$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft File: 9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft (raw, json) Hash identifier: qlLs6mfqUZvBsF+YtSsofe0/Uj+w/qmAyVGFqzwJxqc= Subject key identifier: FF:AC:FE:47:D5:69:0D:82:E9:F8:A2:1D:4A:A8:9D:0D:3B:44:0B:FD Authority key identifier: 9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00 Certificate issuer: /CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800 Certificate serial: 2992C47451DCF7EEEA127F7DF292D6E7F765F2D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft Manifest number: D9 Signing time: Sun 11 Oct 2026 12:17:33 +0000 Manifest this update: Sun 11 Oct 2026 12:12:33 +0000 Manifest next update: Mon 12 Oct 2026 16:07:33 +0000 Files and hashes: 1: 3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (hash: WkzU0ifpIbp5OQ/6TDxMH+vwFG2tqv2mqNzHskMqmF0=) 2: 3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (hash: 2N+TEQ769mQU4C1i4Rld3w1DT7X5Tq5lgzhroXjz5Hg=) 3: 9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl (hash: 09UcBwexUpD/SW564cSFPI9WFlrWdsC7cE4KXUXhJ70=) 4: 3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (hash: J9RbUPOqUx6qGs/3TSnBbVnRso5umnmyOklAgJwt1Js=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 14:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:92:c4:74:51:dc:f7:ee:ea:12:7f:7d:f2:92:d6:e7:f7:65:f2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800 Validity Not Before: Oct 11 12:12:33 2026 GMT Not After : Oct 12 16:07:33 2026 GMT Subject: CN=FFACFE47D5690D82E9F8A21D4AA89D0D3B440BFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:10:77:ab:c5:02:60:5f:8d:a4:84:9b:50: 4e:55:f6:88:f8:7a:32:c3:b7:2f:83:b5:bd:b6:3b: 9f:44:69:55:15:a4:fe:c9:bb:19:ed:32:c2:a1:3f: 38:8d:7c:d8:84:ac:98:21:8a:b9:be:4c:23:77:0f: 9f:e1:dd:f9:62:f0:b4:bd:ae:50:06:a6:39:5d:1e: 9f:97:46:b7:ec:0e:a8:18:30:4c:e5:e9:5b:92:c7: 81:4b:47:4b:58:51:51:83:26:ce:6b:7e:b0:c7:67: 28:3e:cd:b7:fd:f7:7c:35:20:02:f3:4c:b2:6a:5f: 8d:b1:b1:fc:3b:ef:1d:9f:82:2a:44:84:12:68:e6: cf:55:49:b7:14:35:4b:87:4a:fe:f0:74:ff:4e:0f: e6:ab:1a:f0:52:23:a3:5b:6b:21:37:48:9a:7d:6e: ac:30:f4:df:30:6e:d7:9a:45:92:bf:61:78:f1:78: 3c:26:9f:80:36:6d:5b:ab:4a:96:96:c7:52:22:5c: 5a:70:b6:54:a7:a4:50:98:5b:ed:51:71:8b:ad:3d: 97:22:c4:3d:ad:17:c7:2e:c8:d2:08:82:42:d8:8a: f4:fe:46:c6:78:37:c7:56:c7:48:88:2a:c2:e9:79: 39:cf:74:e1:3f:b7:6f:3a:3c:7f:17:4c:39:79:4e: 58:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AC:FE:47:D5:69:0D:82:E9:F8:A2:1D:4A:A8:9D:0D:3B:44:0B:FD X509v3 Authority Key Identifier: keyid:9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:41:ee:c6:67:d1:72:52:5b:c4:89:f9:da:5e:c0:e0:98:b5: 96:1c:72:ae:05:84:62:5e:40:25:5a:e7:ce:62:30:b1:09:54: 50:aa:f1:8b:26:dd:96:97:ac:2a:0e:61:b0:ee:dd:23:ea:23: d0:2b:46:a2:09:29:65:bd:8e:79:b9:c7:f6:f7:12:cd:a6:93: 84:bd:3d:cc:0c:77:28:4c:f3:00:89:0d:b8:8f:eb:55:a0:b3: c9:19:55:78:6a:66:e8:cd:68:96:c7:bc:7d:4e:2c:cc:02:11: 17:17:a8:ca:58:a5:60:37:6a:0f:25:4e:96:9e:5f:8a:ea:67: 61:5c:d9:7c:c3:60:70:ac:55:52:b3:83:82:84:93:73:3c:84: 14:fd:bd:07:74:e3:da:32:f5:d6:ec:72:c9:66:cb:05:21:67: 0e:ea:57:b5:1d:23:22:e6:8c:58:46:a7:16:1b:b1:f2:29:2a: 1e:13:33:62:75:59:d0:b9:2d:95:52:25:18:89:e1:c6:24:1e: 7e:c0:5f:bf:6f:41:88:7b:c3:42:59:64:81:70:39:39:c3:5f: d2:d6:29:e8:19:4d:8c:55:ee:79:43:e2:10:75:c8:38:64:e3: 28:36:dd:a0:55:3e:70:e3:6b:c9:da:09:7e:3c:7c:5f:c9:91: 2d:a0:43:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKZLEdFHc9+7qEn998pLW5/dl8tgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJENzU5OTkyM0I4RkI4QzgzQUIzQjMwMjg3RkJDQzZB OTg3NDgwMDAeFw0yNjEwMTExMjEyMzNaFw0yNjEwMTIxNjA3MzNaMDMxMTAvBgNV BAMTKEZGQUNGRTQ3RDU2OTBEODJFOUY4QTIxRDRBQTg5RDBEM0I0NDBCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCznxB3q8UCYF+NpISbUE5V9oj4 ejLDty+Dtb22O59EaVUVpP7JuxntMsKhPziNfNiErJghirm+TCN3D5/h3fli8LS9 rlAGpjldHp+XRrfsDqgYMEzl6VuSx4FLR0tYUVGDJs5rfrDHZyg+zbf993w1IALz TLJqX42xsfw77x2fgipEhBJo5s9VSbcUNUuHSv7wdP9OD+arGvBSI6NbayE3SJp9 bqww9N8wbteaRZK/YXjxeDwmn4A2bVurSpaWx1IiXFpwtlSnpFCYW+1RcYutPZci xD2tF8cuyNIIgkLYivT+RsZ4N8dWx0iIKsLpeTnPdOE/t286PH8XTDl5TlhlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/6z+R9VpDYLp+KIdSqidDTtEC/0wHwYDVR0j BBgwFoAUm9dZmSO4+4yDqzswKH+8xqmHSAAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGIzODhmNmUtOTk3NC00NDU3LWFmNGItNWM5YzgyZjUwZTk3LzAvOUJENzU5OTky M0I4RkI4QzgzQUIzQjMwMjg3RkJDQzZBOTg3NDgwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkQ3NTk5OTIzQjhGQjhDODNBQjNCMzAyODdGQkNDNkE5ODc0 ODAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGIzODhmNmUtOTk3NC00NDU3LWFm NGItNWM5YzgyZjUwZTk3LzAvOUJENzU5OTkyM0I4RkI4QzgzQUIzQjMwMjg3RkJD QzZBOTg3NDgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALtB7sZn0XJSW8SJ+dpewOCYtZYccq4FhGJe QCVa585iMLEJVFCq8Ysm3ZaXrCoOYbDu3SPqI9ArRqIJKWW9jnm5x/b3Es2mk4S9 PcwMdyhM8wCJDbiP61Wgs8kZVXhqZujNaJbHvH1OLMwCERcXqMpYpWA3ag8lTpae X4rqZ2Fc2XzDYHCsVVKzg4KEk3M8hBT9vQd049oy9dbscslmywUhZw7qV7UdIyLm jFhGpxYbsfIpKh4TM2J1WdC5LZVSJRiJ4cYkHn7AX79vQYh7w0JZZIFwOTnDX9LW KegZTYxV7nlD4hB1yDhk4yg23aBVPnDja8naCX48fF/JkS2gQ6I= -----END CERTIFICATE-----Generated at Sun Oct 11 15:00:21 2026 by rpki-client