$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft File: 9EDB723FFE084B9B87B5B0A108574335936817FB.mft (raw, json) Hash identifier: wFmFVDYk2XeLE4s6jyjuTJbiYLj6JkCEd8z2SAZRSeg= Subject key identifier: 40:15:81:74:1F:77:91:C3:82:8E:66:52:91:4E:68:EA:7B:A7:7C:30 Authority key identifier: 9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB Certificate issuer: /CN=9EDB723FFE084B9B87B5B0A108574335936817FB Certificate serial: 780F699CDE727B8F0221A175D0732C723E3FFC8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft Manifest number: EA Signing time: Sun 25 Oct 2026 05:12:44 +0000 Manifest this update: Sun 25 Oct 2026 05:07:44 +0000 Manifest next update: Mon 26 Oct 2026 09:09:44 +0000 Files and hashes: 1: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: i1PCAoIZ8GEBtvqZu9y6RsJ/+cUgKfG+tpL6n+2MQ0w=) 2: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: TKijjNdinkZx0yUPQ2piNtCq6wNxlLJwsDj7lMp8o1A=) 3: 9EDB723FFE084B9B87B5B0A108574335936817FB.crl (hash: iv7u+GIlp1nXTbm+THU8K4XP5q4xRGqQMHHOXILd5iU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 09:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:0f:69:9c:de:72:7b:8f:02:21:a1:75:d0:73:2c:72:3e:3f:fc:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EDB723FFE084B9B87B5B0A108574335936817FB Validity Not Before: Oct 25 05:07:44 2026 GMT Not After : Oct 26 09:09:44 2026 GMT Subject: CN=401581741F7791C3828E6652914E68EA7BA77C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ab:5a:c5:e9:99:1c:a7:6d:0f:b8:5b:47:88: 29:b6:d6:9b:f5:1f:ce:0b:e6:e1:73:2a:e5:d6:7c: ce:e0:65:4b:dc:91:d7:89:74:ec:a4:59:05:5d:1f: 2d:6b:cc:ca:2c:42:97:d0:dd:fa:e6:ea:62:80:6e: 12:eb:74:af:56:ee:a9:4f:ac:33:94:64:07:b9:b8: 26:77:51:af:d7:a8:20:f0:03:12:88:f5:77:13:3f: 9a:1e:09:96:7f:9b:b7:da:bd:cc:9d:7d:54:a4:7c: 1c:ec:70:31:73:4e:60:23:59:46:31:06:27:5a:7f: 81:f6:52:57:d2:60:3f:06:83:e3:bb:46:34:06:4c: 99:21:ce:51:8b:6f:c8:69:44:ff:7b:c1:2c:bc:a8: 1b:98:84:6e:b6:65:b8:62:4b:3d:f3:a6:b0:0f:f4: f5:92:56:e4:14:9c:a2:32:cf:a9:b3:34:ff:58:cc: 2b:3c:27:db:4c:47:20:98:0e:9b:f3:3f:4b:02:4a: 03:c9:f0:9c:03:f1:ef:f2:a5:0c:37:30:2c:ec:ca: 42:46:de:04:bf:ae:e6:63:92:b5:ca:6f:7c:06:ce: f7:a3:a3:1f:a8:1b:6c:56:b1:38:1d:8f:9e:0e:94: b8:99:2c:4e:6e:a1:52:13:4e:86:7a:b4:1f:3d:01: 1d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:15:81:74:1F:77:91:C3:82:8E:66:52:91:4E:68:EA:7B:A7:7C:30 X509v3 Authority Key Identifier: keyid:9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:c9:82:a9:a9:02:de:8a:3f:e7:8f:90:73:e2:3e:f6:2b:50: 