$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft File: 9AFC93CAEEA98CBFC0481089E308395A3234F158.mft (raw, json) Hash identifier: yfwHkmYDHjwqK0PACgAdfhZCYIubSCyKOizjcfzbQWM= Subject key identifier: 74:F3:5B:BF:BB:49:67:00:14:99:72:46:74:D8:E0:15:2C:4A:F0:2B Authority key identifier: 9A:FC:93:CA:EE:A9:8C:BF:C0:48:10:89:E3:08:39:5A:32:34:F1:58 Certificate issuer: /CN=9AFC93CAEEA98CBFC0481089E308395A3234F158 Certificate serial: 7902CCDF150B3D92C6F854BE7D417DB18A137C2A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft Manifest number: BD Signing time: Mon 21 Sep 2026 10:34:32 +0000 Manifest this update: Mon 21 Sep 2026 10:29:32 +0000 Manifest next update: Tue 22 Sep 2026 11:55:32 +0000 Files and hashes: 1: 9AFC93CAEEA98CBFC0481089E308395A3234F158.crl (hash: 61XiY+OMgDgAVVVZ3IDJPvVZwrfjvzi3OHw9ZrdR6Uw=) 2: 3130332e3132332e3135382e302f32342d3234203d3e20313332363433.roa (hash: CJzRoBzW5EdikhLdqGZ7+quC12AshwM5y1ZUE0mtwGE=) 3: 3130332e32312e3232382e302f32342d3234203d3e20313332363433.roa (hash: mWMxWItQIy6KIu1MttVIKoQEGs+uqMB7va6yxk2ZK/w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.crl rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:02:cc:df:15:0b:3d:92:c6:f8:54:be:7d:41:7d:b1:8a:13:7c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFC93CAEEA98CBFC0481089E308395A3234F158 Validity Not Before: Sep 21 10:29:32 2026 GMT Not After : Sep 22 11:55:32 2026 GMT Subject: CN=74F35BBFBB4967001499724674D8E0152C4AF02B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e9:17:b4:8a:f3:f5:a4:79:30:75:4a:40:3f: e1:b6:55:93:79:ce:0e:82:6e:9b:0f:90:17:40:5e: 7e:0e:9d:38:13:db:36:68:ec:29:46:4e:af:b7:b4: fa:e3:3f:4a:e9:6b:3c:1c:04:58:08:f9:6c:b9:e6: b6:48:fc:3d:6f:4b:85:02:7a:e3:3a:81:e6:2b:62: 7e:2c:48:cc:70:68:78:c7:89:c0:8f:b1:71:b5:ac: 3c:20:a2:c9:e8:2d:d6:5e:22:9e:43:d8:da:fa:d9: c4:ac:6a:36:ae:84:fe:b8:5f:18:8e:0c:f9:0e:c4: 51:67:86:b2:53:b5:01:20:ef:a7:9c:8c:3d:95:27: 87:b2:57:b2:d2:f0:7e:27:a2:40:a7:26:94:99:5a: 9b:94:85:20:43:40:57:8a:5b:31:a5:3c:32:6e:84: 70:a8:c7:80:f8:cf:90:09:65:08:53:ed:98:e4:7a: 41:8d:d3:0e:67:b5:6c:c0:26:a0:bf:42:86:05:34: 83:98:fa:6b:64:c9:1d:5a:55:52:ac:1f:e0:f9:32: 08:0a:dc:31:8d:a4:94:00:0a:aa:7d:a8:68:ca:2c: 20:d2:f8:26:3b:89:c5:34:c0:04:5c:71:b6:f8:fa: 9d:0b:a2:e7:b0:ae:a1:a3:2a:bb:f9:8c:a9:95:9e: d8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F3:5B:BF:BB:49:67:00:14:99:72:46:74:D8:E0:15:2C:4A:F0:2B X509v3 Authority Key Identifier: keyid:9A:FC:93:CA:EE:A9:8C:BF:C0:48:10:89:E3:08:39:5A:32:34:F1:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:6e:b9:e4:b7:02:bc:a4:05:d0:d3:99:78:99:be:c2:10:04: 