$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft File: 9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft (raw, json) Hash identifier: YEo3dZ+g1IjFYb6VZXlEskaKpUj7X88iEoj+tBpVkE8= Subject key identifier: D3:C2:5D:D8:C4:AF:85:C8:AA:BE:B3:4D:EC:64:D9:94:C9:BC:21:2A Authority key identifier: 9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00 Certificate issuer: /CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800 Certificate serial: 4AFF25F9B42B8A0C8F674180AC66446E6BBF5D01 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft Manifest number: D7 Signing time: Sat 10 Oct 2026 00:48:23 +0000 Manifest this update: Sat 10 Oct 2026 00:43:23 +0000 Manifest next update: Sun 11 Oct 2026 03:03:23 +0000 Files and hashes: 1: 9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl (hash: GykB+yD0O2+b4PQV5eQq3gYEiRPH+41cLk1qmXIexjg=) 2: 3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (hash: 2N+TEQ769mQU4C1i4Rld3w1DT7X5Tq5lgzhroXjz5Hg=) 3: 3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (hash: WkzU0ifpIbp5OQ/6TDxMH+vwFG2tqv2mqNzHskMqmF0=) 4: 3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (hash: J9RbUPOqUx6qGs/3TSnBbVnRso5umnmyOklAgJwt1Js=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 03:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ff:25:f9:b4:2b:8a:0c:8f:67:41:80:ac:66:44:6e:6b:bf:5d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800 Validity Not Before: Oct 10 00:43:23 2026 GMT Not After : Oct 11 03:03:23 2026 GMT Subject: CN=D3C25DD8C4AF85C8AABEB34DEC64D994C9BC212A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fc:11:e2:f9:9f:c6:53:d0:d5:f8:fa:67:e9: 92:5a:55:00:d2:5d:75:8e:2b:88:60:ca:d0:3b:21: 31:d7:39:51:c1:38:6c:07:82:5d:9b:bf:4d:ff:89: 64:76:e4:ff:9a:e3:9a:24:a1:a4:87:75:70:e1:fa: d6:5d:f8:70:06:79:81:8a:e7:39:de:68:31:ae:3d: 7b:79:8e:0b:23:f9:64:b3:12:34:a4:da:82:3c:3f: 9a:df:89:c5:cc:09:30:90:75:b7:f7:17:8a:24:f1: 2c:ba:02:e5:4e:fd:9b:0b:87:88:d9:73:da:53:c9: bc:02:59:68:8d:4b:ca:c1:ec:4c:e8:fe:e3:1c:8d: 1c:a2:e7:3e:7b:e5:56:38:80:2e:b2:e0:69:14:8c: 09:60:7d:9c:c5:95:65:4f:d8:ff:a1:32:d0:95:4c: f5:1b:4d:32:19:38:13:99:dc:bb:34:ae:ca:70:0f: 35:dc:5d:b2:cd:05:6c:48:c6:63:66:07:7d:80:a9: 93:22:70:1b:02:3a:8b:19:a6:88:18:5b:6a:88:22: 8e:26:b3:83:f4:01:01:07:f5:7d:11:f5:60:48:5b: 8e:ad:38:db:70:07:d2:cd:8d:fa:aa:73:9a:85:da: e7:63:ef:c2:fb:12:2c:ca:2c:98:4d:b7:e4:1d:b7: ac:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C2:5D:D8:C4:AF:85:C8:AA:BE:B3:4D:EC:64:D9:94:C9:BC:21:2A X509v3 Authority Key Identifier: