$ rpki-client -vvvf rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft File: 9290697B92D08AFAAFB01253090BE0FE28871EA9.mft (raw, json) Hash identifier: 80na/T9JkUfRHnWpu496Z/5XW813PLFHpv0G440mlCE= Subject key identifier: 42:44:7B:5E:EB:7E:1F:91:61:AA:2E:EA:6E:CB:9D:98:89:25:8A:3A Authority key identifier: 92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9 Certificate issuer: /CN=9290697B92D08AFAAFB01253090BE0FE28871EA9 Certificate serial: 436065E459561AF11D7DB164A4D9BB0CA8BF2139 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft Manifest number: BF Signing time: Mon 21 Sep 2026 00:01:36 +0000 Manifest this update: Sun 20 Sep 2026 23:56:36 +0000 Manifest next update: Tue 22 Sep 2026 02:12:36 +0000 Files and hashes: 1: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: ld7ZAKTrz/u5LDPP3+3DpOULg7oKh+lQm5wahDEcTNc=) 2: 9290697B92D08AFAAFB01253090BE0FE28871EA9.crl (hash: sG348K50b/Y7KgbZNw3iOVsbiNkyDXrJT4vKXKaVTyY=) 3: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: hRuNQymA0Kqk7Awfu8/hFwiPFpevo38okveHDPwRfwI=) 4: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: WJxpeyz7OfQNEVK9NO1sVdlmaQoTrq8jALq72l9BXpw=) 5: 323030313a6466373a376438303a3a2f34382d3438203d3e20313431393039.roa (hash: tw5oikVlx6lbDw0PXuWWK4JNZ7QDnCFmUnX8Ug8gws8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.crl rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:60:65:e4:59:56:1a:f1:1d:7d:b1:64:a4:d9:bb:0c:a8:bf:21:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9290697B92D08AFAAFB01253090BE0FE28871EA9 Validity Not Before: Sep 20 23:56:36 2026 GMT Not After : Sep 22 02:12:36 2026 GMT Subject: CN=42447B5EEB7E1F9161AA2EEA6ECB9D9889258A3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:9b:17:86:0d:73:92:94:b9:8d:d9:d2:11: d2:9d:db:26:d4:d8:cf:c8:4b:e8:81:9b:fa:ea:0d: 96:29:4d:40:cb:b5:aa:64:3b:e7:33:1a:8b:4c:16: ba:ce:86:d8:72:d3:25:c1:78:38:e1:6a:87:c1:bf: eb:45:e4:aa:cf:04:0b:4a:dd:61:f3:ed:41:47:00: 2d:46:47:e4:49:d5:6d:cc:5c:a9:60:e4:02:e8:3e: ff:3a:e6:19:15:96:8a:2e:4c:d0:2d:18:48:cb:ec: 34:18:ae:dc:5e:9f:11:f9:2a:8f:ff:d7:97:72:b5: 80:d9:1c:10:6e:2b:e7:aa:be:f3:96:bc:90:05:ac: 92:cd:40:0c:b7:9a:ed:bc:8a:ce:f4:84:47:55:dd: 6b:f6:6a:35:68:da:10:00:57:82:c3:e9:3d:79:30: 48:67:4d:ab:8f:f7:1d:ec:78:d0:05:e9:75:1d:92: 1d:d1:05:70:62:d0:54:8d:53:f3:44:da:1e:bc:69: 99:56:d5:7f:3a:58:ab:16:53:7e:7e:f7:14:9a:34: 19:7b:26:40:0e:2c:f2:5f:9c:c3:70:85:4f:ca:a8: 1f:57:96:8b:92:b5:49:64:5c:75:ac:cb:e6:12:eb: c9:74:56:53:5b:2a:4f:c7:f2:4f:99:f9:1f:4d:16: 03:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:44:7B:5E:EB:7E:1F:91:61:AA:2E:EA:6E:CB:9D:98:89:25:8A:3A