$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft File: 9F018573ABC40A1244EF018EE95D73D8E54A5247.mft (raw, json) Hash identifier: NwHariGnhtO7NtR+n/jiEWoygn6b7D0wbvIDpOjPS2k= Subject key identifier: F0:38:0F:91:3F:F9:8C:A0:72:A9:E9:36:DD:12:95:CC:C3:E8:36:9F Authority key identifier: 9F:01:85:73:AB:C4:0A:12:44:EF:01:8E:E9:5D:73:D8:E5:4A:52:47 Certificate issuer: /CN=9F018573ABC40A1244EF018EE95D73D8E54A5247 Certificate serial: 7BF73160647C04483E7F4B727C845D7FAE4530C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 05:48:52 +0000 Manifest this update: Mon 21 Sep 2026 05:43:52 +0000 Manifest next update: Tue 22 Sep 2026 06:10:52 +0000 Files and hashes: 1: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: 5rI4L+b8xzlRIUsWxeEF2NdCqFStv1SMLdpn9443Ve4=) 2: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: On7lPgtr4muQ2OAv+z91B4cwc8QzzKQys3kXiufzPRc=) 3: 9F018573ABC40A1244EF018EE95D73D8E54A5247.crl (hash: jdng9aB8pB9A1ZkIFVXmLjl1rU0myy84h239JRd/RCM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.crl rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f7:31:60:64:7c:04:48:3e:7f:4b:72:7c:84:5d:7f:ae:45:30:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F018573ABC40A1244EF018EE95D73D8E54A5247 Validity Not Before: Sep 21 05:43:52 2026 GMT Not After : Sep 22 06:10:52 2026 GMT Subject: CN=F0380F913FF98CA072A9E936DD1295CCC3E8369F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3b:1a:9f:0f:23:98:23:aa:55:96:0c:50:ab: 8b:79:8f:e4:ed:c4:ce:d1:ce:a8:6e:8d:4c:0a:f2: ad:d6:93:e4:0e:fc:59:04:3c:7c:b6:79:dc:d1:f5: 68:70:6e:0f:ba:aa:8b:22:2e:69:54:2f:c7:24:1d: 89:44:13:f5:13:59:29:1b:1f:8a:bf:c3:0f:00:dd: 4e:b1:f9:6b:69:2f:09:4b:8d:ab:22:19:eb:93:36: f2:1f:d8:f6:71:41:fd:cf:94:20:e8:45:5b:0d:ec: 64:e2:7d:6a:90:32:7b:8d:93:d2:db:c1:05:92:ce: af:bf:27:02:ae:7d:9a:7d:a2:05:b1:93:45:39:fc: d9:fc:e4:6f:bd:bb:e9:8f:7a:0d:a1:b8:83:84:c9: ca:ed:b2:3b:f2:f8:5e:7e:46:1a:cf:46:cf:9d:84: 82:dc:ae:5d:46:5d:9a:4a:60:13:97:9e:80:33:3f: 75:9b:19:ce:3a:92:c7:9f:cc:73:31:fe:4a:a4:f2: 25:15:bf:f6:6b:62:b2:6d:e3:ec:11:23:42:f7:5b: 06:d9:1b:20:4b:5f:ff:16:8e:94:97:cf:54:b6:69: a1:f0:bc:f9:4f:d8:50:ec:2b:97:f0:f7:18:db:c0: 6e:35:03:31:12:17:4f:8a:0a:49:e3:70:78:71:5b: e7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:38:0F:91:3F:F9:8C:A0:72:A9:E9:36:DD:12:95:CC:C3:E8:36:9F X509v3 Authority Key Identifier: keyid:9F:01:85:73:AB:C4:0A:12:44:EF:01:8E:E9:5D:73:D8:E5:4A:52:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:9c:5d:1c:37:8f:07:68:98:78:19:7d:82:b5:db:ed:64:28: 