$ rpki-client -vvvf rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft File: 9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft (raw, json) Hash identifier: K2VFGlWMQMpm5aQorLmL2YLBQv0VGc0XsH2VB57V1Yk= Subject key identifier: E7:F9:0A:19:3E:89:E0:CC:93:E5:B5:4C:EA:39:89:8E:0D:D5:44:BD Authority key identifier: 9D:8E:FC:0D:64:AA:98:41:BE:1E:38:43:21:BB:2C:12:15:3F:F1:D9 Certificate issuer: /CN=9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9 Certificate serial: 136A18F0534B9074363DB7067451D8CCDC031578 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 17:07:10 +0000 Manifest this update: Wed 23 Sep 2026 17:02:10 +0000 Manifest next update: Thu 24 Sep 2026 17:16:10 +0000 Files and hashes: 1: 3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa (hash: 1YCliMmBjyp95uqeBYgoOHcVWy+xU/Vfr+PcnyYk678=) 2: 9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl (hash: wctN/KBE9Rbn3hZDzYzHTfySu1zjg3IhEz+hOFw+Uog=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:6a:18:f0:53:4b:90:74:36:3d:b7:06:74:51:d8:cc:dc:03:15:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9 Validity Not Before: Sep 23 17:02:10 2026 GMT Not After : Sep 24 17:16:10 2026 GMT Subject: CN=E7F90A193E89E0CC93E5B54CEA39898E0DD544BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a2:f6:49:31:62:61:e9:bf:e9:3e:fb:14:dd: f9:30:b2:37:58:a1:ce:b7:11:e1:37:ee:55:84:51: 1c:27:33:99:8b:fd:27:1f:8a:fa:0a:4c:a7:d7:97: bc:3c:72:52:a9:94:8b:98:b1:93:dd:8b:9b:17:2d: b5:e5:1d:a1:89:50:ae:fa:e0:e5:7f:b0:d9:4b:30: 1b:60:3c:4f:34:66:3a:09:ed:f5:5c:4f:c8:45:a7: 41:80:ad:d8:da:fa:88:39:9f:d5:7f:d0:33:ff:03: 15:26:51:ad:5b:26:09:67:4a:8a:6b:b7:40:e4:73: 5f:0e:1f:e7:ef:a8:87:6b:44:e0:83:a5:72:fb:be: 82:3a:fa:20:c1:f1:45:18:8e:8e:9f:0f:34:e1:42: 56:28:98:68:26:57:c5:65:3e:01:27:be:0f:3f:95: 7f:55:83:b3:be:bf:2f:67:64:74:43:23:5f:3f:df: 3f:cd:08:0b:51:b7:31:37:23:0a:55:e4:0d:eb:44: 99:c3:2e:8e:9d:58:6c:55:eb:14:43:d2:33:11:1a: f8:0a:56:21:65:dc:8b:ae:ba:79:47:5f:fd:12:91: e3:55:80:8e:cc:e3:c2:a9:03:26:02:5f:2e:ec:2b: 19:2b:42:c1:e7:a0:55:aa:3c:33:d2:a9:08:e4:c7: f5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F9:0A:19:3E:89:E0:CC:93:E5:B5:4C:EA:39:89:8E:0D:D5:44:BD X509v3 Authority Key Identifier: keyid:9D:8E:FC:0D:64:AA:98:41:BE:1E:38:43:21:BB:2C:12:15:3F:F1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:e3:f0:03:e1:88:58:e8:03:c7:36:c5:d6:00:31:bd:45:3b: 8a:da:3e:34:98:9d:55:88:9c:b6:dd:63:86:91:58:82:5a:df: b9:70:e9:7b:85:11:5f:46:b8:be:43:92:a5:b3:94:0b:fa:e3: 17:7a:72:82:09:04:fd:29:e6:5d:f6:b1:a0:eb:bc:2e:cc:58: 90:c8:03:46:91:b9:03:a8:83:53:36:de:7d:39:77:40:97:14: fa:f9:5c:14:21:aa:aa:cb:39:81:f5:51:17:9a:d6:d6:84:91: 31:66:f5:4b:16:2c:49:ad:0a:8f:ff:66:de:cf:ec:03:13:b8: 45:99:60:0f:98:21:f6:c9:10:ea:5c:c3:e4:5d:b5:2d:30:7c: be:07:25:46:a7:bb:72:14:33:af:ec:50:1d:6e:8f:cd:3f:ed: 84:5d:1a:e2:ef:8b:2a:f3:2f:a9:72:7f:53:d3:23:03:c5:ce: 24:8b:a0:36:d8:08:d2:36:40:2a:60:3a:3a:31:59:b7:75:08: f6:ec:57:98:47:24:53:59:27:d0:90:6f:1d:b9:8a:6a:a9:b6: 1b:8b:57:c4:8e:3e:88:2e:6f:b1:69:08:e2:3f:0c:1d:19:03: f0:91:2d:23:93:28:36:72:fd:00:4c:5a:84:db:52:44:ee:6a: 8c:75:6f:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE2oY8FNLkHQ2PbcGdFHYzNwDFXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ4RUZDMEQ2NEFBOTg0MUJFMUUzODQzMjFCQjJDMTIx NTNGRjFEOTAeFw0yNjA5MjMxNzAyMTBaFw0yNjA5MjQxNzE2MTBaMDMxMTAvBgNV BAMTKEU3RjkwQTE5M0U4OUUwQ0M5M0U1QjU0Q0VBMzk4OThFMERENTQ0QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSovZJMWJh6b/pPvsU3fkwsjdY oc63EeE37lWEURwnM5mL/ScfivoKTKfXl7w8clKplIuYsZPdi5sXLbXlHaGJUK76 4OV/sNlLMBtgPE80ZjoJ7fVcT8hFp0GArdja+og5n9V/0DP/AxUmUa1bJglnSopr t0Dkc18OH+fvqIdrROCDpXL7voI6+iDB8UUYjo6fDzThQlYomGgmV8VlPgEnvg8/ lX9Vg7O+vy9nZHRDI18/3z/NCAtRtzE3IwpV5A3rRJnDLo6dWGxV6xRD0jMRGvgK ViFl3IuuunlHX/0SkeNVgI7M48KpAyYCXy7sKxkrQsHnoFWqPDPSqQjkx/XnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5/kKGT6J4MyT5bVM6jmJjg3VRL0wHwYDVR0j BBgwFoAUnY78DWSqmEG+HjhDIbssEhU/8dkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDFkNTFkNDEtYjZjYy00MjBhLWI1YTgtNjdjOGJkNmIwMmFmLzAvOUQ4RUZDMEQ2 NEFBOTg0MUJFMUUzODQzMjFCQjJDMTIxNTNGRjFEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDhFRkMwRDY0QUE5ODQxQkUxRTM4NDMyMUJCMkMxMjE1M0ZG MUQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDFkNTFkNDEtYjZjYy00MjBhLWI1 YTgtNjdjOGJkNmIwMmFmLzAvOUQ4RUZDMEQ2NEFBOTg0MUJFMUUzODQzMjFCQjJD MTIxNTNGRjFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTj8APhiFjoA8c2xdYAMb1FO4raPjSYnVWI nLbdY4aRWIJa37lw6XuFEV9GuL5DkqWzlAv64xd6coIJBP0p5l32saDrvC7MWJDI A0aRuQOog1M23n05d0CXFPr5XBQhqqrLOYH1URea1taEkTFm9UsWLEmtCo//Zt7P 7AMTuEWZYA+YIfbJEOpcw+RdtS0wfL4HJUanu3IUM6/sUB1uj80/7YRdGuLviyrz L6lyf1PTIwPFziSLoDbYCNI2QCpgOjoxWbd1CPbsV5hHJFNZJ9CQbx25imqpthuL V8SOPogub7FpCOI/DB0ZA/CRLSOTKDZy/QBMWoTbUkTuaox1b3g= -----END CERTIFICATE-----Generated at Thu Sep 24 07:29:14 2026 by rpki-client