$ rpki-client -vvvf rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft File: 9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft (raw, json) Hash identifier: vACe2QlxMW6ZAZng2ZQEhEOIrXfFbKJgdNPcmE8KhnE= Subject key identifier: 25:22:B7:A7:6E:EF:97:B5:8F:65:90:C4:13:5D:7E:80:1D:AD:81:3C Authority key identifier: 9F:D7:FF:4D:3F:B3:73:40:FA:A8:C7:EE:71:D1:CB:9E:AF:08:59:C1 Certificate issuer: /CN=9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1 Certificate serial: 78EF329D87334A54EA22BA5B72B8EA24D4E388DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 05:10:36 +0000 Manifest this update: Sun 15 Nov 2026 05:05:36 +0000 Manifest next update: Mon 16 Nov 2026 06:53:36 +0000 Files and hashes: 1: 3130332e31382e37362e302f32322d3234203d3e203535373031.roa (hash: ZIatr5akU/o2NWBe3N+oXda5TMJkC+DkwhEJDyTCXOU=) 2: 3130332e33312e3233322e302f32322d3234203d3e203535373031.roa (hash: LXq7hGEpfDwOU/0U2QR8rTojO84R6vUdH42Dh5XJwhA=) 3: 3230322e37332e32352e302f32342d3234203d3e20313431383932.roa (hash: ZdJ+uJ+H3LCclcBMDstVIbOnA5HzlWlzhGq8cMXXKag=) 4: 3230322e37332e32362e302f32342d3234203d3e20313431383932.roa (hash: 2Omj4R13yIfbTM8O99f4AEQ3eWdecD3Qz56Vk4+EoQE=) 5: 34332e3235322e3233382e302f32342d3234203d3e203535373031.roa (hash: jervWvS7fVPh370uN91AucyVv2pORH48B5fUUflxIjw=) 6: 3230322e37332e32372e302f32342d3234203d3e203535373031.roa (hash: BAdz9q0heD7H4d5EINNzizZi9X7k9sip5rKeZrRgrbA=) 7: 34332e3235322e3233362e302f32332d3234203d3e203535373031.roa (hash: 9/aJzkpwQD5bM8J0s7lmNbtmibtAmha33amC/3lwiTs=) 8: 9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl (hash: BaJxfZW4mz5Wc3ETWLXCmYSrZ8r+91SH7G+AGLDABRg=) 9: 34392e302e302e302f32322d3234203d3e203535373031.roa (hash: sLZQYwwJZGFMTL7izEAM/LPP1kYOTnZL+ruwm/tAWUw=) 10: 3230322e37332e32342e302f32342d3234203d3e203535373031.roa (hash: PInvCtxVVtioPbfgKwU3owF3bAZaDoVKCpPjomKqIrc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 06:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ef:32:9d:87:33:4a:54:ea:22:ba:5b:72:b8:ea:24:d4:e3:88:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1 Validity Not Before: Nov 15 05:05:36 2026 GMT Not After : Nov 16 06:53:36 2026 GMT Subject: CN=2522B7A76EEF97B58F6590C4135D7E801DAD813C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:34:52:fa:a2:84:d8:5c:ed:0f:b7:60:5d:83: 1a:4c:50:35:4f:e7:a6:17:d1:1a:fd:fc:fa:5d:27: 79:30:98:50:73:58:39:3e:9b:20:95:65:6d:6d:43: 50:93:ca:ac:f1:c1:22:cf:9d:00:73:66:ac:69:e7: 4f:c5:a0:a6:36:6b:c3:01:b5:a2:84:26:9c:9a:b6: 1a:aa:95:0a:3d:4b:a6:21:b1:de:b3:d6:b8:70:be: cc:91:09:a4:78:d4:c6:26:65:fa:6d:c6:d5:be:9f: 41:97:6f:67:8e:4f:d7:df:6c:d9:a6:b1:07:46:97: 20:54:c0:f4:e2:27:9c:84:13:ee:a4:20:b4:b8:32: c6:f5:fb:a1:65:90:ba:80:4f:b7:50:04:0f:8c:a4: 68:d0:74:1e:fe:48:f6:48:5f:2c:c4:8b:31:d2:55: ae:4c:a3:0f:17:28:de:38:01:79:b8:20:1d:75:32: 4d:7c:75:ff:9e:7c:de:5d:4b:f9:a2:3e:7b:f7:66: 24:b2:10:c6:98:fb:9d:fb:e5:5b:20:5e:9f:66:60: