$ rpki-client -vvvf rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft File: 00095019ECFE138568A45C973E2550DDCDFE24F9.mft (raw, json) Hash identifier: 5miewkkc2dNfkujYnuHDBD85181rb3PcG2T2rBdscek= Subject key identifier: 47:13:34:3D:21:7B:06:AA:34:46:7B:FA:F9:51:CF:F0:4A:7B:90:0A Authority key identifier: 00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9 Certificate issuer: /CN=00095019ECFE138568A45C973E2550DDCDFE24F9 Certificate serial: 0F60B2CB236FBAF383AF330C31CBFBFFADE48C67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft Manifest number: BE Signing time: Sun 20 Sep 2026 11:41:41 +0000 Manifest this update: Sun 20 Sep 2026 11:36:41 +0000 Manifest next update: Mon 21 Sep 2026 12:46:41 +0000 Files and hashes: 1: 3138302e39342e392e302f32342d3234203d3e20313532303430.roa (hash: 9NjGQraMtFt8WFleFmys2JeiEGfDbejk4iig/XaEVZ4=) 2: 3138302e39342e382e302f32342d3234203d3e20313532303430.roa (hash: QD46OeSAEEYRUHA+p9YKqowoXvSQlWoPfMsfotiNmwI=) 3: 00095019ECFE138568A45C973E2550DDCDFE24F9.crl (hash: KwW9z6wSasjGiXfbBIE2CuEAFl/xw+phpl8kajaKl88=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 12:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:60:b2:cb:23:6f:ba:f3:83:af:33:0c:31:cb:fb:ff:ad:e4:8c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00095019ECFE138568A45C973E2550DDCDFE24F9 Validity Not Before: Sep 20 11:36:41 2026 GMT Not After : Sep 21 12:46:41 2026 GMT Subject: CN=4713343D217B06AA34467BFAF951CFF04A7B900A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fe:88:c2:21:12:12:cb:b4:71:a3:07:25:91: 1b:07:13:8e:84:79:e4:d6:b6:b2:c4:29:01:94:80: ee:cf:69:9d:fc:74:02:f6:76:79:8b:a1:a5:4b:67: b7:76:04:a4:cb:ad:71:08:91:9a:8c:5c:28:c7:4e: 12:1f:27:32:ac:15:3c:17:1b:7c:7e:24:75:09:31: c7:d6:a9:b6:af:35:71:a1:56:04:d0:d2:18:c5:42: 54:63:8f:8e:06:c9:c3:cb:a5:72:6d:06:0c:e7:d1: 3d:dc:8e:b1:44:e9:51:c8:78:b5:49:e4:3a:16:d6: 45:a2:30:e3:17:03:8e:44:71:ba:ff:de:67:e8:86: 48:6e:00:00:8f:08:19:8f:55:2d:25:27:28:c0:e4: 3e:2d:3f:bc:7a:53:bb:69:33:c6:6d:82:d0:cd:1e: 79:74:66:df:9b:1a:d8:a2:1d:58:65:d0:84:01:98: 00:5c:1b:a8:7c:cc:4e:e8:01:e1:3c:f5:14:58:56: 7d:72:a4:66:be:8c:10:de:fb:bb:a2:7b:50:9d:d1: fb:fe:af:9b:61:ae:8b:33:b5:ce:06:e1:83:29:62: 86:a6:a3:ef:1b:e8:16:3c:84:a0:77:c7:c0:aa:1b: 3a:4b:1b:de:bc:88:36:56:42:fd:52:31:c6:e3:05: de:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:13:34:3D:21:7B:06:AA:34:46:7B:FA:F9:51:CF:F0:4A:7B:90:0A X509v3 Authority Key Identifier: keyid:00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:43:96:d8:ea:71:9a:c4:d7:ad:5d:ca:84:ac:53:b1:ac:23: