$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft File: 9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft (raw, json) Hash identifier: q4RpDpEj42bHI/+KsDXrt/EoQZAMQeYOiET5ECu4gcI= Subject key identifier: 1D:39:C2:BD:89:68:C7:A6:77:26:03:0C:30:5B:C3:7E:83:A0:3F:33 Authority key identifier: 9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF Certificate issuer: /CN=9B995ECA9CF77E66AB04370A6C3562ADCD7413EF Certificate serial: 24518821AA54F763EB941ADEC81629CAB86F5AD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft Manifest number: BC Signing time: Sun 20 Sep 2026 14:19:39 +0000 Manifest this update: Sun 20 Sep 2026 14:14:39 +0000 Manifest next update: Mon 21 Sep 2026 17:49:39 +0000 Files and hashes: 1: 3130332e3133302e38322e302f32332d3233203d3e20313530393636.roa (hash: oYvVYAWqY5/XajF618G7pKQtRtEqOMlHPhGTTZeide8=) 2: 9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl (hash: xfYQVolh7AcYUmkI+eqBZ+FL1jUrOyF+08RJndOd/WI=) 3: 3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa (hash: 0GXiVqHET4FIeA3plxHWjQU7xk7vNPKZIk6ziqpvvGY=) 4: 3130332e3133302e38332e302f32342d3234203d3e20313530393636.roa (hash: +yASWV2qPXNVH0dMs+ql82F9yTnpzpBrn8UO30QUNqI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:51:88:21:aa:54:f7:63:eb:94:1a:de:c8:16:29:ca:b8:6f:5a:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B995ECA9CF77E66AB04370A6C3562ADCD7413EF Validity Not Before: Sep 20 14:14:39 2026 GMT Not After : Sep 21 17:49:39 2026 GMT Subject: CN=1D39C2BD8968C7A67726030C305BC37E83A03F33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c9:4f:55:65:42:d2:0b:b9:5c:77:34:8b:c8: f2:28:43:06:1b:49:bd:2b:7a:89:a5:2c:6c:04:62: 28:be:1f:bb:4a:98:63:7e:46:86:6d:4c:96:3a:62: f5:f9:4e:ab:97:21:95:31:fc:44:9c:f6:cd:8d:e7: 52:15:7a:40:8f:37:4c:04:cf:82:db:f6:69:5f:4d: e3:5b:b9:a4:f5:ee:12:c5:9a:76:95:26:0d:ab:a9: 1c:b1:5a:2c:08:1f:00:18:9c:a7:bb:02:32:db:a8: 98:5f:eb:b7:0f:b6:8e:25:f4:c0:0b:4e:fe:a6:a9: 6a:67:55:d6:fe:da:8b:c7:85:60:6d:b5:9c:12:a2: 8a:e8:07:99:35:7c:7b:29:91:af:5d:5d:df:d2:a4: 26:15:f8:f5:20:dd:37:d2:3f:60:d3:db:53:67:c4: cf:1c:97:a3:11:cf:82:89:da:38:02:bc:ef:de:1d: 3d:eb:3a:17:1e:51:91:72:19:0b:31:7d:6a:43:2f: 2f:b8:7b:60:05:cb:5b:1d:a2:96:59:62:a8:ef:de: 81:76:8f:01:b2:68:cd:c1:fe:3a:19:ac:01:c8:c2: 42:08:ad:eb:45:56:61:dd:68:a5:d6:23:44:c4:3c: bc:4b:f6:eb:6e:91:f3:7b:5f:dd:cd:24:0e:e9:c0: d1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:39:C2:BD:89:68:C7:A6:77:26:03:0C:30:5B:C3:7E:83:A0:3F:33 X509v3 Authority Key Identifier: keyid:9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b0:45:8e:98:3f:ed:dc:57:42:b8:61:69:95:c3:ae:f6:1e: eb:a1:e0:9a:ce:af:c1:c1:0b:92:eb:7e:12:55:09:7f:be:a3: 94:f4:c5:7b:81:b9:6b:3d:65:2c:9e:d4:58:5c:d6:ed:d7:01: 65:50:f5:b3:cb:87:d8:7b:46:e4:bb:fb:50:47:00:08:e6:fa: 6d:31:87:0e:84:ac:25:cc:96:e5:a6:16:f0:27:43:e8:2e:08: 9a:ab:c5:4e:42:fd:c1:dd:88:55:a7:3d:3b:c4:37:af:79:e8: 97:59:a0:79:45:2b:90:5c:6c:4f:8e:74:25:76:fc:53:28:c0: a4:75:bc:88:f3:00:ea:2c:cc:4c:51:30:bc:8d:73:df:4c:bb: a7:d4:a8:44:b5:ee:07:6d:e9:2d:0a:9d:31:37:48:1e:8b:50: 87:c7:32:16:f8:d8:42:20:26:26:27:f8:7a:ab:d6:40:fb:36: a4:b0:33:67:e4:9c:6e:ad:00:34:29:b8:d7:df:76:df:68:07: d1:6a:6c:27:cc:f3:00:d4:00:2b:32:f5:5d:a9:e3:68:3e:e6: 03:ab:36:a7:6d:47:66:64:b6:f4:f0:6f:d8:d4:b3:14:11:1f: 8e:2c:c3:27:ab:d3:e5:3e:26:b0:69:48:a8:e4:17:4e:43:92: ce:23:1a:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJFGIIapU92PrlBreyBYpyrhvWtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI5OTVFQ0E5Q0Y3N0U2NkFCMDQzNzBBNkMzNTYyQURD RDc0MTNFRjAeFw0yNjA5MjAxNDE0MzlaFw0yNjA5MjExNzQ5MzlaMDMxMTAvBgNV BAMTKDFEMzlDMkJEODk2OEM3QTY3NzI2MDMwQzMwNUJDMzdFODNBMDNGMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSyU9VZULSC7lcdzSLyPIoQwYb Sb0reomlLGwEYii+H7tKmGN+RoZtTJY6YvX5TquXIZUx/ESc9s2N51IVekCPN0wE z4Lb9mlfTeNbuaT17hLFmnaVJg2rqRyxWiwIHwAYnKe7AjLbqJhf67cPto4l9MAL Tv6mqWpnVdb+2ovHhWBttZwSooroB5k1fHspka9dXd/SpCYV+PUg3TfSP2DT21Nn xM8cl6MRz4KJ2jgCvO/eHT3rOhceUZFyGQsxfWpDLy+4e2AFy1sdopZZYqjv3oF2 jwGyaM3B/joZrAHIwkIIretFVmHdaKXWI0TEPLxL9utukfN7X93NJA7pwNHDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHTnCvYlox6Z3JgMMMFvDfoOgPzMwHwYDVR0j BBgwFoAUm5leypz3fmarBDcKbDVirc10E+8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE4NzA2NGItNWYyNy00MjcwLTkwZTQtOTlmNDNhZTg0ZGI3LzAvOUI5OTVFQ0E5 Q0Y3N0U2NkFCMDQzNzBBNkMzNTYyQURDRDc0MTNFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85Qjk5NUVDQTlDRjc3RTY2QUIwNDM3MEE2QzM1NjJBRENENzQx M0VGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE4NzA2NGItNWYyNy00MjcwLTkw ZTQtOTlmNDNhZTg0ZGI3LzAvOUI5OTVFQ0E5Q0Y3N0U2NkFCMDQzNzBBNkMzNTYy QURDRDc0MTNFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2wRY6YP+3cV0K4YWmVw672Huuh4JrOr8HB C5LrfhJVCX++o5T0xXuBuWs9ZSye1Fhc1u3XAWVQ9bPLh9h7RuS7+1BHAAjm+m0x hw6ErCXMluWmFvAnQ+guCJqrxU5C/cHdiFWnPTvEN6956JdZoHlFK5BcbE+OdCV2 /FMowKR1vIjzAOoszExRMLyNc99Mu6fUqES17gdt6S0KnTE3SB6LUIfHMhb42EIg JiYn+Hqr1kD7NqSwM2fknG6tADQpuNffdt9oB9FqbCfM8wDUACsy9V2p42g+5gOr NqdtR2ZktvTwb9jUsxQRH44swyer0+U+JrBpSKjkF05Dks4jGg0= -----END CERTIFICATE-----Generated at Sun Sep 20 20:14:38 2026 by rpki-client