$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft File: 9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft (raw, json) Hash identifier: Fokwyl1I6yh/xdU0VwK/tHK8jgKMoMrCGVTA8IdqtkM= Subject key identifier: 70:FA:D5:17:13:1C:31:F9:58:B8:A1:1F:48:AE:1D:79:39:8F:F8:6E Authority key identifier: 9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B Certificate issuer: /CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B Certificate serial: 0712098C9341C87B0945E26E5D21610E2EED2D9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft Manifest number: C8 Signing time: Mon 28 Sep 2026 17:57:01 +0000 Manifest this update: Mon 28 Sep 2026 17:52:01 +0000 Manifest next update: Tue 29 Sep 2026 20:45:01 +0000 Files and hashes: 1: 9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl (hash: jJSlTRnjmBFwBIr02Okoa1b4jqzTPX8Q3HcsihWF/D0=) 2: 34332e3235322e3133382e302f32342d3234203d3e203538343034.roa (hash: aDJ/BlhAr3ZuI6P3BU0POvE1//aOF15U+ofqLi0TcqU=) 3: 323030313a6466303a3266633a3a2f34382d3438203d3e203538343034.roa (hash: lNPR2Tg6FsNQHU8b29t3TQ5Lu6T1+vm92/GyLs+/lXo=) 4: 3130332e32382e31322e302f32322d3233203d3e203538343034.roa (hash: B7lLwYyGx/CkKBE8Qhv5JNipvmsoWuu5k92uqzr9wrU=) 5: 34332e3235322e3133392e302f32342d3234203d3e203538343034.roa (hash: v6dOLx0SCwjzqMjQ3ImqjGTnffSPJhWT9kStYUIxMa8=) 6: 34332e3235322e3133362e302f32322d3233203d3e203538343034.roa (hash: VOA028A1R3RrEVD4Qi7zXJp992kxYY/J4fv4wuhxPKY=) 7: 3130332e32382e31342e302f32332d3234203d3e203538343034.roa (hash: aOkYTZDHg/L8yWlo8vIxFqsm7+o0K/8UpGxOwkkG7Ss=) 8: 3130332e32382e31322e302f32332d3234203d3e203538343034.roa (hash: rtaQaHq+P5lP9auuPcmaB5K4uqxx/eB7GaUrzPNCTXU=) 9: 34332e3235322e3133362e302f32342d3234203d3e203538343034.roa (hash: oJcDC3gbkkbl6CgR5ozKOicxGaK/b8KkIxtfAPuJSR4=) 10: 34332e3235322e3133372e302f32342d3234203d3e203538343034.roa (hash: yzlUlkzhlS0Tkdbt12yLVL6Icb64xveQ3bA5i4msJ2M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:12:09:8c:93:41:c8:7b:09:45:e2:6e:5d:21:61:0e:2e:ed:2d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B Validity Not Before: Sep 28 17:52:01 2026 GMT Not After : Sep 29 20:45:01 2026 GMT Subject: CN=70FAD517131C31F958B8A11F48AE1D79398FF86E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b8:fb:e7:99:64:58:59:fb:41:a0:ae:7d:8a: d8:1e:ec:91:38:72:d5:31:57:a8:30:7d:01:ef:c3: 8d:4d:f1:ed:95:0d:98:20:4d:dc:4f:a9:db:d8:82: 94:e6:77:ee:21:40:2e:14:ed:c5:cb:16:16:30:1e: 1a:a1:94:13:0e:d1:34:7f:2d:7e:b5:1b:a2:9a:29: 30:a0:c6:92:ce:06:91:29:31:44:02:a1:33:81:c5: 3c:5f:b6:52:18:66:cf:03:10:8c:d6:4a:33:61:80: 05:e8:42:99:76:8e:bf:17:af:2c:93:19:44:94:e8: e9:c6:42:ff:15:5f:03:ce:6f:60:d7:bb:8c:a4:84: 77:d0:db:ba:02:26:56:f1:04:22:34:84:2f:5c:c3: 58:1c:3e:c2:91:5f:ff:18:b7:e7:72:5d:62:4b:01: b0:c1:a0:f6:9c:86:2a:1b:27:ce:06:24:26:8e:7c: b0:32:7a:a9:c9:b5:54:47:7e:72:ac:b3:10:f4:3a: 9b:cb:43:f9:19:cc:34:d9:76:3e:d6:c0:80:14:37: 