$ rpki-client -vvvf rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft File: 9B2D9946FF043D1081C26FD38F0817310077BFC7.mft (raw, json) Hash identifier: GUJEh2tsiFqExnk7Ynx5MzQxvhlC9ypVL5mV3qGtU7k= Subject key identifier: DB:EC:4B:9F:66:F9:BA:26:F4:05:C6:CC:14:51:B4:C2:5F:0A:9A:62 Authority key identifier: 9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7 Certificate issuer: /CN=9B2D9946FF043D1081C26FD38F0817310077BFC7 Certificate serial: 30DD82D7417362E4EEDAFBAB9F1608D9190E27AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft Manifest number: FF Signing time: Mon 09 Nov 2026 11:30:05 +0000 Manifest this update: Mon 09 Nov 2026 11:25:05 +0000 Manifest next update: Tue 10 Nov 2026 12:49:05 +0000 Files and hashes: 1: 9B2D9946FF043D1081C26FD38F0817310077BFC7.crl (hash: JnStwMsTgFhh6NHwjClvqWLN/GBfR5gBUFa8g3aYmHY=) 2: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (hash: nWvsjEg3FhCbHhiH6HxunuDCxB9lgrvkKOpoSSa7E9Q=) 3: 3136302e32322e39322e302f32342d3234203d3e20313532383335.roa (hash: oePR/73r7MSIzHQUks2lMsK7CVUF0CNaDFGyG/xqYVQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.crl rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 12:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:dd:82:d7:41:73:62:e4:ee:da:fb:ab:9f:16:08:d9:19:0e:27:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2D9946FF043D1081C26FD38F0817310077BFC7 Validity Not Before: Nov 9 11:25:05 2026 GMT Not After : Nov 10 12:49:05 2026 GMT Subject: CN=DBEC4B9F66F9BA26F405C6CC1451B4C25F0A9A62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8e:3c:0f:32:80:28:a9:22:56:0e:30:ce:63: ef:ab:a7:bd:6a:28:32:09:b5:3a:d9:2f:fa:24:c6: 96:8c:e1:1c:d6:de:ba:b4:ad:97:27:f8:a8:f0:bd: 8d:47:46:66:e2:30:a8:6b:ea:67:bc:b9:bc:cd:a7: 80:5f:4a:88:a7:23:9b:17:93:9e:3b:55:c9:9f:dd: 87:5e:d0:06:93:ca:ba:23:3b:da:c8:38:1c:a4:ee: 40:c3:e6:cf:66:cb:3f:b7:85:34:4e:33:77:46:8d: 07:f9:b9:d0:12:52:70:4f:e5:97:a5:51:e4:85:4d: a6:99:4f:86:d4:d3:05:e5:a7:24:5e:b0:4a:b1:fa: 08:6d:e6:b6:c2:88:7f:39:f1:35:86:ba:38:80:78: 3d:fa:e1:a1:70:7c:b1:ff:6f:dd:b7:8d:60:5b:4b: 3f:39:9b:0b:3d:80:4b:82:f8:e5:c2:2a:67:32:b2: 33:40:79:d9:28:e4:89:b3:25:b1:b9:fd:41:5f:bb: e3:40:0c:26:ae:eb:9c:19:80:9f:3d:d5:eb:0b:b2: 47:63:4a:c8:c3:03:22:31:57:18:70:d3:cb:56:2f: e9:78:7d:83:35:93:ec:07:70:da:96:cf:bc:c0:ff: 26:83:7c:e0:01:e4:d6:e4:bf:37:3b:77:e2:c1:88: 8a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EC:4B:9F:66:F9:BA:26:F4:05:C6:CC:14:51:B4:C2:5F:0A:9A:62 X509v3 Authority Key Identifier: