$ rpki-client -vvvf rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft File: 9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft (raw, json) Hash identifier: V5oosrB44jnWeij4ae+Z5wpPrxEt8WXJjohcYZC33Mw= Subject key identifier: 89:BE:AB:F9:01:05:4A:93:87:F2:77:84:BB:97:A3:9E:F7:1E:71:ED Authority key identifier: 9A:42:83:F9:6B:70:1E:C6:0E:A4:5F:12:4F:88:81:9D:76:D7:E8:FC Certificate issuer: /CN=9A4283F96B701EC60EA45F124F88819D76D7E8FC Certificate serial: 5409DE9081F75BAFC6E83D74E41664CEF1AD4C35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft Manifest number: BC Signing time: Sun 20 Sep 2026 18:55:08 +0000 Manifest this update: Sun 20 Sep 2026 18:50:08 +0000 Manifest next update: Mon 21 Sep 2026 19:33:08 +0000 Files and hashes: 1: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: lqSxCFv5WmyrxicOkawzjV/AVzQFgoIxemd6g7X5MqQ=) 2: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 8HBG0p89815vWKkauI6Wn4NeMLGP4fCVAgDc4tDqrGk=) 3: 9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl (hash: RHaQ4oy/qtqTrzNq0dIuvQd6+onRs/VcjYQ0OLbtVUQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:09:de:90:81:f7:5b:af:c6:e8:3d:74:e4:16:64:ce:f1:ad:4c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A4283F96B701EC60EA45F124F88819D76D7E8FC Validity Not Before: Sep 20 18:50:08 2026 GMT Not After : Sep 21 19:33:08 2026 GMT Subject: CN=89BEABF901054A9387F27784BB97A39EF71E71ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d9:85:47:31:4a:ba:25:9b:b4:b6:4f:d6:f2: ea:1e:ea:99:c1:04:78:86:35:8d:86:56:7f:e3:38: af:e5:e6:cf:33:a8:f5:1e:5f:8d:0d:e6:36:6d:90: 37:4a:da:b8:81:7a:88:c3:0c:c3:eb:ac:ca:2a:4b: 08:3e:6c:df:97:9c:27:23:3f:6f:96:4a:9a:35:2c: 51:65:37:31:39:14:8a:aa:83:d6:40:9d:d5:ba:a4: 3c:57:79:37:37:f1:0e:b0:71:3f:5b:e6:3c:3b:c5: 28:f5:28:35:18:4f:de:bb:50:7a:77:36:61:28:12: 99:68:94:53:f5:4d:9c:a3:6c:30:d8:48:3d:a6:4d: 38:5f:cb:54:e0:2f:bf:46:3b:20:51:7d:7e:2e:cf: 51:09:ab:55:85:1f:c6:01:f7:b3:78:43:bb:f6:a7: ad:00:69:44:02:1a:c0:7c:7f:3a:90:be:ef:5d:38: 9d:29:52:64:f2:cf:11:32:de:17:e2:3e:37:7e:99: 89:b1:bd:7a:e1:37:ac:43:53:3c:8d:53:31:a1:d8: 01:88:6a:19:65:42:1c:4e:d2:36:6d:46:8d:a4:25: 45:42:26:0b:a4:5a:ec:53:07:7d:70:5f:eb:e3:ad: 49:54:c4:e1:c5:ac:46:2c:c5:f0:22:7d:9e:b2:b5: 62:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BE:AB:F9:01:05:4A:93:87:F2:77:84:BB:97:A3:9E:F7:1E:71:ED X509v3 Authority Key Identifier: keyid:9A:42:83:F9:6B:70:1E:C6:0E:A4:5F:12:4F:88:81:9D:76:D7:E8:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:33:77:ed:c4:04:e0:d8:3d:dd:c0:65:ca:64:4a:af:4f:c7: 