$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft File: 09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft (raw, json) Hash identifier: 49czJiRcrUsX2karQfpEnBJmfLQ5tUAXdx3TUvfEvo8= Subject key identifier: F7:D7:DB:01:B4:CD:E2:54:75:26:0A:03:DB:5C:F8:D1:2E:62:B2:D9 Authority key identifier: 09:C4:BA:8A:F7:41:A5:1F:DD:8C:55:09:17:C9:6D:39:5C:BE:0F:FD Certificate issuer: /CN=09C4BA8AF741A51FDD8C550917C96D395CBE0FFD Certificate serial: 6F3CBDBADFF8E95423F06A9950B2BA87298E7790 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft Manifest number: BE Signing time: Sun 20 Sep 2026 22:55:15 +0000 Manifest this update: Sun 20 Sep 2026 22:50:15 +0000 Manifest next update: Tue 22 Sep 2026 02:52:15 +0000 Files and hashes: 1: 09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.crl (hash: 7M7RKydaEw8Go8wsPCbPi1FkRCT4YMyBlNCT3j7IR3E=) 2: 3131332e32302e3133362e302f32312d3234203d3e203435373136.roa (hash: 9Dp0sbY0tRdXCsPfX1Bi/rh765yhn92aMlIVBuucvDU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.crl rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:3c:bd:ba:df:f8:e9:54:23:f0:6a:99:50:b2:ba:87:29:8e:77:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09C4BA8AF741A51FDD8C550917C96D395CBE0FFD Validity Not Before: Sep 20 22:50:15 2026 GMT Not After : Sep 22 02:52:15 2026 GMT Subject: CN=F7D7DB01B4CDE25475260A03DB5CF8D12E62B2D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9f:b8:4e:52:96:cd:78:6a:f8:b7:cd:34:f8: ba:1b:34:67:90:4b:68:e8:8a:11:ad:32:36:d0:f3: a6:e3:3f:67:d5:5b:57:45:80:98:29:2c:56:c0:1a: b2:d8:fb:1a:80:67:4c:14:1e:4c:b7:e2:e3:05:f2: bb:d9:2a:0a:c3:42:f4:b2:8b:a4:e9:e4:13:12:5e: a0:29:db:c5:51:a3:ae:e4:e6:45:37:71:74:47:0e: 77:91:10:41:81:9e:f2:28:f1:db:42:11:40:21:0b: 5d:1f:e3:ff:73:3d:73:4a:47:ab:26:89:d2:9a:36: ef:3e:86:3e:83:03:3a:fd:36:ad:68:5b:91:f4:9e: 8d:3c:b1:78:28:9a:30:34:66:9c:3f:6f:3f:5c:6a: 5e:f9:6a:85:4d:9b:a9:5e:98:58:81:4a:69:41:42: ea:5a:b9:df:d0:94:74:9a:96:e4:ac:35:dc:f9:9a: 80:4f:d8:2e:ba:95:4e:10:6a:aa:f0:28:10:cc:f4: 2e:66:8b:61:59:af:5a:8d:ab:82:15:fd:7c:ea:a8: 4c:22:ca:7f:52:c7:e4:e1:a7:93:40:7c:1b:33:4e: 15:2b:8a:8c:87:31:e7:2f:2e:9e:58:85:a1:01:8b: 17:a8:3f:56:e3:8c:f3:16:cc:19:1a:83:ef:db:01: 37:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D7:DB:01:B4:CD:E2:54:75:26:0A:03:DB:5C:F8:D1:2E:62:B2:D9 X509v3 Authority Key Identifier: keyid:09:C4:BA:8A:F7:41:A5:1F:DD:8C:55:09:17:C9:6D:39:5C:BE:0F:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f7:d7:ea:d5:4d:cf:25:2a:07:b2:c6:ca:49:ac:c9:0e:37: 