$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft File: D88374740C8E344956042586CFB98762292C9BED.mft (raw, json) Hash identifier: XWGcGVLANYgUWHk56I3RNr3KK63FoaLzuclZFtps8Pk= Subject key identifier: 8B:9A:75:86:C0:F1:D1:0D:F2:1C:86:02:4F:BC:62:6A:AF:87:E0:94 Authority key identifier: D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED Certificate issuer: /CN=D88374740C8E344956042586CFB98762292C9BED Certificate serial: 19F1C194906E13126D958B60B9A7114FD11B8FD2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 17:36:05 +0000 Manifest this update: Sat 24 Oct 2026 17:31:05 +0000 Manifest next update: Sun 25 Oct 2026 20:08:05 +0000 Files and hashes: 1: 3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa (hash: 5Is2TaaRgt6RZbxF5fTOe8DOSBDKMRf8+8dK8LxpkgM=) 2: D88374740C8E344956042586CFB98762292C9BED.crl (hash: VMH4DFH6YUAlryYvlBdzy6TqnxHcFdp5TVx4zlQ2e7o=) 3: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: lP4x2eURdSlbv1g2ymW9KzMnGg6tWIQJ2QaIxsnxvtg=) 4: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: pi4GpQEqsy5D0pG1/itP4Rd3gKkO+zB1DmoOxM7Tnmw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:f1:c1:94:90:6e:13:12:6d:95:8b:60:b9:a7:11:4f:d1:1b:8f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D88374740C8E344956042586CFB98762292C9BED Validity Not Before: Oct 24 17:31:05 2026 GMT Not After : Oct 25 20:08:05 2026 GMT Subject: CN=8B9A7586C0F1D10DF21C86024FBC626AAF87E094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bf:08:32:af:86:62:b4:3e:18:52:0a:a9:40: 3f:75:31:fd:2f:14:b5:b5:06:e9:93:1e:47:4b:e4: ea:d0:6a:e9:53:44:28:9d:56:9b:36:6d:8b:a3:6c: 86:59:a8:95:da:2d:0d:04:15:04:22:5f:a2:f1:ef: fc:2b:01:58:20:4f:10:d0:95:9a:ce:29:34:44:fa: e6:0b:1e:e0:3d:a7:9f:c0:7e:f1:0e:b8:55:54:7a: 85:17:6f:c9:7f:8d:8d:0a:99:6d:c3:ac:72:b5:e0: b4:80:04:02:47:8b:f3:ba:61:26:15:84:7e:62:5b: 08:73:41:6b:8c:90:71:09:0e:61:10:d3:41:b8:e5: c7:49:d0:5a:73:79:37:af:2f:8b:93:e3:ab:05:aa: 33:96:d7:20:c2:84:c3:09:04:54:8e:c3:da:7a:4f: 87:a1:be:24:aa:c9:a4:c9:9a:9b:e5:fe:ca:f1:3c: f8:d1:b8:bc:2f:aa:b8:46:41:e4:80:b8:47:d9:25: c0:56:cf:06:a2:be:9a:a6:06:38:be:08:f9:c4:a7: 63:ca:c4:ce:f2:76:ec:70:ee:1e:a2:ed:cb:9b:79: 4f:81:d5:cf:87:c5:36:ca:65:2a:05:cf:d9:e4:86: bc:f9:2f:e5:75:39:41:fa:a0:d8:c9:a2:7a:1a:5d: c7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9A:75:86:C0:F1:D1:0D:F2:1C:86:02:4F:BC:62:6A:AF:87:E0:94 X509v3 Authority Key Identifier: keyid:D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:1a:d4:39:44:8d:bd:cd:e1:1c:91:da:6c:1a:f6:d0:93:d5: