$ rpki-client -vvvf rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft File: 9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft (raw, json) Hash identifier: D/WvgRpQ4DQEaiDEVqidHQWD8KqahfjD2wDY4XIS7T8= Subject key identifier: A2:4B:D1:6A:FA:89:99:D6:08:CE:5F:8F:A7:54:58:A0:14:1E:D7:CF Authority key identifier: 9A:42:83:F9:6B:70:1E:C6:0E:A4:5F:12:4F:88:81:9D:76:D7:E8:FC Certificate issuer: /CN=9A4283F96B701EC60EA45F124F88819D76D7E8FC Certificate serial: 59D2614FA883E6797003892DBA3AB00C0AAE6203 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft Manifest number: 0100 Signing time: Tue 10 Nov 2026 15:40:49 +0000 Manifest this update: Tue 10 Nov 2026 15:35:49 +0000 Manifest next update: Wed 11 Nov 2026 16:37:49 +0000 Files and hashes: 1: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: lqSxCFv5WmyrxicOkawzjV/AVzQFgoIxemd6g7X5MqQ=) 2: 9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl (hash: MITCyoAsfJQBAxgqNURh5EyTS2P/UXf/UMXHZMBK+mc=) 3: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 8HBG0p89815vWKkauI6Wn4NeMLGP4fCVAgDc4tDqrGk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:d2:61:4f:a8:83:e6:79:70:03:89:2d:ba:3a:b0:0c:0a:ae:62:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A4283F96B701EC60EA45F124F88819D76D7E8FC Validity Not Before: Nov 10 15:35:49 2026 GMT Not After : Nov 11 16:37:49 2026 GMT Subject: CN=A24BD16AFA8999D608CE5F8FA75458A0141ED7CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:82:b1:3d:f2:0c:27:f6:2e:07:f7:0b:a8:14: fc:8c:81:55:1d:f0:30:56:2c:24:9a:84:83:46:af: 1e:8c:4a:82:a4:06:7a:1b:cc:3e:34:31:22:dd:d8: 4d:a4:86:46:b8:b2:ab:1b:6b:0f:bd:f4:d0:2e:cc: 58:32:9c:21:46:45:21:7d:c7:db:66:b5:ac:c7:79: 0e:6d:cd:67:b5:bf:9d:ca:40:46:ca:2f:dc:cf:27: a8:44:35:77:27:35:ba:88:8c:cc:00:91:db:6b:18: 26:cc:71:0a:b7:8f:02:2d:60:71:be:e9:ca:c1:6c: fa:f4:07:bf:6a:61:a4:90:f1:f5:e4:d5:c9:d6:53: fa:62:28:25:01:6f:c2:30:06:f8:0a:51:05:36:a2: ae:e4:7a:d0:d0:4f:90:af:01:0d:f4:38:d8:e6:8e: 7d:39:52:b7:f7:67:91:f5:7b:20:c2:49:c6:c4:c1: e8:23:6a:14:78:ca:95:0d:e1:5f:4a:4a:22:f9:45: 59:43:99:85:2c:c4:69:7b:55:f7:b5:75:6a:db:19: 5c:52:a3:99:46:b5:fb:65:ac:df:5e:db:43:29:be: a5:bf:e4:ee:51:89:7c:99:e5:13:2e:d9:79:bd:f2: 1d:79:81:64:17:6f:aa:48:77:20:48:26:46:0d:88: c0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4B:D1:6A:FA:89:99:D6:08:CE:5F:8F:A7:54:58:A0:14:1E:D7:CF X509v3 Authority Key Identifier: keyid:9A:42:83:F9:6B:70:1E:C6:0E:A4:5F:12:4F:88:81:9D:76:D7:E8:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:9f:d9:90:e4:d2:b8:c5:42:22:46:1b:ca:6c:81:59:07:1b: f0:b7:50:3d:c1:32:2c:35:33:a1:6a:cc:d6:1d:22:c7:04:7d: 63:35:d4:2f:36:56:5c:ef:58:bd:cb:3b:f1:70:da:74:c2:36: 82:02:ba:9c:bf:b4:b0:25:f0:e5:a6:06:85:3a:fb:55:6c:62: fa:a6:37:42:81:18:b6:8c:2f:e5:42:05:14:4f:c7:40:cb:0d: a4:8d:b7:14:a2:c4:99:b2:b7:f8:55:31:e1:17:80:41:cc:86: d2:0e:c7:a2:cc:92:00:8c:7a:13:f7:62:d0:0e:0a:e1:15:88: eb:05:d5:8d:97:da:ab:58:f6:f0:70:2e:78:91:80:33:96:eb: 04:34:2c:ef:80:8c:5a:e3:4f:a3:c0:e1:e1:df:d9:6a:c6:9b: 24:32:d9:16:92:7f:41:05:b6:d7:62:a0:03:d9:84:08:f6:9f: b8:4a:ec:30:b5:28:d6:ae:47:d9:85:16:f4:92:27:6e:5b:99: 3e:68:fa:c1:e7:c7:79:f4:ce:0c:f8:e9:8b:b0:50:22:f9:86: 5f:ce:d1:1c:8d:1f:69:96:62:af:1b:32:7b:f1:2e:c4:2b:c1: 13:59:33:82:e0:2a:1c:a0:7a:d4:6c:b1:fa:72:ca:01:dc:4f: 86:01:90:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWdJhT6iD5nlwA4ktujqwDAquYgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0MjgzRjk2QjcwMUVDNjBFQTQ1RjEyNEY4ODgxOUQ3 NkQ3RThGQzAeFw0yNjExMTAxNTM1NDlaFw0yNjExMTExNjM3NDlaMDMxMTAvBgNV BAMTKEEyNEJEMTZBRkE4OTk5RDYwOENFNUY4RkE3NTQ1OEEwMTQxRUQ3Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrgrE98gwn9i4H9wuoFPyMgVUd 8DBWLCSahINGrx6MSoKkBnobzD40MSLd2E2khka4sqsbaw+99NAuzFgynCFGRSF9 x9tmtazHeQ5tzWe1v53KQEbKL9zPJ6hENXcnNbqIjMwAkdtrGCbMcQq3jwItYHG+ 6crBbPr0B79qYaSQ8fXk1cnWU/piKCUBb8IwBvgKUQU2oq7ketDQT5CvAQ30ONjm jn05Urf3Z5H1eyDCScbEwegjahR4ypUN4V9KSiL5RVlDmYUsxGl7Vfe1dWrbGVxS o5lGtftlrN9e20MpvqW/5O5RiXyZ5RMu2Xm98h15gWQXb6pIdyBIJkYNiMDzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUokvRavqJmdYIzl+Pp1RYoBQe188wHwYDVR0j BBgwFoAUmkKD+WtwHsYOpF8ST4iBnXbX6PwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODMyYzgyM2QtYTRiNy00MDA1LTlhYjgtZDNiMmM4YmJmNzYzLzAvOUE0MjgzRjk2 QjcwMUVDNjBFQTQ1RjEyNEY4ODgxOUQ3NkQ3RThGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTQyODNGOTZCNzAxRUM2MEVBNDVGMTI0Rjg4ODE5RDc2RDdF OEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh YjgtZDNiMmM4YmJmNzYzLzAvOUE0MjgzRjk2QjcwMUVDNjBFQTQ1RjEyNEY4ODgx OUQ3NkQ3RThGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCf2ZDk0rjFQiJGG8psgVkHG/C3UD3BMiw1 M6FqzNYdIscEfWM11C82VlzvWL3LO/Fw2nTCNoICupy/tLAl8OWmBoU6+1VsYvqm N0KBGLaML+VCBRRPx0DLDaSNtxSixJmyt/hVMeEXgEHMhtIOx6LMkgCMehP3YtAO CuEViOsF1Y2X2qtY9vBwLniRgDOW6wQ0LO+AjFrjT6PA4eHf2WrGmyQy2RaSf0EF ttdioAPZhAj2n7hK7DC1KNauR9mFFvSSJ25bmT5o+sHnx3n0zgz46YuwUCL5hl/O 0RyNH2mWYq8bMnvxLsQrwRNZM4LgKhygetRssfpyygHcT4YBkNI= -----END CERTIFICATE-----Generated at Wed Nov 11 01:08:42 2026 by rpki-client