$ rpki-client -vvvf rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft File: 1423B36DE1705432D7FAC72E76D94A011FDE2748.mft (raw, json) Hash identifier: 43I6APV7yMNbN/yrG2eFitPWNJytajEdb0F5IFMKApM= Subject key identifier: 09:A4:F9:ED:F9:0C:AF:07:30:F1:E4:26:99:F5:00:CF:A7:6F:97:77 Authority key identifier: 14:23:B3:6D:E1:70:54:32:D7:FA:C7:2E:76:D9:4A:01:1F:DE:27:48 Certificate issuer: /CN=1423B36DE1705432D7FAC72E76D94A011FDE2748 Certificate serial: 317537516116B5A9E0DA4FC2249331D29CA6D33B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft Manifest number: D9 Signing time: Sat 10 Oct 2026 20:12:31 +0000 Manifest this update: Sat 10 Oct 2026 20:07:31 +0000 Manifest next update: Sun 11 Oct 2026 22:47:31 +0000 Files and hashes: 1: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: cCEW6l1CmmQEDb9CwJ4tPNqGxyEaPxiJZinIbOgsV2E=) 2: 1423B36DE1705432D7FAC72E76D94A011FDE2748.crl (hash: Ht1APxzEiP2VESRfpE7I7xMnjyBeSS8kZnYPVtSnNWE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.crl rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 21:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:75:37:51:61:16:b5:a9:e0:da:4f:c2:24:93:31:d2:9c:a6:d3:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1423B36DE1705432D7FAC72E76D94A011FDE2748 Validity Not Before: Oct 10 20:07:31 2026 GMT Not After : Oct 11 22:47:31 2026 GMT Subject: CN=09A4F9EDF90CAF0730F1E42699F500CFA76F9777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6a:32:d0:6f:b9:ab:52:7d:9f:d2:3f:9d:0b: 85:0f:e6:82:ab:42:dd:50:e5:c1:dc:82:3c:06:ec: 6b:30:6f:04:74:2e:5e:75:9b:54:7a:ef:88:4b:e9: 39:75:f1:cf:cd:e9:c2:5c:b4:1f:46:0f:f5:c4:96: c1:53:bb:35:5f:d4:ef:bf:a0:70:ff:a5:d6:92:54: 82:61:a8:b8:2f:7a:12:a5:a8:5c:35:0b:2e:59:b8: 76:9c:4b:c2:a2:1e:38:a8:7d:cd:fb:e0:31:83:ad: a8:c2:2e:04:76:26:6d:8d:ad:ef:8b:a8:7e:0a:18: bc:68:38:a7:a3:f9:3c:db:96:e0:80:1d:6c:f7:4d: 28:6a:15:ac:a4:f4:7f:18:f9:8f:f5:77:d3:db:f0: d6:39:e6:9b:6e:a2:4c:9c:9a:41:c2:5f:7d:a9:19: 37:c9:a5:6b:d0:af:d3:b3:ab:5d:8e:a5:90:b4:84: 25:b6:d6:e1:cf:2f:b9:b9:02:0b:24:cf:83:d9:5a: 58:13:2d:c9:99:7b:25:cb:d8:48:7c:29:d8:f2:f7: 8a:fd:52:98:2d:5a:30:c0:d9:d8:01:ae:59:80:07: 94:3d:67:2c:93:04:ce:9a:bc:e8:50:16:38:17:77: 05:2a:aa:3f:22:59:21:70:5a:b8:5b:95:f5:cb:24: 29:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A4:F9:ED:F9:0C:AF:07:30:F1:E4:26:99:F5:00:CF:A7:6F:97:77 X509v3 Authority Key Identifier: keyid:14:23:B3:6D:E1:70:54:32:D7:FA:C7:2E:76:D9:4A:01:1F:DE:27:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:5d:6b:d6:41:6e:86:c8:05:07:40:7c:db:51:ad:31:f3:5c: 