0b:fb:80:2b:6a:86:a4:02:26:1b:71:da:6d:e5:1f:f8:84:46: 2d:18:56:16:3d:55:98:82:a7:a4:f0:28:48:93:4a:c1:78:f2: 9b:fd:d1:89:89:d0:c7:e7:c3:72:b7:ae:68:77:11:28:1e:c0: 77:6a:ae:aa:c8:2d:12:fc:e6:71:09:d5:c4:ef:85:51:68:25: 3d:5b:78:4c:55:21:c7:5a:4b:b0:fb:84:d9:b5:9c:37:d7:96: cc:8f:95:4e:8f:8a:e8:2f:91:96:ce:05:02:54:48:2d:ec:3e: ce:ec:c0:41:1a:ab:4e:d3:b8:7a:85:77:ef:3c:22:6e:01:10: 8b:87:3b:07:ba:cf:c7:5a:b6:c0:de:c0:35:90:b6:ed:19:12: f5:3b:2b:74:17:b0:08:8a:b3:12:d5:d6:7c:2f:d4:98:8a:b7: ab:a1:19:ed:d3:ca:98:31:6d:70:1d:a8:da:99:e0:41:fa:85: e8:4b:28:fc:e7:55:13:70:9b:c1:f3:33:7c:cc:5f:8e:75:e4: a7:96:24:f9:5d:bc:c8:92:96:60:3d:c8:5e:2c:09:99:f0:d9: 2a:84:84:c3:2a:5a:10:83:89:46:11:d0:e7:8f:72:f3:0f:51: 00:d5:0e:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbzy9ut/46VQj8GqZULK6hymOd5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlDNEJBOEFGNzQxQTUxRkREOEM1NTA5MTdDOTZEMzk1 Q0JFMEZGRDAeFw0yNjA5MjAyMjUwMTVaFw0yNjA5MjIwMjUyMTVaMDMxMTAvBgNV BAMTKEY3RDdEQjAxQjRDREUyNTQ3NTI2MEEwM0RCNUNGOEQxMkU2MkIyRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgn7hOUpbNeGr4t800+LobNGeQ S2joihGtMjbQ86bjP2fVW1dFgJgpLFbAGrLY+xqAZ0wUHky34uMF8rvZKgrDQvSy i6Tp5BMSXqAp28VRo67k5kU3cXRHDneREEGBnvIo8dtCEUAhC10f4/9zPXNKR6sm idKaNu8+hj6DAzr9Nq1oW5H0no08sXgomjA0Zpw/bz9cal75aoVNm6lemFiBSmlB Qupaud/QlHSaluSsNdz5moBP2C66lU4QaqrwKBDM9C5mi2FZr1qNq4IV/XzqqEwi yn9Sx+Thp5NAfBszThUrioyHMecvLp5YhaEBixeoP1bjjPMWzBkag+/bATcFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU99fbAbTN4lR1JgoD21z40S5istkwHwYDVR0j BBgwFoAUCcS6ivdBpR/djFUJF8ltOVy+D/0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhZjAwZWMtZDA4My00YTlmLTgyMWYtN2RhMThmODE1NDE3LzAvMDlDNEJBOEFG NzQxQTUxRkREOEM1NTA5MTdDOTZEMzk1Q0JFMEZGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOUM0QkE4QUY3NDFBNTFGREQ4QzU1MDkxN0M5NkQzOTVDQkUw RkZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhZjAwZWMtZDA4My00YTlmLTgy MWYtN2RhMThmODE1NDE3LzAvMDlDNEJBOEFGNzQxQTUxRkREOEM1NTA5MTdDOTZE Mzk1Q0JFMEZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIz31+rVTc8lKgeyxspJrMkONwv7gCtqhqQC Jhtx2m3lH/iERi0YVhY9VZiCp6TwKEiTSsF48pv90YmJ0Mfnw3K3rmh3ESgewHdq rqrILRL85nEJ1cTvhVFoJT1beExVIcdaS7D7hNm1nDfXlsyPlU6PiugvkZbOBQJU SC3sPs7swEEaq07TuHqFd+88Im4BEIuHOwe6z8datsDewDWQtu0ZEvU7K3QXsAiK sxLV1nwv1JiKt6uhGe3TypgxbXAdqNqZ4EH6hehLKPznVRNwm8HzM3zMX4515KeW JPldvMiSlmA9yF4sCZnw2SqEhMMqWhCDiUYR0OePcvMPUQDVDj8= -----END CERTIFICATE-----Generated at Mon Sep 21 03:32:15 2026 by rpki-client