X509v3 Authority Key Identifier: keyid:92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:f9:2b:be:7c:7d:f8:08:af:a8:de:6e:42:b1:51:20:2f:e5: 3b:8f:2e:89:ec:d2:4d:81:68:19:3f:f6:d5:6f:ba:cf:73:04: ed:f3:7f:7a:4b:58:c8:08:0e:36:9d:22:c0:ae:af:51:a8:04: 63:85:8e:3d:c6:74:ee:ad:79:39:08:76:8e:93:7f:9a:5a:4c: 06:95:98:5e:dd:c0:a7:aa:4a:21:ee:94:59:57:0b:6e:a6:9e: af:9b:e0:de:bc:26:c3:d0:a7:8f:4d:d6:e9:3f:93:cd:aa:be: 44:af:8d:e9:e1:72:c6:76:7d:29:fc:a7:ae:17:3f:1e:38:35: 6f:39:9b:fa:83:d6:09:b2:2c:df:31:a1:91:cb:d6:4a:f8:75: e1:4e:3e:c6:5e:56:15:de:c3:ee:9d:a0:b1:58:98:d8:d8:d6: d4:0d:ba:d1:bb:af:f2:b6:74:76:22:2b:af:bf:bf:d6:ec:c3: 17:9c:b6:37:0f:9e:d3:f7:a2:07:72:27:ba:c9:e0:de:a7:6c: 73:24:4b:f9:ed:7d:77:ad:a7:55:7f:a9:47:7e:44:ac:db:a2: 61:e8:ce:11:70:94:ab:ab:47:c0:5c:95:f0:da:a4:03:c1:cf: a9:ea:80:8a:ad:8f:b2:f2:21:39:44:a0:a0:4c:e0:4d:eb:76: f5:b5:fc:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ2Bl5FlWGvEdfbFkpNm7DKi/ITkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI5MDY5N0I5MkQwOEFGQUFGQjAxMjUzMDkwQkUwRkUy ODg3MUVBOTAeFw0yNjA5MjAyMzU2MzZaFw0yNjA5MjIwMjEyMzZaMDMxMTAvBgNV BAMTKDQyNDQ3QjVFRUI3RTFGOTE2MUFBMkVFQTZFQ0I5RDk4ODkyNThBM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTJsXhg1zkpS5jdnSEdKd2ybU 2M/IS+iBm/rqDZYpTUDLtapkO+czGotMFrrOhthy0yXBeDjhaofBv+tF5KrPBAtK 3WHz7UFHAC1GR+RJ1W3MXKlg5ALoPv865hkVloouTNAtGEjL7DQYrtxenxH5Ko// 15dytYDZHBBuK+eqvvOWvJAFrJLNQAy3mu28is70hEdV3Wv2ajVo2hAAV4LD6T15 MEhnTauP9x3seNAF6XUdkh3RBXBi0FSNU/NE2h68aZlW1X86WKsWU35+9xSaNBl7 JkAOLPJfnMNwhU/KqB9XlouStUlkXHWsy+YS68l0VlNbKk/H8k+Z+R9NFgNZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQkR7Xut+H5Fhqi7qbsudmIklijowHwYDVR0j BBgwFoAUkpBpe5LQivqvsBJTCQvg/iiHHqkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAxYzRkNjEtZGNlZi00YTIwLWJkNGMtYTI4MmEzN2FhNjllLzAvOTI5MDY5N0I5 MkQwOEFGQUFGQjAxMjUzMDkwQkUwRkUyODg3MUVBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjkwNjk3QjkyRDA4QUZBQUZCMDEyNTMwOTBCRTBGRTI4ODcx RUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAxYzRkNjEtZGNlZi00YTIwLWJk NGMtYTI4MmEzN2FhNjllLzAvOTI5MDY5N0I5MkQwOEFGQUFGQjAxMjUzMDkwQkUw RkUyODg3MUVBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABH5K758ffgIr6jebkKxUSAv5TuPLons0k2B aBk/9tVvus9zBO3zf3pLWMgIDjadIsCur1GoBGOFjj3GdO6teTkIdo6Tf5paTAaV mF7dwKeqSiHulFlXC26mnq+b4N68JsPQp49N1uk/k82qvkSvjenhcsZ2fSn8p64X Px44NW85m/qD1gmyLN8xoZHL1kr4deFOPsZeVhXew+6doLFYmNjY1tQNutG7r/K2 dHYiK6+/v9bswxectjcPntP3ogdyJ7rJ4N6nbHMkS/ntfXetp1V/qUd+RKzbomHo zhFwlKurR8BclfDapAPBz6nqgIqtj7LyITlEoKBM4E3rdvW1/KI= -----END CERTIFICATE-----Generated at Mon Sep 21 20:05:07 2026 by rpki-client