$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft File: 9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft (raw, json) Hash identifier: U76xoO823CBFrADRLzJ3FiQIPi89i3G4QfY8O00A/RE= Subject key identifier: 11:79:32:51:99:8C:0E:05:29:09:F4:6F:BB:9A:C4:5B:60:4F:77:58 Authority key identifier: 9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A Certificate issuer: /CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A Certificate serial: 13E4E12D586877A457525052DEE14BD714372DC2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft Manifest number: BF Signing time: Mon 21 Sep 2026 07:05:24 +0000 Manifest this update: Mon 21 Sep 2026 07:00:24 +0000 Manifest next update: Tue 22 Sep 2026 07:38:24 +0000 Files and hashes: 1: 9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl (hash: zKq8xFkk+CpRzVuzGwVrUsbc4iOMrxCPiGmqWkuLuXY=) 2: 3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa (hash: rpX5Z9CNMyEUL+veiVsOhDnQwGzSm68cJVDfJbI5SIE=) 3: 3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa (hash: Dgai9I/TT4G/oQBQ3mEn1fS7dXTCrr7cZjoLYBavMXQ=) 4: 3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (hash: y7jgS/ZISqQ0Ejz5jszYlUpeJRIijdmrHPSpWEnYBQg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e4:e1:2d:58:68:77:a4:57:52:50:52:de:e1:4b:d7:14:37:2d:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A Validity Not Before: Sep 21 07:00:24 2026 GMT Not After : Sep 22 07:38:24 2026 GMT Subject: CN=11793251998C0E052909F46FBB9AC45B604F7758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cf:0f:ca:cc:b8:db:98:c5:7e:ff:35:09:0b: f4:52:a0:4f:9b:95:98:6c:03:e9:a2:bd:e8:b8:ab: 82:ff:7a:a3:5d:42:c9:f3:39:49:ec:86:68:ab:79: e8:d4:da:b3:3d:f8:04:07:0f:e4:31:d2:e0:1a:b8: fc:7a:0d:30:eb:03:a6:15:0b:50:43:c7:87:5d:f4: 68:41:03:74:a7:19:65:6a:81:f8:c8:ce:ac:e3:a4: 49:80:4e:9f:6e:99:77:33:98:0f:db:c1:fe:bd:62: 06:21:d5:9a:f4:87:32:23:11:8d:52:b7:4b:13:a4: 5d:0c:76:16:a3:5c:e1:9a:29:ba:12:3f:61:2b:7a: 3f:85:3b:21:d2:58:14:44:64:04:25:4e:bc:55:40: 25:6e:df:ec:33:78:31:84:50:a1:57:8e:b8:0a:e4: 62:55:b5:94:54:e1:19:6a:b6:a0:51:a3:e4:ae:cd: 20:78:b0:50:23:21:00:95:8c:14:38:40:a4:21:51: e4:31:63:9b:23:ff:e9:14:96:8d:5c:84:60:aa:f2: 2d:57:09:55:03:6c:1d:29:a5:68:9d:59:89:a4:4f: 14:d9:e6:7e:43:98:65:0c:3c:aa:90:ad:3f:09:b2: ce:1b:8f:07:e5:44:0d:7c:7b:67:97:6a:b0:88:c6: 3c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:79:32:51:99:8C:0E:05:29:09:F4:6F:BB:9A:C4:5B:60:4F:77:58 X509v3 Authority Key Identifier: