$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft File: 9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft (raw, json) Hash identifier: 28RkfbyTUpvaxLCtJbVOJmpsK3RkQ1qRz0oIGAq/j1s= Subject key identifier: B2:59:8A:D7:EB:A0:68:C8:6D:68:D2:C6:2F:12:DE:89:D0:69:0F:ED Authority key identifier: 9F:2D:47:C2:7A:04:66:64:7C:9A:8F:AF:24:6A:C8:5A:9F:2B:1F:BD Certificate issuer: /CN=9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD Certificate serial: 57A9208FE1BF312DE8346F0E395A04A854BA980F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft Manifest number: BF Signing time: Mon 21 Sep 2026 15:25:46 +0000 Manifest this update: Mon 21 Sep 2026 15:20:46 +0000 Manifest next update: Tue 22 Sep 2026 17:30:46 +0000 Files and hashes: 1: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: XHc5XJ3BNfkaI/lsgwiIo3VZ/lOhS7oABSPc/TOM6ZY=) 2: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: 38Xm9PyU4xIsiex90hJwlQrnnXy77AnXzl8H3OHJdtc=) 3: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: eE9KfhHZMD39d40KbY7oSEFpRtTmkSjOZgjX7V3PP3E=) 4: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: Yg7MUDs8e7RtjcON84BP67HQDd4RbJW/QQRbIefF+fk=) 5: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: 7UHUG49KeSvdqIfX5Q2/sjN4aSqQC/7iFrJSNv+5Ax4=) 6: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: evwEHBL+Efz58EUm4jU4ct9sLmawRVLDyaUcdYukI+g=) 7: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: bTctqXrHoddHLmiHRZEAbvepwDnyNZuBmN3yjSF/QUg=) 8: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: ueytpOIHoXmrHTRXDms0z+mkyIFFMatKweHFitzqnbY=) 9: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: wjQlJjUfkbt1n7Rc6SHSm1K1dY+H6SCMIIZnXPYbFUQ=) 10: 9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl (hash: DxS+TUKG3ZZynSWmqrtjyQC4i3w3eSDv/KwjcLVQRtM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a9:20:8f:e1:bf:31:2d:e8:34:6f:0e:39:5a:04:a8:54:ba:98:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD Validity Not Before: Sep 21 15:20:46 2026 GMT Not After : Sep 22 17:30:46 2026 GMT Subject: CN=B2598AD7EBA068C86D68D2C62F12DE89D0690FED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:37:b6:02:e3:ef:e4:c6:ed:93:df:c3:9e:a1: aa:85:ce:be:e5:fa:46:ee:e7:75:4e:16:c8:63:89: 4b:d7:78:50:06:72:54:7e:48:90:d5:af:d2:59:09: 49:fc:2c:f4:4f:00:68:62:5a:e3:8a:77:a5:ef:1c: d0:a7:40:a8:8e:b6:42:cc:24:ea:2f:44:5b:c9:69: a4:1a:b8:cc:b2:85:18:d2:29:a3:ab:1f:5b:a0:08: de:b0:6c:b6:b9:23:cc:01:20:16:20:b8:48:5d:16: 68:ea:29:94:e3:77:4f:70:49:d0:ca:e3:70:82:db: 4d:fa:10:5e:d3:1e:c8:d6:61:c2:b8:dc:ba:b6:e6: f5:7e:fc:2f:37:f3:10:d0:9f:ee:fb:54:91:64:1c: f9:69:04:e8:bf:23:94:3c:35:43:72:66:ab:7f:39: 7c:5b:d0:0d:1a:c9:2f:1b:fc:6f:ad:b2:e4:87:39: 7e:65:c6:68:7f:48:11:4a:f2:14:bd:c0:e8:1d:89: a0:e1:e1:a1:48:20:dc:e0:d1:43:ac:50:c6:25:a7: 23:ca:a4:7a:a8:07:b8:66:69:d0:56:c9:36:ba:74: fc:bd:6a:32:51:c0:5b:5e:07:cf:34:2c:1f:e5:aa: b3:bb:98:cd:e2:a5:80:b9:07:c7:b2:7e:8a:69:f9: 4d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:59:8A:D7:EB:A0:68:C8:6D:68:D2:C6:2F:12:DE:89:D0:69:0F:ED X509v3 Authority Key Identifier: keyid:9F:2D:47:C2:7A:04:66:64:7C:9A:8F:AF:24:6A:C8:5A:9F:2B:1F:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:47:e6:55:4b:8f:3e:e6:f5:c8:ad:f0:b8:a5:1c:fd:83:f6: 58:3a:11:77:38:5a:14:38:58:be:48:7d:ac:b6:99:ce:76:9e: 43:06:0f:95:76:59:bc:25:a2:a4:64:61:6f:83:ce:d4:d1:53: 06:dd:50:a8:a9:e3:7c:1f:b0:e2:2c:f6:39:3d:3c:e9:31:4d: af:fb:13:ff:ca:c0:e4:16:14:db:cc:9a:4d:46:15:11:69:42: 95:03:ff:74:d3:29:5a:45:85:83:b9:10:ac:4b:ad:ca:05:99: 13:91:23:9a:3f:e8:16:c5:e1:6f:28:68:c5:24:3b:1e:1d:94: e7:5b:e9:d0:d5:a7:84:fc:2c:8f:87:7d:b2:86:a0:ef:06:29: 3c:f4:b0:63:ba:fa:8b:f7:ac:ab:e0:47:e6:bd:21:fd:44:c8: 6f:28:ac:b9:f9:10:14:f0:fd:9b:03:da:08:c5:4d:0a:8d:6c: 3b:a3:d6:a5:67:7a:6b:ed:3b:a8:06:a8:47:53:2c:75:a0:33: a8:04:2f:63:65:95:a3:c1:89:f4:3c:56:c3:cf:00:4b:20:8f: 15:49:28:54:6d:b8:0a:33:4c:e8:7f:18:dc:fc:85:c2:64:cd: 99:bc:97:84:4f:2c:66:b6:3e:e6:25:55:41:49:b5:8a:a4:78: d0:12:52:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV6kgj+G/MS3oNG8OOVoEqFS6mA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYyRDQ3QzI3QTA0NjY2NDdDOUE4RkFGMjQ2QUM4NUE5 RjJCMUZCRDAeFw0yNjA5MjExNTIwNDZaFw0yNjA5MjIxNzMwNDZaMDMxMTAvBgNV BAMTKEIyNTk4QUQ3RUJBMDY4Qzg2RDY4RDJDNjJGMTJERTg5RDA2OTBGRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfN7YC4+/kxu2T38OeoaqFzr7l +kbu53VOFshjiUvXeFAGclR+SJDVr9JZCUn8LPRPAGhiWuOKd6XvHNCnQKiOtkLM JOovRFvJaaQauMyyhRjSKaOrH1ugCN6wbLa5I8wBIBYguEhdFmjqKZTjd09wSdDK 43CC2036EF7THsjWYcK43Lq25vV+/C838xDQn+77VJFkHPlpBOi/I5Q8NUNyZqt/ OXxb0A0ayS8b/G+tsuSHOX5lxmh/SBFK8hS9wOgdiaDh4aFIINzg0UOsUMYlpyPK pHqoB7hmadBWyTa6dPy9ajJRwFteB880LB/lqrO7mM3ipYC5B8eyfopp+U0zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUslmK1+ugaMhtaNLGLxLeidBpD+0wHwYDVR0j BBgwFoAUny1HwnoEZmR8mo+vJGrIWp8rH70wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzIyOTc4MWEtOGFjOS00NDUyLWIyNWYtNTRlN2VkZjdkNGE0LzAvOUYyRDQ3QzI3 QTA0NjY2NDdDOUE4RkFGMjQ2QUM4NUE5RjJCMUZCRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjJENDdDMjdBMDQ2NjY0N0M5QThGQUYyNDZBQzg1QTlGMkIx RkJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzIyOTc4MWEtOGFjOS00NDUyLWIy NWYtNTRlN2VkZjdkNGE0LzAvOUYyRDQ3QzI3QTA0NjY2NDdDOUE4RkFGMjQ2QUM4 NUE5RjJCMUZCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtH5lVLjz7m9cit8LilHP2D9lg6EXc4WhQ4 WL5Ifay2mc52nkMGD5V2WbwloqRkYW+DztTRUwbdUKip43wfsOIs9jk9POkxTa/7 E//KwOQWFNvMmk1GFRFpQpUD/3TTKVpFhYO5EKxLrcoFmRORI5o/6BbF4W8oaMUk Ox4dlOdb6dDVp4T8LI+HfbKGoO8GKTz0sGO6+ov3rKvgR+a9If1EyG8orLn5EBTw /ZsD2gjFTQqNbDuj1qVnemvtO6gGqEdTLHWgM6gEL2NllaPBifQ8VsPPAEsgjxVJ KFRtuAozTOh/GNz8hcJkzZm8l4RPLGa2PuYlVUFJtYqkeNASUk4= -----END CERTIFICATE-----Generated at Tue Sep 22 08:53:41 2026 by rpki-client