$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft File: B9FC538BFBE91D32C980E6C968C96604E388FD26.mft (raw, json) Hash identifier: QI6YPhew7u8CWH8tPwTcWgPP+HPzHhqyS2GubN8eTQI= Subject key identifier: 9E:72:28:02:DC:DF:7F:97:F2:8D:EE:0D:0F:00:B4:DB:D7:58:C2:C8 Authority key identifier: B9:FC:53:8B:FB:E9:1D:32:C9:80:E6:C9:68:C9:66:04:E3:88:FD:26 Certificate issuer: /CN=B9FC538BFBE91D32C980E6C968C96604E388FD26 Certificate serial: 42083FD111C135481B68597B25C608D4D576DC74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9FC538BFBE91D32C980E6C968C96604E388FD26.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft Manifest number: CF Signing time: Sun 04 Oct 2026 00:30:41 +0000 Manifest this update: Sun 04 Oct 2026 00:25:41 +0000 Manifest next update: Mon 05 Oct 2026 00:50:41 +0000 Files and hashes: 1: B9FC538BFBE91D32C980E6C968C96604E388FD26.crl (hash: D7bvxCkGtwwrC3nxRMkdHdVBbG5iKOGo90WF7gbvf9o=) 2: 3130332e3138392e3235342e302f32342d3234203d3e20313439393135.roa (hash: ucIu0OXRxfc1CywG+yYTICGHOqWxj9NSpYywYNEl67o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.crl rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9FC538BFBE91D32C980E6C968C96604E388FD26.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 00:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:08:3f:d1:11:c1:35:48:1b:68:59:7b:25:c6:08:d4:d5:76:dc:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9FC538BFBE91D32C980E6C968C96604E388FD26 Validity Not Before: Oct 4 00:25:41 2026 GMT Not After : Oct 5 00:50:41 2026 GMT Subject: CN=9E722802DCDF7F97F28DEE0D0F00B4DBD758C2C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:60:07:13:3f:39:5d:e8:9a:1a:ef:dd:f8:5d: 41:dc:0c:2c:34:6c:61:ca:e1:e8:84:17:e1:60:2f: a2:e2:af:19:b7:5c:b5:6d:5a:3c:e0:08:aa:a2:33: 13:f9:1b:20:4d:53:52:a9:d4:90:d1:17:59:87:88: 40:c9:74:90:5f:cd:a2:10:48:cb:73:a5:53:80:15: 59:1a:04:ec:b5:c6:44:31:b3:52:fa:1e:4f:03:e6: fa:93:ee:4d:ac:cc:0e:92:c6:f5:29:5b:64:58:8f: 30:07:a7:74:ab:ca:ad:e3:d1:ea:e2:4a:81:8a:f6: 2b:25:f2:30:24:0d:94:4b:5e:2c:fc:0b:08:90:56: ed:a9:4a:d3:4d:be:a6:f1:c1:59:70:8f:e4:a9:41: 08:6a:6a:d2:d8:61:be:82:88:cd:d2:7e:b6:3f:bc: 04:ad:40:f8:52:58:02:1a:b8:dd:6a:dd:2a:56:2d: ca:f7:b0:c0:75:8f:e3:d7:49:7d:a9:16:03:4e:67: 7b:e1:6d:ca:35:e6:eb:e0:f7:47:94:7d:71:7c:2b: df:6f:f7:c3:c0:c7:5f:72:ed:38:a8:60:cd:5b:85: 69:6b:80:57:0f:2f:05:8c:90:76:ad:40:71:06:05: c6:56:a6:fd:34:ee:55:71:7f:03:80:33:67:33:6c: e4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:72:28:02:DC:DF:7F:97:F2:8D:EE:0D:0F:00:B4:DB:D7:58:C2:C8 X509v3 Authority Key Identifier: keyid:B9:FC:53:8B:FB:E9:1D:32:C9:80:E6:C9:68:C9:66:04:E3:88:FD:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9FC538BFBE91D32C980E6C968C96604E388FD26.