$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft File: C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft (raw, json) Hash identifier: ZZp8P62fTon4P7FljbzCZbWRnXkd81xbdAVxAiGv4Xg= Subject key identifier: 1D:85:05:50:D4:A6:55:CC:33:FF:1C:A5:73:3A:21:68:C1:5C:07:2C Authority key identifier: C9:E5:EB:92:DA:79:3B:8D:8B:F8:9C:80:54:18:99:A1:48:DA:3F:C7 Certificate issuer: /CN=C9E5EB92DA793B8D8BF89C80541899A148DA3FC7 Certificate serial: 79156F0CD7A7A0DBE184F027B0DC199F71D2DC76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft Manifest number: BE Signing time: Mon 21 Sep 2026 00:06:40 +0000 Manifest this update: Mon 21 Sep 2026 00:01:40 +0000 Manifest next update: Tue 22 Sep 2026 01:13:40 +0000 Files and hashes: 1: 3130332e3136392e31302e302f32332d3234203d3e20313432333335.roa (hash: Kv2Bwd8eSfvsYR5xc9V1CjJ+ZGmosk9p1qlT46CISoA=) 2: C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.crl (hash: n99Kb20bUUwJGNu6g4qk9vz6Z9XQ9g+Ydf4TJ/Jhhsg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.crl rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 01:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:15:6f:0c:d7:a7:a0:db:e1:84:f0:27:b0:dc:19:9f:71:d2:dc:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9E5EB92DA793B8D8BF89C80541899A148DA3FC7 Validity Not Before: Sep 21 00:01:40 2026 GMT Not After : Sep 22 01:13:40 2026 GMT Subject: CN=1D850550D4A655CC33FF1CA5733A2168C15C072C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e3:14:a8:f6:a2:a5:57:76:46:a4:72:0e:8e: bc:b0:43:7a:cb:e8:eb:74:f8:71:a0:91:08:b2:54: 12:cb:85:f5:2a:8f:e8:91:a6:06:53:aa:62:43:52: ef:56:ae:70:29:51:b4:82:06:46:cd:4b:9a:f5:ef: 2c:48:9c:d0:a2:75:52:34:ec:cb:02:6e:49:76:9c: 98:9f:a9:0a:67:3b:73:13:33:91:02:62:d5:09:2b: c8:0e:0f:54:bb:77:78:bc:e0:d1:06:ce:f2:0d:f4: 93:f4:c7:64:de:d7:c4:be:a1:0b:1d:58:a0:77:54: 4d:5b:6d:f2:e9:b2:3f:a7:43:70:92:aa:09:f7:54: 46:c1:cf:c1:e6:68:45:6a:60:11:4c:2f:26:7e:18: 95:10:ab:b6:eb:db:ec:59:c3:4e:9b:87:33:c2:0e: 6b:e5:92:f2:24:0a:ec:2b:aa:73:35:da:af:d8:ca: 20:56:11:db:df:f8:4e:48:24:a7:87:95:c1:cb:49: ef:ca:82:34:f8:8b:a9:3f:89:c7:3f:8c:98:64:b6: f0:18:87:27:79:45:55:c6:90:af:a4:98:ed:a3:83: 11:df:be:92:c0:85:a8:e1:91:95:60:cf:0f:c4:f5: ed:f3:97:72:9c:1e:12:05:b3:fe:55:cc:d2:0c:4b: 82:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:85:05:50:D4:A6:55:CC:33:FF:1C:A5:73:3A:21:68:C1:5C:07:2C X509v3 Authority Key Identifier: keyid:C9:E5:EB:92:DA:79:3B:8D:8B:F8:9C:80:54:18:99:A1:48:DA:3F:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:bd:75:d1:9d:27:0d:d1:42:d1:a1:55:74:35:68:f8:3d:b1: 