17:86:16:ee:4c:e2:27:42:6f:3e:38:c9:af:0f:15:47:5b:33: 44:4f:e1:74:d2:05:02:55:e0:51:2f:c6:2b:de:aa:64:48:d6: 2f:75:aa:32:c7:91:2b:c9:8b:c5:23:ce:cf:83:fc:84:0b:34: c5:3c:10:f8:26:2b:d4:cf:5b:8d:8f:6b:36:f5:60:4f:4c:ff: 7e:78:7a:d8:0e:d1:6b:a5:ef:28:ec:09:be:bf:25:6d:77:7c: 55:3c:bf:f0:c5:b1:88:a6:cf:bd:43:88:45:6a:3a:bd:a2:8d: 5b:d7:7e:56:1a:74:93:9d:9d:96:4f:ac:01:30:b0:95:20:4e: 51:4e:88:ed:6c:df:47:f6:92:9e:31:d0:14:27:f8:6f:fd:82: 3e:ce:e2:e5:a8:32:6c:06:ba:af:ac:f1:42:4c:cf:65:4d:56: 3f:7e:43:1e:bb:0a:bf:1d:2c:ef:fb:88:a4:43:d9:b6:0c:52: b8:a1:d9:a6:5d:45:b2:4d:d9:24:5c:f4:18:16:85:61:68:3b: d4:9e:4e:5c:d7:5b:a2:02:f7:69:07:38:cb:4e:9b:4c:41:29: 7c:e1:11:c2:db:40:d7:15:cc:69:0a:31:31:00:2b:ec:6f:e3: 9d:35:b0:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe/cxYGR8BEg+f0tyfIRdf65FMMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwMTg1NzNBQkM0MEExMjQ0RUYwMThFRTk1RDczRDhF NTRBNTI0NzAeFw0yNjA5MjEwNTQzNTJaFw0yNjA5MjIwNjEwNTJaMDMxMTAvBgNV BAMTKEYwMzgwRjkxM0ZGOThDQTA3MkE5RTkzNkREMTI5NUNDQzNFODM2OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTOxqfDyOYI6pVlgxQq4t5j+Tt xM7RzqhujUwK8q3Wk+QO/FkEPHy2edzR9Whwbg+6qosiLmlUL8ckHYlEE/UTWSkb H4q/ww8A3U6x+WtpLwlLjasiGeuTNvIf2PZxQf3PlCDoRVsN7GTifWqQMnuNk9Lb wQWSzq+/JwKufZp9ogWxk0U5/Nn85G+9u+mPeg2huIOEycrtsjvy+F5+RhrPRs+d hILcrl1GXZpKYBOXnoAzP3WbGc46ksefzHMx/kqk8iUVv/ZrYrJt4+wRI0L3WwbZ GyBLX/8WjpSXz1S2aaHwvPlP2FDsK5fw9xjbwG41AzESF0+KCknjcHhxW+f/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8DgPkT/5jKByqek23RKVzMPoNp8wHwYDVR0j BBgwFoAUnwGFc6vEChJE7wGO6V1z2OVKUkcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTNmNzVlOTgtMTRlZi00NDU3LTk0ZjMtZTViNzNhOTIyZmM1LzAvOUYwMTg1NzNB QkM0MEExMjQ0RUYwMThFRTk1RDczRDhFNTRBNTI0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjAxODU3M0FCQzQwQTEyNDRFRjAxOEVFOTVENzNEOEU1NEE1 MjQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0 ZjMtZTViNzNhOTIyZmM1LzAvOUYwMTg1NzNBQkM0MEExMjQ0RUYwMThFRTk1RDcz RDhFNTRBNTI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGcXRw3jwdomHgZfYK12+1kKBeGFu5M4idC bz44ya8PFUdbM0RP4XTSBQJV4FEvxiveqmRI1i91qjLHkSvJi8Ujzs+D/IQLNMU8 EPgmK9TPW42Pazb1YE9M/354etgO0Wul7yjsCb6/JW13fFU8v/DFsYimz71DiEVq Or2ijVvXflYadJOdnZZPrAEwsJUgTlFOiO1s30f2kp4x0BQn+G/9gj7O4uWoMmwG uq+s8UJMz2VNVj9+Qx67Cr8dLO/7iKRD2bYMUrih2aZdRbJN2SRc9BgWhWFoO9Se TlzXW6IC92kHOMtOm0xBKXzhEcLbQNcVzGkKMTEAK+xv4501sNQ= -----END CERTIFICATE-----Generated at Mon Sep 21 20:56:17 2026 by rpki-client