$ rpki-client -vvvf rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft File: D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft (raw, json) Hash identifier: SNMLVyuIsTnPUt/lTMR646W+/lpkuzDXjpdrESXMxm4= Subject key identifier: C9:81:EB:0D:69:A0:49:76:A0:78:70:F6:9B:6B:2C:92:EE:32:B9:02 Authority key identifier: D9:E4:B9:E5:C2:0C:5D:24:54:5E:4B:37:44:B7:24:23:24:23:ED:B7 Certificate issuer: /CN=D9E4B9E5C20C5D24545E4B3744B724232423EDB7 Certificate serial: 6A702CB3D3B90B7135629CD735C99C67B882EBBB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 20:31:58 +0000 Manifest this update: Mon 21 Sep 2026 20:26:58 +0000 Manifest next update: Tue 22 Sep 2026 22:53:58 +0000 Files and hashes: 1: 323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa (hash: cHfAqVSrYWCvGTjmxTN9VKckgkvEOepk7bQUQ5YDUTM=) 2: 3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa (hash: OK8J5tFKOjzZkYFlXmJIuP/RnOPH7Dha6p0ILyYgDYQ=) 3: D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl (hash: NZMKDQ1f+T6Dqm2azJkqRW3oLJDnNpDzg8aeui0nv+s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:70:2c:b3:d3:b9:0b:71:35:62:9c:d7:35:c9:9c:67:b8:82:eb:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9E4B9E5C20C5D24545E4B3744B724232423EDB7 Validity Not Before: Sep 21 20:26:58 2026 GMT Not After : Sep 22 22:53:58 2026 GMT Subject: CN=C981EB0D69A04976A07870F69B6B2C92EE32B902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ab:93:09:f8:8b:1a:f1:25:cf:b5:5d:5b:c4: c6:b6:59:44:44:6a:04:23:93:a8:7a:9d:35:66:15: 03:dc:ff:81:3f:ab:48:1b:7f:7f:7a:15:4f:ca:9d: a1:5b:03:fb:45:cf:7e:85:45:86:66:08:5f:4b:db: 08:80:55:b1:6b:20:8e:ac:3a:55:3f:22:f5:f6:72: 17:a5:7b:85:63:ec:7e:ba:c4:d7:a3:57:c8:9a:79: 21:e5:6a:40:60:71:65:8c:75:27:1e:b2:50:33:7b: be:15:d1:5b:ae:69:e5:89:97:f5:54:99:3c:02:4d: 53:26:cf:6a:dc:f6:3b:e0:05:e3:28:2a:a4:15:f9: d7:31:a9:00:63:47:9b:a3:51:00:ff:33:6e:e3:77: a0:49:18:c6:25:ac:47:81:8f:95:de:12:14:05:44: 72:7a:c9:8d:06:81:9c:0c:c6:92:e1:4d:8a:4b:71: 8a:81:9e:39:ed:af:fe:12:1e:95:2b:d8:0e:cd:72: d3:e0:cb:ec:52:d1:69:95:bf:0f:c1:b3:50:e8:ec: 1f:51:32:50:98:23:a1:9f:18:fb:15:b3:65:2b:48: 6f:a8:72:aa:20:94:dd:28:39:1c:aa:c9:b8:3b:45: 9b:78:4c:45:4c:d7:69:0f:a1:9c:4f:33:99:fc:31: df:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:81:EB:0D:69:A0:49:76:A0:78:70:F6:9B:6B:2C:92:EE:32:B9:02 X509v3 Authority Key Identifier: keyid:D9:E4:B9:E5:C2:0C:5D:24:54:5E:4B:37:44:B7:24:23:24:23:ED:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:0f:3b:fe:2c:28:b9:b2:88:7c:f5:57:ce:1b:dd:9f:11:5f: 