$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft File: B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft (raw, json) Hash identifier: /dfRwMCpyEv32diULG9Zrf609OQSdjgWTjerPFsT4QE= Subject key identifier: B0:43:E8:81:67:C9:99:84:1A:5D:85:5B:19:F9:47:25:22:5F:83:83 Authority key identifier: B9:BC:CC:BE:89:27:A7:BA:B7:85:3C:7A:BB:0A:F3:95:CD:04:78:65 Certificate issuer: /CN=B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865 Certificate serial: 71C9FAEB57910895AC3E94D884E7AC491B6EBEBA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft Manifest number: FF Signing time: Mon 09 Nov 2026 13:43:01 +0000 Manifest this update: Mon 09 Nov 2026 13:38:01 +0000 Manifest next update: Tue 10 Nov 2026 17:39:01 +0000 Files and hashes: 1: 3131362e35382e3139342e302f32342d3234203d3e203338313534.roa (hash: 4hL7+e18qobBBQHbTnmFkA+ZM9pKWiAv/aAZLelInyQ=) 2: B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl (hash: WtnqFQ/kvLoingjfrqhXEFe+211nNrdVrnXsgnw8Ogw=) 3: 3131362e35382e3139322e302f32312d3234203d3e203338313534.roa (hash: +LPJ5wMBOnCiRiVVBw9/f075KEvSA/QkdJARXOeWxBI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 17:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c9:fa:eb:57:91:08:95:ac:3e:94:d8:84:e7:ac:49:1b:6e:be:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865 Validity Not Before: Nov 9 13:38:01 2026 GMT Not After : Nov 10 17:39:01 2026 GMT Subject: CN=B043E88167C999841A5D855B19F94725225F8383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2c:1d:8c:84:40:64:37:7e:28:4a:57:3c:e9: 0d:50:46:8e:c7:dc:86:05:a6:6e:30:63:41:77:64: a9:0b:06:84:a4:d4:96:78:df:bf:31:fe:59:88:30: 22:1c:1a:ae:87:ca:13:8c:8d:50:2d:d8:80:39:39: f3:e3:76:06:3c:fc:b9:a3:04:57:57:ee:f9:17:7c: 57:7d:da:76:25:6b:88:5a:0d:ac:9d:e5:ad:3a:6f: 27:97:71:7e:df:32:31:65:a1:b3:3c:21:32:4d:c1: 25:b4:69:5f:ca:ec:56:1e:d7:07:7c:a8:22:fe:74: 25:12:b0:0b:4b:14:d1:34:d3:e1:b0:f6:2a:e9:2f: 3f:89:d2:1e:52:c3:b0:e0:76:c1:53:bd:ea:55:fa: d8:77:fb:2d:71:f0:e2:06:51:1b:db:d5:9d:ac:96: b9:09:5d:35:5e:35:59:cf:76:6e:43:e1:88:4d:99: 35:a6:1d:44:8e:e7:78:1f:c7:5c:63:64:e4:02:c2: 69:82:f3:81:31:4e:82:b9:e6:ee:ff:d4:3d:52:57: c1:f9:2d:88:bb:1a:ab:1b:6a:47:4c:00:2b:29:59: 12:0c:cb:e2:1f:8a:c3:04:ca:bf:54:ef:1c:c0:e9: fa:7a:b0:de:18:40:23:40:b6:94:00:fd:b2:3a:8c: a7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:43:E8:81:67:C9:99:84:1A:5D:85:5B:19:F9:47:25:22:5F:83:83 X509v3 Authority Key Identifier: keyid:B9:BC:CC:BE:89:27:A7:BA:B7:85:3C:7A:BB:0A:F3:95:CD:04:78:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:3b:7d:0d:37:53:16:ff:fb:2e:bd:0c:a7:69:af:7b:ee:bb: 