$ rpki-client -vvvf rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft File: 9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft (raw, json) Hash identifier: cGrbBxfQuP9OUDZmG+zTyYg2vddz/FifkGwe5HTWXE0= Subject key identifier: C1:D5:AE:A4:CE:AF:F9:A7:7E:57:E1:33:49:46:51:A4:57:6A:4F:F9 Authority key identifier: 9E:FF:7D:BB:CC:32:80:07:85:86:E6:71:60:5F:4B:D3:C6:AF:62:A0 Certificate issuer: /CN=9EFF7DBBCC3280078586E671605F4BD3C6AF62A0 Certificate serial: 269157DDB1C697339B40C3F5E480227E30589BDE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft Manifest number: BE Signing time: Mon 21 Sep 2026 18:14:09 +0000 Manifest this update: Mon 21 Sep 2026 18:09:09 +0000 Manifest next update: Tue 22 Sep 2026 20:50:09 +0000 Files and hashes: 1: 9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.crl (hash: 17it3Un1V6AxdjtoKmS4mbkgOzRH33IBYMUS5mAWZy0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.crl rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:91:57:dd:b1:c6:97:33:9b:40:c3:f5:e4:80:22:7e:30:58:9b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EFF7DBBCC3280078586E671605F4BD3C6AF62A0 Validity Not Before: Sep 21 18:09:09 2026 GMT Not After : Sep 22 20:50:09 2026 GMT Subject: CN=C1D5AEA4CEAFF9A77E57E133494651A4576A4FF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:da:37:0c:53:85:4f:e1:5e:5d:0b:a7:bd: 72:de:df:6a:8d:30:4f:91:52:5b:3c:a1:c1:8f:12: 48:1d:3d:25:d8:5b:78:8c:9e:dd:61:ea:45:95:e5: 42:73:de:d3:8d:09:29:6f:26:14:f3:c3:f0:f8:81: 67:1e:96:ec:fe:aa:62:2d:05:24:6d:4d:93:90:64: 53:1a:5d:5a:95:e4:25:aa:7f:63:09:78:87:a0:56: 43:d5:1c:a5:ed:4d:d2:e5:5a:c3:b5:db:9f:38:c7: ba:bb:9e:25:50:bb:24:8f:4f:41:f8:d8:24:ab:72: 4d:37:df:37:0f:36:b8:f0:49:29:2a:02:d7:e3:8a: 82:97:2f:df:99:d6:1c:ea:0f:2b:0c:e7:bb:a6:6c: 31:58:f0:a9:6a:79:10:02:8f:ff:63:e2:72:73:d7: 5d:fe:22:f2:35:b5:cf:f9:73:42:7f:91:cd:35:e1: e5:7c:04:fa:3b:40:4a:41:ab:43:e6:82:f1:13:c4: a2:3d:55:c3:2f:6b:20:2b:60:fd:b2:4f:d9:ca:d3: c9:94:26:78:d1:44:cc:93:fb:09:8d:8b:5b:0e:89: b9:9a:07:72:a9:c7:be:33:19:d1:8e:d6:0a:15:9c: e0:a1:87:7b:6e:5e:c0:07:18:99:93:cf:f1:71:35: 99:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D5:AE:A4:CE:AF:F9:A7:7E:57:E1:33:49:46:51:A4:57:6A:4F:F9 X509v3 Authority Key Identifier: keyid:9E:FF:7D:BB:CC:32:80:07:85:86:E6:71:60:5F:4B:D3:C6:AF:62:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c1:aa:36:5f:16:bf:b3:6c:40:47:6d:ee:98:bb:80:c6:5b: b8:c5:f3:b0:86:5c:de:ce:97:1e:fc:d7:20:cd:ca:aa:2a:55: bc:b7:4e:51:50:67:a1:02:b7:73:38:18:fe:41:21:45:ba:30: 7b:f8:39:de:bd:33:73:b9:72:e5:39:1e:fe:99:b4:e4:47:6a: e3:a9:96:7c:d3:9a:11:a6:2e:65:d8:dd:9f:90:1b:3e:2b:3f: 33:a1:7c:ae:40:53:44:26:a0:cc:6e:92:a5:82:cb:87:dc:43: 16:4c:71:22:a6:5b:5f:e2:b2:21:db:8a:7a:22:04:57:39:2a: 01:d6:2a:0c:fc:60:4e:8f:08:3c:0f:59:6d:f4:56:26:b3:99: 15:2d:20:21:96:82:6c:f1:23:cf:b9:b6:d5:35:2d:0b:56:ee: 8b:f3:87:88:7d:ab:32:7a:73:35:1d:7a:d1:ab:aa:cd:47:2f: 5f:6e:4a:83:d3:d6:fc:9e:09:dc:8b:e4:7b:29:fe:78:35:6b: d8:71:c3:6b:c3:48:5f:f1:aa:32:42:50:27:be:c9:ea:5a:16: 28:cc:d7:ec:23:dc:62:42:ce:4a:be:99:77:9a:0a:cd:70:d4: 86:b9:fb:8e:ee:e4:89:41:2f:54:a2:0f:81:e0:51:ed:a2:bc: 8e:ca:1c:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJpFX3bHGlzObQMP15IAifjBYm94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVGRjdEQkJDQzMyODAwNzg1ODZFNjcxNjA1RjRCRDND NkFGNjJBMDAeFw0yNjA5MjExODA5MDlaFw0yNjA5MjIyMDUwMDlaMDMxMTAvBgNV BAMTKEMxRDVBRUE0Q0VBRkY5QTc3RTU3RTEzMzQ5NDY1MUE0NTc2QTRGRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyMto3DFOFT+FeXQunvXLe32qN ME+RUls8ocGPEkgdPSXYW3iMnt1h6kWV5UJz3tONCSlvJhTzw/D4gWceluz+qmIt BSRtTZOQZFMaXVqV5CWqf2MJeIegVkPVHKXtTdLlWsO12584x7q7niVQuySPT0H4 2CSrck033zcPNrjwSSkqAtfjioKXL9+Z1hzqDysM57umbDFY8KlqeRACj/9j4nJz 113+IvI1tc/5c0J/kc014eV8BPo7QEpBq0PmgvETxKI9VcMvayArYP2yT9nK08mU JnjRRMyT+wmNi1sOibmaB3Kpx74zGdGO1goVnOChh3tuXsAHGJmTz/FxNZk5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwdWupM6v+ad+V+EzSUZRpFdqT/kwHwYDVR0j BBgwFoAUnv99u8wygAeFhuZxYF9L08avYqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ0ZjI0NjAtZmU1MC00ODAwLWFlMDItNTdjYjNlODE1ZDVlLzAvOUVGRjdEQkJD QzMyODAwNzg1ODZFNjcxNjA1RjRCRDNDNkFGNjJBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RUZGN0RCQkNDMzI4MDA3ODU4NkU2NzE2MDVGNEJEM0M2QUY2 MkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ0ZjI0NjAtZmU1MC00ODAwLWFl MDItNTdjYjNlODE1ZDVlLzAvOUVGRjdEQkJDQzMyODAwNzg1ODZFNjcxNjA1RjRC RDNDNkFGNjJBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbBqjZfFr+zbEBHbe6Yu4DGW7jF87CGXN7O lx781yDNyqoqVby3TlFQZ6ECt3M4GP5BIUW6MHv4Od69M3O5cuU5Hv6ZtORHauOp lnzTmhGmLmXY3Z+QGz4rPzOhfK5AU0QmoMxukqWCy4fcQxZMcSKmW1/isiHbinoi BFc5KgHWKgz8YE6PCDwPWW30ViazmRUtICGWgmzxI8+5ttU1LQtW7ovzh4h9qzJ6 czUdetGrqs1HL19uSoPT1vyeCdyL5Hsp/ng1a9hxw2vDSF/xqjJCUCe+yepaFijM 1+wj3GJCzkq+mXeaCs1w1Ia5+47u5IlBL1SiD4HgUe2ivI7KHCc= -----END CERTIFICATE-----Generated at Tue Sep 22 13:33:51 2026 by rpki-client