$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft File: C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft (raw, json) Hash identifier: t06MT4nlf+sM/B/bjwRt7w1Lb3KAMpQkbusDssghvmw= Subject key identifier: 11:4B:4A:28:FC:9B:A9:5C:F8:C7:49:37:56:6C:03:1D:B5:38:D3:A3 Authority key identifier: C9:A0:E9:83:26:93:84:F0:0C:CE:85:7E:3A:8E:88:87:BE:9B:7F:C8 Certificate issuer: /CN=C9A0E983269384F00CCE857E3A8E8887BE9B7FC8 Certificate serial: 53F5F90CABCA9C4A3D7B52D60794879D9BF724BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft Manifest number: BE Signing time: Mon 21 Sep 2026 16:16:49 +0000 Manifest this update: Mon 21 Sep 2026 16:11:49 +0000 Manifest next update: Tue 22 Sep 2026 19:30:49 +0000 Files and hashes: 1: 3130332e38312e3131312e302f32342d3234203d3e20313530393538.roa (hash: l+i6wCpyx98LrkN6bI1lbQddhWqft7YLNRfJYsyxYlA=) 2: 3130332e38312e3131302e302f32332d3234203d3e20313530393538.roa (hash: PAwVQ07BR901R53ceqUz7lmumWNjRRTL4GW80ND0yx0=) 3: C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl (hash: H5JbkT0bRYj4J8c3oZHmpMTOGRm5CuW3rhduYD+la9I=) 4: 323030313a6466323a623263303a3a2f34382d3438203d3e20313530393538.roa (hash: DNfu6S0MfyEIbWVxydJYNYlQdSHELvJkaaSCCqoydj0=) 5: 3130332e38312e3131302e302f32342d3234203d3e20313530393538.roa (hash: 1X7ytOOeZ7baYbrptPG956jTOlJu9VRB/BLTjRkOU00=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f5:f9:0c:ab:ca:9c:4a:3d:7b:52:d6:07:94:87:9d:9b:f7:24:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9A0E983269384F00CCE857E3A8E8887BE9B7FC8 Validity Not Before: Sep 21 16:11:49 2026 GMT Not After : Sep 22 19:30:49 2026 GMT Subject: CN=114B4A28FC9BA95CF8C74937566C031DB538D3A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a2:89:f6:9e:7a:52:e7:cc:f9:c3:f6:a2:af: 1d:20:7d:61:42:de:82:45:71:6c:f1:48:4d:8f:84: 16:9b:cc:98:9a:c3:4c:e6:a9:07:f7:5b:80:ec:66: 50:f2:2a:a4:6e:b2:ae:36:51:49:ac:78:4d:64:2b: 3c:10:8a:d9:55:2c:e4:d4:cc:b6:ac:ac:44:d3:a8: 50:11:38:8f:3d:23:ba:47:b0:81:27:99:ab:13:93: f4:88:ad:42:23:3d:24:7e:b2:56:cf:80:71:48:6c: bf:62:fd:c6:8a:bd:62:c9:c1:c4:f1:b3:7d:63:5c: 05:98:55:e3:8f:b6:83:ec:4c:6e:c8:e9:cf:56:58: f2:c7:24:5b:fc:1a:72:a5:81:0f:cc:17:df:07:da: c4:2f:6f:a3:21:0e:c0:37:66:53:d0:5a:d3:d4:75: 28:c1:00:a7:24:e3:f3:63:12:2c:b0:93:ae:6b:41: 7a:43:6c:cd:50:4c:b8:2d:9f:b2:01:82:76:3c:07: 0e:b5:6e:ed:53:8d:91:d5:ad:8a:15:13:b7:f2:a0: 85:4f:6b:55:0e:e8:6b:ba:e5:98:a3:25:3b:10:f1: 15:c9:10:9e:8e:81:68:0c:c0:9d:66:74:4d:ef:d3: 44:23:17:21:fe:59:96:51:4e:12:ad:9a:11:2d:99: 66:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4B:4A:28:FC:9B:A9:5C:F8:C7:49:37:56:6C:03:1D:B5:38:D3:A3 X509v3 Authority Key