43:63:de:b2:02:74:34:3d:48:5f:59:3c:3d:5f:a2:33:86:aa: b8:9c:14:8c:9a:7b:5b:63:3a:81:65:b5:8e:23:ae:11:fb:84: 90:ad:13:20:1f:e2:da:b7:88:b2:dc:20:bc:22:2f:ce:5b:a5: ba:1a:01:07:59:0b:fd:84:2e:f8:c9:89:63:ed:0c:c2:c7:ab: 51:94:76:d6:a0:38:12:5d:23:a8:2e:e0:b8:d7:d8:76:24:16: 85:98:a6:27:a8:61:15:31:16:60:e1:d9:b5:52:9a:71:43:f9: ec:e0:96:d5:d3:3c:16:59:4d:04:b8:e0:ce:78:02:66:34:b6: 88:14:b8:27:01:d9:51:45:93:31:28:e9:08:ec:82:ed:fd:ea: 81:f4:0f:2c:cf:41:35:95:3a:6b:3a:76:ac:16:25:cf:fb:97: 59:2a:f0:5a:72:2c:26:11:6e:92:64:2f:df:25:26:24:c2:bb: 3a:71:44:7e:28:7e:c0:24:4f:06:e5:e3:69:f1:d0:78:dc:3b: 19:81:8d:82:ee:fc:af:6c:c7:3d:fc:35:d3:0e:32:8e:a3:74: ea:0d:12:58:53:34:f5:4a:01:d4:ca:d7:ec:3a:3e:c8:77:98: 94:63:cb:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeRVvDNenoNvhhPAnsNwZn3HS3HYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlFNUVCOTJEQTc5M0I4RDhCRjg5QzgwNTQxODk5QTE0 OERBM0ZDNzAeFw0yNjA5MjEwMDAxNDBaFw0yNjA5MjIwMTEzNDBaMDMxMTAvBgNV BAMTKDFEODUwNTUwRDRBNjU1Q0MzM0ZGMUNBNTczM0EyMTY4QzE1QzA3MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe4xSo9qKlV3ZGpHIOjrywQ3rL 6Ot0+HGgkQiyVBLLhfUqj+iRpgZTqmJDUu9WrnApUbSCBkbNS5r17yxInNCidVI0 7MsCbkl2nJifqQpnO3MTM5ECYtUJK8gOD1S7d3i84NEGzvIN9JP0x2Te18S+oQsd WKB3VE1bbfLpsj+nQ3CSqgn3VEbBz8HmaEVqYBFMLyZ+GJUQq7br2+xZw06bhzPC DmvlkvIkCuwrqnM12q/YyiBWEdvf+E5IJKeHlcHLSe/KgjT4i6k/icc/jJhktvAY hyd5RVXGkK+kmO2jgxHfvpLAhajhkZVgzw/E9e3zl3KcHhIFs/5VzNIMS4LBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHYUFUNSmVcwz/xylczohaMFcBywwHwYDVR0j BBgwFoAUyeXrktp5O42L+JyAVBiZoUjaP8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVhYThjYmUtNzE4Yi00OTUzLWI3ODktNjBmYTg1N2FlYzhkLzAvQzlFNUVCOTJE QTc5M0I4RDhCRjg5QzgwNTQxODk5QTE0OERBM0ZDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUU1RUI5MkRBNzkzQjhEOEJGODlDODA1NDE4OTlBMTQ4REEz RkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVhYThjYmUtNzE4Yi00OTUzLWI3 ODktNjBmYTg1N2FlYzhkLzAvQzlFNUVCOTJEQTc5M0I4RDhCRjg5QzgwNTQxODk5 QTE0OERBM0ZDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADi9ddGdJw3RQtGhVXQ1aPg9sUNj3rICdDQ9 SF9ZPD1fojOGqricFIyae1tjOoFltY4jrhH7hJCtEyAf4tq3iLLcILwiL85bpboa AQdZC/2ELvjJiWPtDMLHq1GUdtagOBJdI6gu4LjX2HYkFoWYpieoYRUxFmDh2bVS mnFD+ezgltXTPBZZTQS44M54AmY0togUuCcB2VFFkzEo6Qjsgu396oH0DyzPQTWV Oms6dqwWJc/7l1kq8FpyLCYRbpJkL98lJiTCuzpxRH4ofsAkTwbl42nx0HjcOxmB jYLu/K9sxz38NdMOMo6jdOoNElhTNPVKAdTK1+w6Psh3mJRjyzg= -----END CERTIFICATE-----Generated at Mon Sep 21 13:21:41 2026 by rpki-client