$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft File: 9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft (raw, json) Hash identifier: 7fPtJX80C30Sn4enNTgH77F8UhLYlreZUNN6Ct1v27c= Subject key identifier: D0:5E:35:81:F6:32:DA:16:46:68:7A:88:49:AB:39:FD:11:AA:3D:5A Authority key identifier: 9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F Certificate issuer: /CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F Certificate serial: 7E795AF16512D5B51D1E5E776850F7E48D68F428 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft Manifest number: BF Signing time: Mon 21 Sep 2026 16:21:52 +0000 Manifest this update: Mon 21 Sep 2026 16:16:52 +0000 Manifest next update: Tue 22 Sep 2026 18:58:52 +0000 Files and hashes: 1: 9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl (hash: YcnOeSUMXXvbGPM1R+0s4GKfxvdXmv8aLf4fG1nbdTw=) 2: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: q/9H11WTYoKvscn357helrrghEhYAd3OjlCKI1SD+L4=) 3: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: iowBD0aCpON/4cxOj5FQqoJWjlXtvZSA6Ncm7S12+nI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:79:5a:f1:65:12:d5:b5:1d:1e:5e:77:68:50:f7:e4:8d:68:f4:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F Validity Not Before: Sep 21 16:16:52 2026 GMT Not After : Sep 22 18:58:52 2026 GMT Subject: CN=D05E3581F632DA1646687A8849AB39FD11AA3D5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:02:3b:47:50:06:86:14:41:02:bd:3d:54:b7: 5d:bb:e2:1f:a1:18:66:4c:5e:a4:df:49:dd:4a:29: 6c:1d:1a:1b:21:01:06:c6:cc:5d:e3:3a:13:dd:d1: 73:65:88:3a:72:89:19:b9:20:8c:f9:b8:c5:4c:f8: 14:2a:38:34:31:8a:23:1a:3e:50:e8:83:b2:43:05: b6:f8:00:88:b2:d0:e1:ce:81:cf:01:8f:da:9f:cb: 5e:97:bf:b4:59:5e:d8:48:e9:2a:ae:e3:d0:27:4f: 2d:7d:e8:9b:ca:09:27:c8:48:b7:a2:20:c8:14:be: 38:75:57:9e:dc:40:a6:16:ee:16:b7:62:4e:56:09: 15:f7:6a:cc:70:38:1a:41:12:25:4f:2a:0d:1d:0e: d3:23:0e:ce:31:f3:48:be:74:cf:f9:3c:80:6b:82: cd:3d:a9:a6:58:04:c7:f6:d0:20:33:f6:4e:0e:8c: 41:29:f5:71:8a:1f:7a:5d:06:7a:f2:85:72:2e:97: 6e:48:32:5e:97:0c:c0:52:d1:52:84:d4:3b:b3:a7: 5f:1c:ee:60:92:91:85:6d:99:d0:bb:2e:5f:2e:6d: 6a:a4:f2:79:31:59:0a:dd:0c:6d:1c:ed:87:91:da: e5:a2:0d:02:e8:35:0a:88:70:c5:96:a2:4d:13:83: 15:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5E:35:81:F6:32:DA:16:46:68:7A:88:49:AB:39:FD:11:AA:3D:5A X509v3 Authority Key Identifier: keyid:9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f1:f3:03:6b:33:a0:15:f0:49:b8:f3:6c:b0:31:a7:81:47: 