42:95:28:98:8a:f6:5b:5f:ad:cf:77:38:58:6f:4d: e9:fc:51:34:3f:fc:e7:6c:fe:26:54:6e:03:61:12: ba:6c:d8:59:6f:d8:c1:c6:e9:72:f9:5b:7b:82:66: 29:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FA:D5:17:13:1C:31:F9:58:B8:A1:1F:48:AE:1D:79:39:8F:F8:6E X509v3 Authority Key Identifier: keyid:9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e1:39:0a:16:ec:d1:58:a0:8b:e9:73:92:e2:48:88:23:2d: da:6d:80:c5:cf:08:3b:c2:4d:e2:9e:ea:59:11:f5:b2:30:fa: 0f:67:a4:09:b2:a3:e3:64:30:b0:58:51:79:fa:a3:c0:21:ad: fa:31:b1:30:f7:6d:63:6f:f5:60:4c:70:17:9a:cc:13:77:cb: 39:2b:0a:83:cf:58:dd:82:56:07:48:b9:92:f4:5a:16:2c:36: 61:b4:77:cf:f0:c1:38:10:13:a3:73:a1:52:83:2d:b4:59:08: eb:e3:bf:89:d2:57:13:aa:38:13:12:ac:f8:cc:00:be:4d:bf: dd:23:99:4c:31:71:99:a7:69:39:04:ea:1d:48:8d:eb:98:0f: a8:49:1e:90:04:8e:e6:a5:22:35:14:8a:5f:f7:df:3c:8e:29: 63:12:b7:ed:21:5c:6a:03:66:3f:b5:68:aa:ad:61:cf:88:c4: 07:75:45:5b:f5:2a:da:b4:3f:2c:a2:d0:1e:3a:5a:d3:2f:88: a2:6f:27:63:73:4a:d5:14:06:da:9b:2e:a2:df:f1:3d:57:43: bb:ea:8a:37:d6:57:60:d4:fb:6a:13:a7:72:a5:a8:6b:b0:bf: 53:44:61:06:2e:97:52:70:7b:1a:14:66:8a:4e:ec:38:a5:6e: c4:ee:7d:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBxIJjJNByHsJReJuXSFhDi7tLZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM1OEMxQzZBRkJCNUI2NkM2NDA2OTRBOTg1OTczMDZD Qzg4REEwQjAeFw0yNjA5MjgxNzUyMDFaFw0yNjA5MjkyMDQ1MDFaMDMxMTAvBgNV BAMTKDcwRkFENTE3MTMxQzMxRjk1OEI4QTExRjQ4QUUxRDc5Mzk4RkY4NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVuPvnmWRYWftBoK59itge7JE4 ctUxV6gwfQHvw41N8e2VDZggTdxPqdvYgpTmd+4hQC4U7cXLFhYwHhqhlBMO0TR/ LX61G6KaKTCgxpLOBpEpMUQCoTOBxTxftlIYZs8DEIzWSjNhgAXoQpl2jr8XryyT GUSU6OnGQv8VXwPOb2DXu4ykhHfQ27oCJlbxBCI0hC9cw1gcPsKRX/8Yt+dyXWJL AbDBoPachiobJ84GJCaOfLAyeqnJtVRHfnKssxD0OpvLQ/kZzDTZdj7WwIAUN0KV KJiK9ltfrc93OFhvTen8UTQ//Ods/iZUbgNhErps2Flv2MHG6XL5W3uCZinHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcPrVFxMcMflYuKEfSK4deTmP+G4wHwYDVR0j BBgwFoAUnFjBxq+7W2bGQGlKmFlzBsyI2gswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmUwZjkxNjMtM2U1YS00ZWZhLThiZDktNGFjNGJjNjMwNDE0LzAvOUM1OEMxQzZB RkJCNUI2NkM2NDA2OTRBOTg1OTczMDZDQzg4REEwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QzU4QzFDNkFGQkI1QjY2QzY0MDY5NEE5ODU5NzMwNkNDODhE QTBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmUwZjkxNjMtM2U1YS00ZWZhLThi ZDktNGFjNGJjNjMwNDE0LzAvOUM1OEMxQzZBRkJCNUI2NkM2NDA2OTRBOTg1OTcz MDZDQzg4REEwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjhOQoW7NFYoIvpc5LiSIgjLdptgMXPCDvC TeKe6lkR9bIw+g9npAmyo+NkMLBYUXn6o8AhrfoxsTD3bWNv9WBMcBeazBN3yzkr CoPPWN2CVgdIuZL0WhYsNmG0d8/wwTgQE6NzoVKDLbRZCOvjv4nSVxOqOBMSrPjM AL5Nv90jmUwxcZmnaTkE6h1IjeuYD6hJHpAEjualIjUUil/33zyOKWMSt+0hXGoD Zj+1aKqtYc+IxAd1RVv1Ktq0Pyyi0B46WtMviKJvJ2NzStUUBtqbLqLf8T1XQ7vq ijfWV2DU+2oTp3KlqGuwv1NEYQYul1JwexoUZopO7DilbsTufTU= -----END CERTIFICATE-----Generated at Mon Sep 28 23:22:50 2026 by rpki-client