$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft File: D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft (raw, json) Hash identifier: I1H3Rm04hA4VQ4lrQ9k5q9EUNLmWNwWtqaq1F6mDytU= Subject key identifier: 4B:B7:4B:4E:39:65:B0:93:24:63:23:B9:50:62:39:52:D2:9E:97:9D Authority key identifier: D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB Certificate issuer: /CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Certificate serial: 194EA836F6D68E64D490FAF2F3249BDCBD633436 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft Manifest number: E9 Signing time: Sun 25 Oct 2026 02:57:40 +0000 Manifest this update: Sun 25 Oct 2026 02:52:40 +0000 Manifest next update: Mon 26 Oct 2026 05:20:40 +0000 Files and hashes: 1: D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl (hash: fZ6qGc0NaAj7bAiUM2qhwUBeextfCrBvRSQYKHGsg+E=) 2: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: /Ank/NdhTyFolT1yr2gOxvp0mx0tj8KaBVOQP4gcAxk=) 3: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: byftjSeCvMFNmeFpkuYeG9YZa2VCV2p6nFeWhRr4XHM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 05:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:4e:a8:36:f6:d6:8e:64:d4:90:fa:f2:f3:24:9b:dc:bd:63:34:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Validity Not Before: Oct 25 02:52:40 2026 GMT Not After : Oct 26 05:20:40 2026 GMT Subject: CN=4BB74B4E3965B093246323B950623952D29E979D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:26:a9:bd:2a:d4:e9:c0:ee:0b:c9:49:4f:d1: b2:50:d6:20:ce:00:84:f4:b8:a0:7c:6f:05:07:dc: 52:f7:17:6c:11:43:89:d7:dd:93:14:41:62:b8:1c: 80:8f:a5:c9:9f:c9:2e:8a:8d:af:29:c6:b8:81:1b: ae:48:3c:a9:d4:1b:b8:ca:96:ee:84:15:d8:92:d4: 0e:ec:60:da:b9:a6:61:d5:ce:75:c1:fc:86:44:07: 92:10:7b:c6:83:98:84:82:94:1d:f5:db:2d:87:a6: bf:69:72:8d:cc:8f:d8:49:8c:09:cf:a8:18:fc:a1: 6e:9f:b2:06:cb:12:29:0b:57:ec:e4:05:a7:05:70: 43:28:57:83:5c:c1:94:22:4f:04:cd:40:9c:a0:2c: d6:c7:59:bf:fb:c7:b1:7b:3a:7d:13:15:c3:d3:82: 0b:97:a4:15:d7:37:10:26:f5:8b:ab:47:bb:76:a4: cf:81:65:25:51:3e:c6:10:47:dd:d1:20:76:36:78: 53:f7:35:5a:8f:da:85:8b:7c:b4:7b:13:96:1c:59: 1b:14:05:2c:16:58:28:c3:6d:67:7f:35:a8:31:74: 6b:fe:cb:da:26:4c:1b:47:50:de:d9:ab:a7:2a:ca: 1c:25:d8:4d:c5:52:ca:8b:03:ab:e8:c2:f9:41:b9: 65:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B7:4B:4E:39:65:B0:93:24:63:23:B9:50:62:39:52:D2:9E:97:9D X509v3 Authority Key Identifier: keyid:D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1d:51:b7:6c:13:5f:92:d7:d3:bc:4b:e1:9a:e0:af:73:48: a3:9d:89:4e:5f:c7:cf:e4:80:16:fe:6f:77:cc:d2:4b:37:6a: 26:73:fc:63:c5:ae:bd:2a:00:8e:10:87:08:ba:19:86:90:aa: 65:b1:cf:d9:db:e2:d9:02:fd:6a:bb:14:1a:62:77:a0:b9:e4: e1:47:3a:10:f7:e7:85:fb:82:c7:70:34:0b:c3:af:06:0a:01: 3f:71:b1:d2:6e:65:31:73:b4:eb:a1:55:a2:3d:7e:c2:21:b9: 29:0b:a8:8b:d6:43:99:3a:de:11:35:cc:40:a6:fb:61:e8:51: 62:d3:95:15:fc:51:ea:36:67:c4:64:04:60:15:e3:31:d7:9a: 55:98:8a:c9:6a:63:b1:59:e4:69:59:8d:e1:55:97:fd:6d:4a: 41:6e:ed:96:99:68:a0:fa:c4:d3:94:77:21:a2:2b:41:26:e0: 23:fc:29:62:04:27:1f:f2:c4:e2:d5:9b:a2:30:79:30:d4:d6: 76:90:7f:f3:8a:51:f4:0c:1c:86:8f:72:9d:ee:c0:ca:bf:4f: 45:02:d2:5b:4d:0c:ef:cf:c4:3e:02:72:b9:5d:81:9a:00:dc: 6a:3e:12:8a:d3:56:69:ef:be:f6:70:17:a9:1e:d4:fd:74:1f: aa:5a:64:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGU6oNvbWjmTUkPry8ySb3L1jNDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFFRkIy MzE4NEZFQjAeFw0yNjEwMjUwMjUyNDBaFw0yNjEwMjYwNTIwNDBaMDMxMTAvBgNV BAMTKDRCQjc0QjRFMzk2NUIwOTMyNDYzMjNCOTUwNjIzOTUyRDI5RTk3OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJqm9KtTpwO4LyUlP0bJQ1iDO AIT0uKB8bwUH3FL3F2wRQ4nX3ZMUQWK4HICPpcmfyS6Kja8pxriBG65IPKnUG7jK lu6EFdiS1A7sYNq5pmHVznXB/IZEB5IQe8aDmISClB312y2Hpr9pco3Mj9hJjAnP qBj8oW6fsgbLEikLV+zkBacFcEMoV4NcwZQiTwTNQJygLNbHWb/7x7F7On0TFcPT gguXpBXXNxAm9YurR7t2pM+BZSVRPsYQR93RIHY2eFP3NVqP2oWLfLR7E5YcWRsU BSwWWCjDbWd/NagxdGv+y9omTBtHUN7Zq6cqyhwl2E3FUsqLA6vowvlBuWW5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS7dLTjllsJMkYyO5UGI5UtKel50wHwYDVR0j BBgwFoAU036esvmOKc3xOGUzJmau+yMYT+swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJlNWZmODEtYjA4Mi00MzM0LWFkMjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJG OThFMjlDREYxMzg2NTMzMjY2NkFFRkIyMzE4NEZFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EMzdFOUVCMkY5OEUyOUNERjEzODY1MzMyNjY2QUVGQjIzMTg0 RkVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFF RkIyMzE4NEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8dUbdsE1+S19O8S+Ga4K9zSKOdiU5fx8/k gBb+b3fM0ks3aiZz/GPFrr0qAI4Qhwi6GYaQqmWxz9nb4tkC/Wq7FBpid6C55OFH OhD354X7gsdwNAvDrwYKAT9xsdJuZTFztOuhVaI9fsIhuSkLqIvWQ5k63hE1zECm +2HoUWLTlRX8Ueo2Z8RkBGAV4zHXmlWYislqY7FZ5GlZjeFVl/1tSkFu7ZaZaKD6 xNOUdyGiK0Em4CP8KWIEJx/yxOLVm6IweTDU1naQf/OKUfQMHIaPcp3uwMq/T0UC 0ltNDO/PxD4CcrldgZoA3Go+EorTVmnvvvZwF6ke1P10H6paZEA= -----END CERTIFICATE-----Generated at Sun Oct 25 20:04:28 2026 by rpki-client