6e:f3:76:57:d5:98:28:1c:a7:0e:24: 05:c9:9e:73:26:8e:5f:93:1c:29:55:a8:c2:eb:be: 1a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6E:47:FB:C4:E0:40:4E:95:3C:0B:0F:29:1A:A5:14:9D:1C:B6:51 X509v3 Authority Key Identifier: keyid:B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:d5:35:2b:e3:86:d4:29:60:e4:88:25:6b:5c:25:cf:f0:c9: d7:fb:30:b8:91:e6:2d:5a:20:13:9a:6b:97:b5:e4:7e:53:37: 94:1d:50:40:ec:17:83:2e:81:86:b2:a6:06:24:07:65:05:f9: 46:b1:3d:cc:9b:4d:1f:26:90:62:ce:26:d3:c3:9c:86:92:89: fd:22:e5:9e:89:c4:8b:41:2e:2b:f2:01:41:5c:3a:5a:41:c1: 88:ec:dd:4b:a2:14:6e:5d:00:22:a7:bf:9e:63:04:2f:87:92: 45:8f:44:3e:3c:3e:bd:ac:4b:43:03:ab:d0:72:e4:05:9d:ca: 95:48:4b:6f:17:f2:97:da:0b:d3:5e:cd:9f:75:a6:37:97:ba: 0a:52:73:58:69:7f:96:2f:27:26:c4:07:b3:65:ef:8c:47:f8: 9f:5b:af:64:87:38:a0:ed:47:7c:65:20:66:9d:47:88:c6:f9: da:26:13:a6:43:f4:d0:51:53:fd:81:cd:61:1f:1e:6a:f1:5f: 65:08:8f:3b:92:1f:af:c7:d5:f9:02:b7:ed:c8:4f:80:e4:4f: a6:56:78:55:37:b4:7d:1d:bc:dd:07:47:84:d3:3d:1a:26:3d: b5:13:ee:80:eb:af:5c:83:8e:fe:cd:31:57:51:2c:2d:1f:8e: a0:21:f7:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTO10aQF/IolaUZUJ95vSM3AwdgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMxNkM2M0QyREExMzg3RDE5MUE3RUE2REMwQjU5QzVF Q0QyRDcwOTAeFw0yNjEwMjQxNjE5MzRaFw0yNjEwMjUxODE1MzRaMDMxMTAvBgNV BAMTKEE1NkU0N0ZCQzRFMDQwNEU5NTNDMEIwRjI5MUFBNTE0OUQxQ0I2NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoRqhrh80d5yBSRt0XcuXxfXhm tZ2nLWQEVZnVZukubYzNfCgbOJbd9kW3TGd9hWxxlkd5Jdkz06ham2a/ru5b4ZgB PMN6eS9Dnygs4o+ySpBw05ZLyWcuBmLFtvAw908zCnp3msDlrJhTEgGbMu+bBy+g XdxYgcLLGQD685zh2+59k4dHrQkrDQ6LZzJqWx5zFpR0Yl1RwJ8bSXhw96R45LwR RxajrPsZFJ/DQtHWNV4pk0HQjHt+EDEVk5mqoI4W5l0oLkvb7rE8l4wWKp8DggpR Om5IWylzr0EETdP3Ha7H76Fu83ZX1ZgoHKcOJAXJnnMmjl+THClVqMLrvhp3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpW5H+8TgQE6VPAsPKRqlFJ0ctlEwHwYDVR0j BBgwFoAUsxbGPS2hOH0ZGn6m3AtZxezS1wkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGZmMDk1ODQtOTExMC00YjBkLThmNmQtMmNlNTI1OGU4NDZiLzAvQjMxNkM2M0Qy REExMzg3RDE5MUE3RUE2REMwQjU5QzVFQ0QyRDcwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMzE2QzYzRDJEQTEzODdEMTkxQTdFQTZEQzBCNTlDNUVDRDJE NzA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGZmMDk1ODQtOTExMC00YjBkLThm NmQtMmNlNTI1OGU4NDZiLzAvQjMxNkM2M0QyREExMzg3RDE5MUE3RUE2REMwQjU5 QzVFQ0QyRDcwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPVNSvjhtQpYOSIJWtcJc/wydf7MLiR5i1a IBOaa5e15H5TN5QdUEDsF4MugYaypgYkB2UF+UaxPcybTR8mkGLOJtPDnIaSif0i 5Z6JxItBLivyAUFcOlpBwYjs3UuiFG5dACKnv55jBC+HkkWPRD48Pr2sS0MDq9By 5AWdypVIS28X8pfaC9NezZ91pjeXugpSc1hpf5YvJybEB7Nl74xH+J9br2SHOKDt R3xlIGadR4jG+domE6ZD9NBRU/2BzWEfHmrxX2UIjzuSH6/H1fkCt+3IT4DkT6ZW eFU3tH0dvN0HR4TTPRomPbUT7oDrr1yDjv7NMVdRLC0fjqAh99I= -----END CERTIFICATE-----Generated at Sun Oct 25 10:42:15 2026 by rpki-client