$ rpki-client -vvvf rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft File: 9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft (raw, json) Hash identifier: cYKO25xl3CHh2jfdU2ACW0t/u1BgVmhut/3tT+q+5nk= Subject key identifier: 34:AF:19:7D:39:17:F2:19:85:24:0A:0E:7F:0E:0A:87:5E:9C:C5:6E Authority key identifier: 9A:2E:70:15:61:0F:91:22:97:C9:C4:B0:FF:DE:85:57:63:38:C9:EA Certificate issuer: /CN=9A2E7015610F912297C9C4B0FFDE85576338C9EA Certificate serial: 4CCFB1DA4C06042E93512539BE78D64DE2968331 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 11:04:09 +0000 Manifest this update: Fri 25 Sep 2026 10:59:09 +0000 Manifest next update: Sat 26 Sep 2026 11:50:09 +0000 Files and hashes: 1: 9A2E7015610F912297C9C4B0FFDE85576338C9EA.crl (hash: nTbEaZ9dIfDgZpCnP4uhGaCcS6d+iuinBWvnDR3lpxQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.crl rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 11:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:cf:b1:da:4c:06:04:2e:93:51:25:39:be:78:d6:4d:e2:96:83:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A2E7015610F912297C9C4B0FFDE85576338C9EA Validity Not Before: Sep 25 10:59:09 2026 GMT Not After : Sep 26 11:50:09 2026 GMT Subject: CN=34AF197D3917F21985240A0E7F0E0A875E9CC56E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e6:16:9f:7c:d7:07:f7:65:b8:64:5e:f1:03: 15:3b:38:12:72:6a:ec:b3:50:79:31:01:19:3d:33: d2:58:92:3b:43:83:25:3e:4e:10:33:3c:e6:b2:2e: 8a:a7:a2:1d:4c:47:e8:27:cf:33:c3:5d:2e:38:70: 33:0e:0e:02:64:25:1f:87:11:1c:a9:af:76:3c:3f: 8e:6b:a0:10:fb:f5:02:81:0e:46:7f:7d:a9:fd:72: e4:39:59:67:97:1f:b6:d2:8d:10:15:66:e4:53:a5: 2d:f8:e8:f3:4d:7b:ad:36:17:29:62:b7:49:29:34: df:c7:e8:52:f5:43:7b:da:a6:15:ff:20:a6:1f:a2: 86:46:18:f2:5c:f4:45:fa:db:96:c3:be:54:5d:97: c7:5c:ed:1a:27:31:a3:b9:89:6a:ee:37:89:09:05: 2d:51:c9:5d:c0:31:97:35:92:a0:83:80:15:dc:c0: b1:b8:bf:1b:46:1f:f6:cd:b2:a8:fe:3f:93:02:14: bd:43:1d:23:6f:12:d7:21:db:7a:97:b0:8c:83:f1: 4a:bf:bd:3c:74:eb:a8:7e:6b:48:85:3b:c1:f3:a1: a5:c2:7e:e2:b6:44:89:b4:f5:68:19:09:c7:77:9d: 82:e2:de:58:8e:df:f0:28:25:df:f5:3a:54:8d:ca: 13:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AF:19:7D:39:17:F2:19:85:24:0A:0E:7F:0E:0A:87:5E:9C:C5:6E X509v3 Authority Key Identifier: keyid:9A:2E:70:15:61:0F:91:22:97:C9:C4:B0:FF:DE:85:57:63:38:C9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:3f:65:41:83:50:72:99:11:fb:d7:04:36:b7:de:d3:a8:47: 