$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft File: 9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft (raw, json) Hash identifier: PmG844s3JVQThKSzk+SCzJ6WXv5GigE/1wUfdAoRawQ= Subject key identifier: 51:FD:DF:6E:BD:58:F3:3E:53:CA:81:36:EB:B8:EA:51:A1:4E:1E:DA Authority key identifier: 95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0 Certificate issuer: /CN=9588905DE5DA3CEB7B575E4C7B475E22276450F0 Certificate serial: 529492661B8D786C60041658608AF01A20CAD3A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft Manifest number: BD Signing time: Mon 21 Sep 2026 13:02:30 +0000 Manifest this update: Mon 21 Sep 2026 12:57:30 +0000 Manifest next update: Tue 22 Sep 2026 16:23:30 +0000 Files and hashes: 1: 34392e3135362e35362e302f32332d3233203d3e203535363637.roa (hash: LXofhMEruHNZkVP/FDGdRjlE9GAdxzBp7sQ6AFEv168=) 2: 34392e3135362e35372e302f32342d3234203d3e203535363637.roa (hash: t5M4q+wjV6k977kCQYS5NWkmORi7rVl+URL29ZG5i/Y=) 3: 9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl (hash: joswVwS+q9G/xmGumiPFBg7mIogIxkBAiS7JIkPHXoY=) 4: 34392e3135362e36302e302f32342d3234203d3e203535363637.roa (hash: dUcYMxyxr0kR8WWHVwUrDj577thKceAoVrMPKHmFvPk=) 5: 34392e3135362e35362e302f32342d3234203d3e203535363637.roa (hash: aLMfdsIVj+NArpBFKbx+R57YG2afPDJAmU3iGMb6+6c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 16:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:94:92:66:1b:8d:78:6c:60:04:16:58:60:8a:f0:1a:20:ca:d3:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9588905DE5DA3CEB7B575E4C7B475E22276450F0 Validity Not Before: Sep 21 12:57:30 2026 GMT Not After : Sep 22 16:23:30 2026 GMT Subject: CN=51FDDF6EBD58F33E53CA8136EBB8EA51A14E1EDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9f:e9:e3:c3:d7:0b:09:8b:ba:43:68:eb:28: 9a:05:d5:40:7a:ec:2a:7f:cb:6e:1f:f3:ca:77:bb: 78:e3:d3:d8:81:aa:a6:82:32:15:76:6e:17:75:5c: 86:d6:dc:c8:c6:ed:1b:4c:c2:9c:5a:d8:52:fc:a8: 04:73:0f:87:1a:ae:d9:b7:87:d6:67:65:11:d7:84: a2:5f:fd:3d:56:09:9e:1b:69:68:c0:1f:e3:df:0f: 4c:6e:8f:bc:20:bd:fb:3d:b1:ea:ab:5f:3d:a1:30: 8a:9e:ae:39:ed:f0:ac:c5:74:d7:51:d7:5d:95:11: 1d:b5:cb:44:f9:bb:c3:a0:12:0e:0f:f1:ad:90:f6: 52:a7:97:a9:49:df:15:7b:1f:e1:2d:d2:8c:98:2f: 63:45:d9:c9:8e:49:4f:eb:61:8e:2b:3a:74:76:a0: 37:1e:e6:98:b2:f9:67:18:4b:dd:4a:8b:0b:d0:76: 8e:b7:0a:44:10:04:3d:ad:75:26:45:fc:4c:1a:c0: 47:74:4d:cd:71:a1:66:57:04:1d:5f:64:9f:aa:11: 48:c2:6d:07:ac:0a:dd:0f:06:a0:9f:4e:5e:d4:8e: 10:3d:75:e2:4c:95:88:76:6f:d4:c5:f6:02:a2:13: e8:cb:83:48:a5:7c:df:89:b8:c3:f5:f1:1b:3f:c9: 1e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FD:DF:6E:BD:58:F3:3E:53:CA:81:36:EB:B8:EA:51:A1:4E:1E:DA