$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft File: 9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft (raw, json) Hash identifier: SNXo9LsmIk+lYcQzDEKorWj5KqzG7IMpjGrze5kQsIk= Subject key identifier: 05:71:2F:69:82:10:9C:C6:4E:40:D8:64:0A:B4:CA:E3:B9:FC:8B:B0 Authority key identifier: 9B:AA:D5:D1:F3:6F:59:43:A3:5A:6E:E8:00:1A:5E:5F:C2:4D:9B:1E Certificate issuer: /CN=9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E Certificate serial: 62484DCDF00E9092C5968EA578F3B6A27BAD243F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft Manifest number: BD Signing time: Mon 21 Sep 2026 07:25:50 +0000 Manifest this update: Mon 21 Sep 2026 07:20:50 +0000 Manifest next update: Tue 22 Sep 2026 11:06:50 +0000 Files and hashes: 1: 33362e35302e39362e302f32342d3234203d3e20313532333536.roa (hash: WdJUD9VymB093sIE0zYyqec++4X5oG27MXfWK367p8g=) 2: 9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl (hash: PeGakxsHsbK1wu/TDG2elA6rPEqiTOjhNQItrGqwPqk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:48:4d:cd:f0:0e:90:92:c5:96:8e:a5:78:f3:b6:a2:7b:ad:24:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E Validity Not Before: Sep 21 07:20:50 2026 GMT Not After : Sep 22 11:06:50 2026 GMT Subject: CN=05712F6982109CC64E40D8640AB4CAE3B9FC8BB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6e:6f:df:86:5c:6e:84:e2:f6:fc:d1:d9:08: 4d:b5:36:a7:9e:87:1e:15:c3:b6:e8:3e:df:03:83: 9f:5d:cd:6f:8b:88:16:18:03:c3:dc:2b:fc:1a:ed: ed:10:f6:6e:99:42:b9:0c:77:0d:36:94:60:91:e6: 93:f6:5b:18:af:e0:d0:4a:6e:bb:90:9b:e9:95:99: aa:cc:21:5b:34:f5:31:f4:4b:22:dd:3f:18:20:b2: 8b:d2:25:2d:ad:eb:5e:2b:ac:c8:a3:41:6c:98:76: fc:71:68:8d:e0:bf:bd:21:ae:fc:31:2b:d5:da:0e: fc:83:1b:98:e5:9a:84:46:36:51:ac:74:e8:4f:6d: e4:75:8c:45:d5:c2:f3:4f:64:2a:cb:58:29:af:15: f8:e5:fb:db:5e:27:6a:ba:08:dd:c1:2a:00:c5:67: 69:7a:e1:8a:c3:87:94:b6:2a:73:1e:96:b7:d4:49: 5d:04:c6:67:df:ec:62:53:8a:43:93:9c:68:8a:1e: c3:bb:62:cd:0e:93:58:5d:12:d4:6d:c3:02:cf:bd: c1:ba:95:f2:2e:f5:d7:63:8d:7a:f4:d1:6c:ad:33: 74:e9:bd:5a:42:cb:89:dc:5d:76:c0:53:93:dc:77: e1:e2:9a:4d:de:9f:a7:4c:82:e0:fd:94:1a:dd:b1: 76:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:71:2F:69:82:10:9C:C6:4E:40:D8:64:0A:B4:CA:E3:B9:FC:8B:B0 X509v3 Authority Key Identifier: keyid:9B:AA:D5:D1:F3:6F:59:43:A3:5A:6E:E8:00:1A:5E:5F:C2:4D:9B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c5:64:0c:dc:99:72:60:fa:ed:0f:8d:7c:1b:b4:3a:80:61: 