$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft File: C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft (raw, json) Hash identifier: Vu5HfUYojH3ih4k77awjMJcD7cyKtviZ8vcasCrax0I= Subject key identifier: 8C:FB:6F:C1:CD:C0:B3:31:16:19:F5:BD:76:B0:40:18:3E:3C:BB:9C Authority key identifier: C9:BA:0F:8C:78:B3:A4:E5:D2:8E:CD:1C:51:7D:C9:84:38:50:87:CA Certificate issuer: /CN=C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA Certificate serial: 169E66E8C05A35534EB00175C318C2C720317B5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft Manifest number: BD Signing time: Sun 20 Sep 2026 10:50:29 +0000 Manifest this update: Sun 20 Sep 2026 10:45:29 +0000 Manifest next update: Mon 21 Sep 2026 11:33:29 +0000 Files and hashes: 1: 3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa (hash: qWv000ASHZPLikMYj8Wss1d2EPIqC0119NVLho36do8=) 2: C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl (hash: juIyUHN08t+0BEmlgHGcCYW0UemqGS048anZeNzfOcM=) 3: 3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa (hash: 45s4cJ7R43K0N6OFbVA9LlP5PkcF712Aofyn3c/ko+0=) 4: 3130332e3136372e3136372e302f32342d3234203d3e20313431393834.roa (hash: Ivj60OCLGb1xn+8XUcVw7dceegfwRxZ/Fq0NrXLwLn4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 11:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:9e:66:e8:c0:5a:35:53:4e:b0:01:75:c3:18:c2:c7:20:31:7b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA Validity Not Before: Sep 20 10:45:29 2026 GMT Not After : Sep 21 11:33:29 2026 GMT Subject: CN=8CFB6FC1CDC0B3311619F5BD76B040183E3CBB9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:74:29:4c:b3:4c:97:c8:3e:48:be:d0:9d:f2: db:47:fe:fa:10:a6:52:73:5c:b4:36:35:b5:b6:c3: 50:0a:05:f5:47:7a:98:d9:33:bf:2c:46:3d:48:59: cc:a9:e9:dc:67:aa:da:9b:59:f5:54:56:d7:db:00: fa:29:43:c2:8f:bc:f0:2d:a7:27:52:07:b0:d4:9d: ce:80:16:ce:76:49:af:12:cf:51:0c:a0:f1:87:9f: 8c:3f:b8:15:e8:19:ff:52:7f:eb:93:d6:c4:5e:d8: 92:85:d6:22:59:46:10:ec:79:ac:41:12:be:56:2f: 37:17:86:93:e3:ff:6c:83:90:8c:d2:b5:8b:2c:52: 38:eb:3c:10:9c:33:57:41:a1:92:75:6d:b2:89:4f: c5:fd:ac:63:9a:cb:53:a8:b3:0e:6e:26:1b:73:94: 1d:a3:88:e2:16:93:25:85:6b:32:f0:2b:5c:b9:2c: 27:04:8d:8c:a0:54:d9:30:00:ee:f0:7e:e8:14:e7: 8e:08:1b:32:95:10:a4:5f:68:aa:1b:00:f1:5b:25: cb:61:c1:a6:fe:a5:df:2e:1f:58:4e:4c:0d:ba:37: c3:29:d8:ca:35:fe:e1:6d:da:bb:cf:89:f6:b4:82: 12:75:5c:36:be:3c:39:d0:32:cd:b8:ec:4e:b3:b8: f5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FB:6F:C1:CD:C0:B3:31:16:19:F5:BD:76:B0:40:18:3E:3C:BB:9C X509v3 Authority Key Identifier: keyid:C9:BA:0F:8C:78:B3:A4:E5:D2:8E:CD:1C:51:7D:C9:84:38:50:87:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:c6:09:b7:e7:18:5c:f2:6b:3b:4d:79:d6:8c:c5:81:2f:8f: 1e:ef:7d:63:96:9a:36:a9:b7:81:6b:cf:f4:06:1a:7d:33:03: 7b:cb:b1:9c:ac:cc:ed:4f:39:63:3f:48:61:4d:13:3e:ec:e3: 49:60:54:6a:78:dc:bc:2e:d5:71:17:d2:da:67:d9:0d:45:2b: 37:0e:cf:48:da:85:2b:5b:68:66:98:e6:e0:a5:26:a6:f5:9f: 29:bb:1e:cd:21:82:80:17:80:ad:1d:47:f7:58:1f:63:1b:0e: 62:f3:e4:df:e0:59:ed:42:63:e2:93:5d:45:15:f6:b1:a2:6a: ec:f9:1a:23:4f:c6:2c:b7:a8:ff:ff:55:ee:0f:4d:ee:83:4f: 1a:9f:82:46:99:37:2c:d3:a8:1d:5e:8d:e5:1d:e8:18:ba:de: 5b:e2:63:cd:73:78:a6:0e:92:1d:c1:ae:2b:09:3a:28:b0:20: 1d:f7:84:78:af:c6:73:78:47:52:d6:0f:1d:aa:16:ff:aa:33: 84:84:00:8e:1e:14:fd:56:90:5e:cc:7d:ab:94:e9:a9:ef:6f: fe:a3:34:4b:06:58:16:62:ce:3c:19:cc:25:3f:b8:23:57:fe: 13:4e:32:9b:99:f7:78:0b:64:da:ed:24:46:1e:f9:64:6a:3b: 82:2d:cf:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFp5m6MBaNVNOsAF1wxjCxyAxe14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTBGOEM3OEIzQTRFNUQyOEVDRDFDNTE3REM5ODQz ODUwODdDQTAeFw0yNjA5MjAxMDQ1MjlaFw0yNjA5MjExMTMzMjlaMDMxMTAvBgNV BAMTKDhDRkI2RkMxQ0RDMEIzMzExNjE5RjVCRDc2QjA0MDE4M0UzQ0JCOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCodClMs0yXyD5IvtCd8ttH/voQ plJzXLQ2NbW2w1AKBfVHepjZM78sRj1IWcyp6dxnqtqbWfVUVtfbAPopQ8KPvPAt pydSB7DUnc6AFs52Sa8Sz1EMoPGHn4w/uBXoGf9Sf+uT1sRe2JKF1iJZRhDseaxB Er5WLzcXhpPj/2yDkIzStYssUjjrPBCcM1dBoZJ1bbKJT8X9rGOay1Oosw5uJhtz lB2jiOIWkyWFazLwK1y5LCcEjYygVNkwAO7wfugU544IGzKVEKRfaKobAPFbJcth wab+pd8uH1hOTA26N8Mp2Mo1/uFt2rvPifa0ghJ1XDa+PDnQMs247E6zuPXNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjPtvwc3AszEWGfW9drBAGD48u5wwHwYDVR0j BBgwFoAUyboPjHizpOXSjs0cUX3JhDhQh8owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU0MGNmODAtOTMxNS00MmMxLTg0NGUtYmIwMzYyMmEwNWMxLzAvQzlCQTBGOEM3 OEIzQTRFNUQyOEVDRDFDNTE3REM5ODQzODUwODdDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUJBMEY4Qzc4QjNBNEU1RDI4RUNEMUM1MTdEQzk4NDM4NTA4 N0NBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU0MGNmODAtOTMxNS00MmMxLTg0 NGUtYmIwMzYyMmEwNWMxLzAvQzlCQTBGOEM3OEIzQTRFNUQyOEVDRDFDNTE3REM5 ODQzODUwODdDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjGCbfnGFzyaztNedaMxYEvjx7vfWOWmjap t4Frz/QGGn0zA3vLsZyszO1POWM/SGFNEz7s40lgVGp43Lwu1XEX0tpn2Q1FKzcO z0jahStbaGaY5uClJqb1nym7Hs0hgoAXgK0dR/dYH2MbDmLz5N/gWe1CY+KTXUUV 9rGiauz5GiNPxiy3qP//Ve4PTe6DTxqfgkaZNyzTqB1ejeUd6Bi63lviY81zeKYO kh3BrisJOiiwIB33hHivxnN4R1LWDx2qFv+qM4SEAI4eFP1WkF7MfauU6anvb/6j NEsGWBZizjwZzCU/uCNX/hNOMpuZ93gLZNrtJEYe+WRqO4Itz+I= -----END CERTIFICATE-----Generated at Sun Sep 20 20:14:27 2026 by rpki-client