$ rpki-client -vvvf rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft File: 9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft (raw, json) Hash identifier: KEerkPMPXPvqBss1vNCy7PcrepwIXZTxwPxePgAQUP0= Subject key identifier: BF:F9:BD:FD:81:8B:5E:8E:28:ED:CB:D1:F5:C4:CD:A0:EE:24:08:2E Authority key identifier: 9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D Certificate issuer: /CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D Certificate serial: 593EA824E037CE5E032032F7B0B41488B5FE6748 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft Manifest number: BC Signing time: Sun 20 Sep 2026 00:07:15 +0000 Manifest this update: Sun 20 Sep 2026 00:02:15 +0000 Manifest next update: Mon 21 Sep 2026 03:18:15 +0000 Files and hashes: 1: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: npHUpI+a7i9Ge4o0vqbUWZs/Np3+nJB1Rs4IQBwLbvY=) 2: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: Pbg7HMIUocxPePd7OOnLCPLrq3CDhKhitltGyutZn2w=) 3: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: 2hLM0mgbr0R6ifa3vNzIdaR5NaWhmXwQFTpATyRbVPI=) 4: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: zmwA1y/xC2vL0cjTkZM+ObOlDKLV7xKiwSOMXdyAr5Q=) 5: 9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl (hash: kzSN51G0gV2nJdnsteEOFG+K1vZfJjKyrU2Of6Nrdws=) 6: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: JZInvaWprZojdT0ogHnGT0fyYlzFziTH86i1Q0tvWkY=) 7: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: BTFNI8KSCzEVQjrkzQTwBs7yIRfL1AV/7o2X6tYhvoE=) 8: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: JPXdi6WPGd4vFTIpgnAdhhx+7oMRZdsbWTFXkRgyRnk=) 9: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: H+4huOKuCZJDgCcIRHG5F336v2zTL76hXwSaEF33ZKg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 03:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:3e:a8:24:e0:37:ce:5e:03:20:32:f7:b0:b4:14:88:b5:fe:67:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D Validity Not Before: Sep 20 00:02:15 2026 GMT Not After : Sep 21 03:18:15 2026 GMT Subject: CN=BFF9BDFD818B5E8E28EDCBD1F5C4CDA0EE24082E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7d:86:c0:6c:5e:b2:7f:44:65:2c:13:84:82: c6:af:df:30:8b:84:6d:88:0a:45:17:35:fb:e4:e9: a8:ad:b5:e1:80:e5:7d:00:14:ec:8e:6d:cf:c6:ea: 36:3e:14:10:08:fc:81:3d:f6:58:80:e2:65:59:b4: de:cc:6a:2d:e3:4b:da:7e:9b:32:89:82:ec:2d:43: 23:a8:ea:7b:c9:ed:6c:84:0e:43:8e:a6:09:7d:9f: c8:de:96:88:ea:47:59:94:a7:87:ed:64:4b:e2:c1: b9:3c:6b:91:3e:76:64:a4:13:5c:62:6d:50:12:ce: 08:8a:71:91:ee:da:5e:2d:45:f7:e9:9b:1f:07:39: 3c:02:7f:db:6f:15:bd:5e:a5:97:18:a7:ea:be:e2: 6f:f1:31:13:11:be:de:db:a1:a5:1f:da:2b:ca:f4: 67:e9:b6:a2:2d:fc:88:37:e0:21:d8:45:32:3c:73: c8:5c:b9:df:69:d2:a1:65:b6:2f:49:d8:5f:2f:b6: 56:c8:27:3c:16:a7:34:52:d6:b3:2b:37:76:e0:b9: 8b:41:39:57:c4:dc:1f:af:c6:22:2a:56:b8:c3:6d: bc:22:a4:9b:ed:21:a8:df:ea:ce:a8:20:69:3c:3b: a3:ef:9c:47:08:4c:6b:d8:d7:43:0c:1b:6e:fc:17: 3d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F9:BD:FD:81:8B:5E:8E:28:ED:CB:D1:F5:C4:CD:A0:EE:24:08:2E X509v3 Authority Key Identifier: keyid:9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c5:ed:0f:e8:a0:8e:1a:6e:36:56:21:25:01:d7:0f:ad:70: 00:a9:2e:ab:94:3c:58:dc:72:a9:00:29:8a:ae:03:1a:f6:e5: 6c:c1:b0:ef:f3:ab:09:fc:42:26:f7:18:9f:9f:42:e9:76:db: a3:0d:e3:6e:b1:57:6d:4c:ec:9c:a1:07:c2:83:c5:58:4c:e3: 29:c5:0b:37:c1:f4:7e:79:23:a7:50:2a:00:eb:ed:b7:96:19: 33:c4:b9:22:35:8e:8b:4c:c6:20:73:63:e5:12:66:b3:38:e9: d9:d0:4e:9c:9d:36:11:de:ee:aa:35:46:2b:94:28:ad:4c:f4: 0c:d8:5b:55:fc:cb:69:cd:27:c9:6d:b8:9e:3c:5f:ed:0b:b0: 52:4b:4b:df:a4:94:4b:2b:aa:33:22:2b:03:82:b5:60:1c:a5: 46:7f:96:9d:d0:00:81:8e:7b:25:88:e2:75:f5:24:d8:47:bf: 2b:f0:a0:c1:2c:a8:c3:e8:a8:60:21:9a:e7:bd:bc:1c:7d:f0: c7:87:75:df:d5:2d:7f:d9:ee:18:76:48:e8:8f:bf:e6:65:01: 1e:0f:85:7c:02:34:7b:bf:79:45:56:94:b8:27:35:43:8f:a2: 7d:bc:b0:e4:d1:64:81:9b:75:e7:ec:4a:6e:59:06:c6:5c:ec: ee:29:c7:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWT6oJOA3zl4DIDL3sLQUiLX+Z0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUREN0ZEMUMwQTc0RkUzMTdFREE0MUU0RDFDREM4NTdB RkMxNzc5RDAeFw0yNjA5MjAwMDAyMTVaFw0yNjA5MjEwMzE4MTVaMDMxMTAvBgNV BAMTKEJGRjlCREZEODE4QjVFOEUyOEVEQ0JEMUY1QzRDREEwRUUyNDA4MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMfYbAbF6yf0RlLBOEgsav3zCL hG2ICkUXNfvk6aitteGA5X0AFOyObc/G6jY+FBAI/IE99liA4mVZtN7Mai3jS9p+ mzKJguwtQyOo6nvJ7WyEDkOOpgl9n8jelojqR1mUp4ftZEviwbk8a5E+dmSkE1xi bVASzgiKcZHu2l4tRffpmx8HOTwCf9tvFb1epZcYp+q+4m/xMRMRvt7boaUf2ivK 9GfptqIt/Ig34CHYRTI8c8hcud9p0qFlti9J2F8vtlbIJzwWpzRS1rMrN3bguYtB OVfE3B+vxiIqVrjDbbwipJvtIajf6s6oIGk8O6PvnEcITGvY10MMG278Fz05AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv/m9/YGLXo4o7cvR9cTNoO4kCC4wHwYDVR0j BBgwFoAUndf9HAp0/jF+2kHk0c3IV6/Bd50wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjkwYzkwMDktYWQ1My00ZmE2LWExODMtMzRiMzQ1N2JlYTAzLzAvOUREN0ZEMUMw QTc0RkUzMTdFREE0MUU0RDFDREM4NTdBRkMxNzc5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REQ3RkQxQzBBNzRGRTMxN0VEQTQxRTREMUNEQzg1N0FGQzE3 NzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvOUREN0ZEMUMwQTc0RkUzMTdFREE0MUU0RDFDREM4 NTdBRkMxNzc5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHF7Q/ooI4abjZWISUB1w+tcACpLquUPFjc cqkAKYquAxr25WzBsO/zqwn8Qib3GJ+fQul226MN426xV21M7JyhB8KDxVhM4ynF CzfB9H55I6dQKgDr7beWGTPEuSI1jotMxiBzY+USZrM46dnQTpydNhHe7qo1RiuU KK1M9AzYW1X8y2nNJ8ltuJ48X+0LsFJLS9+klEsrqjMiKwOCtWAcpUZ/lp3QAIGO eyWI4nX1JNhHvyvwoMEsqMPoqGAhmue9vBx98MeHdd/VLX/Z7hh2SOiPv+ZlAR4P hXwCNHu/eUVWlLgnNUOPon28sOTRZIGbdefsSm5ZBsZc7O4px/4= -----END CERTIFICATE-----Generated at Sun Sep 20 21:14:09 2026 by rpki-client