$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft File: E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft (raw, json) Hash identifier: DoIsdqICJ0Ky7XPDKPhcQc7Xky8H5Iqg+dbTJpi0I48= Subject key identifier: B8:27:A5:49:6C:CE:93:BD:58:48:53:8D:46:4B:10:2A:BB:1C:F0:23 Authority key identifier: E9:DD:F9:8F:B3:21:D5:A9:77:AD:47:B0:C4:1C:D4:FE:29:A3:79:3A Certificate issuer: /CN=E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A Certificate serial: 6DAF96E6B0DD0ABD449D94A649E0D3A81D2AEF23 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft Manifest number: BD Signing time: Sun 20 Sep 2026 12:22:29 +0000 Manifest this update: Sun 20 Sep 2026 12:17:28 +0000 Manifest next update: Mon 21 Sep 2026 13:29:28 +0000 Files and hashes: 1: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: CNG3TKSalvuCxf+hLEGkOQvjI+uVRC0qCR05spnG4ao=) 2: E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.crl (hash: b9S9iFRlrQC6euPu98PUiLULvKu8ENw8JJgA61rtON0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.crl rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 13:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:af:96:e6:b0:dd:0a:bd:44:9d:94:a6:49:e0:d3:a8:1d:2a:ef:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A Validity Not Before: Sep 20 12:17:28 2026 GMT Not After : Sep 21 13:29:28 2026 GMT Subject: CN=B827A5496CCE93BD5848538D464B102ABB1CF023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0b:9b:5f:72:06:64:48:10:0e:e8:71:1a:49: e2:58:52:d1:64:21:7b:ab:21:1d:a9:91:92:3c:e5: 40:74:92:75:0f:9f:df:dc:6d:5d:1f:a6:0a:73:61: 5d:b2:fa:3e:63:58:cd:e1:86:51:81:b2:9a:f4:35: b9:20:03:6b:9e:d4:d0:6a:bd:ab:19:22:43:05:e5: 83:f3:b4:3a:94:89:f8:fb:8c:37:04:03:9f:28:f6: 92:25:43:fc:e0:d6:d1:f1:c5:d2:dc:3c:d7:82:7f: 6f:61:bc:97:6b:1b:a4:6f:54:18:54:86:4b:73:fa: a9:64:10:6a:cb:df:a0:70:c8:94:29:e4:af:29:3b: e8:5b:90:1c:b3:2d:8a:3f:50:86:c9:2e:c3:24:8d: d3:1b:a3:c1:b7:2c:e2:65:51:c0:37:c9:7e:7b:ee: 3b:5a:62:61:a4:5f:54:50:54:c9:e8:aa:3e:f3:64: c2:86:de:57:59:fe:39:44:38:df:23:25:4b:4b:14: 5c:46:9c:e2:ef:0a:f4:ba:5c:a6:64:95:a7:f1:61: 07:07:7a:23:a4:b8:2a:18:0b:40:34:da:f0:ba:7d: 12:bc:3f:fa:3f:f1:0e:98:61:12:f2:9a:dc:8b:46: 44:15:4f:ba:14:77:d3:db:09:49:9c:ae:c7:7a:7a: 23:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:27:A5:49:6C:CE:93:BD:58:48:53:8D:46:4B:10:2A:BB:1C:F0:23 X509v3 Authority Key Identifier: keyid:E9:DD:F9:8F:B3:21:D5:A9:77:AD:47:B0:C4:1C:D4:FE:29:A3:79:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6d:b5:b8:44:eb:a9:a8:7f:f4:cf:35:2f:d4:c8:2e:5d:41: 