e7:82:1d:14:a0:ac:24:5c:7a:2f:43:b3:1d:28:95: 7d:f0:36:ac:20:d6:7e:5c:4e:a4:94:af:85:8d:02: 0a:64:b7:0f:1f:75:5a:65:0d:72:03:11:b2:ca:31: 26:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:22:B7:A7:6E:EF:97:B5:8F:65:90:C4:13:5D:7E:80:1D:AD:81:3C X509v3 Authority Key Identifier: keyid:9F:D7:FF:4D:3F:B3:73:40:FA:A8:C7:EE:71:D1:CB:9E:AF:08:59:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:e6:9e:d0:16:a1:46:55:c0:54:d6:aa:af:e0:06:ab:ea:38: 08:30:3e:d6:10:c6:f0:43:28:5c:fc:ae:ee:f0:54:0c:11:c3: 89:83:03:5a:32:27:7a:8d:b1:32:4a:b1:75:ab:9f:0b:f9:95: 0f:af:42:27:a3:3a:a1:76:bd:de:b6:75:09:73:59:43:0d:5d: 41:72:8c:af:ee:13:58:9c:ca:92:74:78:74:04:bc:7e:4f:f2: 31:77:24:6a:90:e6:83:cc:45:68:6c:83:b0:51:81:41:27:75: 2b:2f:d8:e2:eb:4f:4f:e5:6a:aa:1f:39:45:40:0a:e6:97:fa: 3f:7b:bb:93:e4:c4:06:6e:d1:25:b4:e8:c5:6e:32:fc:c0:4c: f6:cc:c3:24:48:a7:1c:bd:da:81:ce:5f:55:8f:72:41:8b:04: ba:af:82:4d:ef:54:72:fc:ae:95:4e:c1:51:ca:00:8a:68:dd: fc:16:aa:37:ca:50:ef:be:c7:7f:28:eb:82:33:69:c4:08:f0: cd:99:5a:58:ae:96:f1:ec:70:37:60:0f:3e:ae:cd:74:45:cc: c7:9c:c0:85:b8:5b:05:67:1d:e5:a3:02:24:7b:46:27:87:29: d9:e2:00:d2:d3:a4:29:66:ea:fd:3d:fd:10:d2:21:85:d2:94: 96:15:96:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeO8ynYczSlTqIrpbcrjqJNTjiNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZEN0ZGNEQzRkIzNzM0MEZBQThDN0VFNzFEMUNCOUVB RjA4NTlDMTAeFw0yNjExMTUwNTA1MzZaFw0yNjExMTYwNjUzMzZaMDMxMTAvBgNV BAMTKDI1MjJCN0E3NkVFRjk3QjU4RjY1OTBDNDEzNUQ3RTgwMURBRDgxM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYNFL6ooTYXO0Pt2BdgxpMUDVP 56YX0Rr9/PpdJ3kwmFBzWDk+myCVZW1tQ1CTyqzxwSLPnQBzZqxp50/FoKY2a8MB taKEJpyathqqlQo9S6Yhsd6z1rhwvsyRCaR41MYmZfptxtW+n0GXb2eOT9ffbNmm sQdGlyBUwPTiJ5yEE+6kILS4Msb1+6FlkLqAT7dQBA+MpGjQdB7+SPZIXyzEizHS Va5Mow8XKN44AXm4IB11Mk18df+efN5dS/miPnv3ZiSyEMaY+5375VsgXp9mYOeC HRSgrCRcei9Dsx0olX3wNqwg1n5cTqSUr4WNAgpktw8fdVplDXIDEbLKMSZRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJSK3p27vl7WPZZDEE11+gB2tgTwwHwYDVR0j BBgwFoAUn9f/TT+zc0D6qMfucdHLnq8IWcEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjdkOWY4NTEtN2U3My00Mzg0LTk1MGUtOGJlOGUxNWZkM2VlLzAvOUZEN0ZGNEQz RkIzNzM0MEZBQThDN0VFNzFEMUNCOUVBRjA4NTlDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkQ3RkY0RDNGQjM3MzQwRkFBOEM3RUU3MUQxQ0I5RUFGMDg1 OUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjdkOWY4NTEtN2U3My00Mzg0LTk1 MGUtOGJlOGUxNWZkM2VlLzAvOUZEN0ZGNEQzRkIzNzM0MEZBQThDN0VFNzFEMUNC OUVBRjA4NTlDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM3mntAWoUZVwFTWqq/gBqvqOAgwPtYQxvBD KFz8ru7wVAwRw4mDA1oyJ3qNsTJKsXWrnwv5lQ+vQiejOqF2vd62dQlzWUMNXUFy jK/uE1icypJ0eHQEvH5P8jF3JGqQ5oPMRWhsg7BRgUEndSsv2OLrT0/laqofOUVA CuaX+j97u5PkxAZu0SW06MVuMvzATPbMwyRIpxy92oHOX1WPckGLBLqvgk3vVHL8 rpVOwVHKAIpo3fwWqjfKUO++x38o64IzacQI8M2ZWliulvHscDdgDz6uzXRFzMec wIW4WwVnHeWjAiR7RieHKdniANLTpClm6v09/RDSIYXSlJYVlrM= -----END CERTIFICATE-----Generated at Sun Nov 15 12:30:17 2026 by rpki-client