06:67:c5:a3:3f:de:98:f5:2b:aa:f7:6d:68:e4:4e:85:0f:53: 5c:b3:e2:fa:d6:c3:56:d2:d3:f9:18:42:94:44:b0:af:c6:44: ac:8c:e2:6e:05:5e:7a:3d:02:f3:02:dd:f2:85:f7:64:72:b6: d4:00:d2:8d:7d:8a:24:36:10:0f:82:ef:04:2e:b4:38:c0:0f: 02:25:d3:aa:71:c7:f8:26:76:d9:e7:cb:4a:0d:da:c4:cf:20: c9:f5:71:12:54:3d:ce:be:07:4e:53:fa:c3:71:d7:45:ae:16: 0e:da:52:17:26:20:58:c8:12:a0:2e:51:7e:e6:62:4f:0b:2b: 1f:0c:16:9d:20:d7:9d:c9:43:e4:b0:40:ca:fe:d8:02:d8:37: 2b:64:61:6b:64:df:7c:9d:ff:27:cd:b7:e1:8c:27:53:cb:66: 17:10:d2:be:64:1f:53:9c:33:56:a3:09:26:66:95:78:69:32: 0d:a7:6b:c7:2e:2e:8c:0d:e1:52:45:dd:db:4d:39:28:97:bd: 56:c4:2e:3b:3d:5b:34:85:d3:91:0c:0a:cf:1f:85:df:09:4b: 54:62:38:53:a2:30:75:0f:01:b3:45:05:93:19:5c:62:7a:83: e4:0d:23:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeA9pnN5ye48CIaF10HMscj4//IswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVEQjcyM0ZGRTA4NEI5Qjg3QjVCMEExMDg1NzQzMzU5 MzY4MTdGQjAeFw0yNjEwMjUwNTA3NDRaFw0yNjEwMjYwOTA5NDRaMDMxMTAvBgNV BAMTKDQwMTU4MTc0MUY3NzkxQzM4MjhFNjY1MjkxNEU2OEVBN0JBNzdDMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjq1rF6Zkcp20PuFtHiCm21pv1 H84L5uFzKuXWfM7gZUvckdeJdOykWQVdHy1rzMosQpfQ3frm6mKAbhLrdK9W7qlP rDOUZAe5uCZ3Ua/XqCDwAxKI9XcTP5oeCZZ/m7favcydfVSkfBzscDFzTmAjWUYx Bidaf4H2UlfSYD8Gg+O7RjQGTJkhzlGLb8hpRP97wSy8qBuYhG62ZbhiSz3zprAP 9PWSVuQUnKIyz6mzNP9YzCs8J9tMRyCYDpvzP0sCSgPJ8JwD8e/ypQw3MCzsykJG 3gS/ruZjkrXKb3wGzvejox+oG2xWsTgdj54OlLiZLE5uoVITToZ6tB89AR0jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQBWBdB93kcOCjmZSkU5o6nunfDAwHwYDVR0j BBgwFoAUnttyP/4IS5uHtbChCFdDNZNoF/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTBiYTk3ZWYtN2JjOC00NWI4LTgyYWItZjg1NTMzY2FlZGY0LzAvOUVEQjcyM0ZG RTA4NEI5Qjg3QjVCMEExMDg1NzQzMzU5MzY4MTdGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RURCNzIzRkZFMDg0QjlCODdCNUIwQTEwODU3NDMzNTkzNjgx N0ZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTBiYTk3ZWYtN2JjOC00NWI4LTgy YWItZjg1NTMzY2FlZGY0LzAvOUVEQjcyM0ZGRTA4NEI5Qjg3QjVCMEExMDg1NzQz MzU5MzY4MTdGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnJgqmpAt6KP+ePkHPiPvYrUAZnxaM/3pj1 K6r3bWjkToUPU1yz4vrWw1bS0/kYQpREsK/GRKyM4m4FXno9AvMC3fKF92RyttQA 0o19iiQ2EA+C7wQutDjADwIl06pxx/gmdtnny0oN2sTPIMn1cRJUPc6+B05T+sNx 10WuFg7aUhcmIFjIEqAuUX7mYk8LKx8MFp0g153JQ+SwQMr+2ALYNytkYWtk33yd /yfNt+GMJ1PLZhcQ0r5kH1OcM1ajCSZmlXhpMg2na8cuLowN4VJF3dtNOSiXvVbE Ljs9WzSF05EMCs8fhd8JS1RiOFOiMHUPAbNFBZMZXGJ6g+QNIws= -----END CERTIFICATE-----Generated at Sun Oct 25 14:29:08 2026 by rpki-client