$ rpki-client -vvvf rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft File: 9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft (raw, json) Hash identifier: I/ikSuz+KRFQrrMtW4lEHCnbanqrMBpotTIEV7jjobc= Subject key identifier: AD:29:33:37:07:DF:E8:7F:93:4A:4D:06:0E:AB:AB:93:64:C6:93:49 Authority key identifier: 9F:FB:79:1C:09:C2:A2:BF:53:CF:54:17:4A:8C:A1:AD:67:7B:35:64 Certificate issuer: /CN=9FFB791C09C2A2BF53CF54174A8CA1AD677B3564 Certificate serial: 10F6BC582067EC619C16DCA9383A294887A9EC39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 12:00:33 +0000 Manifest this update: Thu 24 Sep 2026 11:55:33 +0000 Manifest next update: Fri 25 Sep 2026 12:02:33 +0000 Files and hashes: 1: 9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl (hash: GvK33NdecaBuwzQwE9Wy75GrCnwITD925tt+1zEk+nw=) 2: 3136302e32352e3234392e302f32342d3234203d3e20313336303939.roa (hash: U0YPo5BGNsV6sfhS2oiy7oPSHdSgcRKevuF2NKX91Xo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f6:bc:58:20:67:ec:61:9c:16:dc:a9:38:3a:29:48:87:a9:ec:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFB791C09C2A2BF53CF54174A8CA1AD677B3564 Validity Not Before: Sep 24 11:55:33 2026 GMT Not After : Sep 25 12:02:33 2026 GMT Subject: CN=AD29333707DFE87F934A4D060EABAB9364C69349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:59:01:96:7b:89:71:94:41:07:93:1d:e7:50: c0:15:5c:c3:cc:d8:4d:2e:41:19:6b:74:8c:99:de: f3:f5:f8:c6:b6:5e:e6:71:ea:e8:e0:10:80:fb:de: a2:00:ca:75:01:01:75:12:54:4e:4a:8f:b2:60:36: 9f:ed:11:af:c6:5b:13:34:f0:a8:bb:e2:8a:75:87: 35:19:dd:75:e2:5a:69:8f:43:3b:ef:34:c3:61:d1: f6:9f:2b:05:13:03:cb:d5:f7:18:a4:b6:34:82:f8: a4:02:47:ae:f1:d6:af:cc:ff:2a:ce:db:e1:8d:e8: d8:38:21:1b:3d:de:97:91:20:2f:52:b8:06:49:60: 5b:38:1d:45:22:08:cc:45:93:1e:12:c2:20:b4:24: 51:31:17:c3:07:4d:90:d5:12:19:4b:1b:a3:2d:3e: 8a:66:2c:42:04:9b:2c:9d:54:d2:c2:02:82:73:e6: bd:84:a7:07:13:96:4f:f0:25:67:d4:cb:26:50:99: c0:6f:71:55:e3:db:cd:30:6d:ba:02:9e:d9:9f:3d: a6:cf:66:04:6b:86:32:4d:3f:31:1b:0c:b2:0e:fe: 57:2b:60:e3:85:eb:0b:fe:1a:84:72:d5:a5:2a:21: 59:ea:b3:1e:00:3d:ce:e6:ec:8a:cc:15:52:0a:43: 99:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:29:33:37:07:DF:E8:7F:93:4A:4D:06:0E:AB:AB:93:64:C6:93:49 X509v3 Authority Key Identifier: keyid:9F:FB:79:1C:09:C2:A2:BF:53:CF:54:17:4A:8C:A1:AD:67:7B:35:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:0a:aa:a1:ff:43:28:8d:c6:76:ca:12:14:e0:f5:c1:5e:29: c8:59:c5:0b:61:25:18:36:b9:4b:53:cf:bb:aa:d7:47:73:7f: d0:80:3a:c8:ac:4c:87:86:c0:5c:e4:d8:ff:2d:17:bb:ff:9c: b0:b8:3c:21:40:bc:f2:21:e5:b7:72:8c:fa:38:dc:25:7b:88: b5:3f:8c:9d:bd:ce:cb:11:5f:3f:40:5d:b8:fc:ed:17:7b:1e: d2:da:5d:a5:e5:68:75:fd:25:b7:95:88:4b:8b:89:7a:ce:25: 97:6d:bd:4d:60:6c:2f:79:93:17:f0:0d:18:9b:b1:14:86:0c: 2c:95:cc:a4:75:6b:51:4d:ce:d4:bc:c3:05:22:ad:6b:e8:4f: 22:7b:71:c0:88:0e:c7:13:00:d9:d1:a5:04:b6:65:a9:fd:41: 30:12:d4:47:56:e2:84:d5:93:e4:bd:2b:17:a6:d8:37:37:81: c0:7c:e6:f8:4a:d9:34:11:c8:fb:38:c8:f5:09:68:4f:ea:03: 66:fb:dd:6e:bf:a3:ba:fd:8b:fd:85:d7:c8:97:19:8f:1f:ae: b3:18:24:0d:03:b0:b2:54:07:cf:28:e9:0a:83:05:87:21:91: f3:29:19:9c:2a:8e:13:43:3c:fa:61:f5:b8:f8:a6:e6:86:7a: 4f:15:4f:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEPa8WCBn7GGcFtypODopSIep7DkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQjc5MUMwOUMyQTJCRjUzQ0Y1NDE3NEE4Q0ExQUQ2 NzdCMzU2NDAeFw0yNjA5MjQxMTU1MzNaFw0yNjA5MjUxMjAyMzNaMDMxMTAvBgNV BAMTKEFEMjkzMzM3MDdERkU4N0Y5MzRBNEQwNjBFQUJBQjkzNjRDNjkzNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1WQGWe4lxlEEHkx3nUMAVXMPM 2E0uQRlrdIyZ3vP1+Ma2XuZx6ujgEID73qIAynUBAXUSVE5Kj7JgNp/tEa/GWxM0 8Ki74op1hzUZ3XXiWmmPQzvvNMNh0fafKwUTA8vV9xiktjSC+KQCR67x1q/M/yrO 2+GN6Ng4IRs93peRIC9SuAZJYFs4HUUiCMxFkx4SwiC0JFExF8MHTZDVEhlLG6Mt PopmLEIEmyydVNLCAoJz5r2EpwcTlk/wJWfUyyZQmcBvcVXj280wbboCntmfPabP ZgRrhjJNPzEbDLIO/lcrYOOF6wv+GoRy1aUqIVnqsx4APc7m7IrMFVIKQ5lZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrSkzNwff6H+TSk0GDqurk2TGk0kwHwYDVR0j BBgwFoAUn/t5HAnCor9Tz1QXSoyhrWd7NWQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDE0MDU1NDUtYzM1ZC00ZGUxLTk2MTgtNDRiNWY0MTdhMzAzLzAvOUZGQjc5MUMw OUMyQTJCRjUzQ0Y1NDE3NEE4Q0ExQUQ2NzdCMzU2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85RkZCNzkxQzA5QzJBMkJGNTNDRjU0MTc0QThDQTFBRDY3N0Iz NTY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzAvOUZGQjc5MUMwOUMyQTJCRjUzQ0Y1NDE3NEE4Q0Ex QUQ2NzdCMzU2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEKqqH/QyiNxnbKEhTg9cFeKchZxQthJRg2 uUtTz7uq10dzf9CAOsisTIeGwFzk2P8tF7v/nLC4PCFAvPIh5bdyjPo43CV7iLU/ jJ29zssRXz9AXbj87Rd7HtLaXaXlaHX9JbeViEuLiXrOJZdtvU1gbC95kxfwDRib sRSGDCyVzKR1a1FNztS8wwUirWvoTyJ7ccCIDscTANnRpQS2Zan9QTAS1EdW4oTV k+S9Kxem2Dc3gcB85vhK2TQRyPs4yPUJaE/qA2b73W6/o7r9i/2F18iXGY8frrMY JA0DsLJUB88o6QqDBYchkfMpGZwqjhNDPPph9bj4puaGek8VTzo= -----END CERTIFICATE-----Generated at Thu Sep 24 18:43:50 2026 by rpki-client