$ rpki-client -vvvf rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft File: 9E6973F078195021DC7E37753A16BDC3BD2CE345.mft (raw, json) Hash identifier: M0fUUvScwmG4M+9ILpsMjfiOVv3vEEJR94h/XQ5u030= Subject key identifier: FD:00:86:1B:43:98:DB:53:0B:68:49:BB:7A:89:A7:40:D6:A4:7B:57 Authority key identifier: 9E:69:73:F0:78:19:50:21:DC:7E:37:75:3A:16:BD:C3:BD:2C:E3:45 Certificate issuer: /CN=9E6973F078195021DC7E37753A16BDC3BD2CE345 Certificate serial: 2183F4A5D8A0DA2CAE1E01F3A6F945B99ACA4B47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft Manifest number: BE Signing time: Mon 21 Sep 2026 20:26:51 +0000 Manifest this update: Mon 21 Sep 2026 20:21:51 +0000 Manifest next update: Tue 22 Sep 2026 22:32:51 +0000 Files and hashes: 1: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: rDhWNdSE+MiC9nWV9xic84xxhEExen6QKYzm8hSRAZY=) 2: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: 70nvBnU+j3RyzkTv1EtBoPc4XFT8NOWYE+TEopumrFA=) 3: 9E6973F078195021DC7E37753A16BDC3BD2CE345.crl (hash: c7GxeU3A0ferl+fiwnXTCneDLlmNDMoKiqyq+HtuVio=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.crl rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:83:f4:a5:d8:a0:da:2c:ae:1e:01:f3:a6:f9:45:b9:9a:ca:4b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6973F078195021DC7E37753A16BDC3BD2CE345 Validity Not Before: Sep 21 20:21:51 2026 GMT Not After : Sep 22 22:32:51 2026 GMT Subject: CN=FD00861B4398DB530B6849BB7A89A740D6A47B57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e0:3a:8e:06:cd:fe:ee:52:06:3f:bf:ab:7a: dc:e4:2f:09:5a:56:44:e5:46:44:37:d1:07:db:bb: 63:64:1f:2a:a0:ac:23:d9:6b:51:95:6b:f0:42:6a: 42:08:0f:84:2b:21:24:c8:64:46:72:03:aa:f2:43: 09:29:95:27:fb:e4:ff:97:05:1f:1b:10:57:94:93: dc:94:96:bc:8f:ce:3b:66:6e:6b:76:7a:4d:eb:9d: 10:55:fe:5e:54:60:a6:05:73:6e:c0:a2:a5:02:eb: 81:0e:1b:f7:ee:33:62:05:75:8e:4f:38:a1:ae:87: 0d:ca:f4:9b:f9:e5:5e:f3:b9:88:f6:32:19:15:d6: 62:0f:be:0e:49:3c:df:9f:be:d5:47:05:d2:54:3b: 60:c7:3d:6a:59:7b:42:bd:0a:de:c2:3a:7d:90:bd: 10:ee:94:7a:0b:4b:90:38:c1:3f:5d:b7:1a:a2:7b: 1e:de:d0:51:ca:8e:eb:b7:d4:9d:a2:fd:61:06:0f: f6:26:d8:6e:fb:ca:09:52:05:d1:89:e6:ea:f3:78: 76:3c:96:fa:c4:b1:d3:a9:9f:b7:da:1c:d9:1a:d5: bf:4e:d2:35:81:71:70:b1:9c:86:86:0a:6e:bf:e1: 01:66:93:f3:e6:29:ed:76:d8:8a:33:43:e9:ce:85: 4a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:00:86:1B:43:98:DB:53:0B:68:49:BB:7A:89:A7:40:D6:A4:7B:57 X509v3 Authority Key Identifier: keyid:9E:69:73:F0:78:19:50:21:DC:7E:37:75:3A:16:BD:C3:BD:2C:E3:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:50:7d:7f:d0:5e:3b:bf:33:6f:7c:ed:35:7b:b3:83:f8:4f: 