keyid:9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:af:e0:56:df:db:87:06:54:52:7d:95:30:82:da:d2:5d:99: c6:34:a1:ba:cc:90:fe:d8:3f:ba:a1:c6:40:5b:7d:e6:7c:4a: 89:02:64:73:57:40:16:1c:8f:32:22:32:b4:48:31:d0:4f:e0: 88:66:7d:8d:97:54:97:76:fd:8f:79:63:98:ce:2a:62:7b:71: a2:a7:0d:d7:c0:4e:66:2d:00:36:2e:00:0b:b0:9c:04:fb:c4: 53:86:eb:39:cc:ae:a0:17:af:f9:0e:db:ff:0e:12:7c:1a:e7: f0:29:68:f0:25:96:b7:d0:47:5d:9d:8b:ad:f4:d4:55:4a:44: bf:95:bf:bc:9d:31:04:d3:b1:53:b6:5b:43:ad:8d:73:31:69: a2:c2:82:b5:80:36:3b:8c:4a:0f:ab:2c:7e:59:66:3a:ec:4d: d1:05:2c:5d:e6:3a:9c:55:ff:e5:2f:07:da:48:a4:71:6c:20: aa:b4:84:77:a1:4e:bc:4b:18:48:38:c2:de:14:dd:0d:6b:ee: 71:5a:c9:cb:c2:ff:77:9e:e4:f4:9d:f4:89:45:71:61:a0:3b: 85:2b:20:b0:fc:61:c2:1d:5a:3e:d9:6b:97:a7:b6:d1:a1:78: e3:d1:6f:6b:c7:af:f1:f4:22:2f:b1:bc:eb:1e:73:60:d1:9b: 8d:a4:f4:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSv8l+bQrigyPZ0GArGZEbmu/XQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJENzU5OTkyM0I4RkI4QzgzQUIzQjMwMjg3RkJDQzZB OTg3NDgwMDAeFw0yNjEwMTAwMDQzMjNaFw0yNjEwMTEwMzAzMjNaMDMxMTAvBgNV BAMTKEQzQzI1REQ4QzRBRjg1QzhBQUJFQjM0REVDNjREOTk0QzlCQzIxMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt/BHi+Z/GU9DV+Ppn6ZJaVQDS XXWOK4hgytA7ITHXOVHBOGwHgl2bv03/iWR25P+a45okoaSHdXDh+tZd+HAGeYGK 5zneaDGuPXt5jgsj+WSzEjSk2oI8P5rficXMCTCQdbf3F4ok8Sy6AuVO/ZsLh4jZ c9pTybwCWWiNS8rB7Ezo/uMcjRyi5z575VY4gC6y4GkUjAlgfZzFlWVP2P+hMtCV TPUbTTIZOBOZ3Ls0rspwDzXcXbLNBWxIxmNmB32AqZMicBsCOosZpogYW2qIIo4m s4P0AQEH9X0R9WBIW46tONtwB9LNjfqqc5qF2udj78L7EizKLJhNt+Qdt6wjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU08Jd2MSvhciqvrNN7GTZlMm8ISowHwYDVR0j BBgwFoAUm9dZmSO4+4yDqzswKH+8xqmHSAAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGIzODhmNmUtOTk3NC00NDU3LWFmNGItNWM5YzgyZjUwZTk3LzAvOUJENzU5OTky M0I4RkI4QzgzQUIzQjMwMjg3RkJDQzZBOTg3NDgwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkQ3NTk5OTIzQjhGQjhDODNBQjNCMzAyODdGQkNDNkE5ODc0 ODAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGIzODhmNmUtOTk3NC00NDU3LWFm NGItNWM5YzgyZjUwZTk3LzAvOUJENzU5OTkyM0I4RkI4QzgzQUIzQjMwMjg3RkJD QzZBOTg3NDgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL2v4Fbf24cGVFJ9lTCC2tJdmcY0obrMkP7Y P7qhxkBbfeZ8SokCZHNXQBYcjzIiMrRIMdBP4IhmfY2XVJd2/Y95Y5jOKmJ7caKn DdfATmYtADYuAAuwnAT7xFOG6znMrqAXr/kO2/8OEnwa5/ApaPAllrfQR12di630 1FVKRL+Vv7ydMQTTsVO2W0OtjXMxaaLCgrWANjuMSg+rLH5ZZjrsTdEFLF3mOpxV /+UvB9pIpHFsIKq0hHehTrxLGEg4wt4U3Q1r7nFaycvC/3ee5PSd9IlFcWGgO4Ur ILD8YcIdWj7Za5enttGheOPRb2vHr/H0Ii+xvOsec2DRm42k9Ik= -----END CERTIFICATE-----Generated at Sat Oct 10 16:54:51 2026 by rpki-client