45:ee:d0:bd:e0:8c:7b:bd:e1:6a:1d:c4:28:b9:18:fb:a0:e9: e3:98:b6:71:a5:77:f1:a1:8a:23:0b:03:7a:d6:4c:01:42:68: 95:bd:5a:8b:6b:df:bf:28:e8:4f:db:81:7a:f3:40:54:a4:ec: 34:fc:71:0e:e5:73:c4:1f:23:ea:91:2d:5d:a4:8e:58:18:61: 54:71:13:17:89:e2:e0:de:85:83:b0:15:e7:fa:d1:95:50:83: 0b:a5:70:3d:d3:b4:f5:be:73:a7:e7:17:e0:d0:93:c6:ad:51: 42:b6:3c:97:e6:58:47:33:61:b3:e4:63:3a:4f:f0:ec:13:62: 30:17:92:81:1f:1a:53:2b:c6:d9:5d:39:17:8f:32:b7:c8:52: c1:a7:40:25:fd:11:c4:a6:02:7a:6c:3e:49:33:a3:f2:88:d2: 83:ae:b8:57:f6:77:84:b3:60:f7:48:74:bb:99:d4:2e:59:cd: 40:ce:02:6a:f6:f9:bf:b5:1c:7c:f7:86:1d:14:82:16:1d:78: 52:d4:68:35:f6:2e:0f:69:ec:a7:50:aa:33:21:c2:1e:35:eb: 19:e0:5f:ab:50:7d:8d:b8:4d:e2:df:05:9e:a1:21:eb:d1:86: 14:69:9e:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfnla8WUS1bUdHl53aFD35I1o9CgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJDRjI2MUYxRUVCRDBBOTYxNDg3NjFGQTJFOThFOTNG QkFGQjA2RjAeFw0yNjA5MjExNjE2NTJaFw0yNjA5MjIxODU4NTJaMDMxMTAvBgNV BAMTKEQwNUUzNTgxRjYzMkRBMTY0NjY4N0E4ODQ5QUIzOUZEMTFBQTNENUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmAjtHUAaGFEECvT1Ut1274h+h GGZMXqTfSd1KKWwdGhshAQbGzF3jOhPd0XNliDpyiRm5IIz5uMVM+BQqODQxiiMa PlDog7JDBbb4AIiy0OHOgc8Bj9qfy16Xv7RZXthI6Squ49AnTy196JvKCSfISLei IMgUvjh1V57cQKYW7ha3Yk5WCRX3asxwOBpBEiVPKg0dDtMjDs4x80i+dM/5PIBr gs09qaZYBMf20CAz9k4OjEEp9XGKH3pdBnryhXIul25IMl6XDMBS0VKE1Duzp18c 7mCSkYVtmdC7Ll8ubWqk8nkxWQrdDG0c7YeR2uWiDQLoNQqIcMWWok0TgxXrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0F41gfYy2hZGaHqISas5/RGqPVowHwYDVR0j BBgwFoAUm88mHx7r0KlhSHYfoumOk/uvsG8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIzNGVmMWQtNzM0ZC00YzcxLThiYTctZDMxZTE2OGI2MzJjLzAvOUJDRjI2MUYx RUVCRDBBOTYxNDg3NjFGQTJFOThFOTNGQkFGQjA2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkNGMjYxRjFFRUJEMEE5NjE0ODc2MUZBMkU5OEU5M0ZCQUZC MDZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvOUJDRjI2MUYxRUVCRDBBOTYxNDg3NjFGQTJFOThF OTNGQkFGQjA2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnx8wNrM6AV8Em482ywMaeBR0Xu0L3gjHu9 4WodxCi5GPug6eOYtnGld/GhiiMLA3rWTAFCaJW9Wotr378o6E/bgXrzQFSk7DT8 cQ7lc8QfI+qRLV2kjlgYYVRxExeJ4uDehYOwFef60ZVQgwulcD3TtPW+c6fnF+DQ k8atUUK2PJfmWEczYbPkYzpP8OwTYjAXkoEfGlMrxtldORePMrfIUsGnQCX9EcSm AnpsPkkzo/KI0oOuuFf2d4SzYPdIdLuZ1C5ZzUDOAmr2+b+1HHz3hh0UghYdeFLU aDX2Lg9p7KdQqjMhwh416xngX6tQfY24TeLfBZ6hIevRhhRpnt0= -----END CERTIFICATE-----Generated at Mon Sep 21 19:49:35 2026 by rpki-client