keyid:9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f2:7f:3d:4a:22:a7:4b:2c:8a:0b:ff:8f:d4:34:52:b3:dc: 6c:d4:34:5c:ba:e0:fd:60:5b:5a:f0:9f:a3:84:17:98:3a:41: 4b:34:05:45:85:e2:41:0e:82:5d:f8:dd:19:39:eb:4f:7e:75: 9a:84:8d:e5:99:91:eb:00:8a:3b:23:8b:cb:c3:b9:8a:9c:f5: d7:66:ac:9d:32:51:a6:2c:98:72:61:4c:52:d9:30:cb:5c:c5: b9:22:a1:66:79:fa:6a:93:dc:89:d5:ca:22:af:d0:cb:9a:50: 70:38:9c:5b:a8:f9:06:fb:a0:8b:fc:85:32:cc:1a:84:b6:17: de:ad:50:ba:7e:2c:4a:3d:87:a0:29:98:f0:97:2c:13:b7:8f: f5:e6:6e:eb:47:59:1b:57:3b:a6:87:7c:6b:4f:8a:f9:ab:39: 5b:3d:84:e0:d3:27:b8:ea:84:cd:d0:cc:ec:93:a9:cc:d5:36: af:70:a8:7b:e6:33:58:dd:b5:a2:52:4e:a2:2b:cd:82:78:7c: 34:7c:07:d3:0e:4f:17:81:bd:98:54:cc:19:88:9d:42:12:74: 1f:7e:c7:10:22:c5:3b:09:7b:50:bb:e1:b3:bf:b6:14:99:3f: eb:31:6c:e8:e5:c5:fb:79:ac:34:9f:9f:fc:72:4d:73:27:cf: c9:aa:52:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMN2C10FzYuTu2vurnxYI2RkOJ6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyRDk5NDZGRjA0M0QxMDgxQzI2RkQzOEYwODE3MzEw MDc3QkZDNzAeFw0yNjExMDkxMTI1MDVaFw0yNjExMTAxMjQ5MDVaMDMxMTAvBgNV BAMTKERCRUM0QjlGNjZGOUJBMjZGNDA1QzZDQzE0NTFCNEMyNUYwQTlBNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCjjwPMoAoqSJWDjDOY++rp71q KDIJtTrZL/okxpaM4RzW3rq0rZcn+KjwvY1HRmbiMKhr6me8ubzNp4BfSoinI5sX k547Vcmf3Yde0AaTyrojO9rIOByk7kDD5s9myz+3hTROM3dGjQf5udASUnBP5Zel UeSFTaaZT4bU0wXlpyResEqx+ght5rbCiH858TWGujiAeD364aFwfLH/b923jWBb Sz85mws9gEuC+OXCKmcysjNAedko5ImzJbG5/UFfu+NADCau65wZgJ891esLskdj SsjDAyIxVxhw08tWL+l4fYM1k+wHcNqWz7zA/yaDfOAB5Nbkvzc7d+LBiIqTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2+xLn2b5uib0BcbMFFG0wl8KmmIwHwYDVR0j BBgwFoAUmy2ZRv8EPRCBwm/TjwgXMQB3v8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJkMjliMzItM2EyOS00YTE0LWJjOWItYzc2YTAwN2NhMDMyLzAvOUIyRDk5NDZG RjA0M0QxMDgxQzI2RkQzOEYwODE3MzEwMDc3QkZDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85QjJEOTk0NkZGMDQzRDEwODFDMjZGRDM4RjA4MTczMTAwNzdC RkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJkMjliMzItM2EyOS00YTE0LWJj OWItYzc2YTAwN2NhMDMyLzAvOUIyRDk5NDZGRjA0M0QxMDgxQzI2RkQzOEYwODE3 MzEwMDc3QkZDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/yfz1KIqdLLIoL/4/UNFKz3GzUNFy64P1g W1rwn6OEF5g6QUs0BUWF4kEOgl343Rk5609+dZqEjeWZkesAijsji8vDuYqc9ddm rJ0yUaYsmHJhTFLZMMtcxbkioWZ5+mqT3InVyiKv0MuaUHA4nFuo+Qb7oIv8hTLM GoS2F96tULp+LEo9h6ApmPCXLBO3j/XmbutHWRtXO6aHfGtPivmrOVs9hODTJ7jq hM3QzOyTqczVNq9wqHvmM1jdtaJSTqIrzYJ4fDR8B9MOTxeBvZhUzBmInUISdB9+ xxAixTsJe1C74bO/thSZP+sxbOjlxft5rDSfn/xyTXMnz8mqUmE= -----END CERTIFICATE-----Generated at Tue Nov 10 07:13:14 2026 by rpki-client