96:09:64:c2:b3:ac:c3:07:1f:86:6d:ed:a3:8c:ce:5c:77:8f: fa:55:20:c9:7a:a3:b9:0b:88:7f:43:ba:55:92:14:4f:79:88: c6:45:c7:9d:f4:6e:8a:35:32:cc:96:d7:98:03:09:c6:da:9d: 4a:34:db:42:cd:a4:8b:74:cf:1c:a3:8f:19:17:b9:88:60:1e: 63:9f:a6:cf:e6:ee:7f:04:37:0a:8b:a1:5d:b3:e4:dd:33:4b: 5c:49:70:f3:12:39:d7:4b:35:ff:7e:8e:d1:70:01:52:ce:8d: 15:52:15:bb:ad:8c:aa:10:30:ee:95:3e:de:1f:1d:82:c0:c0: 3b:88:0e:ca:be:4a:86:93:22:12:5c:17:33:0f:23:0d:41:f8: d3:6e:99:3e:4c:86:af:90:a0:5f:f6:50:2a:1c:6a:e6:62:15: 90:ab:6c:9d:ac:62:de:a4:2f:08:d1:2d:ca:84:0c:78:74:1a: 8a:48:39:06:55:76:b2:2e:f8:1f:7f:f3:35:16:7a:c6:07:2b: f4:fc:eb:db:37:76:50:04:dd:6d:5d:9b:ca:22:83:3d:f5:f3: cb:84:d9:8d:9d:8e:81:d4:56:a3:02:c2:68:a4:8a:53:e0:8a: 0a:56:73:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVAnekIH3W6/G6D105BZkzvGtTDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0MjgzRjk2QjcwMUVDNjBFQTQ1RjEyNEY4ODgxOUQ3 NkQ3RThGQzAeFw0yNjA5MjAxODUwMDhaFw0yNjA5MjExOTMzMDhaMDMxMTAvBgNV BAMTKDg5QkVBQkY5MDEwNTRBOTM4N0YyNzc4NEJCOTdBMzlFRjcxRTcxRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt2YVHMUq6JZu0tk/W8uoe6pnB BHiGNY2GVn/jOK/l5s8zqPUeX40N5jZtkDdK2riBeojDDMPrrMoqSwg+bN+XnCcj P2+WSpo1LFFlNzE5FIqqg9ZAndW6pDxXeTc38Q6wcT9b5jw7xSj1KDUYT967UHp3 NmEoEplolFP1TZyjbDDYSD2mTThfy1TgL79GOyBRfX4uz1EJq1WFH8YB97N4Q7v2 p60AaUQCGsB8fzqQvu9dOJ0pUmTyzxEy3hfiPjd+mYmxvXrhN6xDUzyNUzGh2AGI ahllQhxO0jZtRo2kJUVCJgukWuxTB31wX+vjrUlUxOHFrEYsxfAifZ6ytWITAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUib6r+QEFSpOH8neEu5ejnvcece0wHwYDVR0j BBgwFoAUmkKD+WtwHsYOpF8ST4iBnXbX6PwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODMyYzgyM2QtYTRiNy00MDA1LTlhYjgtZDNiMmM4YmJmNzYzLzAvOUE0MjgzRjk2 QjcwMUVDNjBFQTQ1RjEyNEY4ODgxOUQ3NkQ3RThGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTQyODNGOTZCNzAxRUM2MEVBNDVGMTI0Rjg4ODE5RDc2RDdF OEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh YjgtZDNiMmM4YmJmNzYzLzAvOUE0MjgzRjk2QjcwMUVDNjBFQTQ1RjEyNEY4ODgx OUQ3NkQ3RThGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAzd+3EBODYPd3AZcpkSq9Px5YJZMKzrMMH H4Zt7aOMzlx3j/pVIMl6o7kLiH9DulWSFE95iMZFx530boo1MsyW15gDCcbanUo0 20LNpIt0zxyjjxkXuYhgHmOfps/m7n8ENwqLoV2z5N0zS1xJcPMSOddLNf9+jtFw AVLOjRVSFbutjKoQMO6VPt4fHYLAwDuIDsq+SoaTIhJcFzMPIw1B+NNumT5Mhq+Q oF/2UCocauZiFZCrbJ2sYt6kLwjRLcqEDHh0GopIOQZVdrIu+B9/8zUWesYHK/T8 69s3dlAE3W1dm8oigz3188uE2Y2djoHUVqMCwmikilPgigpWc9Y= -----END CERTIFICATE-----Generated at Mon Sep 21 07:22:07 2026 by rpki-client