90:9e:75:76:f1:7c:c8:70:b9:69:a4:20:a6:e3:f4:cb:de:0b: 06:6a:25:ea:0f:5f:a7:66:db:99:b3:3d:58:5a:f2:db:0e:e2: 99:2f:7b:ae:b2:08:a0:0b:c4:3e:e9:bd:9f:c4:52:0f:3a:1d: 89:45:04:b9:c9:0f:34:0b:21:bf:c0:47:33:5c:0d:ad:1c:ea: 81:80:09:1e:16:46:1e:9c:80:60:56:48:06:5b:26:a1:c5:78: 84:6c:d1:3b:e0:20:93:e3:8d:05:89:44:00:1a:ed:bd:db:a4: 17:60:eb:b2:77:64:f8:bd:a5:68:f7:f7:fe:bb:7e:12:7d:01: e9:4e:80:6e:d8:d6:c2:b9:8a:b5:09:eb:0e:79:63:dd:8f:49: a2:0a:6b:37:a6:5f:cb:bb:6e:f9:1b:db:5d:a0:56:e9:78:95: ba:f0:2e:fd:74:d9:06:20:97:b9:19:33:d7:6c:97:53:95:f3: e5:0c:a0:17:2f:f4:9f:47:d2:63:e5:5e:53:f4:80:32:66:bd: 1a:02:d5:79:bd:86:95:ac:b0:4c:71:e2:9d:d1:6c:dd:13:a0: 92:f9:65:c8:20:b6:a6:64:22:40:3b:a1:44:02:e1:a0:1b:fe: e1:02:0b:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUccn661eRCJWsPpTYhOesSRtuvrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCQ0NDQkU4OTI3QTdCQUI3ODUzQzdBQkIwQUYzOTVD RDA0Nzg2NTAeFw0yNjExMDkxMzM4MDFaFw0yNjExMTAxNzM5MDFaMDMxMTAvBgNV BAMTKEIwNDNFODgxNjdDOTk5ODQxQTVEODU1QjE5Rjk0NzI1MjI1RjgzODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeLB2MhEBkN34oSlc86Q1QRo7H 3IYFpm4wY0F3ZKkLBoSk1JZ4378x/lmIMCIcGq6HyhOMjVAt2IA5OfPjdgY8/Lmj BFdX7vkXfFd92nYla4haDayd5a06byeXcX7fMjFlobM8ITJNwSW0aV/K7FYe1wd8 qCL+dCUSsAtLFNE00+Gw9irpLz+J0h5Sw7DgdsFTvepV+th3+y1x8OIGURvb1Z2s lrkJXTVeNVnPdm5D4YhNmTWmHUSO53gfx1xjZOQCwmmC84ExToK55u7/1D1SV8H5 LYi7GqsbakdMACspWRIMy+IfisMEyr9U7xzA6fp6sN4YQCNAtpQA/bI6jKcHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsEPogWfJmYQaXYVbGflHJSJfg4MwHwYDVR0j BBgwFoAUubzMvoknp7q3hTx6uwrzlc0EeGUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmZlYmI2OGEtOGE1ZC00MTFjLThiYjMtODMzNDIzMTAwYjZlLzAvQjlCQ0NDQkU4 OTI3QTdCQUI3ODUzQzdBQkIwQUYzOTVDRDA0Nzg2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUJDQ0NCRTg5MjdBN0JBQjc4NTNDN0FCQjBBRjM5NUNEMDQ3 ODY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmZlYmI2OGEtOGE1ZC00MTFjLThi YjMtODMzNDIzMTAwYjZlLzAvQjlCQ0NDQkU4OTI3QTdCQUI3ODUzQzdBQkIwQUYz OTVDRDA0Nzg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQ7fQ03Uxb/+y69DKdpr3vuu5CedXbxfMhw uWmkIKbj9MveCwZqJeoPX6dm25mzPVha8tsO4pkve66yCKALxD7pvZ/EUg86HYlF BLnJDzQLIb/ARzNcDa0c6oGACR4WRh6cgGBWSAZbJqHFeIRs0TvgIJPjjQWJRAAa 7b3bpBdg67J3ZPi9pWj39/67fhJ9AelOgG7Y1sK5irUJ6w55Y92PSaIKazemX8u7 bvkb212gVul4lbrwLv102QYgl7kZM9dsl1OV8+UMoBcv9J9H0mPlXlP0gDJmvRoC 1Xm9hpWssExx4p3RbN0ToJL5ZcggtqZkIkA7oUQC4aAb/uECC8E= -----END CERTIFICATE-----Generated at Tue Nov 10 03:20:48 2026 by rpki-client