$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft File: 9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft (raw, json) Hash identifier: OF9nhgo2I49l5DKsQZSyHKKsqMqqDX5yxzzYQS9gvd0= Subject key identifier: E2:5C:72:30:17:80:22:23:09:50:8A:B3:C3:72:03:A9:90:A8:90:F7 Authority key identifier: 9B:F4:E3:BF:C9:0E:2E:55:6F:B0:33:A6:F6:1D:F5:52:E1:31:51:4B Certificate issuer: /CN=9BF4E3BFC90E2E556FB033A6F61DF552E131514B Certificate serial: 62A33CC0CDF10F04A3FE5406D80443E5196F1529 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft Manifest number: EC Signing time: Mon 26 Oct 2026 16:56:35 +0000 Manifest this update: Mon 26 Oct 2026 16:51:35 +0000 Manifest next update: Tue 27 Oct 2026 18:28:35 +0000 Files and hashes: 1: 9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl (hash: KHmwTOYaB5elAg3WGZaGO099JqJYf86urzhSr8m5ehQ=) 2: 3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa (hash: c0+q/NVTLzO/hS8+W37na92ADaS9y92HcCmUqDS60d0=) 3: 3130332e3132312e3130322e302f32332d3234203d3e20313335343738.roa (hash: HYL8rmsnXXXs/BoqrngiGYdSN3TKjR8GgZKUfGOUHuE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 12:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a3:3c:c0:cd:f1:0f:04:a3:fe:54:06:d8:04:43:e5:19:6f:15:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF4E3BFC90E2E556FB033A6F61DF552E131514B Validity Not Before: Oct 26 16:51:35 2026 GMT Not After : Oct 27 18:28:35 2026 GMT Subject: CN=E25C72301780222309508AB3C37203A990A890F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:be:0d:f7:23:33:a6:c6:1e:a0:99:3d:e6:1a: 32:a9:61:41:ed:fd:b7:f7:32:4d:1f:e7:24:29:97: e2:d0:71:80:f7:35:14:c3:a2:5c:12:76:05:0b:30: 05:b6:63:7d:c7:f0:8d:8d:df:9f:6c:f5:10:72:92: 6b:9e:6d:0d:6a:8d:ca:db:2c:74:92:94:49:ba:ae: 63:d5:50:eb:f9:a2:3e:51:a0:7b:90:8d:07:b6:7d: c5:e5:85:f6:35:b7:a3:82:e7:ed:46:5c:83:8a:da: 78:d9:ef:09:b6:60:2f:04:5f:30:74:32:19:5b:56: 4d:23:4c:36:8f:d4:f9:2c:2f:9e:0b:63:f2:92:ce: 18:51:db:f3:51:d4:19:90:95:11:82:55:7a:31:13: 68:67:8e:e2:e2:52:02:fd:62:ec:55:d7:06:a0:2f: 04:03:77:da:37:03:1d:67:57:1d:9e:54:0c:21:94: 00:6b:e2:7b:7e:fa:c0:cf:51:05:d4:93:71:d7:7f: 49:05:c5:d7:cc:6a:00:88:14:c9:32:be:c3:3d:28: 20:7b:fc:0f:b0:52:93:3c:27:83:e6:d6:14:2e:b9: 6e:88:da:2e:aa:37:2b:e7:54:f9:08:d6:b4:e2:91: e9:13:fc:2b:45:c9:84:3d:10:0f:7b:e6:14:d5:3b: 87:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5C:72:30:17:80:22:23:09:50:8A:B3:C3:72:03:A9:90:A8:90:F7 X509v3 Authority Key Identifier: keyid:9B:F4:E3:BF:C9:0E:2E:55:6F:B0:33:A6:F6:1D:F5:52:E1:31:51:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:6e:d4:da:a2:ca:dd:3f:87:41:4e:36:1c:70:7b:75:6f:19: 58:e9:e3:95:19:5e:e0:73:a9:40:bf:32:fb:4f:db:fc:41:1f: 79:e8:9d:f1:40:34:8a:a8:8f:d9:ea:59:18:6f:fc:4d:ec:6c: 5f:4d:cd:8f:d6:6c:e8:42:68:b8:cc:cc:7f:ef:ee:21:54:7c: 01:10:57:6d:49:c0:64:ef:fc:01:c0:2a:04:86:af:19:21:ed: 2b:92:73:ab:ca:ca:4e:f4:f8:a0:ae:a6:df:4b:0d:ee:f1:9a: d5:06:75:70:ef:8c:d7:d5:0f:90:0b:d9:d2:0e:21:b3:ac:41: 1a:8d:c1:1e:ab:2f:d9:b7:30:9f:36:7c:7c:2f:45:cc:3e:0e: 13:9a:e4:66:fc:dd:64:67:7e:02:35:25:f2:3f:b6:3d:9a:fb: ee:e6:19:9a:2c:bf:27:cd:d2:6c:5c:ca:6b:84:8f:40:8f:68: 19:07:54:ff:33:c6:10:1c:53:cf:f3:d4:5d:c7:10:e9:9d:7b: be:22:6e:e5:fc:9a:46:d5:b9:51:c2:e1:e6:4c:ef:5a:7c:b8: e6:23:58:32:ed:8a:03:ee:44:bd:82:d4:eb:ce:d9:1b:56:22: a8:2d:49:19:81:85:b0:53:9e:e4:5d:51:94:83:4f:dd:79:8c: be:c2:b4:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYqM8wM3xDwSj/lQG2ARD5RlvFSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGNEUzQkZDOTBFMkU1NTZGQjAzM0E2RjYxREY1NTJF MTMxNTE0QjAeFw0yNjEwMjYxNjUxMzVaFw0yNjEwMjcxODI4MzVaMDMxMTAvBgNV BAMTKEUyNUM3MjMwMTc4MDIyMjMwOTUwOEFCM0MzNzIwM0E5OTBBODkwRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCivg33IzOmxh6gmT3mGjKpYUHt /bf3Mk0f5yQpl+LQcYD3NRTDolwSdgULMAW2Y33H8I2N359s9RBykmuebQ1qjcrb LHSSlEm6rmPVUOv5oj5RoHuQjQe2fcXlhfY1t6OC5+1GXIOK2njZ7wm2YC8EXzB0 MhlbVk0jTDaP1PksL54LY/KSzhhR2/NR1BmQlRGCVXoxE2hnjuLiUgL9YuxV1wag LwQDd9o3Ax1nVx2eVAwhlABr4nt++sDPUQXUk3HXf0kFxdfMagCIFMkyvsM9KCB7 /A+wUpM8J4Pm1hQuuW6I2i6qNyvnVPkI1rTikekT/CtFyYQ9EA975hTVO4d1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4lxyMBeAIiMJUIqzw3IDqZCokPcwHwYDVR0j BBgwFoAUm/Tjv8kOLlVvsDOm9h31UuExUUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTExMzI0OTctNTk2My00N2FhLTlkZTEtNmM4NDk2YTM2ZWI2LzAvOUJGNEUzQkZD OTBFMkU1NTZGQjAzM0E2RjYxREY1NTJFMTMxNTE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkY0RTNCRkM5MEUyRTU1NkZCMDMzQTZGNjFERjU1MkUxMzE1 MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTExMzI0OTctNTk2My00N2FhLTlk ZTEtNmM4NDk2YTM2ZWI2LzAvOUJGNEUzQkZDOTBFMkU1NTZGQjAzM0E2RjYxREY1 NTJFMTMxNTE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRu1Nqiyt0/h0FONhxwe3VvGVjp45UZXuBz qUC/MvtP2/xBH3nonfFANIqoj9nqWRhv/E3sbF9NzY/WbOhCaLjMzH/v7iFUfAEQ V21JwGTv/AHAKgSGrxkh7SuSc6vKyk70+KCupt9LDe7xmtUGdXDvjNfVD5AL2dIO IbOsQRqNwR6rL9m3MJ82fHwvRcw+DhOa5Gb83WRnfgI1JfI/tj2a++7mGZosvyfN 0mxcymuEj0CPaBkHVP8zxhAcU8/z1F3HEOmde74ibuX8mkbVuVHC4eZM71p8uOYj WDLtigPuRL2C1OvO2RtWIqgtSRmBhbBTnuRdUZSDT915jL7CtDw= -----END CERTIFICATE-----Generated at Mon Oct 26 23:53:47 2026 by rpki-client