$ rpki-client -vvvf rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft File: 9C7034B698C7FF4F82CC082FF9330FF137728D54.mft (raw, json) Hash identifier: wl31D5LxCY1i5RrBK4v1/JK4STnjTvXaqnoX7wi64rk= Subject key identifier: 3A:4F:E7:EB:46:EC:3C:E9:65:45:44:44:F3:6A:64:89:EC:AF:95:7E Authority key identifier: 9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54 Certificate issuer: /CN=9C7034B698C7FF4F82CC082FF9330FF137728D54 Certificate serial: 1625B26B9666BB6BD47948EAE5BE24C862D1BB64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 06:55:04 +0000 Manifest this update: Tue 22 Sep 2026 06:50:04 +0000 Manifest next update: Wed 23 Sep 2026 07:13:04 +0000 Files and hashes: 1: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: TOy78GGmZmDA6OtrgiUd51MTS8SFXQdRl3WQeCtShh4=) 2: 9C7034B698C7FF4F82CC082FF9330FF137728D54.crl (hash: s7SnvbR39v6N+Icmq4orLvKc29hHNABHgCU94h6vmp8=) 3: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: xnLexvfVVhCVbKeAWwrGqbTG74y7g6OtFXMau20Rt9I=) 4: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: QME/pBUvHikqT9rtnZPTg9o0f1I9fV6K/fmu0Ood5pA=) 5: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: uv4Ad3tws8/RhWdgc4kD3cmhisuMAvoQ5Utlm3Sezl0=) 6: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: A0PveJD1fWZi8ZLG9jSQDXLx0OXP4OJbe2qchugQ+9k=) 7: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: bxedlCP85y9hLJaoDhEB2yAE5TUTBHMZLlN+XLPSDLU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.crl rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 07:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:25:b2:6b:96:66:bb:6b:d4:79:48:ea:e5:be:24:c8:62:d1:bb:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C7034B698C7FF4F82CC082FF9330FF137728D54 Validity Not Before: Sep 22 06:50:04 2026 GMT Not After : Sep 23 07:13:04 2026 GMT Subject: CN=3A4FE7EB46EC3CE965454444F36A6489ECAF957E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:56:3a:17:c0:bc:ff:5e:f9:37:f3:fc:99:45: 94:76:f7:8d:b8:5d:91:eb:6a:64:b9:0d:6a:df:52: 26:10:65:08:cf:98:0d:c1:06:d8:b5:18:62:86:76: 3a:4d:0b:ec:fe:fe:d2:9d:1a:e2:5f:fc:b2:33:39: 60:e4:4d:8a:ff:df:10:a8:bc:99:bc:38:f7:3a:3a: 18:54:25:fe:4d:d5:ee:df:ad:16:98:37:be:5e:d7: 45:88:06:5b:3a:5d:5b:ab:4d:c2:3b:7b:ec:90:f7: 75:33:95:51:1d:7d:c0:7f:cc:79:2b:33:dd:1f:19: ec:a3:df:cd:82:b2:71:6c:86:5b:ef:ba:88:ed:91: 59:e8:a6:78:61:02:aa:df:e3:3a:2e:2f:fd:5a:fb: 7b:62:58:55:65:c3:f3:e2:72:07:eb:cf:7b:9e:90: 31:72:37:62:bb:b7:b9:7a:a8:44:81:92:c0:c3:47: b0:86:41:70:bd:86:2c:66:2e:67:9c:d3:81:3c:09: 94:fe:aa:a7:d3:a1:c2:f5:e4:12:f7:87:9b:43:1f: bd:07:58:61:af:2a:f2:cd:a7:e9:d2:82:d1:ea:ae: 16:66:97:83:99:b0:0d:9b:5c:4c:82:25:71:a1:d9: 69:0c:af:26:93:63:36:d7:72:33:55:78:4b:e5:cd: 71:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4F:E7:EB:46:EC:3C:E9:65:45:44:44:F3:6A:64:89:EC:AF:95:7E X509v3 Authority Key Identifier: keyid:9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c1:58:a0:63:de:29:c2:1d:32:06:5f:07:29:0f:b9:99:3b: 08:c9:e1:41:8f:3d:0d:73:04:57:d7:75:d4:f3:30:fb:5d:78: 47:6a:15:9d:06:f1:79:7d:f7:71:6c:b6:e6:58:3b:1a:8a:2c: cb:e0:ac:3c:45:ee:32:df:bf:ba:2e:9d:60:6f:ac:47:07:9e: 35:85:f1:65:87:2f:35:e9:7d:34:aa:9b:c0:3f:f6:15:f1:db: 0b:de:f4:16:0e:78:ec:70:bc:73:95:ab:4d:9f:b6:87:6b:4b: 14:19:bf:10:cd:a1:0c:44:62:73:2d:f9:6c:c3:48:34:e4:42: 27:71:49:90:72:f1:57:40:96:5a:dc:26:2b:5e:a1:f6:c1:b5: 31:3b:45:76:ba:99:cf:3c:0b:a7:2b:f9:9a:fe:13:38:c7:e0: 85:9d:0e:e8:84:73:a0:44:53:93:6b:af:45:74:85:46:81:64: 3e:da:0b:3c:ae:ee:e7:7c:bb:0d:8a:88:71:f3:e7:93:21:56: 2d:78:7e:c4:fa:ba:d8:b9:c9:16:80:09:47:9a:2b:c6:1e:89: f2:e7:c8:08:14:43:c3:c2:92:20:79:fb:f0:33:13:36:d2:ce: be:82:b2:8d:2d:b8:57:84:0a:1b:fd:d5:0b:f6:10:ee:d4:67: 1a:d6:c8:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFiWya5Zmu2vUeUjq5b4kyGLRu2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM3MDM0QjY5OEM3RkY0RjgyQ0MwODJGRjkzMzBGRjEz NzcyOEQ1NDAeFw0yNjA5MjIwNjUwMDRaFw0yNjA5MjMwNzEzMDRaMDMxMTAvBgNV BAMTKDNBNEZFN0VCNDZFQzNDRTk2NTQ1NDQ0NEYzNkE2NDg5RUNBRjk1N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrVjoXwLz/Xvk38/yZRZR29424 XZHramS5DWrfUiYQZQjPmA3BBti1GGKGdjpNC+z+/tKdGuJf/LIzOWDkTYr/3xCo vJm8OPc6OhhUJf5N1e7frRaYN75e10WIBls6XVurTcI7e+yQ93UzlVEdfcB/zHkr M90fGeyj382CsnFshlvvuojtkVnopnhhAqrf4zouL/1a+3tiWFVlw/Picgfrz3ue kDFyN2K7t7l6qESBksDDR7CGQXC9hixmLmec04E8CZT+qqfTocL15BL3h5tDH70H WGGvKvLNp+nSgtHqrhZml4OZsA2bXEyCJXGh2WkMryaTYzbXcjNVeEvlzXH1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOk/n60bsPOllRURE82pkieyvlX4wHwYDVR0j BBgwFoAUnHA0tpjH/0+CzAgv+TMP8TdyjVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDllY2E1MGItNTcyMi00OTE4LTgzMTQtODU5ZDNjMWY1NWEyLzAvOUM3MDM0QjY5 OEM3RkY0RjgyQ0MwODJGRjkzMzBGRjEzNzcyOEQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85QzcwMzRCNjk4QzdGRjRGODJDQzA4MkZGOTMzMEZGMTM3NzI4 RDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDllY2E1MGItNTcyMi00OTE4LTgz MTQtODU5ZDNjMWY1NWEyLzAvOUM3MDM0QjY5OEM3RkY0RjgyQ0MwODJGRjkzMzBG RjEzNzcyOEQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDBWKBj3inCHTIGXwcpD7mZOwjJ4UGPPQ1z BFfXddTzMPtdeEdqFZ0G8Xl993FstuZYOxqKLMvgrDxF7jLfv7ounWBvrEcHnjWF 8WWHLzXpfTSqm8A/9hXx2wve9BYOeOxwvHOVq02ftodrSxQZvxDNoQxEYnMt+WzD SDTkQidxSZBy8VdAllrcJiteofbBtTE7RXa6mc88C6cr+Zr+EzjH4IWdDuiEc6BE U5Nrr0V0hUaBZD7aCzyu7ud8uw2KiHHz55MhVi14fsT6uti5yRaACUeaK8YeifLn yAgUQ8PCkiB5+/AzEzbSzr6Cso0tuFeEChv91Qv2EO7UZxrWyLo= -----END CERTIFICATE-----Generated at Tue Sep 22 19:41:52 2026 by rpki-client