5b:8c:58:d4:1e:c0:29:87:bd:24:79:3c:d6:19:fd:10:ea:66: bb:0e:06:ad:46:e6:54:78:7b:01:ec:96:3c:a3:a0:64:c2:d7: 65:57:1a:66:a3:58:88:72:eb:3b:d5:c9:b3:d7:76:a0:41:83: 54:14:e3:94:b5:47:28:8c:5e:68:85:79:e3:7f:7f:fd:99:94: 15:af:cc:f5:ae:bb:ca:3f:11:8b:a1:97:72:1f:e4:78:e4:5c: b4:18:ec:37:98:d6:57:9d:89:fb:aa:db:7f:2d:50:2f:75:2d: d3:07:01:c5:38:28:43:dd:b9:17:82:07:e0:53:ba:5f:83:8c: b3:0d:72:c6:0a:12:f7:ad:95:aa:ed:1e:49:ff:8a:86:b3:18: e5:d7:96:9d:2e:d2:70:4e:55:36:29:38:65:b5:11:dc:75:3f: f4:96:0d:2b:00:e3:bf:2d:75:ea:16:2c:94:df:fb:d1:bf:17: 34:73:a1:f1:01:21:0b:97:56:68:e4:ce:f7:5a:0a:ee:2b:92: de:08:1c:ca:87:db:8d:77:52:af:0e:0b:44:83:91:86:27:c6: a4:fe:6c:ff:14:d8:ae:9f:cc:e5:ca:8d:61:b1:d0:0c:ec:80: 9c:7a:db:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTM+x2kwGBC6TUSU5vnjWTeKWgzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyRTcwMTU2MTBGOTEyMjk3QzlDNEIwRkZERTg1NTc2 MzM4QzlFQTAeFw0yNjA5MjUxMDU5MDlaFw0yNjA5MjYxMTUwMDlaMDMxMTAvBgNV BAMTKDM0QUYxOTdEMzkxN0YyMTk4NTI0MEEwRTdGMEUwQTg3NUU5Q0M1NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl5haffNcH92W4ZF7xAxU7OBJy auyzUHkxARk9M9JYkjtDgyU+ThAzPOayLoqnoh1MR+gnzzPDXS44cDMODgJkJR+H ERypr3Y8P45roBD79QKBDkZ/fan9cuQ5WWeXH7bSjRAVZuRTpS346PNNe602Fyli t0kpNN/H6FL1Q3vaphX/IKYfooZGGPJc9EX625bDvlRdl8dc7RonMaO5iWruN4kJ BS1RyV3AMZc1kqCDgBXcwLG4vxtGH/bNsqj+P5MCFL1DHSNvEtch23qXsIyD8Uq/ vTx066h+a0iFO8HzoaXCfuK2RIm09WgZCcd3nYLi3liO3/AoJd/1OlSNyhNdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNK8ZfTkX8hmFJAoOfw4Kh16cxW4wHwYDVR0j BBgwFoAUmi5wFWEPkSKXycSw/96FV2M4yeowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTNmYTdkNWMtMzY4ZC00YWYzLWI4ZTctMTc4NjI0NmRkNjJmLzAvOUEyRTcwMTU2 MTBGOTEyMjk3QzlDNEIwRkZERTg1NTc2MzM4QzlFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTJFNzAxNTYxMEY5MTIyOTdDOUM0QjBGRkRFODU1NzYzMzhD OUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTNmYTdkNWMtMzY4ZC00YWYzLWI4 ZTctMTc4NjI0NmRkNjJmLzAvOUEyRTcwMTU2MTBGOTEyMjk3QzlDNEIwRkZERTg1 NTc2MzM4QzlFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKo/ZUGDUHKZEfvXBDa33tOoR1uMWNQewCmH vSR5PNYZ/RDqZrsOBq1G5lR4ewHsljyjoGTC12VXGmajWIhy6zvVybPXdqBBg1QU 45S1RyiMXmiFeeN/f/2ZlBWvzPWuu8o/EYuhl3If5HjkXLQY7DeY1ledifuq238t UC91LdMHAcU4KEPduReCB+BTul+DjLMNcsYKEvetlartHkn/ioazGOXXlp0u0nBO VTYpOGW1Edx1P/SWDSsA478tdeoWLJTf+9G/FzRzofEBIQuXVmjkzvdaCu4rkt4I HMqH2413Uq8OC0SDkYYnxqT+bP8U2K6fzOXKjWGx0AzsgJx625Y= -----END CERTIFICATE-----Generated at Fri Sep 25 20:54:55 2026 by rpki-client