$ rpki-client -vvvf rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft File: 9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft (raw, json) Hash identifier: Tgd23kR8uFdxTjxZ6p4rkLyig6ZxeMPD7FhPcnBICRg= Subject key identifier: 30:D1:51:69:79:41:3F:72:F4:D0:5E:F4:2F:C3:5D:20:48:04:47:63 Authority key identifier: 9F:2F:D5:F0:22:2A:23:10:19:36:82:C9:DC:2C:AB:6A:7F:4C:EE:F0 Certificate issuer: /CN=9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0 Certificate serial: 74F00778820FAEE9AA759EEF09AD48DEC428BAFE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft Manifest number: BD Signing time: Mon 21 Sep 2026 03:10:26 +0000 Manifest this update: Mon 21 Sep 2026 03:05:26 +0000 Manifest next update: Tue 22 Sep 2026 05:56:26 +0000 Files and hashes: 1: 9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.crl (hash: yWocJ1YVx/AIDfIfu25NeegXzDDu6bUvKrvZ/7Wom7s=) 2: 3130332e3137342e36342e302f32332d3234203d3e20313437313236.roa (hash: BwYpBlP3m28Tfj+hQxoec6R8e4UN5PECSBz/IAuPt0w=) 3: 3130332e3137342e36342e302f32342d3234203d3e20313437313236.roa (hash: ZGD3gvwBGhA/oYppfcua832gpcsap+01GHOd/NYuTUc=) 4: 3130332e3137342e36352e302f32342d3234203d3e20313437313236.roa (hash: wlJasn9sEpBfYIb16xYXhPNZ1TeKQ7fHYr3qJmH4nLE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.crl rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:f0:07:78:82:0f:ae:e9:aa:75:9e:ef:09:ad:48:de:c4:28:ba:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0 Validity Not Before: Sep 21 03:05:26 2026 GMT Not After : Sep 22 05:56:26 2026 GMT Subject: CN=30D1516979413F72F4D05EF42FC35D2048044763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9a:d1:27:ba:97:25:b9:f5:d1:a3:40:44:c1: 89:a2:f1:ac:8c:8a:08:a5:bf:7f:a0:ef:d7:bd:ab: ee:74:f1:59:86:c1:6d:b6:29:aa:0a:65:59:04:0b: db:2a:32:f7:90:28:ac:5b:51:36:98:80:f8:51:b9: 2b:9d:14:c4:1b:01:fb:2d:ef:47:28:d5:f2:11:35: e3:e1:96:48:ba:45:25:ad:aa:32:df:cf:0b:f4:56: f5:26:20:b8:43:25:6d:93:e8:77:de:2b:df:0d:d5: 1b:37:7d:04:24:7d:f2:fb:6b:7e:e3:79:18:6a:09: 2d:57:7d:eb:30:67:f8:58:a3:d9:f6:4f:da:29:21: 9d:01:a1:66:44:d9:0c:3c:20:01:3d:fd:73:2f:7f: 1a:fe:a0:29:d5:16:b0:72:39:ba:e1:e8:66:e8:64: 61:87:9d:69:16:94:36:03:4e:b4:cb:af:bb:e9:70: d6:c7:12:8f:6b:e9:2b:2d:79:d8:f4:af:f6:a1:bb: c9:15:72:ba:b3:82:d2:fb:f4:c8:09:e1:41:1f:ef: c7:d3:5c:d3:d3:06:4c:9b:f3:d3:f3:3d:78:22:c4: 15:89:d4:0a:6c:dc:ff:bb:00:6f:97:7c:e8:8e:49: 6c:af:29:91:a0:a7:81:bf:6f:1e:18:7a:79:06:00: 06:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D1:51:69:79:41:3F:72:F4:D0:5E:F4:2F:C3:5D:20:48:04:47:63 X509v3 Authority Key Identifier: keyid:9F:2F:D5:F0:22:2A:23:10:19:36:82:C9:DC:2C:AB:6A:7F:4C:EE:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:63:fd:47:9f:e2:00:4e:fc:6e:03:c1:a4:e1:6a:a2:0b:ba: 4d:7e:4d:f5:52:5e:4a:28:57:fb:14:19:f2:8a:dc:be:2c:16: ff:cc:09:4e:d4:88:b1:b0:b4:0f:ca:8f:03:83:7c:5d:5b:52: 32:88:36:d4:26:f8:f6:fe:e7:77:60:03:57:38:cc:a2:a3:1a: 8c:c0:86:dc:53:5b:8b:17:29:a4:eb:90:ca:d4:fb:ee:fd:62: e8:f9:b6:94:ef:3f:c5:59:86:14:95:36:0d:fa:dd:5f:39:f0: 41:6c:c1:ce:dc:79:6f:8a:4a:61:ba:50:5f:4f:2d:72:94:14: c7:d9:31:31:66:ae:79:87:fc:41:90:43:a7:49:fb:65:53:c7: 4a:c4:3d:de:d2:89:22:82:e1:96:4e:89:aa:ca:e9:4f:e7:db: 55:a3:cf:c0:45:be:ca:27:d5:de:33:b5:f8:44:bd:5e:20:4b: 25:11:26:e1:57:20:f4:7e:87:b1:f8:12:40:7d:3d:96:78:de: 46:5e:54:d5:14:c3:8d:8d:a2:e7:e8:72:ba:a6:88:ae:a0:d4: 50:7d:c1:7e:21:d0:0f:1d:da:77:cb:14:1f:fb:55:f6:b4:17: 29:db:5f:80:00:e6:ec:76:4a:f1:76:7a:3d:cc:6c:72:ad:9d: 01:3e:b4:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdPAHeIIPrumqdZ7vCa1I3sQouv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYyRkQ1RjAyMjJBMjMxMDE5MzY4MkM5REMyQ0FCNkE3 RjRDRUVGMDAeFw0yNjA5MjEwMzA1MjZaFw0yNjA5MjIwNTU2MjZaMDMxMTAvBgNV BAMTKDMwRDE1MTY5Nzk0MTNGNzJGNEQwNUVGNDJGQzM1RDIwNDgwNDQ3NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlmtEnupclufXRo0BEwYmi8ayM igilv3+g79e9q+508VmGwW22KaoKZVkEC9sqMveQKKxbUTaYgPhRuSudFMQbAfst 70co1fIRNePhlki6RSWtqjLfzwv0VvUmILhDJW2T6HfeK98N1Rs3fQQkffL7a37j eRhqCS1XfeswZ/hYo9n2T9opIZ0BoWZE2Qw8IAE9/XMvfxr+oCnVFrByObrh6Gbo ZGGHnWkWlDYDTrTLr7vpcNbHEo9r6Sstedj0r/ahu8kVcrqzgtL79MgJ4UEf78fT XNPTBkyb89PzPXgixBWJ1Aps3P+7AG+XfOiOSWyvKZGgp4G/bx4YenkGAAblAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMNFRaXlBP3L00F70L8NdIEgER2MwHwYDVR0j BBgwFoAUny/V8CIqIxAZNoLJ3Cyran9M7vAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFmNGFiYmUtOGI1ZC00MDJiLTkwNTMtNTBiNzg1Yzc3MzUyLzAvOUYyRkQ1RjAy MjJBMjMxMDE5MzY4MkM5REMyQ0FCNkE3RjRDRUVGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjJGRDVGMDIyMkEyMzEwMTkzNjgyQzlEQzJDQUI2QTdGNENF RUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFmNGFiYmUtOGI1ZC00MDJiLTkw NTMtNTBiNzg1Yzc3MzUyLzAvOUYyRkQ1RjAyMjJBMjMxMDE5MzY4MkM5REMyQ0FC NkE3RjRDRUVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMlj/Uef4gBO/G4DwaThaqILuk1+TfVSXkoo V/sUGfKK3L4sFv/MCU7UiLGwtA/KjwODfF1bUjKINtQm+Pb+53dgA1c4zKKjGozA htxTW4sXKaTrkMrU++79Yuj5tpTvP8VZhhSVNg363V858EFswc7ceW+KSmG6UF9P LXKUFMfZMTFmrnmH/EGQQ6dJ+2VTx0rEPd7SiSKC4ZZOiarK6U/n21Wjz8BFvson 1d4ztfhEvV4gSyURJuFXIPR+h7H4EkB9PZZ43kZeVNUUw42NoufocrqmiK6g1FB9 wX4h0A8d2nfLFB/7Vfa0FynbX4AA5ux2SvF2ej3MbHKtnQE+tNU= -----END CERTIFICATE-----Generated at Mon Sep 21 15:59:46 2026 by rpki-client