a5:6b:1e:b3:29:d9:df:98:12:5a:75:6e:67:98:97:2d:17:e4: a6:f2:31:a6:90:f6:66:43:cc:bf:d1:0a:f8:51:59:2d:e2:cb: d4:0a:98:1f:37:c5:14:73:da:22:fb:36:a0:0a:34:61:06:c2: 9b:e0:04:f9:4a:88:5b:3f:b3:b1:7a:b8:93:ab:a3:74:97:5e: f0:28:d4:86:bc:7e:b6:3a:c1:bf:74:18:8d:e7:d7:a3:7a:df: d3:6d:fc:be:3c:e4:7e:44:02:6c:4b:44:5c:4c:34:ac:ad:96: 9a:7b:88:88:58:ab:20:c9:b0:1d:6e:63:b9:65:38:43:e8:05: 77:c1:9b:dd:db:e4:c3:08:ae:0d:2a:dd:2f:6a:4e:fb:42:9c: c8:84:25:7d:23:8c:f7:2d:61:36:b1:ce:c6:38:f8:5e:84:db: a6:8d:1d:55:29:d8:8e:72:e3:a0:fe:21:35:91:24:04:19:3c: 9a:07:3a:dc:b3:d9:be:8e:3c:bf:61:01:bb:40:ef:36:bc:12: 8f:22:0d:f6:6e:ce:48:4d:d5:68:0b:c0:2d:fb:d8:10:4e:91: 2e:bb:ec:01:ef:14:08:18:f6:d8:bd:26:26:1a:ac:bd:43:9e: 32:2a:57:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD2CyyyNvuvODrzMMMcv7/63kjGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAwOTUwMTlFQ0ZFMTM4NTY4QTQ1Qzk3M0UyNTUwRERD REZFMjRGOTAeFw0yNjA5MjAxMTM2NDFaFw0yNjA5MjExMjQ2NDFaMDMxMTAvBgNV BAMTKDQ3MTMzNDNEMjE3QjA2QUEzNDQ2N0JGQUY5NTFDRkYwNEE3QjkwMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa/ojCIRISy7RxowclkRsHE46E eeTWtrLEKQGUgO7PaZ38dAL2dnmLoaVLZ7d2BKTLrXEIkZqMXCjHThIfJzKsFTwX G3x+JHUJMcfWqbavNXGhVgTQ0hjFQlRjj44GycPLpXJtBgzn0T3cjrFE6VHIeLVJ 5DoW1kWiMOMXA45Ecbr/3mfohkhuAACPCBmPVS0lJyjA5D4tP7x6U7tpM8ZtgtDN Hnl0Zt+bGtiiHVhl0IQBmABcG6h8zE7oAeE89RRYVn1ypGa+jBDe+7uie1Cd0fv+ r5throsztc4G4YMpYoamo+8b6BY8hKB3x8CqGzpLG968iDZWQv1SMcbjBd7NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURxM0PSF7Bqo0Rnv6+VHP8Ep7kAowHwYDVR0j BBgwFoAUAAlQGez+E4VopFyXPiVQ3c3+JPkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZmMWViNGItNDhkYy00ZWVhLTkxODEtMTI4Y2IyOGIzZGJhLzAvMDAwOTUwMTlF Q0ZFMTM4NTY4QTQ1Qzk3M0UyNTUwRERDREZFMjRGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDA5NTAxOUVDRkUxMzg1NjhBNDVDOTczRTI1NTBERENERkUy NEY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZmMWViNGItNDhkYy00ZWVhLTkx ODEtMTI4Y2IyOGIzZGJhLzAvMDAwOTUwMTlFQ0ZFMTM4NTY4QTQ1Qzk3M0UyNTUw RERDREZFMjRGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNDltjqcZrE161dyoSsU7GsI6VrHrMp2d+Y Elp1bmeYly0X5KbyMaaQ9mZDzL/RCvhRWS3iy9QKmB83xRRz2iL7NqAKNGEGwpvg BPlKiFs/s7F6uJOro3SXXvAo1Ia8frY6wb90GI3n16N639Nt/L485H5EAmxLRFxM NKytlpp7iIhYqyDJsB1uY7llOEPoBXfBm93b5MMIrg0q3S9qTvtCnMiEJX0jjPct YTaxzsY4+F6E26aNHVUp2I5y46D+ITWRJAQZPJoHOtyz2b6OPL9hAbtA7za8Eo8i DfZuzkhN1WgLwC372BBOkS677AHvFAgY9ti9JiYarL1DnjIqV78= -----END CERTIFICATE-----Generated at Mon Sep 21 03:24:16 2026 by rpki-client