66:7d:4a:00:cd:7b:17:0a:15:86:55:ed:10:88:c1:e1:f9:a9: c1:0c:51:6a:0a:e9:d7:6b:6c:7b:67:db:e5:46:b4:ff:00:ed: c7:04:a5:ec:a8:49:a4:e7:82:b7:af:27:e9:79:f3:f5:e1:4d: a1:6c:7c:aa:df:47:05:fa:3e:5c:a4:61:05:4e:1c:f3:98:a4: 33:0c:44:fb:f2:ec:a2:c8:ca:93:d2:66:8e:aa:aa:aa:a1:90: a2:e9:7b:de:ca:d7:ff:9b:38:93:33:fc:3f:c2:08:7a:99:f2: 0a:23:37:12:4e:cc:db:71:c4:32:26:99:e5:fb:1f:3d:e0:24: ba:ef:21:b5:9d:0e:9c:7a:e2:69:ae:c8:71:bd:30:81:76:63: 04:31:13:76:cb:b5:00:6b:f1:69:57:6a:dc:a3:aa:78:e0:47: 12:07:d7:0d:97:5b:b3:ed:ee:7e:df:dd:96:e2:98:12:83:fc: 50:d2:a2:56:fa:73:02:04:68:83:bc:c5:fc:d8:50:89:5c:04: f9:f7:88:76:42:cb:ba:7b:f8:db:4e:e9:bf:a8:2f:38:e7:8c: 04:fe:7e:03:9d:b6:80:65:c4:35:7a:2a:5a:ee:a7:28:4a:5f: ac:ab:4b:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUba+W5rDdCr1EnZSmSeDTqB0q7yMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlEREY5OEZCMzIxRDVBOTc3QUQ0N0IwQzQxQ0Q0RkUy OUEzNzkzQTAeFw0yNjA5MjAxMjE3MjhaFw0yNjA5MjExMzI5MjhaMDMxMTAvBgNV BAMTKEI4MjdBNTQ5NkNDRTkzQkQ1ODQ4NTM4RDQ2NEIxMDJBQkIxQ0YwMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4C5tfcgZkSBAO6HEaSeJYUtFk IXurIR2pkZI85UB0knUPn9/cbV0fpgpzYV2y+j5jWM3hhlGBspr0NbkgA2ue1NBq vasZIkMF5YPztDqUifj7jDcEA58o9pIlQ/zg1tHxxdLcPNeCf29hvJdrG6RvVBhU hktz+qlkEGrL36BwyJQp5K8pO+hbkByzLYo/UIbJLsMkjdMbo8G3LOJlUcA3yX57 7jtaYmGkX1RQVMnoqj7zZMKG3ldZ/jlEON8jJUtLFFxGnOLvCvS6XKZklafxYQcH eiOkuCoYC0A02vC6fRK8P/o/8Q6YYRLymtyLRkQVT7oUd9PbCUmcrsd6eiOPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuCelSWzOk71YSFONRksQKrsc8CMwHwYDVR0j BBgwFoAU6d35j7Mh1al3rUewxBzU/imjeTowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQzM2ExYzYtMGY3MC00Yzk4LTk2YjAtY2FiNTgxMjZhYjk0LzAvRTlEREY5OEZC MzIxRDVBOTc3QUQ0N0IwQzQxQ0Q0RkUyOUEzNzkzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOURERjk4RkIzMjFENUE5NzdBRDQ3QjBDNDFDRDRGRTI5QTM3 OTNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2 YjAtY2FiNTgxMjZhYjk0LzAvRTlEREY5OEZCMzIxRDVBOTc3QUQ0N0IwQzQxQ0Q0 RkUyOUEzNzkzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9ttbhE66mof/TPNS/UyC5dQWZ9SgDNexcK FYZV7RCIweH5qcEMUWoK6ddrbHtn2+VGtP8A7ccEpeyoSaTngrevJ+l58/XhTaFs fKrfRwX6PlykYQVOHPOYpDMMRPvy7KLIypPSZo6qqqqhkKLpe97K1/+bOJMz/D/C CHqZ8gojNxJOzNtxxDImmeX7Hz3gJLrvIbWdDpx64mmuyHG9MIF2YwQxE3bLtQBr 8WlXatyjqnjgRxIH1w2XW7Pt7n7f3ZbimBKD/FDSolb6cwIEaIO8xfzYUIlcBPn3 iHZCy7p7+NtO6b+oLzjnjAT+fgOdtoBlxDV6KlrupyhKX6yrS7k= -----END CERTIFICATE-----Generated at Sun Sep 20 21:14:29 2026 by rpki-client