$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft File: 9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft (raw, json) Hash identifier: aPkX++3Wwc9c6IRS6RxHFeHiSg6xdG5pb5oTz9cyPaQ= Subject key identifier: 34:1E:2E:16:8F:38:66:CC:5A:35:22:79:70:62:68:62:D1:F8:E1:74 Authority key identifier: 9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13 Certificate issuer: /CN=9A347241E9DA18B0BB748E5558F85DFA6AD14F13 Certificate serial: 61CF1A727F64B1FD07D14198B558971D8F19DD7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 12:11:29 +0000 Manifest this update: Tue 22 Sep 2026 12:06:29 +0000 Manifest next update: Wed 23 Sep 2026 15:49:29 +0000 Files and hashes: 1: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: vdwdHoa0dxzBT4qxWDgRcyQiniSgsgBOI6Tm2dJ4lDY=) 2: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: wInMUXHOP8RJI5eoz/+Dc4x331OyQaS/P4AI/7E+Chw=) 3: 9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl (hash: hWXJrPtGZuISMJlawFy0cqoN7ebUpjwrScJtYxgZzvk=) 4: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: PjTS4Hn+0nQcRzsQo6Ms0LRYKKTZlFXIqpYw+ixRnkk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 15:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:cf:1a:72:7f:64:b1:fd:07:d1:41:98:b5:58:97:1d:8f:19:dd:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A347241E9DA18B0BB748E5558F85DFA6AD14F13 Validity Not Before: Sep 22 12:06:29 2026 GMT Not After : Sep 23 15:49:29 2026 GMT Subject: CN=341E2E168F3866CC5A35227970626862D1F8E174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9e:84:46:6c:9d:b2:08:28:20:3e:3b:4a:6b: 20:03:4c:f8:19:32:1b:e7:2c:4a:96:db:8e:ff:91: 91:a2:92:05:a4:e2:5d:fd:10:85:6c:94:ec:ea:cf: 69:f9:25:c3:89:db:bc:67:f5:00:2e:5c:12:8c:19: 52:32:6b:7a:36:03:d1:48:76:e7:2b:af:57:0f:16: 2d:75:a1:be:4f:bd:36:01:34:fe:3c:e8:62:9a:fe: bd:eb:75:38:89:28:ca:c0:e2:79:5e:fb:cc:76:bf: 4b:c2:5e:d0:23:1d:46:bc:86:18:c0:db:49:0b:82: 9d:fc:ec:0a:88:7d:de:af:62:30:19:b4:62:14:0f: fa:34:df:e7:52:24:8d:34:0c:83:01:d0:24:37:73: ff:03:40:e5:e9:fc:19:66:66:9c:d3:d4:3a:20:75: a0:18:a1:9a:ec:d7:e4:12:50:33:82:1a:d9:08:fd: 07:41:06:06:1e:80:b1:df:ff:27:07:df:ed:9d:18: d5:c5:b7:30:4c:86:2a:dd:d8:45:38:3a:69:51:6d: 8b:1f:98:86:8e:aa:f8:89:e1:99:1e:90:92:70:34: 06:b9:b1:39:d3:be:5a:ec:04:d1:b4:8c:8d:d3:d4: cf:bc:4a:93:2c:71:dc:70:bc:c6:07:db:a7:42:97: 4c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1E:2E:16:8F:38:66:CC:5A:35:22:79:70:62:68:62:D1:F8:E1:74 X509v3 Authority Key Identifier: keyid:9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:9f:69:98:42:0f:75:59:fe:11:63:60:17:01:e5:cb:9e:f8: 62:27:a1:03:f6:6f:9c:41:46:09:bf:0c:5f:ee:eb:b2:9e:46: b3:90:69:1e:e0:99:f2:31:bb:91:ef:0d:9e:2e:6b:0e:0d:24: 11:27:30:fa:ab:d2:86:c4:f6:22:f3:f2:71:6d:19:9e:b3:6f: 8d:74:63:b7:3d:9f:91:4f:8f:1d:37:51:22:c0:81:5f:74:f2: e3:02:99:c7:b5:c8:f4:bc:40:6d:07:00:f5:00:8e:1c:a9:20: 0a:6c:e7:4e:44:aa:db:e7:9a:68:a9:01:a2:ff:bb:88:e8:61: 57:a9:2a:5c:b7:7f:6c:a7:15:3c:f4:40:e5:ad:6b:bd:b6:b3: 08:ba:fb:41:6e:0e:93:98:51:d4:32:4d:ee:6d:d1:f3:d2:18: 21:c7:00:1f:f6:93:78:64:93:2d:41:5c:e4:ed:70:a0:fb:9c: cb:3c:e1:9c:70:54:fa:37:fe:c0:19:82:f2:22:95:19:7a:72: e4:ee:42:4f:c7:6b:86:4e:3e:8d:e9:e0:e4:1c:43:cb:a3:52: 14:8e:1d:7b:7e:ed:f1:78:12:c8:cf:da:90:62:40:33:0e:25: 05:27:6a:28:bd:6a:22:9f:83:d8:6f:3c:f8:4d:80:63:e2:2b: 49:03:a3:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYc8acn9ksf0H0UGYtViXHY8Z3X0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEzNDcyNDFFOURBMThCMEJCNzQ4RTU1NThGODVERkE2 QUQxNEYxMzAeFw0yNjA5MjIxMjA2MjlaFw0yNjA5MjMxNTQ5MjlaMDMxMTAvBgNV BAMTKDM0MUUyRTE2OEYzODY2Q0M1QTM1MjI3OTcwNjI2ODYyRDFGOEUxNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWnoRGbJ2yCCggPjtKayADTPgZ MhvnLEqW247/kZGikgWk4l39EIVslOzqz2n5JcOJ27xn9QAuXBKMGVIya3o2A9FI ducrr1cPFi11ob5PvTYBNP486GKa/r3rdTiJKMrA4nle+8x2v0vCXtAjHUa8hhjA 20kLgp387AqIfd6vYjAZtGIUD/o03+dSJI00DIMB0CQ3c/8DQOXp/BlmZpzT1Dog daAYoZrs1+QSUDOCGtkI/QdBBgYegLHf/ycH3+2dGNXFtzBMhird2EU4OmlRbYsf mIaOqviJ4ZkekJJwNAa5sTnTvlrsBNG0jI3T1M+8SpMscdxwvMYH26dCl0ylAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNB4uFo84ZsxaNSJ5cGJoYtH44XQwHwYDVR0j BBgwFoAUmjRyQenaGLC7dI5VWPhd+mrRTxMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NkZDU3NzQtMzBkZC00YTAwLWIxYTktOWIxMjgyNjkzMGMyLzAvOUEzNDcyNDFF OURBMThCMEJCNzQ4RTU1NThGODVERkE2QUQxNEYxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTM0NzI0MUU5REExOEIwQkI3NDhFNTU1OEY4NURGQTZBRDE0 RjEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NkZDU3NzQtMzBkZC00YTAwLWIx YTktOWIxMjgyNjkzMGMyLzAvOUEzNDcyNDFFOURBMThCMEJCNzQ4RTU1NThGODVE RkE2QUQxNEYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSfaZhCD3VZ/hFjYBcB5cue+GInoQP2b5xB Rgm/DF/u67KeRrOQaR7gmfIxu5HvDZ4uaw4NJBEnMPqr0obE9iLz8nFtGZ6zb410 Y7c9n5FPjx03USLAgV908uMCmce1yPS8QG0HAPUAjhypIAps505EqtvnmmipAaL/ u4joYVepKly3f2ynFTz0QOWta722swi6+0FuDpOYUdQyTe5t0fPSGCHHAB/2k3hk ky1BXOTtcKD7nMs84ZxwVPo3/sAZgvIilRl6cuTuQk/Ha4ZOPo3p4OQcQ8ujUhSO HXt+7fF4EsjP2pBiQDMOJQUnaii9aiKfg9hvPPhNgGPiK0kDo8U= -----END CERTIFICATE-----Generated at Tue Sep 22 21:01:36 2026 by rpki-client