X509v3 Authority Key Identifier: keyid:95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:33:7b:15:6f:73:81:4e:85:25:32:ff:eb:72:7d:44:64:f8: d2:41:0f:e9:b2:30:fb:4e:c8:d2:1d:d0:71:89:c9:22:27:e6: e1:cb:74:0f:94:69:06:1c:83:32:03:ee:e1:31:d8:e6:6d:8e: e2:f8:1f:ad:4f:98:4e:4c:73:62:ce:d9:e9:63:eb:ed:de:b4: 04:2d:4b:14:ea:bb:74:de:f6:38:7f:a7:c5:98:02:68:cb:b5: d7:45:a1:d3:01:32:8f:2b:1f:f0:c6:85:33:66:54:c1:0f:81: 0c:0d:b6:04:a3:36:77:30:8c:9f:dd:2c:9d:2e:33:86:3d:23: cd:ae:0a:3a:84:8f:a0:d8:d3:99:e8:bd:81:c7:1c:10:be:9f: d8:b3:ee:68:9a:13:03:b4:e5:d0:9b:12:b8:a8:3f:22:a3:45: 0b:f0:61:18:27:64:ab:c1:3d:a4:37:65:1d:95:89:70:31:32: 19:25:0e:7e:37:7a:e4:24:61:65:9e:07:05:1c:e3:50:5f:66: 15:f2:a6:e4:7b:38:d0:ea:3d:97:6f:2b:79:fb:0d:d9:1d:a1: 56:07:6f:89:ab:a8:74:ee:d5:bc:ef:8e:5f:af:87:b1:a7:1f: f3:42:1e:93:0a:61:00:d9:7a:f0:7e:cd:93:78:5c:f0:20:e6: e0:c5:20:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUpSSZhuNeGxgBBZYYIrwGiDK06QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU4ODkwNURFNURBM0NFQjdCNTc1RTRDN0I0NzVFMjIy NzY0NTBGMDAeFw0yNjA5MjExMjU3MzBaFw0yNjA5MjIxNjIzMzBaMDMxMTAvBgNV BAMTKDUxRkRERjZFQkQ1OEYzM0U1M0NBODEzNkVCQjhFQTUxQTE0RTFFREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGn+njw9cLCYu6Q2jrKJoF1UB6 7Cp/y24f88p3u3jj09iBqqaCMhV2bhd1XIbW3MjG7RtMwpxa2FL8qARzD4cartm3 h9ZnZRHXhKJf/T1WCZ4baWjAH+PfD0xuj7wgvfs9seqrXz2hMIqerjnt8KzFdNdR 112VER21y0T5u8OgEg4P8a2Q9lKnl6lJ3xV7H+Et0oyYL2NF2cmOSU/rYY4rOnR2 oDce5piy+WcYS91KiwvQdo63CkQQBD2tdSZF/EwawEd0Tc1xoWZXBB1fZJ+qEUjC bQesCt0PBqCfTl7UjhA9deJMlYh2b9TF9gKiE+jLg0ilfN+JuMP18Rs/yR5bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUf3fbr1Y8z5TyoE267jqUaFOHtowHwYDVR0j BBgwFoAUlYiQXeXaPOt7V15Me0deIidkUPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIwNmNmNTAtYTNkMS00Y2M5LTkyNjAtOTg3YjJjYTBjOTI3LzAvOTU4ODkwNURF NURBM0NFQjdCNTc1RTRDN0I0NzVFMjIyNzY0NTBGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTg4OTA1REU1REEzQ0VCN0I1NzVFNEM3QjQ3NUUyMjI3NjQ1 MEYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIwNmNmNTAtYTNkMS00Y2M5LTky NjAtOTg3YjJjYTBjOTI3LzAvOTU4ODkwNURFNURBM0NFQjdCNTc1RTRDN0I0NzVF MjIyNzY0NTBGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHozexVvc4FOhSUy/+tyfURk+NJBD+myMPtO yNId0HGJySIn5uHLdA+UaQYcgzID7uEx2OZtjuL4H61PmE5Mc2LO2elj6+3etAQt SxTqu3Te9jh/p8WYAmjLtddFodMBMo8rH/DGhTNmVMEPgQwNtgSjNncwjJ/dLJ0u M4Y9I82uCjqEj6DY05novYHHHBC+n9iz7miaEwO05dCbErioPyKjRQvwYRgnZKvB PaQ3ZR2ViXAxMhklDn43euQkYWWeBwUc41BfZhXypuR7ONDqPZdvK3n7DdkdoVYH b4mrqHTu1bzvjl+vh7GnH/NCHpMKYQDZevB+zZN4XPAg5uDFIJk= -----END CERTIFICATE-----Generated at Tue Sep 22 01:54:28 2026 by rpki-client