$ rpki-client -vvvf rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft File: A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft (raw, json) Hash identifier: L1LxVKC4V4bj0DEEGNgo2ApHZMTXrv4jZgjjdoYkDpk= Subject key identifier: B2:96:5C:43:A2:77:77:82:EB:35:44:34:E3:4B:35:89:FA:72:0C:5D Authority key identifier: A4:42:33:2E:47:ED:F9:51:21:F8:35:CB:9E:EE:89:CC:D0:FD:23:AB Certificate issuer: /CN=A442332E47EDF95121F835CB9EEE89CCD0FD23AB Certificate serial: 737473D312E3A7D0A708EC35F1DA67B2C93F6151 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 04:55:18 +0000 Manifest this update: Sat 24 Oct 2026 04:50:18 +0000 Manifest next update: Sun 25 Oct 2026 07:44:18 +0000 Files and hashes: 1: 3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (hash: Cj0SZJARZifKQYTCMZbpWyS0hulziUW0qpiTLUY0MXw=) 2: A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl (hash: jtFSzCb48uf4IQuGMdUQ4L3r7ntSkBk7gffVTI6w+JQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:74:73:d3:12:e3:a7:d0:a7:08:ec:35:f1:da:67:b2:c9:3f:61:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A442332E47EDF95121F835CB9EEE89CCD0FD23AB Validity Not Before: Oct 24 04:50:18 2026 GMT Not After : Oct 25 07:44:18 2026 GMT Subject: CN=B2965C43A2777782EB354434E34B3589FA720C5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8a:0b:57:d7:bb:9f:9f:37:3d:9d:0f:5c:19: 3a:13:5c:9d:b9:de:78:0b:0b:72:43:b2:6b:3d:f0: d2:d5:7a:86:1d:38:41:9d:5d:b8:cf:ca:b2:0b:39: 42:7c:5a:8e:ec:11:69:cb:84:9b:18:59:e7:aa:f1: 91:3d:4b:f0:c8:09:f4:43:66:3b:f4:8d:a1:74:c4: 6d:58:cb:5c:93:65:14:00:d8:10:54:f9:c2:7b:80: ed:b9:31:1c:68:1d:c2:44:74:87:80:dc:f7:2b:05: 3b:4f:63:48:ae:69:29:c3:4c:48:70:f4:45:91:6f: 35:4b:09:27:c1:82:8a:09:0f:62:cb:21:1c:8c:7c: 4f:a9:de:f4:67:6c:84:8f:b1:17:e5:2c:46:9d:0c: a4:b4:f2:af:ec:f9:ce:37:23:b7:74:63:46:f5:71: e6:fe:37:ab:ea:c5:08:1e:cf:75:d4:82:87:bb:ae: b7:b3:df:7b:5a:50:68:ec:ab:e5:6b:ef:59:89:49: 5f:e2:75:6b:24:28:7b:af:98:42:64:2a:68:e1:79: e3:ed:f8:3c:e5:30:c3:f1:fd:68:d3:73:c5:86:81: f4:46:91:d1:26:9d:36:83:43:e6:01:c3:05:2e:dd: 79:bb:12:d4:64:a2:19:d1:23:8d:ba:84:a9:cf:6e: 73:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:96:5C:43:A2:77:77:82:EB:35:44:34:E3:4B:35:89:FA:72:0C:5D X509v3 Authority Key Identifier: keyid:A4:42:33:2E:47:ED:F9:51:21:F8:35:CB:9E:EE:89:CC:D0:FD:23:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:fe:fa:ee:5a:fc:e2:00:1d:ba:66:d4:45:78:50:ed:91:eb: c2:9a:97:52:13:22:df:16:09:6a:22:4c:99:8f:7a:21:91:06: 53:84:14:10:12:d6:b1:fb:35:80:e8:c5:d0:45:46:5f:2b:a8: 96:ac:c4:e3:f9:1d:76:f0:64:85:42:dc:95:70:ac:ee:6b:c3: 27:7a:b3:fd:dd:62:36:ee:84:1f:94:c5:71:2b:2b:ae:9a:e3: 2d:29:35:20:e6:97:b6:04:59:c7:e1:49:45:25:20:41:0f:cd: a0:44:2d:c0:cd:e4:8d:9a:e4:3f:26:c6:6f:0f:43:c9:ea:ba: bd:0b:a4:8d:09:10:b8:35:ac:40:86:6c:ab:83:69:26:e8:89: 6e:73:b1:ba:22:af:ce:fe:b0:5d:25:ca:cd:af:51:8f:87:95: 30:a4:dc:ae:a2:23:b5:79:d9:a5:f3:f1:68:09:82:bc:e7:3f: 6a:09:83:af:b5:36:93:01:09:e0:e2:9d:d1:90:d3:3a:50:46: 3c:c8:15:0d:f8:de:85:56:5b:6d:d4:02:db:a7:9c:2b:04:92: 2e:11:b8:f3:08:d8:99:f0:2a:43:c4:69:15:97:2d:2a:54:6a: 7d:de:51:79:6b:ec:c7:ef:c1:45:8c:2a:87:fa:b8:c9:90:2e: a7:0a:4f:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc3Rz0xLjp9CnCOw18dpnssk/YVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ0MjMzMkU0N0VERjk1MTIxRjgzNUNCOUVFRTg5Q0NE MEZEMjNBQjAeFw0yNjEwMjQwNDUwMThaFw0yNjEwMjUwNzQ0MThaMDMxMTAvBgNV BAMTKEIyOTY1QzQzQTI3Nzc3ODJFQjM1NDQzNEUzNEIzNTg5RkE3MjBDNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8igtX17ufnzc9nQ9cGToTXJ25 3ngLC3JDsms98NLVeoYdOEGdXbjPyrILOUJ8Wo7sEWnLhJsYWeeq8ZE9S/DICfRD Zjv0jaF0xG1Yy1yTZRQA2BBU+cJ7gO25MRxoHcJEdIeA3PcrBTtPY0iuaSnDTEhw 9EWRbzVLCSfBgooJD2LLIRyMfE+p3vRnbISPsRflLEadDKS08q/s+c43I7d0Y0b1 ceb+N6vqxQgez3XUgoe7rrez33taUGjsq+Vr71mJSV/idWskKHuvmEJkKmjheePt +DzlMMPx/WjTc8WGgfRGkdEmnTaDQ+YBwwUu3Xm7EtRkohnRI426hKnPbnM5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUspZcQ6J3d4LrNUQ040s1ifpyDF0wHwYDVR0j BBgwFoAUpEIzLkft+VEh+DXLnu6JzND9I6swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTYwZjg0NjEtYmIyYy00ZDNlLWE1YmUtNzAwOTM5NDI3YzhjLzAvQTQ0MjMzMkU0 N0VERjk1MTIxRjgzNUNCOUVFRTg5Q0NEMEZEMjNBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDQyMzMyRTQ3RURGOTUxMjFGODM1Q0I5RUVFODlDQ0QwRkQy M0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTYwZjg0NjEtYmIyYy00ZDNlLWE1 YmUtNzAwOTM5NDI3YzhjLzAvQTQ0MjMzMkU0N0VERjk1MTIxRjgzNUNCOUVFRTg5 Q0NEMEZEMjNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEX++u5a/OIAHbpm1EV4UO2R68Kal1ITIt8W CWoiTJmPeiGRBlOEFBAS1rH7NYDoxdBFRl8rqJasxOP5HXbwZIVC3JVwrO5rwyd6 s/3dYjbuhB+UxXErK66a4y0pNSDml7YEWcfhSUUlIEEPzaBELcDN5I2a5D8mxm8P Q8nqur0LpI0JELg1rECGbKuDaSboiW5zsboir87+sF0lys2vUY+HlTCk3K6iI7V5 2aXz8WgJgrznP2oJg6+1NpMBCeDindGQ0zpQRjzIFQ343oVWW23UAtunnCsEki4R uPMI2JnwKkPEaRWXLSpUan3eUXlr7MfvwUWMKof6uMmQLqcKT2k= -----END CERTIFICATE-----Generated at Sat Oct 24 20:34:37 2026 by rpki-client