4f:88:e6:fd:37:81:98:d6:3c:31:57:c5:da:59:e9:03:47:d9: 0d:db:09:26:00:46:e7:b9:cf:09:99:5f:ae:00:71:5a:19:99: aa:a5:ea:91:8c:99:11:f1:c8:17:20:e1:92:9d:9e:dd:9a:12: e1:3b:d4:3f:f4:d2:a2:4b:32:66:91:e6:06:7c:b2:f4:73:14: 1b:9d:49:99:56:1d:74:8a:a4:af:86:fb:75:3c:26:90:ab:21: 77:20:bf:1a:89:b3:fa:bd:6c:2c:f8:33:4e:de:e4:31:d0:39: 36:8b:70:d6:83:cf:a1:c9:da:c5:c9:11:5d:42:a2:57:0f:fb: df:7b:af:47:83:18:62:63:5f:39:0c:e9:eb:21:66:4a:1d:4e: 87:57:8e:4b:d1:3f:07:3f:53:0f:9e:05:9e:5b:27:63:d6:35: e4:5c:6a:c2:14:10:99:40:72:2a:d6:84:d5:00:ec:79:f9:7c: 55:57:ae:f3:fd:bf:f0:fc:0b:35:13:41:92:44:0b:10:23:c7: 61:32:f5:ae:18:a6:09:fa:7a:fe:f0:d3:f6:13:87:42:e5:b1: fb:e4:98:a6:6e:63:ee:e3:f9:ae:09:82:30:5e:a9:80:d0:76: 41:06:cb:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMXU3UWEWtang2k/CJJMx0pym0zswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQyM0IzNkRFMTcwNTQzMkQ3RkFDNzJFNzZEOTRBMDEx RkRFMjc0ODAeFw0yNjEwMTAyMDA3MzFaFw0yNjEwMTEyMjQ3MzFaMDMxMTAvBgNV BAMTKDA5QTRGOUVERjkwQ0FGMDczMEYxRTQyNjk5RjUwMENGQTc2Rjk3NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrajLQb7mrUn2f0j+dC4UP5oKr Qt1Q5cHcgjwG7GswbwR0Ll51m1R674hL6Tl18c/N6cJctB9GD/XElsFTuzVf1O+/ oHD/pdaSVIJhqLgvehKlqFw1Cy5ZuHacS8KiHjiofc374DGDrajCLgR2Jm2Nre+L qH4KGLxoOKej+TzbluCAHWz3TShqFayk9H8Y+Y/1d9Pb8NY55ptuokycmkHCX32p GTfJpWvQr9Ozq12OpZC0hCW21uHPL7m5Agskz4PZWlgTLcmZeyXL2Eh8Kdjy94r9 UpgtWjDA2dgBrlmAB5Q9ZyyTBM6avOhQFjgXdwUqqj8iWSFwWrhblfXLJCm/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCaT57fkMrwcw8eQmmfUAz6dvl3cwHwYDVR0j BBgwFoAUFCOzbeFwVDLX+scudtlKAR/eJ0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY1MDZlNzItOGI4Ny00NzAxLWEzNjAtYWViZTI1ODQ4ZjcxLzAvMTQyM0IzNkRF MTcwNTQzMkQ3RkFDNzJFNzZEOTRBMDExRkRFMjc0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDIzQjM2REUxNzA1NDMyRDdGQUM3MkU3NkQ5NEEwMTFGREUy NzQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY1MDZlNzItOGI4Ny00NzAxLWEz NjAtYWViZTI1ODQ4ZjcxLzAvMTQyM0IzNkRFMTcwNTQzMkQ3RkFDNzJFNzZEOTRB MDExRkRFMjc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9da9ZBbobIBQdAfNtRrTHzXE+I5v03gZjW PDFXxdpZ6QNH2Q3bCSYARue5zwmZX64AcVoZmaql6pGMmRHxyBcg4ZKdnt2aEuE7 1D/00qJLMmaR5gZ8svRzFBudSZlWHXSKpK+G+3U8JpCrIXcgvxqJs/q9bCz4M07e 5DHQOTaLcNaDz6HJ2sXJEV1ColcP+997r0eDGGJjXzkM6eshZkodTodXjkvRPwc/ Uw+eBZ5bJ2PWNeRcasIUEJlAcirWhNUA7Hn5fFVXrvP9v/D8CzUTQZJECxAjx2Ey 9a4Ypgn6ev7w0/YTh0LlsfvkmKZuY+7j+a4JgjBeqYDQdkEGy3Q= -----END CERTIFICATE-----Generated at Sun Oct 11 10:08:53 2026 by rpki-client