$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft File: C9C56B3341FC31139F57F78A815CF9851E91375E.mft (raw, json) Hash identifier: EZjBir0imONqg5dIBVul+PqbmkoxxHd5ydUThFHvnas= Subject key identifier: 6A:47:B0:01:70:BD:8D:C0:C2:1C:8C:EB:CC:E2:73:1E:62:57:93:4C Authority key identifier: C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E Certificate issuer: /CN=C9C56B3341FC31139F57F78A815CF9851E91375E Certificate serial: 2632126C85725C3A2BA6B6C30FB31A874D599340 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft Manifest number: BA Signing time: Sun 20 Sep 2026 08:37:48 +0000 Manifest this update: Sun 20 Sep 2026 08:32:48 +0000 Manifest next update: Mon 21 Sep 2026 12:36:48 +0000 Files and hashes: 1: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: UvvLQHaYsHEf6H/EOqibK//gY5katYyU5vu1/kohXeI=) 2: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: YDyhEGDnWg4aoTzQ4Kj70ioCxeiG+fWs6BKdMJUBP40=) 3: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: ++K50lF9/3pIjVc4GT4lTLKYd8Uj+kdHUPhBXnfZ3JA=) 4: C9C56B3341FC31139F57F78A815CF9851E91375E.crl (hash: xK4HLM2H4tbqZdKtgr00WOlRxhAZHCdRfOgEmmNjHSg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 12:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:32:12:6c:85:72:5c:3a:2b:a6:b6:c3:0f:b3:1a:87:4d:59:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9C56B3341FC31139F57F78A815CF9851E91375E Validity Not Before: Sep 20 08:32:48 2026 GMT Not After : Sep 21 12:36:48 2026 GMT Subject: CN=6A47B00170BD8DC0C21C8CEBCCE2731E6257934C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:75:91:1d:2f:30:df:81:91:8d:26:06:ed: e9:9f:12:7c:76:9c:b6:4a:4a:05:0b:f2:7e:cc:0d: 97:1d:95:35:b9:24:6c:87:ee:2f:03:a6:03:90:7f: 9f:93:b7:f2:3d:27:d1:49:4a:f3:c8:bb:4c:8c:27: a9:a1:93:b6:d0:39:4e:89:7c:ec:ac:9e:86:3b:4d: c2:31:26:91:40:c6:36:9c:c6:f4:44:e9:39:60:5c: 4f:83:d4:f3:fb:c2:bd:30:53:81:c5:39:8d:91:b2: 83:45:9f:d6:d6:a8:80:08:8a:ea:6a:b3:dd:07:a1: 82:69:a0:67:76:c8:fd:c4:89:df:95:b8:39:82:c5: 59:06:b3:3d:59:6d:4b:58:d7:03:6b:44:96:9d:16: 92:42:3d:43:b8:fc:38:97:e2:5c:1a:56:56:38:2d: cc:8b:75:d2:56:c3:53:69:56:a3:42:f3:49:e5:66: 54:84:52:e3:12:81:c1:00:f9:56:67:cc:39:82:0d: 2b:ba:da:59:d9:a6:3d:9d:7a:2e:dd:7b:97:c1:fe: 06:65:1d:15:d2:ef:a2:71:38:49:a3:13:51:bc:a6: 65:b1:12:de:e2:82:33:0f:25:c5:b7:fb:a5:db:33: 8a:bc:2c:38:f8:31:02:a6:f0:10:43:e9:6d:d1:1f: 04:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:47:B0:01:70:BD:8D:C0:C2:1C:8C:EB:CC:E2:73:1E:62:57:93:4C X509v3 Authority Key Identifier: