$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft File: 9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft (raw, json) Hash identifier: d4qe3N7DE2vugJJ6A5HbCESxEw94tg2a+i0gJixm/C0= Subject key identifier: D8:8B:74:14:65:21:A5:8E:31:E5:82:1E:11:7B:AA:94:CC:EC:CC:CE Authority key identifier: 91:76:CB:6B:BE:53:90:8A:B2:1A:EF:FC:4F:8F:15:1D:9A:74:7E:75 Certificate issuer: /CN=9176CB6BBE53908AB21AEFFC4F8F151D9A747E75 Certificate serial: 06C4DEDE3564E1B11500CB0C11ACB547DB27FDE1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft Manifest number: BE Signing time: Mon 21 Sep 2026 05:48:53 +0000 Manifest this update: Mon 21 Sep 2026 05:43:53 +0000 Manifest next update: Tue 22 Sep 2026 06:24:53 +0000 Files and hashes: 1: 9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.crl (hash: 1mvcRup2PQ9OXIFI+EP+Sz3ccrkSt+hVSaNQbdIRt14=) 2: 3131362e302e302e302f32312d3234203d3e203539313339.roa (hash: sLtYSAekx4+fWo5lqk7vJ2/nnu8bKXpxqT5BWuDEsBY=) 3: 3130332e3235332e302e302f32322d3234203d3e203539313339.roa (hash: 7wsmv0kZBtWJ620fNkkrSVx5J21lFglGMK7gAbjRHjo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.crl rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c4:de:de:35:64:e1:b1:15:00:cb:0c:11:ac:b5:47:db:27:fd:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9176CB6BBE53908AB21AEFFC4F8F151D9A747E75 Validity Not Before: Sep 21 05:43:53 2026 GMT Not After : Sep 22 06:24:53 2026 GMT Subject: CN=D88B74146521A58E31E5821E117BAA94CCECCCCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1e:0d:17:7f:2d:12:bd:a8:c1:b2:8c:fd:7f: 9e:51:85:e0:da:54:73:cf:58:f4:01:b0:f1:df:db: 7a:9b:c2:d4:3d:f5:cc:6e:c3:f4:5b:52:94:06:e7: af:df:3b:17:4b:1a:d8:fa:33:4e:8b:0b:93:b4:57: bc:c8:d0:76:08:a4:38:5a:59:f3:b0:2f:9f:09:af: 17:78:68:22:8a:2c:f9:c6:51:5c:0c:0c:40:bb:10: 2a:3b:03:5e:7c:a7:a0:3a:74:1e:19:af:bd:af:11: b2:5f:dc:f5:17:1e:89:bf:bb:cd:71:f9:b8:32:30: d5:35:a4:f3:e5:8f:17:05:73:37:f6:7e:8e:41:0f: 00:8b:20:ab:dc:fc:fd:09:fc:06:1f:1b:fa:2e:ff: 26:5e:fd:bc:87:01:ff:af:90:e0:c9:9d:89:26:21: 55:22:30:d7:dd:95:50:74:0e:d6:d5:67:9b:37:57: ff:fc:ae:34:03:42:ab:24:db:0a:e5:4e:b9:9c:3e: 21:02:45:6e:7f:f6:41:63:54:19:a0:77:47:89:df: 0f:c0:9d:9f:25:e2:36:e8:dc:57:fc:1b:21:2b:17: 6a:07:ae:c8:78:c3:fa:27:d5:a1:2a:81:27:16:87: 54:4e:e7:6a:8c:6e:5c:38:93:27:5b:e9:be:ba:da: f0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8B:74:14:65:21:A5:8E:31:E5:82:1E:11:7B:AA:94:CC:EC:CC:CE X509v3 Authority Key Identifier: keyid:91:76:CB:6B:BE:53:90:8A:B2:1A:EF:FC:4F:8F:15:1D:9A:74:7E:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c4:fe:67:cc:5d:d3:3b:a1:f8:e1:8d:6f:c2:ad:08:a7:51: 