$ rpki-client -vvvf rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft File: 9B2D9946FF043D1081C26FD38F0817310077BFC7.mft (raw, json) Hash identifier: 6Jcq2Lg1Q0/LnWudoCv2GgXGTJSKbDEHSI6pxhHuvyY= Subject key identifier: D8:6D:7B:52:37:F7:6F:75:D4:1F:96:38:1E:14:EC:A0:7E:2A:08:1C Authority key identifier: 9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7 Certificate issuer: /CN=9B2D9946FF043D1081C26FD38F0817310077BFC7 Certificate serial: 6C86AF4C448E6541EEFF9AA57DA559BD3F79EE40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft Manifest number: BC Signing time: Sun 20 Sep 2026 19:41:11 +0000 Manifest this update: Sun 20 Sep 2026 19:36:11 +0000 Manifest next update: Mon 21 Sep 2026 21:40:11 +0000 Files and hashes: 1: 9B2D9946FF043D1081C26FD38F0817310077BFC7.crl (hash: 2AdwTDMoNkexhZH9EHc8wOEqc92kW0LMfH8iGQj6sWw=) 2: 3136302e32322e39322e302f32342d3234203d3e20313532383335.roa (hash: oePR/73r7MSIzHQUks2lMsK7CVUF0CNaDFGyG/xqYVQ=) 3: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (hash: nWvsjEg3FhCbHhiH6HxunuDCxB9lgrvkKOpoSSa7E9Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.crl rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:86:af:4c:44:8e:65:41:ee:ff:9a:a5:7d:a5:59:bd:3f:79:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2D9946FF043D1081C26FD38F0817310077BFC7 Validity Not Before: Sep 20 19:36:11 2026 GMT Not After : Sep 21 21:40:11 2026 GMT Subject: CN=D86D7B5237F76F75D41F96381E14ECA07E2A081C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b6:89:38:81:60:9b:f0:0f:d5:d0:97:02:78: 8e:8a:fc:39:a2:8c:bb:4b:21:0e:29:ad:1f:0a:ac: 32:15:39:c0:aa:3f:9b:3c:d3:1c:5b:7a:cb:b0:c3: 4a:72:bb:49:9e:0c:63:c8:57:ac:e2:7b:e5:3b:8c: b6:a3:03:ce:35:af:98:08:b5:31:9e:3e:d4:05:99: 87:e0:1f:a4:34:d8:51:b5:4e:fa:4d:0c:08:86:54: fc:ef:9f:7a:5f:cd:f1:ce:4e:dd:32:41:36:9d:f1: 48:e8:c5:78:2d:fb:d9:60:79:30:59:17:ad:3a:ed: c9:d6:64:9a:55:13:95:03:de:40:6c:a0:b9:15:c6: 92:a5:83:61:35:41:e8:db:de:4b:5a:b0:7e:37:fc: 33:9d:e9:f6:d4:d3:10:0d:a3:15:e7:4f:62:0b:14: 43:89:99:e0:de:86:42:0d:a2:3c:c6:a9:86:8e:ae: 32:4a:a4:bb:22:49:e4:59:93:c8:1a:6a:b4:9e:c7: 6f:65:86:62:52:4d:44:62:cc:5a:61:bd:0e:6c:48: 8f:52:e8:e2:df:cd:f8:02:68:be:68:fb:47:38:01: 20:2b:1b:4f:50:e5:15:63:a5:b8:16:e8:10:93:e8: 4c:00:87:7a:4e:43:ac:1a:05:dd:98:a2:c6:f2:78: 50:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6D:7B:52:37:F7:6F:75:D4:1F:96:38:1E:14:EC:A0:7E:2A:08:1C X509v3 Authority Key Identifier: keyid:9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1f:2e:58:b6:3d:35:6f:ff:e3:31:f4:1c:38:e0:bf:66:24: da:50:96:49:31:61:cd:83:1a:6b:ac:bd:f8:f6:29:d9:0f:dc: f9:22:f9:93:7a:69:29:98:eb:48:38:26:8a:81:ae:e0:61:ec: bd:30:a9:15:8b:98:9e:a7:15:93:f3:8e:12:14:f0:88:23:b4: 0a:71:70:0c:78:f9:70:c6:aa:71:b9:74:9f:ef:0e:26:54:c6: f0:87:4a:20:bf:85:4b:e5:85:be:31:c4:08:38:96:48:7e:15: 75:04:08:1e:3a:84:3b:8f:12:fa:0b:13:27:d2:bc:cc:3a:bb: 44:0b:d9:9c:44:13:dc:e0:c4:20:a0:0d:d7:67:cd:a3:08:78: 99:06:56:01:3b:4b:9d:b1:07:f9:52:b8:33:bd:aa:cd:7e:9e: 40:8a:67:32:d1:3f:9b:73:92:a2:af:84:de:aa:fb:1f:63:87: 22:9a:9e:a6:5d:23:32:44:2f:9f:b5:87:25:fd:d4:93:6f:98: 6a:60:2e:9b:76:78:53:07:7f:97:b7:18:26:be:5f:ed:cf:e4: 8e:01:30:cb:d4:6c:a5:1d:b5:09:00:08:96:39:13:86:71:9f: 49:3e:fa:a2:fb:c6:ca:34:2a:e0:21:73:6f:16:62:13:61:3e: 42:13:b2:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbIavTESOZUHu/5qlfaVZvT957kAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyRDk5NDZGRjA0M0QxMDgxQzI2RkQzOEYwODE3MzEw MDc3QkZDNzAeFw0yNjA5MjAxOTM2MTFaFw0yNjA5MjEyMTQwMTFaMDMxMTAvBgNV BAMTKEQ4NkQ3QjUyMzdGNzZGNzVENDFGOTYzODFFMTRFQ0EwN0UyQTA4MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZtok4gWCb8A/V0JcCeI6K/Dmi jLtLIQ4prR8KrDIVOcCqP5s80xxbesuww0pyu0meDGPIV6zie+U7jLajA841r5gI tTGePtQFmYfgH6Q02FG1TvpNDAiGVPzvn3pfzfHOTt0yQTad8UjoxXgt+9lgeTBZ F6067cnWZJpVE5UD3kBsoLkVxpKlg2E1Qejb3ktasH43/DOd6fbU0xANoxXnT2IL FEOJmeDehkINojzGqYaOrjJKpLsiSeRZk8gaarSex29lhmJSTURizFphvQ5sSI9S 6OLfzfgCaL5o+0c4ASArG09Q5RVjpbgW6BCT6EwAh3pOQ6waBd2YosbyeFA3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2G17Ujf3b3XUH5Y4HhTsoH4qCBwwHwYDVR0j BBgwFoAUmy2ZRv8EPRCBwm/TjwgXMQB3v8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJkMjliMzItM2EyOS00YTE0LWJjOWItYzc2YTAwN2NhMDMyLzAvOUIyRDk5NDZG RjA0M0QxMDgxQzI2RkQzOEYwODE3MzEwMDc3QkZDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85QjJEOTk0NkZGMDQzRDEwODFDMjZGRDM4RjA4MTczMTAwNzdC RkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJkMjliMzItM2EyOS00YTE0LWJj OWItYzc2YTAwN2NhMDMyLzAvOUIyRDk5NDZGRjA0M0QxMDgxQzI2RkQzOEYwODE3 MzEwMDc3QkZDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0fLli2PTVv/+Mx9Bw44L9mJNpQlkkxYc2D Gmusvfj2KdkP3Pki+ZN6aSmY60g4JoqBruBh7L0wqRWLmJ6nFZPzjhIU8IgjtApx cAx4+XDGqnG5dJ/vDiZUxvCHSiC/hUvlhb4xxAg4lkh+FXUECB46hDuPEvoLEyfS vMw6u0QL2ZxEE9zgxCCgDddnzaMIeJkGVgE7S52xB/lSuDO9qs1+nkCKZzLRP5tz kqKvhN6q+x9jhyKanqZdIzJEL5+1hyX91JNvmGpgLpt2eFMHf5e3GCa+X+3P5I4B MMvUbKUdtQkACJY5E4Zxn0k++qL7xso0KuAhc28WYhNhPkITsnY= -----END CERTIFICATE-----Generated at Mon Sep 21 04:08:49 2026 by rpki-client