41:46:84:ac:00:9f:06:da:00:88:e1:77:30:59:0e:b5:97:2d: 2d:15:2a:6b:c6:fe:08:3d:c3:3a:20:70:5b:81:f9:23:7b:57: b4:7c:7b:48:48:8b:47:2f:35:31:f3:2a:8a:06:66:f0:3e:23: 28:34:5b:cd:3b:10:79:68:12:b3:c4:53:40:80:31:cc:e1:db: 72:7f:3e:3e:ee:13:85:b0:13:ed:97:eb:69:02:19:b4:51:a5: 1a:00:cf:79:8c:5c:97:0e:fb:6d:4d:24:7d:b4:ea:a8:10:81: 20:de:ed:3b:4f:5d:eb:ed:07:41:69:58:9c:e8:f3:5e:d6:0a: 06:f3:52:ea:03:49:e1:de:9e:61:82:79:ba:37:1c:1a:6c:75: 25:53:c7:0b:a8:28:cd:53:bb:db:d6:df:a8:ed:aa:05:7a:e1: bb:06:83:4e:4a:75:f5:bb:87:d4:c3:0e:80:7f:a8:e3:c4:9a: fa:03:66:d4:f2:4a:5f:4f:00:d0:03:22:25:b3:da:5f:17:99: 60:58:85:9e:f7:b0:f9:90:92:90:08:66:6d:f8:0c:2b:70:f0: 25:fc:a9:99:0a:a6:88:6a:10:23:59:ce:f1:93:74:52:ce:03: fa:9e:bb:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUanAss9O5C3E1YpzXNcmcZ7iC67swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFNEI5RTVDMjBDNUQyNDU0NUU0QjM3NDRCNzI0MjMy NDIzRURCNzAeFw0yNjA5MjEyMDI2NThaFw0yNjA5MjIyMjUzNThaMDMxMTAvBgNV BAMTKEM5ODFFQjBENjlBMDQ5NzZBMDc4NzBGNjlCNkIyQzkyRUUzMkI5MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaq5MJ+Isa8SXPtV1bxMa2WURE agQjk6h6nTVmFQPc/4E/q0gbf396FU/KnaFbA/tFz36FRYZmCF9L2wiAVbFrII6s OlU/IvX2chele4Vj7H66xNejV8iaeSHlakBgcWWMdSceslAze74V0VuuaeWJl/VU mTwCTVMmz2rc9jvgBeMoKqQV+dcxqQBjR5ujUQD/M27jd6BJGMYlrEeBj5XeEhQF RHJ6yY0GgZwMxpLhTYpLcYqBnjntr/4SHpUr2A7NctPgy+xS0WmVvw/Bs1Do7B9R MlCYI6GfGPsVs2UrSG+ocqoglN0oORyqybg7RZt4TEVM12kPoZxPM5n8Md+LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyYHrDWmgSXageHD2m2ssku4yuQIwHwYDVR0j BBgwFoAU2eS55cIMXSRUXks3RLckIyQj7bcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzBhMzkyZGMtMmU0ZS00NzcwLThmNjgtYmM2MWY4MGI3NGE3LzAvRDlFNEI5RTVD MjBDNUQyNDU0NUU0QjM3NDRCNzI0MjMyNDIzRURCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOUU0QjlFNUMyMEM1RDI0NTQ1RTRCMzc0NEI3MjQyMzI0MjNF REI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzBhMzkyZGMtMmU0ZS00NzcwLThm NjgtYmM2MWY4MGI3NGE3LzAvRDlFNEI5RTVDMjBDNUQyNDU0NUU0QjM3NDRCNzI0 MjMyNDIzRURCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEPO/4sKLmyiHz1V84b3Z8RX0FGhKwAnwba AIjhdzBZDrWXLS0VKmvG/gg9wzogcFuB+SN7V7R8e0hIi0cvNTHzKooGZvA+Iyg0 W807EHloErPEU0CAMczh23J/Pj7uE4WwE+2X62kCGbRRpRoAz3mMXJcO+21NJH20 6qgQgSDe7TtPXevtB0FpWJzo817WCgbzUuoDSeHenmGCebo3HBpsdSVTxwuoKM1T u9vW36jtqgV64bsGg05KdfW7h9TDDoB/qOPEmvoDZtTySl9PANADIiWz2l8XmWBY hZ73sPmQkpAIZm34DCtw8CX8qZkKpohqECNZzvGTdFLOA/qeu2Q= -----END CERTIFICATE-----Generated at Tue Sep 22 03:22:39 2026 by rpki-client