Identifier: keyid:C9:A0:E9:83:26:93:84:F0:0C:CE:85:7E:3A:8E:88:87:BE:9B:7F:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:7e:2d:1f:fe:48:de:43:32:32:99:d6:20:47:43:9a:4f:37: f7:4d:69:a4:bc:ca:e5:da:bb:17:ce:a6:d9:06:24:2d:0e:f2: 69:53:3f:30:24:d7:ef:35:8d:82:8d:63:fe:50:c5:35:d6:6e: 53:81:03:4b:43:25:b9:ed:42:ce:d5:72:5c:1f:47:8c:79:f9: 79:13:b1:3d:1c:24:d0:21:dd:fe:14:f1:0f:c2:29:31:63:5c: 45:30:15:85:14:f5:85:8f:49:fd:d2:8f:19:47:93:2f:8e:c9: 70:ea:b5:cc:e3:55:28:54:3d:d2:4f:ab:78:6b:15:a2:44:cd: 3c:96:bd:61:8f:c1:7e:a9:d4:7a:6f:38:31:11:ce:74:8f:b1: 5d:ae:12:da:10:47:2d:ad:c1:b3:1a:21:53:86:87:67:41:e3: a4:7a:74:c0:ca:98:fa:35:74:fe:cf:d9:09:57:2e:70:31:b6: 41:e7:62:5d:20:56:c6:3d:94:31:6b:e2:90:68:16:6d:e1:27: ac:28:c5:88:4d:5c:06:7e:00:62:c3:9e:88:11:28:25:55:06: 3f:3d:62:fd:eb:db:a0:9d:c0:45:7a:76:14:e8:26:b9:05:d8: 86:9c:8f:fe:a6:1d:c3:93:43:a4:59:43:23:ff:1e:9e:25:56: 39:fb:60:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU/X5DKvKnEo9e1LWB5SHnZv3JLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlBMEU5ODMyNjkzODRGMDBDQ0U4NTdFM0E4RTg4ODdC RTlCN0ZDODAeFw0yNjA5MjExNjExNDlaFw0yNjA5MjIxOTMwNDlaMDMxMTAvBgNV BAMTKDExNEI0QTI4RkM5QkE5NUNGOEM3NDkzNzU2NkMwMzFEQjUzOEQzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oon2nnpS58z5w/airx0gfWFC 3oJFcWzxSE2PhBabzJiaw0zmqQf3W4DsZlDyKqRusq42UUmseE1kKzwQitlVLOTU zLasrETTqFAROI89I7pHsIEnmasTk/SIrUIjPSR+slbPgHFIbL9i/caKvWLJwcTx s31jXAWYVeOPtoPsTG7I6c9WWPLHJFv8GnKlgQ/MF98H2sQvb6MhDsA3ZlPQWtPU dSjBAKck4/NjEiywk65rQXpDbM1QTLgtn7IBgnY8Bw61bu1TjZHVrYoVE7fyoIVP a1UO6Gu65ZijJTsQ8RXJEJ6OgWgMwJ1mdE3v00QjFyH+WZZRThKtmhEtmWaJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEUtKKPybqVz4x0k3VmwDHbU406MwHwYDVR0j BBgwFoAUyaDpgyaThPAMzoV+Oo6Ih76bf8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGYwYmNkYzMtMGZlYS00NzQ3LTk5MDctNjU2NDg2YmFlOGRhLzAvQzlBMEU5ODMy NjkzODRGMDBDQ0U4NTdFM0E4RTg4ODdCRTlCN0ZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUEwRTk4MzI2OTM4NEYwMENDRTg1N0UzQThFODg4N0JFOUI3 RkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGYwYmNkYzMtMGZlYS00NzQ3LTk5 MDctNjU2NDg2YmFlOGRhLzAvQzlBMEU5ODMyNjkzODRGMDBDQ0U4NTdFM0E4RTg4 ODdCRTlCN0ZDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJF+LR/+SN5DMjKZ1iBHQ5pPN/dNaaS8yuXa uxfOptkGJC0O8mlTPzAk1+81jYKNY/5QxTXWblOBA0tDJbntQs7VclwfR4x5+XkT sT0cJNAh3f4U8Q/CKTFjXEUwFYUU9YWPSf3SjxlHky+OyXDqtczjVShUPdJPq3hr FaJEzTyWvWGPwX6p1HpvODERznSPsV2uEtoQRy2twbMaIVOGh2dB46R6dMDKmPo1 dP7P2QlXLnAxtkHnYl0gVsY9lDFr4pBoFm3hJ6woxYhNXAZ+AGLDnogRKCVVBj89 Yv3r26CdwEV6dhToJrkF2Iacj/6mHcOTQ6RZQyP/Hp4lVjn7YBM= -----END CERTIFICATE-----Generated at Mon Sep 21 20:11:23 2026 by rpki-client