keyid:9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:04:62:2b:b6:1c:43:12:a6:70:2e:af:b3:ba:06:15:b8:23: a1:aa:57:4b:2b:63:9f:98:a1:89:23:53:c1:c0:43:b4:aa:d3: 71:03:4a:97:29:f7:c8:43:e8:15:a2:31:72:5b:f9:a9:df:83: b7:d9:84:a0:9e:1d:0e:14:39:45:86:7f:7c:43:c5:ce:e2:f5: c5:14:83:d5:12:50:39:f8:27:95:02:27:cf:a9:b8:ce:93:f6: 40:74:ff:c4:d0:31:5b:b5:b5:00:1a:17:f9:fb:10:0b:df:db: 98:3f:9d:63:31:c1:c7:5e:4c:ef:5e:7a:e1:d9:dd:4d:83:57: 56:28:86:fd:f1:cb:1e:c9:37:f2:c8:45:5a:16:00:32:89:01: 20:63:eb:ef:7e:d1:0c:e0:80:4b:5a:e8:7e:65:0f:34:7d:f0: a9:2a:33:0d:f3:dd:ff:80:bf:ae:b6:78:93:49:86:42:c6:60: fd:e7:89:e0:78:22:60:3b:91:6d:02:63:dd:53:86:a5:bc:d4: 17:a2:84:c2:1d:b5:c4:8a:f2:c6:cc:94:0a:3f:49:9d:84:04: 63:90:71:f7:73:e1:a7:94:b0:ec:61:ac:04:31:b1:86:1f:03: 9f:64:70:64:e2:52:94:69:7d:15:e8:42:a5:ee:36:48:17:db: 9d:7d:94:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE+ThLVhod6RXUlBS3uFL1xQ3LcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBODgwMDU2RENGOUFEQjdBNzBENDYxRkY4MzA4NkQ4 RkU4ODk3QTAeFw0yNjA5MjEwNzAwMjRaFw0yNjA5MjIwNzM4MjRaMDMxMTAvBgNV BAMTKDExNzkzMjUxOTk4QzBFMDUyOTA5RjQ2RkJCOUFDNDVCNjA0Rjc3NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnzw/KzLjbmMV+/zUJC/RSoE+b lZhsA+mivei4q4L/eqNdQsnzOUnshmireejU2rM9+AQHD+Qx0uAauPx6DTDrA6YV C1BDx4dd9GhBA3SnGWVqgfjIzqzjpEmATp9umXczmA/bwf69YgYh1Zr0hzIjEY1S t0sTpF0MdhajXOGaKboSP2Erej+FOyHSWBREZAQlTrxVQCVu3+wzeDGEUKFXjrgK 5GJVtZRU4RlqtqBRo+SuzSB4sFAjIQCVjBQ4QKQhUeQxY5sj/+kUlo1chGCq8i1X CVUDbB0ppWidWYmkTxTZ5n5DmGUMPKqQrT8Jss4bjwflRA18e2eXarCIxjx1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEXkyUZmMDgUpCfRvu5rEW2BPd1gwHwYDVR0j BBgwFoAUn6iABW3Pmtt6cNRh/4MIbY/oiXowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0NDI1MmItZDMwZS00YmRjLTgzMmYtYjM4YjA1YzdhMDM1LzAvOUZBODgwMDU2 RENGOUFEQjdBNzBENDYxRkY4MzA4NkQ4RkU4ODk3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkE4ODAwNTZEQ0Y5QURCN0E3MEQ0NjFGRjgzMDg2RDhGRTg4 OTdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0NDI1MmItZDMwZS00YmRjLTgz MmYtYjM4YjA1YzdhMDM1LzAvOUZBODgwMDU2RENGOUFEQjdBNzBENDYxRkY4MzA4 NkQ4RkU4ODk3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4EYiu2HEMSpnAur7O6BhW4I6GqV0srY5+Y oYkjU8HAQ7Sq03EDSpcp98hD6BWiMXJb+anfg7fZhKCeHQ4UOUWGf3xDxc7i9cUU g9USUDn4J5UCJ8+puM6T9kB0/8TQMVu1tQAaF/n7EAvf25g/nWMxwcdeTO9eeuHZ 3U2DV1Yohv3xyx7JN/LIRVoWADKJASBj6+9+0QzggEta6H5lDzR98KkqMw3z3f+A v662eJNJhkLGYP3nieB4ImA7kW0CY91ThqW81BeihMIdtcSK8sbMlAo/SZ2EBGOQ cfdz4aeUsOxhrAQxsYYfA59kcGTiUpRpfRXoQqXuNkgX2519lA4= -----END CERTIFICATE-----Generated at Mon Sep 21 18:53:34 2026 by rpki-client