$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft File: 9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft (raw, json) Hash identifier: Lt0S1Te5TtQ0hGcjaF8wVv5MwH4LtssCqouuIO49QhQ= Subject key identifier: 53:74:D8:31:81:A5:7A:B1:27:C1:84:EC:75:6D:0F:21:55:4F:54:A9 Authority key identifier: 9C:47:04:20:4D:F8:9C:A1:B4:1C:1A:06:44:39:95:B3:CC:E3:86:CB Certificate issuer: /CN=9C4704204DF89CA1B41C1A06443995B3CCE386CB Certificate serial: 164C3E164B3678C283887936794B9972BFBAF1B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft Manifest number: 0112 Signing time: Mon 21 Sep 2026 08:37:13 +0000 Manifest this update: Mon 21 Sep 2026 08:32:13 +0000 Manifest next update: Tue 22 Sep 2026 11:08:13 +0000 Files and hashes: 1: AS23693.roa (hash: nQHqGrXxisNm9tItcqd6p1SSCmNnVPxWqJyFxvqukbo=) 2: 9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl (hash: 7fOnptoQjneV1AREGqrT8tSfnDjpP6Y+RmqgwyCd+bE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:4c:3e:16:4b:36:78:c2:83:88:79:36:79:4b:99:72:bf:ba:f1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C4704204DF89CA1B41C1A06443995B3CCE386CB Validity Not Before: Sep 21 08:32:13 2026 GMT Not After : Sep 22 11:08:13 2026 GMT Subject: CN=5374D83181A57AB127C184EC756D0F21554F54A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:b9:38:ed:d5:8f:c7:18:9b:fd:9e:be:24: c2:38:bd:cd:04:bc:85:45:61:94:36:f0:8f:2b:59: 98:f3:87:6e:97:e9:8c:ea:85:c1:36:88:55:52:23: e9:85:08:de:9d:cc:f2:62:63:5a:b5:d8:02:db:e0: 0e:b7:16:4e:c1:c9:67:0b:27:61:05:4d:cc:24:94: 04:5c:9d:99:5a:20:13:81:95:e4:dc:b4:34:ce:57: f6:72:8f:81:d0:38:3b:97:ac:75:12:e2:44:fb:4b: 34:dd:b5:d9:76:5c:bb:f1:80:b2:c3:4c:61:4d:a4: d8:f4:a2:b9:dc:b8:8f:c6:bf:59:3a:a7:03:72:2c: 30:f2:0f:c8:76:46:33:26:a5:bd:28:6c:35:bc:62: f0:33:1d:8b:47:4c:e6:d4:38:63:44:86:67:2c:95: 78:21:0d:47:d3:7d:4b:4f:dc:b3:c4:14:bd:2e:0d: aa:e2:5d:4b:0b:e2:f5:96:d3:f0:db:c8:e1:ae:80: 2f:2b:1e:7e:fa:98:23:09:21:db:e3:01:da:d6:b7: a7:d7:9c:c8:d3:6a:69:7f:21:76:6d:5f:ee:44:6b: 5b:d7:c3:c1:ba:cb:1c:cc:42:af:de:75:c0:1d:da: c2:32:e6:06:ae:7e:eb:e4:4c:a9:fc:37:ec:af:8b: 4e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:74:D8:31:81:A5:7A:B1:27:C1:84:EC:75:6D:0F:21:55:4F:54:A9 X509v3 Authority Key Identifier: keyid:9C:47:04:20:4D:F8:9C:A1:B4:1C:1A:06:44:39:95:B3:CC:E3:86:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:1c:fa:bc:0d:b4:8b:57:b2:79:e0:59:39:e8:3c:c0:ca:11: bb:0f:f3:60:0c:de:8c:89:01:7b:6e:01:4d:47:9b:d7:d0:1d: ad:78:58:e8:4e:a6:0b:74:64:99:bd:c4:b6:33:33:f8:a2:3c: 39:8d:8f:c4:98:00:14:0a:df:b5:6a:1b:e0:8e:25:2e:39:72: 19:c4:bd:af:17:2d:58:18:71:4a:9f:fb:23:45:8f:f2:f2:98: e9:95:63:ad:be:ab:4f:c7:de:f6:a9:f4:e8:0d:5c:75:6e:ec: 62:8c:4e:25:dd:00:c5:b3:a0:2b:cb:97:15:5c:fc:ed:21:34: 37:5d:69:17:91:b2:c0:3e:d1:b4:ff:68:85:ed:41:c5:be:0b: a1:df:9c:a6:72:dd:f1:5f:63:74:e9:16:fe:6e:a0:06:21:cf: 8f:fb:39:76:31:b1:6b:fb:45:1a:7f:55:ef:80:f9:9b:51:ce: de:fb:18:06:d1:00:df:b4:ca:2a:7f:55:6e:0d:cc:60:20:9d: 5c:c4:80:7b:cc:67:70:92:02:08:a6:b2:8f:bb:7c:70:b0:3a: 8b:ad:25:32:d6:43:1a:14:44:2e:ac:d9:79:65:00:01:7a:e1: 22:c9:a2:2d:60:fb:14:13:53:34:7f:e9:3d:cc:9c:ce:ac:42: 7a:f2:11:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFkw+Fks2eMKDiHk2eUuZcr+68bIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM0NzA0MjA0REY4OUNBMUI0MUMxQTA2NDQzOTk1QjND Q0UzODZDQjAeFw0yNjA5MjEwODMyMTNaFw0yNjA5MjIxMTA4MTNaMDMxMTAvBgNV BAMTKDUzNzREODMxODFBNTdBQjEyN0MxODRFQzc1NkQwRjIxNTU0RjU0QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+M7k47dWPxxib/Z6+JMI4vc0E vIVFYZQ28I8rWZjzh26X6YzqhcE2iFVSI+mFCN6dzPJiY1q12ALb4A63Fk7ByWcL J2EFTcwklARcnZlaIBOBleTctDTOV/Zyj4HQODuXrHUS4kT7SzTdtdl2XLvxgLLD TGFNpNj0orncuI/Gv1k6pwNyLDDyD8h2RjMmpb0obDW8YvAzHYtHTObUOGNEhmcs lXghDUfTfUtP3LPEFL0uDariXUsL4vWW0/DbyOGugC8rHn76mCMJIdvjAdrWt6fX nMjTaml/IXZtX+5Ea1vXw8G6yxzMQq/edcAd2sIy5gaufuvkTKn8N+yvi04lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU3TYMYGlerEnwYTsdW0PIVVPVKkwHwYDVR0j BBgwFoAUnEcEIE34nKG0HBoGRDmVs8zjhsswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzMyOGYyNGUtZGM3Zi00NTYyLWE1MWQtZTJlMzhjMzY3N2QxLzAvOUM0NzA0MjA0 REY4OUNBMUI0MUMxQTA2NDQzOTk1QjNDQ0UzODZDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QzQ3MDQyMDRERjg5Q0ExQjQxQzFBMDY0NDM5OTVCM0NDRTM4 NkNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvOUM0NzA0MjA0REY4OUNBMUI0MUMxQTA2NDQzOTk1 QjNDQ0UzODZDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkc+rwNtItXsnngWTnoPMDKEbsP82AM3oyJ AXtuAU1Hm9fQHa14WOhOpgt0ZJm9xLYzM/iiPDmNj8SYABQK37VqG+COJS45chnE va8XLVgYcUqf+yNFj/LymOmVY62+q0/H3vap9OgNXHVu7GKMTiXdAMWzoCvLlxVc /O0hNDddaReRssA+0bT/aIXtQcW+C6HfnKZy3fFfY3TpFv5uoAYhz4/7OXYxsWv7 RRp/Ve+A+ZtRzt77GAbRAN+0yip/VW4NzGAgnVzEgHvMZ3CSAgimso+7fHCwOout JTLWQxoURC6s2XllAAF64SLJoi1g+xQTUzR/6T3MnM6sQnryEcU= -----END CERTIFICATE-----Generated at Mon Sep 21 23:16:48 2026 by rpki-client