12:10:e8:89:d0:bf:2c:5b:0b:8e:e2:29:b8:65:78:9b:50:c6: 77:fd:c4:82:72:90:ca:28:41:b9:f8:7b:56:57:a9:55:40:77: c2:20:54:c5:94:97:da:1b:88:dc:60:8c:ca:e5:92:1d:d1:09: 5d:b5:68:a2:d6:94:3a:ca:49:ee:57:71:e7:e5:e7:cb:bd:12: f1:e1:1a:e7:03:5e:ba:d8:c9:70:5c:f9:c1:7e:95:e6:3c:68: ae:6e:07:e3:c6:87:96:db:97:71:35:a6:df:dc:e6:17:d7:e3: 80:17:45:0d:10:ea:fc:f3:07:18:65:2d:1a:4b:3f:36:b3:62: 5d:ab:cc:c3:aa:96:b7:ff:58:fb:74:3e:9f:ce:a7:b6:44:b7: 0f:1c:70:ff:f1:7f:6f:ef:54:b3:9a:4a:90:b7:98:4e:67:40: 8b:a0:08:22:33:01:45:62:e8:4a:a6:68:a4:32:08:36:bd:c2: 7b:06:b2:18:61:ee:b4:9b:f2:ee:f8:af:a4:08:94:c0:4e:4c: 2e:86:7b:23:ee:f9:c7:53:8f:17:53:f5:99:f8:dd:c4:43:c7: cd:7e:78:53:ce:6c:29:9c:0f:5a:10:0e:57:70:d6:6f:0e:d6: dc:75:ff:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBsTe3jVk4bEVAMsMEay1R9sn/eEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3NkNCNkJCRTUzOTA4QUIyMUFFRkZDNEY4RjE1MUQ5 QTc0N0U3NTAeFw0yNjA5MjEwNTQzNTNaFw0yNjA5MjIwNjI0NTNaMDMxMTAvBgNV BAMTKEQ4OEI3NDE0NjUyMUE1OEUzMUU1ODIxRTExN0JBQTk0Q0NFQ0NDQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeHg0Xfy0SvajBsoz9f55RheDa VHPPWPQBsPHf23qbwtQ99cxuw/RbUpQG56/fOxdLGtj6M06LC5O0V7zI0HYIpDha WfOwL58Jrxd4aCKKLPnGUVwMDEC7ECo7A158p6A6dB4Zr72vEbJf3PUXHom/u81x +bgyMNU1pPPljxcFczf2fo5BDwCLIKvc/P0J/AYfG/ou/yZe/byHAf+vkODJnYkm IVUiMNfdlVB0DtbVZ5s3V//8rjQDQqsk2wrlTrmcPiECRW5/9kFjVBmgd0eJ3w/A nZ8l4jbo3Ff8GyErF2oHrsh4w/on1aEqgScWh1RO52qMblw4kydb6b662vDhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2It0FGUhpY4x5YIeEXuqlMzszM4wHwYDVR0j BBgwFoAUkXbLa75TkIqyGu/8T48VHZp0fnUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U4Y2Q5N2UtNTZmNS00Y2E1LWE4NWMtNTVhMzIzZjA2MDhjLzAvOTE3NkNCNkJC RTUzOTA4QUIyMUFFRkZDNEY4RjE1MUQ5QTc0N0U3NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTc2Q0I2QkJFNTM5MDhBQjIxQUVGRkM0RjhGMTUxRDlBNzQ3 RTc1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U4Y2Q5N2UtNTZmNS00Y2E1LWE4 NWMtNTVhMzIzZjA2MDhjLzAvOTE3NkNCNkJCRTUzOTA4QUIyMUFFRkZDNEY4RjE1 MUQ5QTc0N0U3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfE/mfMXdM7ofjhjW/CrQinURIQ6InQvyxb C47iKbhleJtQxnf9xIJykMooQbn4e1ZXqVVAd8IgVMWUl9obiNxgjMrlkh3RCV21 aKLWlDrKSe5Xcefl58u9EvHhGucDXrrYyXBc+cF+leY8aK5uB+PGh5bbl3E1pt/c 5hfX44AXRQ0Q6vzzBxhlLRpLPzazYl2rzMOqlrf/WPt0Pp/Op7ZEtw8ccP/xf2/v VLOaSpC3mE5nQIugCCIzAUVi6EqmaKQyCDa9wnsGshhh7rSb8u74r6QIlMBOTC6G eyPu+cdTjxdT9Zn43cRDx81+eFPObCmcD1oQDldw1m8O1tx1/zg= -----END CERTIFICATE-----Generated at Mon Sep 21 15:44:32 2026 by rpki-client