$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft File: F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft (raw, json) Hash identifier: JhRXEO2qV1YhKYVrTMjthg7KxeQAEmoyZ2lVJCuiXEo= Subject key identifier: 5B:9E:0B:BA:C7:2D:19:0B:2F:A2:5D:B6:69:9A:9A:4C:C6:E9:7F:AB Authority key identifier: F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58 Certificate issuer: /CN=F23177AEA05EC002ED9D1A9EC60D6A1242AFD458 Certificate serial: 60181A4D9913173D3D3AF05DAFEEA1B0F7A40EE5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft Manifest number: E9 Signing time: Fri 23 Oct 2026 13:30:45 +0000 Manifest this update: Fri 23 Oct 2026 13:25:45 +0000 Manifest next update: Sat 24 Oct 2026 14:14:45 +0000 Files and hashes: 1: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: R/xEQgEo02t46B8xsXrO/lgKY9Y/AGOBiAw+WzSuWJA=) 2: F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl (hash: R0bQY6gZkfyVLmIyH+y2CnJm3Ug4NWQOXm9cQJoWo7g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 14:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:18:1a:4d:99:13:17:3d:3d:3a:f0:5d:af:ee:a1:b0:f7:a4:0e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23177AEA05EC002ED9D1A9EC60D6A1242AFD458 Validity Not Before: Oct 23 13:25:45 2026 GMT Not After : Oct 24 14:14:45 2026 GMT Subject: CN=5B9E0BBAC72D190B2FA25DB6699A9A4CC6E97FAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:23:ce:8f:3e:17:5d:71:f1:d9:20:70:10: 78:9e:14:d7:74:c0:c0:ea:73:64:a3:85:68:28:22: f7:54:c6:df:a5:b9:ea:b8:ca:dc:1e:49:43:24:54: 9a:0e:0b:f9:d9:ea:d9:53:69:d1:7e:db:be:30:73: 09:ee:fb:0f:01:7c:b5:36:a2:bb:1a:56:d1:ec:fe: 02:5d:da:12:4c:2a:a5:22:15:9c:d3:62:b8:cb:f4: 16:3f:fd:21:8f:53:45:da:55:61:42:8f:a5:97:92: c3:b1:6e:bd:bf:e0:28:d1:6b:25:a4:a2:34:b0:24: 46:b1:8c:8f:67:2b:9a:04:e0:47:a3:3b:f4:8e:68: 26:b6:82:d1:9d:b5:01:00:ea:ee:af:e7:00:37:f2: b4:9f:90:b4:9d:f2:5a:6a:01:f4:4c:98:fd:fd:2f: b3:d7:e8:79:54:5a:f5:d7:47:03:96:b8:61:81:63: 8c:59:81:dc:70:8f:29:ac:1d:c2:44:11:e2:04:f1: 86:17:7c:f3:93:8b:09:e1:72:6c:3e:68:5a:1c:c5: 09:1a:14:1a:8b:9f:11:cc:29:24:7a:90:51:4f:9c: 8e:03:6f:b3:04:ef:09:8f:b4:d3:f2:6a:2f:b4:29: 71:d0:c3:a2:03:f9:4e:f2:35:5b:94:5b:f9:cc:72: a4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9E:0B:BA:C7:2D:19:0B:2F:A2:5D:B6:69:9A:9A:4C:C6:E9:7F:AB X509v3 Authority Key Identifier: keyid:F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:85:a0:df:4c:10:da:a5:fa:a5:7f:10:93:76:d3:b7:8c:43: 