9c:d6:e1:06:8a:59:d3:b9:7c:e3:7c:4e:7a:c1:a7:49:c7:5d: b3:51:00:ba:36:0c:7f:13:03:2c:fb:04:bc:4e:c8:b6:94:2a: c9:9a:f7:06:c0:4f:d0:6f:2d:97:3f:32:d1:f9:7c:d0:f8:7e: 4b:eb:f9:41:25:11:ca:3c:74:11:f9:38:fb:c3:83:8a:a4:4f: aa:b2:4b:b0:83:00:ff:e2:61:6d:81:4f:3f:e8:6e:12:71:95: 62:08:53:63:7e:cf:e1:aa:4f:bd:85:4d:fa:6f:35:cc:e8:f6: dd:fd:e7:01:73:38:ab:98:49:7a:d4:38:bd:b7:1a:f1:57:22: 01:98:d2:f6:4e:e7:d4:55:6a:5f:cb:93:9d:96:b0:7c:58:12: 14:a2:4c:6c:c6:b4:b3:52:39:ed:a1:97:c4:37:72:47:9b:b9: cc:e7:a1:f4:2f:d3:bb:40:b0:dd:35:36:57:25:cf:90:ee:a9: 82:07:93:22:95:25:3a:a4:7d:12:a7:60:63:1c:86:93:34:cd: 0c:0a:f1:d1:a1:52:e4:57:e8:2b:82:d7:58:26:8c:98:df:9f: cc:3c:05:40:f5:9a:d8:d9:90:f1:eb:56:8e:d1:ff:9d:8d:fc: b7:bf:e5:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIYP0pdig2iyuHgHzpvlFuZrKS0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2OTczRjA3ODE5NTAyMURDN0UzNzc1M0ExNkJEQzNC RDJDRTM0NTAeFw0yNjA5MjEyMDIxNTFaFw0yNjA5MjIyMjMyNTFaMDMxMTAvBgNV BAMTKEZEMDA4NjFCNDM5OERCNTMwQjY4NDlCQjdBODlBNzQwRDZBNDdCNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS4DqOBs3+7lIGP7+retzkLwla VkTlRkQ30Qfbu2NkHyqgrCPZa1GVa/BCakIID4QrISTIZEZyA6ryQwkplSf75P+X BR8bEFeUk9yUlryPzjtmbmt2ek3rnRBV/l5UYKYFc27AoqUC64EOG/fuM2IFdY5P OKGuhw3K9Jv55V7zuYj2MhkV1mIPvg5JPN+fvtVHBdJUO2DHPWpZe0K9Ct7COn2Q vRDulHoLS5A4wT9dtxqiex7e0FHKjuu31J2i/WEGD/Ym2G77yglSBdGJ5urzeHY8 lvrEsdOpn7faHNka1b9O0jWBcXCxnIaGCm6/4QFmk/PmKe122IozQ+nOhUqlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/QCGG0OY21MLaEm7eomnQNake1cwHwYDVR0j BBgwFoAUnmlz8HgZUCHcfjd1Oha9w70s40UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjdkYjIzYjctOTE1OS00NmM3LTg4NTMtMDY2NTRhZTQ3YWVkLzAvOUU2OTczRjA3 ODE5NTAyMURDN0UzNzc1M0ExNkJEQzNCRDJDRTM0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RTY5NzNGMDc4MTk1MDIxREM3RTM3NzUzQTE2QkRDM0JEMkNF MzQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjdkYjIzYjctOTE1OS00NmM3LTg4 NTMtMDY2NTRhZTQ3YWVkLzAvOUU2OTczRjA3ODE5NTAyMURDN0UzNzc1M0ExNkJE QzNCRDJDRTM0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVQfX/QXju/M2987TV7s4P4T5zW4QaKWdO5 fON8TnrBp0nHXbNRALo2DH8TAyz7BLxOyLaUKsma9wbAT9BvLZc/MtH5fND4fkvr +UElEco8dBH5OPvDg4qkT6qyS7CDAP/iYW2BTz/obhJxlWIIU2N+z+GqT72FTfpv Nczo9t395wFzOKuYSXrUOL23GvFXIgGY0vZO59RVal/Lk52WsHxYEhSiTGzGtLNS Oe2hl8Q3ckebucznofQv07tAsN01Nlclz5DuqYIHkyKVJTqkfRKnYGMchpM0zQwK 8dGhUuRX6CuC11gmjJjfn8w8BUD1mtjZkPHrVo7R/52N/Le/5QE= -----END CERTIFICATE-----Generated at Tue Sep 22 05:27:49 2026 by rpki-client