86:4c:c8:d7:ef:51:53:c9:65:ee:a7:d3:d5:5d:af:a6:bc:5a: 44:0b:1d:61:d6:bb:d8:b9:4f:57:57:94:ed:36:e6:00:bc:0d: 6e:71:57:95:eb:52:2d:db:15:da:9d:83:f8:7b:44:57:f5:32: c4:11:82:e2:4d:f5:02:1f:79:25:a6:8c:e1:06:5f:7e:7f:f1: 36:fc:29:94:f1:93:b6:d9:70:b1:f6:58:19:33:6e:53:f3:4c: 19:cf:23:7c:d8:f0:4e:95:82:5d:5b:ac:6b:d4:22:18:02:e8: 1b:9f:42:64:46:fc:e3:ca:21:e2:1f:f3:6e:94:50:ce:20:40: 35:60:4c:44:11:96:76:e6:61:0e:71:3e:9a:60:cb:83:06:82: 66:5e:5e:d0:74:9b:55:bb:c4:fa:ea:43:b5:6b:e4:f3:43:35: 43:3f:48:52:c5:3e:b4:c7:76:49:03:32:a1:f2:f0:ed:5d:15: 8e:b4:af:7a:dc:c3:53:10:d1:cd:a9:27:59:16:f0:43:70:f2: fb:c3:e4:14:0b:51:a1:66:7c:d4:7f:82:2b:90:2d:2e:65:5d: 34:c7:63:19:39:dd:09:41:ae:cc:76:5e:42:9e:43:36:3e:80: f4:45:37:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYkhNzfAOkJLFlo6lePO2onutJD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJBQUQ1RDFGMzZGNTk0M0EzNUE2RUU4MDAxQTVFNUZD MjREOUIxRTAeFw0yNjA5MjEwNzIwNTBaFw0yNjA5MjIxMTA2NTBaMDMxMTAvBgNV BAMTKDA1NzEyRjY5ODIxMDlDQzY0RTQwRDg2NDBBQjRDQUUzQjlGQzhCQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZbm/fhlxuhOL2/NHZCE21Nqee hx4Vw7boPt8Dg59dzW+LiBYYA8PcK/wa7e0Q9m6ZQrkMdw02lGCR5pP2Wxiv4NBK bruQm+mVmarMIVs09TH0SyLdPxggsovSJS2t614rrMijQWyYdvxxaI3gv70hrvwx K9XaDvyDG5jlmoRGNlGsdOhPbeR1jEXVwvNPZCrLWCmvFfjl+9teJ2q6CN3BKgDF Z2l64YrDh5S2KnMelrfUSV0Exmff7GJTikOTnGiKHsO7Ys0Ok1hdEtRtwwLPvcG6 lfIu9ddjjXr00WytM3TpvVpCy4ncXXbAU5Pcd+Himk3en6dMguD9lBrdsXaNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBXEvaYIQnMZOQNhkCrTK47n8i7AwHwYDVR0j BBgwFoAUm6rV0fNvWUOjWm7oABpeX8JNmx4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ5MGQ4NmItMGIwZC00NTZmLTg0MWEtYmZkYjlkODA3ZmI3LzAvOUJBQUQ1RDFG MzZGNTk0M0EzNUE2RUU4MDAxQTVFNUZDMjREOUIxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkFBRDVEMUYzNkY1OTQzQTM1QTZFRTgwMDFBNUU1RkMyNEQ5 QjFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ5MGQ4NmItMGIwZC00NTZmLTg0 MWEtYmZkYjlkODA3ZmI3LzAvOUJBQUQ1RDFGMzZGNTk0M0EzNUE2RUU4MDAxQTVF NUZDMjREOUIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbFZAzcmXJg+u0PjXwbtDqAYYZMyNfvUVPJ Ze6n09Vdr6a8WkQLHWHWu9i5T1dXlO025gC8DW5xV5XrUi3bFdqdg/h7RFf1MsQR guJN9QIfeSWmjOEGX35/8Tb8KZTxk7bZcLH2WBkzblPzTBnPI3zY8E6Vgl1brGvU IhgC6BufQmRG/OPKIeIf826UUM4gQDVgTEQRlnbmYQ5xPppgy4MGgmZeXtB0m1W7 xPrqQ7Vr5PNDNUM/SFLFPrTHdkkDMqHy8O1dFY60r3rcw1MQ0c2pJ1kW8ENw8vvD 5BQLUaFmfNR/giuQLS5lXTTHYxk53QlBrsx2XkKeQzY+gPRFN9w= -----END CERTIFICATE-----Generated at Mon Sep 21 14:25:39 2026 by rpki-client