c8:84:c9:8d:be:28:e6:69:56:29:72:b2:34:ab:ac:f5:fa:56: 32:9d:91:c7:76:05:62:0f:2d:70:a7:5c:e4:b0:8b:af:50:e5: d3:5a:79:53:73:76:ff:06:a0:2f:86:16:67:06:e6:20:6e:4f: 04:66:63:51:73:6e:67:b2:e2:35:a9:51:54:fe:47:ee:f1:98: 37:1f:14:64:ef:37:72:01:d8:3b:e4:93:06:32:64:e4:b9:0f: fa:09:c4:49:24:0f:a7:e2:d4:e9:9c:51:7d:5a:9d:4a:e5:f9: 1d:45:73:82:c5:df:02:55:42:ae:be:9d:4e:2f:05:00:0f:2b: c3:31:8e:55:2f:9a:2e:20:d4:58:1e:2a:c1:5b:dd:00:c9:3e: f3:17:02:78:d6:09:f6:93:3d:5d:c8:af:97:21:87:82:87:1e: b3:d3:a1:39:7c:b2:ea:7b:3d:2f:7b:5f:a1:83:22:f4:13:d3: 01:c6:8a:81:8e:f5:79:2b:fe:a0:69:4d:2d:54:34:af:76:2b: 0e:5e:b0:90:30:32:ef:dd:92:1e:0d:ca:14:eb:b6:7d:cb:6c: 02:63:b5:36:80:97:af:04:88:23:97:cd:dc:e9:f2:69:7e:66: 06:1f:f3:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGfHBlJBuExJtlYtguacRT9Ebj9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg4Mzc0NzQwQzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIy OTJDOUJFRDAeFw0yNjEwMjQxNzMxMDVaFw0yNjEwMjUyMDA4MDVaMDMxMTAvBgNV BAMTKDhCOUE3NTg2QzBGMUQxMERGMjFDODYwMjRGQkM2MjZBQUY4N0UwOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDavwgyr4ZitD4YUgqpQD91Mf0v FLW1BumTHkdL5OrQaulTRCidVps2bYujbIZZqJXaLQ0EFQQiX6Lx7/wrAVggTxDQ lZrOKTRE+uYLHuA9p5/AfvEOuFVUeoUXb8l/jY0KmW3DrHK14LSABAJHi/O6YSYV hH5iWwhzQWuMkHEJDmEQ00G45cdJ0FpzeTevL4uT46sFqjOW1yDChMMJBFSOw9p6 T4ehviSqyaTJmpvl/srxPPjRuLwvqrhGQeSAuEfZJcBWzwaivpqmBji+CPnEp2PK xM7yduxw7h6i7cubeU+B1c+HxTbKZSoFz9nkhrz5L+V1OUH6oNjJonoaXcebAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi5p1hsDx0Q3yHIYCT7xiaq+H4JQwHwYDVR0j BBgwFoAU2IN0dAyONElWBCWGz7mHYiksm+0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWViZTdhZDgtZTE1Yy00MDE0LWJmYjMtYmU2OWI3ZDVkZTg4LzAvRDg4Mzc0NzQw QzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIyOTJDOUJFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODgzNzQ3NDBDOEUzNDQ5NTYwNDI1ODZDRkI5ODc2MjI5MkM5 QkVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm YjMtYmU2OWI3ZDVkZTg4LzAvRDg4Mzc0NzQwQzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3 NjIyOTJDOUJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUa1DlEjb3N4RyR2mwa9tCT1ciEyY2+KOZp VilysjSrrPX6VjKdkcd2BWIPLXCnXOSwi69Q5dNaeVNzdv8GoC+GFmcG5iBuTwRm Y1Fzbmey4jWpUVT+R+7xmDcfFGTvN3IB2DvkkwYyZOS5D/oJxEkkD6fi1OmcUX1a nUrl+R1Fc4LF3wJVQq6+nU4vBQAPK8MxjlUvmi4g1FgeKsFb3QDJPvMXAnjWCfaT PV3Ir5chh4KHHrPToTl8sup7PS97X6GDIvQT0wHGioGO9Xkr/qBpTS1UNK92Kw5e sJAwMu/dkh4NyhTrtn3LbAJjtTaAl68EiCOXzdzp8ml+ZgYf874= -----END CERTIFICATE-----Generated at Sun Oct 25 01:34:27 2026 by rpki-client