9b:8c:f9:59:94:ea:59:f4:41:aa:a2:c3:73:f2:ef:ef:8b:60: e2:a9:41:d9:95:74:dc:4b:87:8b:06:f7:23:2d:cd:0f:76:e7: 31:7b:cf:71:cd:04:14:ff:68:79:11:32:58:69:7c:c5:ef:d1: df:18:a5:2f:12:2d:11:de:8d:65:dd:c1:ed:05:80:e8:74:da: 4a:13:d2:08:80:dd:45:8c:38:68:ad:d8:87:f4:62:26:fa:96: 96:65:08:39:e9:0e:c5:84:7d:79:5b:4a:33:07:44:f9:6f:e0: 3a:2e:2a:5f:c6:b5:33:2e:15:7d:b0:79:95:4a:70:1a:68:86: b2:44:5a:d9:69:52:bf:5d:16:22:9f:d3:7a:1d:7f:d7:b3:39: 5d:56:fe:54:e5:86:13:57:53:fd:32:90:95:86:9a:ed:a9:0f: f1:57:3b:9a:16:b6:17:09:bc:68:e0:42:96:79:26:36:f6:52: cf:40:8a:26:84:0a:75:93:36:10:6d:ea:83:b6:de:50:ad:b2: 7d:e1:ab:bb:cb:10:6d:42:10:d4:af:8b:a6:de:e6:f8:24:6d: 46:9e:eb:b4:db:a8:bf:d0:a3:aa:85:d4:10:ec:ac:17:3b:84: 10:15:de:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeQLM3xULPZLG+FS+fUF9sYoTfCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGQzkzQ0FFRUE5OENCRkMwNDgxMDg5RTMwODM5NUEz MjM0RjE1ODAeFw0yNjA5MjExMDI5MzJaFw0yNjA5MjIxMTU1MzJaMDMxMTAvBgNV BAMTKDc0RjM1QkJGQkI0OTY3MDAxNDk5NzI0Njc0RDhFMDE1MkM0QUYwMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+6Re0ivP1pHkwdUpAP+G2VZN5 zg6CbpsPkBdAXn4OnTgT2zZo7ClGTq+3tPrjP0rpazwcBFgI+Wy55rZI/D1vS4UC euM6geYrYn4sSMxwaHjHicCPsXG1rDwgosnoLdZeIp5D2Nr62cSsajauhP64XxiO DPkOxFFnhrJTtQEg76ecjD2VJ4eyV7LS8H4nokCnJpSZWpuUhSBDQFeKWzGlPDJu hHCox4D4z5AJZQhT7ZjkekGN0w5ntWzAJqC/QoYFNIOY+mtkyR1aVVKsH+D5MggK 3DGNpJQACqp9qGjKLCDS+CY7icU0wARccbb4+p0LouewrqGjKrv5jKmVntgbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdPNbv7tJZwAUmXJGdNjgFSxK8CswHwYDVR0j BBgwFoAUmvyTyu6pjL/ASBCJ4wg5WjI08VgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNhZjI3MWYtYzgzZC00NDFlLWJlYTktMThhMjQ0ZDBlMDBlLzAvOUFGQzkzQ0FF RUE5OENCRkMwNDgxMDg5RTMwODM5NUEzMjM0RjE1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QUZDOTNDQUVFQTk4Q0JGQzA0ODEwODlFMzA4Mzk1QTMyMzRG MTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNhZjI3MWYtYzgzZC00NDFlLWJl YTktMThhMjQ0ZDBlMDBlLzAvOUFGQzkzQ0FFRUE5OENCRkMwNDgxMDg5RTMwODM5 NUEzMjM0RjE1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhuueS3ArykBdDTmXiZvsIQBJuM+VmU6ln0 Qaqiw3Py7++LYOKpQdmVdNxLh4sG9yMtzQ925zF7z3HNBBT/aHkRMlhpfMXv0d8Y pS8SLRHejWXdwe0FgOh02koT0giA3UWMOGit2If0Yib6lpZlCDnpDsWEfXlbSjMH RPlv4DouKl/GtTMuFX2weZVKcBpohrJEWtlpUr9dFiKf03odf9ezOV1W/lTlhhNX U/0ykJWGmu2pD/FXO5oWthcJvGjgQpZ5Jjb2Us9AiiaECnWTNhBt6oO23lCtsn3h q7vLEG1CENSvi6be5vgkbUae67TbqL/Qo6qF1BDsrBc7hBAV3gw= -----END CERTIFICATE-----Generated at Mon Sep 21 17:55:51 2026 by rpki-client