$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft File: 9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft (raw, json) Hash identifier: L4/Pd3O9WfuxDRgv4Dvnm+YKnAQzJ6N4z5nhEuJAf1g= Subject key identifier: A2:19:A2:5F:F2:6C:F9:82:01:E6:1C:C0:93:2A:C9:DD:5D:44:5F:F4 Authority key identifier: 9E:E0:13:29:B0:8F:B2:3B:3B:84:0A:A8:0A:D1:66:E4:27:A1:2E:C8 Certificate issuer: /CN=9EE01329B08FB23B3B840AA80AD166E427A12EC8 Certificate serial: 358F53625B1AB1E38C2F1AE535508C0E61681828 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft Manifest number: BD Signing time: Mon 21 Sep 2026 10:29:29 +0000 Manifest this update: Mon 21 Sep 2026 10:24:29 +0000 Manifest next update: Tue 22 Sep 2026 13:13:29 +0000 Files and hashes: 1: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (hash: baidtJB1I5sZbU9lybxXsdsHbmGXConPY+qLEFZYE2g=) 2: 9EE01329B08FB23B3B840AA80AD166E427A12EC8.crl (hash: hGHcfKrUUCWvVBKK9jmrUqgy6LHVdnob7scWYtJCS88=) 3: 3130332e3136312e3131302e302f32342d3234203d3e20313431363135.roa (hash: uoMkZJAPDBUsE5XNKk03G6DUQfsrgq24ZoSComGkHz4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.crl rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:8f:53:62:5b:1a:b1:e3:8c:2f:1a:e5:35:50:8c:0e:61:68:18:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EE01329B08FB23B3B840AA80AD166E427A12EC8 Validity Not Before: Sep 21 10:24:29 2026 GMT Not After : Sep 22 13:13:29 2026 GMT Subject: CN=A219A25FF26CF98201E61CC0932AC9DD5D445FF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:14:4a:99:fe:83:0d:ab:a0:02:4b:0a:a2:d3: 6e:25:98:d8:eb:b3:88:bc:2c:6d:a1:e8:57:6e:15: 6e:a9:3f:b0:9a:82:52:40:e6:c2:75:43:f4:65:bc: 4a:42:81:94:cd:e8:77:d7:9c:6a:68:e2:fb:32:38: 84:22:b4:bb:48:a1:e3:53:17:0f:d6:46:9b:e4:6e: ee:37:93:3e:85:69:ba:9e:98:be:f6:da:32:97:7a: c6:97:76:3a:24:99:8e:3f:82:87:d1:99:64:be:52: 78:54:c5:53:64:d5:c1:ed:69:9b:01:22:d0:58:05: 81:37:9f:a4:eb:42:b9:23:85:fc:2a:70:d9:ee:99: 06:23:70:5a:f0:53:4f:cc:78:06:f6:9f:4e:34:0b: 1c:4e:60:ae:8c:c8:2a:ec:ee:62:8e:3e:c1:87:6d: ab:57:bd:d1:fd:66:45:62:6f:fc:cf:22:c1:ea:98: 7d:98:c4:20:94:76:cb:47:2c:cf:95:83:bf:a5:a0: 2e:db:69:d1:84:90:11:f0:c7:50:e8:3e:1d:fa:83: 8c:b8:81:67:45:bd:c0:9c:90:f5:b7:8d:10:67:7b: 2d:6e:b5:4a:9d:a4:4b:55:cc:41:2d:8c:b7:46:ee: 3b:f9:d0:8a:d3:57:72:08:e2:7b:0a:9d:1e:36:ee: 3a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:19:A2:5F:F2:6C:F9:82:01:E6:1C:C0:93:2A:C9:DD:5D:44:5F:F4 X509v3 Authority Key Identifier: keyid:9E:E0:13:29:B0:8F:B2:3B:3B:84:0A:A8:0A:D1:66:E4:27:A1:2E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6c:00:48:d5:62:b7:d6:ee:5f:74:f9:2c:e7:54:ee:0c:b8: be:4a:4c:e9:e9:c2:7d:4c:cc:c0:59:c8:05:a1:7a:86:bb:79: f8:f4:de:17:71:26:60:f9:6b:44:8d:b4:8d:f6:af:c2:dc:da: 3b:57:eb:cf:41:04:08:3d:84:2c:21:4a:b4:b4:79:67:ea:dc: a0:82:c8:f5:d0:78:f6:19:2a:0b:d7:73:4e:ed:2a:12:a0:f9: ec:c6:f5:5f:f4:99:3c:1c:d8:43:e9:ae:6e:34:80:47:b0:16: f8:e8:5d:ff:11:4d:fd:28:1c:5f:18:fd:fa:2d:84:67:2f:ae: 8e:25:4e:84:8a:c8:21:67:56:04:86:ee:ee:6f:66:77:65:a2: 7d:c1:a2:52:74:56:07:c4:e8:9b:b1:e8:ec:15:68:7c:71:40: c7:ca:bb:3e:d5:bb:2a:5b:b8:d4:d4:20:3d:42:43:b9:c7:3e: d6:88:d1:d9:43:59:fb:bc:3d:4e:a8:cb:c9:32:64:fd:49:2f: 7f:64:00:38:97:04:64:f1:b6:e4:ce:80:6f:6b:62:2a:49:a9: 6d:8b:31:b3:28:05:8c:c7:43:92:61:ed:af:2a:2e:9f:bb:cb: 9f:6b:d0:c8:83:ac:79:c7:c6:46:d6:7d:6f:3e:3b:d4:b5:f2: 12:a7:6d:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNY9TYlsaseOMLxrlNVCMDmFoGCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVFMDEzMjlCMDhGQjIzQjNCODQwQUE4MEFEMTY2RTQy N0ExMkVDODAeFw0yNjA5MjExMDI0MjlaFw0yNjA5MjIxMzEzMjlaMDMxMTAvBgNV BAMTKEEyMTlBMjVGRjI2Q0Y5ODIwMUU2MUNDMDkzMkFDOURENUQ0NDVGRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlFEqZ/oMNq6ACSwqi024lmNjr s4i8LG2h6FduFW6pP7CaglJA5sJ1Q/RlvEpCgZTN6HfXnGpo4vsyOIQitLtIoeNT Fw/WRpvkbu43kz6FabqemL722jKXesaXdjokmY4/gofRmWS+UnhUxVNk1cHtaZsB ItBYBYE3n6TrQrkjhfwqcNnumQYjcFrwU0/MeAb2n040CxxOYK6MyCrs7mKOPsGH batXvdH9ZkVib/zPIsHqmH2YxCCUdstHLM+Vg7+loC7badGEkBHwx1DoPh36g4y4 gWdFvcCckPW3jRBney1utUqdpEtVzEEtjLdG7jv50IrTV3II4nsKnR427jrBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUohmiX/Js+YIB5hzAkyrJ3V1EX/QwHwYDVR0j BBgwFoAUnuATKbCPsjs7hAqoCtFm5CehLsgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2Y0MDhlNDQtM2U5Yy00NWU1LWJjYTQtNWRmYmQ0YjI3MTMwLzAvOUVFMDEzMjlC MDhGQjIzQjNCODQwQUE4MEFEMTY2RTQyN0ExMkVDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RUUwMTMyOUIwOEZCMjNCM0I4NDBBQTgwQUQxNjZFNDI3QTEy RUM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2Y0MDhlNDQtM2U5Yy00NWU1LWJj YTQtNWRmYmQ0YjI3MTMwLzAvOUVFMDEzMjlCMDhGQjIzQjNCODQwQUE4MEFEMTY2 RTQyN0ExMkVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtsAEjVYrfW7l90+SznVO4MuL5KTOnpwn1M zMBZyAWheoa7efj03hdxJmD5a0SNtI32r8Lc2jtX689BBAg9hCwhSrS0eWfq3KCC yPXQePYZKgvXc07tKhKg+ezG9V/0mTwc2EPprm40gEewFvjoXf8RTf0oHF8Y/fot hGcvro4lToSKyCFnVgSG7u5vZndlon3BolJ0VgfE6Jux6OwVaHxxQMfKuz7Vuypb uNTUID1CQ7nHPtaI0dlDWfu8PU6oy8kyZP1JL39kADiXBGTxtuTOgG9rYipJqW2L MbMoBYzHQ5Jh7a8qLp+7y59r0MiDrHnHxkbWfW8+O9S18hKnbR0= -----END CERTIFICATE-----Generated at Mon Sep 21 18:26:27 2026 by rpki-client