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:df:9f:12:df:31:bb:42:04:fb:12:59:26:66:50:67:b1:0e: e4:f8:b6:d1:63:6e:f5:38:27:52:48:7c:d7:1e:6d:be:d8:b6: 2a:34:0d:60:95:6c:97:15:78:d6:54:24:07:68:53:00:10:9c: e2:86:67:33:fe:65:72:b3:85:9a:6e:9b:5a:29:a6:5f:da:2c: c4:01:89:8d:7c:9a:68:07:4e:25:8d:bf:35:2b:1b:8e:77:ca: c4:57:e5:33:59:37:f5:1d:14:93:31:79:4f:59:3e:28:01:6a: 79:f6:4b:af:f0:2e:0c:aa:6a:3b:d7:8f:6c:71:8e:60:5f:17: 3e:40:b9:df:72:b7:2c:fe:bc:f8:56:e9:0d:0b:58:6a:15:da: 11:56:89:fa:6b:7e:3e:bc:8e:ef:a1:70:f4:9e:36:4f:c1:15: ac:06:36:20:49:25:33:da:9e:c0:93:33:78:28:55:7c:f7:0b: ec:6e:13:f6:bc:ba:0a:65:0e:77:7c:fc:26:49:7f:ee:f3:05: 57:fd:59:01:35:e1:e9:75:81:62:cc:1b:8f:e7:dc:0a:01:c9: 4d:52:fd:6e:16:68:b1:ab:0e:6f:cc:54:4b:35:62:b5:75:96: 0c:47:83:32:20:0f:18:a4:69:fe:2b:ed:d6:75:1d:b3:b2:25: 75:3b:1d:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQgg/0RHBNUgbaFl7JcYI1NV23HQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlGQzUzOEJGQkU5MUQzMkM5ODBFNkM5NjhDOTY2MDRF Mzg4RkQyNjAeFw0yNjEwMDQwMDI1NDFaFw0yNjEwMDUwMDUwNDFaMDMxMTAvBgNV BAMTKDlFNzIyODAyRENERjdGOTdGMjhERUUwRDBGMDBCNERCRDc1OEMyQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqYAcTPzld6Joa7934XUHcDCw0 bGHK4eiEF+FgL6Lirxm3XLVtWjzgCKqiMxP5GyBNU1Kp1JDRF1mHiEDJdJBfzaIQ SMtzpVOAFVkaBOy1xkQxs1L6Hk8D5vqT7k2szA6SxvUpW2RYjzAHp3Sryq3j0eri SoGK9isl8jAkDZRLXiz8CwiQVu2pStNNvqbxwVlwj+SpQQhqatLYYb6CiM3SfrY/ vAStQPhSWAIauN1q3SpWLcr3sMB1j+PXSX2pFgNOZ3vhbco15uvg90eUfXF8K99v 98PAx19y7TioYM1bhWlrgFcPLwWMkHatQHEGBcZWpv007lVxfwOAM2czbOTLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnnIoAtzff5fyje4NDwC029dYwsgwHwYDVR0j BBgwFoAUufxTi/vpHTLJgObJaMlmBOOI/SYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMwMDU2YjQtZjAyNy00NGZhLTk3NGQtNGExZWQxOTFhZTU2LzAvQjlGQzUzOEJG QkU5MUQzMkM5ODBFNkM5NjhDOTY2MDRFMzg4RkQyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUZDNTM4QkZCRTkxRDMyQzk4MEU2Qzk2OEM5NjYwNEUzODhG RDI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMwMDU2YjQtZjAyNy00NGZhLTk3 NGQtNGExZWQxOTFhZTU2LzAvQjlGQzUzOEJGQkU5MUQzMkM5ODBFNkM5NjhDOTY2 MDRFMzg4RkQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3fnxLfMbtCBPsSWSZmUGexDuT4ttFjbvU4 J1JIfNcebb7Ytio0DWCVbJcVeNZUJAdoUwAQnOKGZzP+ZXKzhZpum1oppl/aLMQB iY18mmgHTiWNvzUrG453ysRX5TNZN/UdFJMxeU9ZPigBann2S6/wLgyqajvXj2xx jmBfFz5Aud9ytyz+vPhW6Q0LWGoV2hFWifprfj68ju+hcPSeNk/BFawGNiBJJTPa nsCTM3goVXz3C+xuE/a8ugplDnd8/CZJf+7zBVf9WQE14el1gWLMG4/n3AoByU1S /W4WaLGrDm/MVEs1YrV1lgxHgzIgDxikaf4r7dZ1HbOyJXU7Hd8= -----END CERTIFICATE-----Generated at Sun Oct 4 15:51:14 2026 by rpki-client