31:d0:32:8e:51:39:63:c1:50:50:ac:ca:c4:34:05:d7:2b:8e: 2a:0f:a4:f3:cb:e1:80:d9:7f:d5:d8:a2:b3:b7:fd:28:d7:87: ba:e4:27:2e:1d:5b:85:c3:55:68:03:d8:b3:b9:55:72:1b:52: 5e:72:63:21:ed:c7:21:08:37:a0:b1:d4:84:9b:8d:98:f9:f0: ea:36:8b:c6:54:53:1d:3e:1b:1d:78:b7:0c:7f:5c:66:b1:be: b1:5d:d0:b3:9f:02:2b:4e:42:32:94:ab:e0:3c:23:84:12:d9: f7:a3:e0:48:2e:28:2d:01:b7:76:17:01:57:e3:9e:38:5c:ed: df:55:67:f0:83:92:f5:89:ca:99:5a:11:29:8e:bf:ea:ac:55: 30:90:bf:d2:e8:5a:18:cb:cf:b9:04:cb:d9:63:0b:d4:d6:20: 76:f8:a9:42:8b:d9:42:74:6f:2e:d9:ce:fb:8f:9c:5a:fb:a4: 7c:fa:c1:72:a8:2b:4c:c7:71:aa:84:09:27:8e:45:b2:5e:88: 89:22:5e:b8:b4:78:4e:b1:31:5d:8a:db:3b:74:5d:dc:0a:ce: 22:6c:ec:0d:4c:41:b2:62:69:04:dd:95:33:23:16:c8:3f:83: cb:04:55:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYBgaTZkTFz09OvBdr+6hsPekDuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzMTc3QUVBMDVFQzAwMkVEOUQxQTlFQzYwRDZBMTI0 MkFGRDQ1ODAeFw0yNjEwMjMxMzI1NDVaFw0yNjEwMjQxNDE0NDVaMDMxMTAvBgNV BAMTKDVCOUUwQkJBQzcyRDE5MEIyRkEyNURCNjY5OUE5QTRDQzZFOTdGQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuDSPOjz4XXXHx2SBwEHieFNd0 wMDqc2SjhWgoIvdUxt+lueq4ytweSUMkVJoOC/nZ6tlTadF+274wcwnu+w8BfLU2 orsaVtHs/gJd2hJMKqUiFZzTYrjL9BY//SGPU0XaVWFCj6WXksOxbr2/4CjRayWk ojSwJEaxjI9nK5oE4EejO/SOaCa2gtGdtQEA6u6v5wA38rSfkLSd8lpqAfRMmP39 L7PX6HlUWvXXRwOWuGGBY4xZgdxwjymsHcJEEeIE8YYXfPOTiwnhcmw+aFocxQka FBqLnxHMKSR6kFFPnI4Db7ME7wmPtNPyai+0KXHQw6ID+U7yNVuUW/nMcqTxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW54LusctGQsvol22aZqaTMbpf6swHwYDVR0j BBgwFoAU8jF3rqBewALtnRqexg1qEkKv1FgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY3OTgyNGYtNGUwOC00OTcwLWJiYTYtMjdiNDcyNmNhNTgwLzAvRjIzMTc3QUVB MDVFQzAwMkVEOUQxQTlFQzYwRDZBMTI0MkFGRDQ1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjMxNzdBRUEwNUVDMDAyRUQ5RDFBOUVDNjBENkExMjQyQUZE NDU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY3OTgyNGYtNGUwOC00OTcwLWJi YTYtMjdiNDcyNmNhNTgwLzAvRjIzMTc3QUVBMDVFQzAwMkVEOUQxQTlFQzYwRDZB MTI0MkFGRDQ1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKFoN9MENql+qV/EJN207eMQzHQMo5ROWPB UFCsysQ0BdcrjioPpPPL4YDZf9XYorO3/SjXh7rkJy4dW4XDVWgD2LO5VXIbUl5y YyHtxyEIN6Cx1ISbjZj58Oo2i8ZUUx0+Gx14twx/XGaxvrFd0LOfAitOQjKUq+A8 I4QS2fej4EguKC0Bt3YXAVfjnjhc7d9VZ/CDkvWJyplaESmOv+qsVTCQv9LoWhjL z7kEy9ljC9TWIHb4qUKL2UJ0by7ZzvuPnFr7pHz6wXKoK0zHcaqECSeORbJeiIki Xri0eE6xMV2K2zt0XdwKziJs7A1MQbJiaQTdlTMjFsg/g8sEVZs= -----END CERTIFICATE-----Generated at Sat Oct 24 07:20:54 2026 by rpki-client