keyid:C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:42:6c:9f:23:9c:29:e5:9c:b2:fc:9c:6f:61:f3:49:b1:ff: dc:90:6a:4d:f9:b7:9d:48:11:e2:82:ea:9a:15:d2:98:12:6c: a7:26:59:41:fb:ef:ee:66:23:7d:aa:75:9f:04:16:d7:4b:0a: c5:9e:95:7e:9e:bd:4a:85:0a:24:4d:20:47:a4:1d:01:c9:83: 42:fb:62:7b:99:bd:00:63:89:0c:2a:9c:27:13:3e:15:cd:9a: 9d:26:6f:92:38:a4:00:81:c3:6c:36:bb:09:d6:e9:ab:c0:75: 28:0c:e1:90:bd:6f:e2:fb:d5:b3:22:6e:9a:6c:20:8b:91:a4: 0b:47:3b:95:4d:34:ea:37:26:31:2c:91:22:a8:91:44:2c:03: b3:3c:42:b6:00:9f:6f:b2:d3:ee:d7:13:1a:88:78:e2:ed:59: 35:e7:3a:a8:65:73:eb:3c:72:58:73:d6:96:d1:70:91:c2:83: d6:96:7a:ca:9a:36:1e:f4:bd:ee:9d:76:be:99:51:3d:6d:dc: 2e:35:8e:3a:9c:e3:9c:15:60:8a:20:dc:89:69:83:f8:3c:f2: 38:36:d9:cd:4e:fd:64:6e:6c:9d:e4:d8:d1:a6:d9:b2:f4:23: 02:88:ac:76:c3:7c:a0:10:d5:e3:93:bd:4f:31:99:09:cb:87: 84:5d:2e:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJjISbIVyXDorprbDD7Mah01Zk0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlDNTZCMzM0MUZDMzExMzlGNTdGNzhBODE1Q0Y5ODUx RTkxMzc1RTAeFw0yNjA5MjAwODMyNDhaFw0yNjA5MjExMjM2NDhaMDMxMTAvBgNV BAMTKDZBNDdCMDAxNzBCRDhEQzBDMjFDOENFQkNDRTI3MzFFNjI1NzkzNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo6HWRHS8w34GRjSYG7emfEnx2 nLZKSgUL8n7MDZcdlTW5JGyH7i8DpgOQf5+Tt/I9J9FJSvPIu0yMJ6mhk7bQOU6J fOysnoY7TcIxJpFAxjacxvRE6TlgXE+D1PP7wr0wU4HFOY2RsoNFn9bWqIAIiupq s90HoYJpoGd2yP3Eid+VuDmCxVkGsz1ZbUtY1wNrRJadFpJCPUO4/DiX4lwaVlY4 LcyLddJWw1NpVqNC80nlZlSEUuMSgcEA+VZnzDmCDSu62lnZpj2dei7de5fB/gZl HRXS76JxOEmjE1G8pmWxEt7igjMPJcW3+6XbM4q8LDj4MQKm8BBD6W3RHwSHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUakewAXC9jcDCHIzrzOJzHmJXk0wwHwYDVR0j BBgwFoAUycVrM0H8MROfV/eKgVz5hR6RN14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI4YTdmYTUtZmRhMy00YTNlLTkyZjctZmFiZmVkMDVhOTVjLzAvQzlDNTZCMzM0 MUZDMzExMzlGNTdGNzhBODE1Q0Y5ODUxRTkxMzc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUM1NkIzMzQxRkMzMTEzOUY1N0Y3OEE4MTVDRjk4NTFFOTEz NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvQzlDNTZCMzM0MUZDMzExMzlGNTdGNzhBODE1Q0Y5 ODUxRTkxMzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9CbJ8jnCnlnLL8nG9h80mx/9yQak35t51I EeKC6poV0pgSbKcmWUH77+5mI32qdZ8EFtdLCsWelX6evUqFCiRNIEekHQHJg0L7 YnuZvQBjiQwqnCcTPhXNmp0mb5I4pACBw2w2uwnW6avAdSgM4ZC9b+L71bMibpps IIuRpAtHO5VNNOo3JjEskSKokUQsA7M8QrYAn2+y0+7XExqIeOLtWTXnOqhlc+s8 clhz1pbRcJHCg9aWesqaNh70ve6ddr6ZUT1t3C41jjqc45wVYIog3Ilpg/g88jg2 2c1O/WRubJ3k2NGm2bL0IwKIrHbDfKAQ1eOTvU8xmQnLh4RdLlE= -----END CERTIFICATE-----Generated at Sun Sep 20 19:38:44 2026 by rpki-client