$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft File: 9C227785E7A190271A628E29FFB9374BECA61154.mft (raw, json) Hash identifier: w7V2nIfjbzzOO7rSFhpOwQD8GmuOCgugfD6n/VCmfYA= Subject key identifier: F8:A2:2E:06:33:D4:D8:87:8A:09:47:A8:4C:12:0D:E0:7F:77:63:D3 Authority key identifier: 9C:22:77:85:E7:A1:90:27:1A:62:8E:29:FF:B9:37:4B:EC:A6:11:54 Certificate issuer: /CN=9C227785E7A190271A628E29FFB9374BECA61154 Certificate serial: 06B0F622C1D8E98416F3BC698269406D0376936E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C227785E7A190271A628E29FFB9374BECA61154.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft Manifest number: BE Signing time: Tue 22 Sep 2026 00:06:37 +0000 Manifest this update: Tue 22 Sep 2026 00:01:37 +0000 Manifest next update: Wed 23 Sep 2026 03:59:37 +0000 Files and hashes: 1: 3130332e3132322e3230322e302f32342d3234203d3e20313338303733.roa (hash: bJXWECjiuCYMun/6fgF6wLQ0iGSb4mFhCIoJYAqk5LQ=) 2: 3130332e3132322e3230332e302f32342d3234203d3e20313338303733.roa (hash: OSktfcUOEhaPa/dtCu8RSESeObR9iQ/cknxFlh9rYYM=) 3: 9C227785E7A190271A628E29FFB9374BECA61154.crl (hash: Y66TaqSU5JJh9dTrb+tgywRT4igb7nE3u6R+4BfYuTA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.crl rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C227785E7A190271A628E29FFB9374BECA61154.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:b0:f6:22:c1:d8:e9:84:16:f3:bc:69:82:69:40:6d:03:76:93:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C227785E7A190271A628E29FFB9374BECA61154 Validity Not Before: Sep 22 00:01:37 2026 GMT Not After : Sep 23 03:59:37 2026 GMT Subject: CN=F8A22E0633D4D8878A0947A84C120DE07F7763D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7f:6b:a5:0c:db:b3:a7:4e:56:35:9d:3a:e9: 2a:f3:d2:30:dc:f3:ba:03:50:82:23:7d:5f:3b:33: 7e:01:4a:ed:14:aa:ec:75:86:b0:75:bb:6c:13:0d: d1:df:d4:19:c5:98:04:c8:f4:18:fa:6d:b5:1f:b5: 60:13:7e:e9:01:90:5b:9e:f3:69:71:e7:02:cf:a5: ae:de:9b:07:38:20:ac:2e:15:6e:4d:f3:b5:7c:a9: ad:c1:be:e8:2b:f8:5a:7b:c0:c5:33:85:95:ba:b1: ff:9a:e3:83:17:4d:c5:d7:e6:50:2f:a0:63:2b:49: 54:2f:fc:c9:5b:d3:2d:b3:c5:0e:59:8c:58:e2:45: db:46:b5:1f:8d:6e:9d:24:91:bf:d5:12:7b:7c:a4: b9:fe:28:0a:07:cc:e8:35:6c:18:ec:23:a5:32:f2: 91:5b:a4:8c:ec:6b:60:7c:68:25:67:4a:12:82:1f: 02:47:b6:ea:80:f9:d7:ce:e8:e0:cd:61:a5:35:c6: f8:f7:83:c1:5c:39:44:5b:82:f0:fe:cf:6f:8f:7a: 9d:3d:c6:98:1f:08:4c:42:24:b0:80:92:b9:04:cf: 42:51:f5:05:54:13:d5:1b:94:33:2a:1c:de:a4:a7: 6c:63:ba:79:1e:05:3a:79:54:0e:a1:b1:4a:42:20: 36:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A2:2E:06:33:D4:D8:87:8A:09:47:A8:4C:12:0D:E0:7F:77:63:D3 X509v3 Authority Key Identifier: keyid:9C:22:77:85:E7:A1:90:27:1A:62:8E:29:FF:B9:37:4B:EC:A6:11:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C227785E7A190271A628E29FFB9374BECA61154.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ea:91:fe:db:ec:83:e2:da:9a:a0:2b:59:94:fa:f7:b1:b2: 92:53:9d:3d:f1:d8:3e:98:c5:e8:dd:af:41:71:8d:23:e5:99: 19:da:ae:63:8e:c9:23:c6:ae:c2:ba:bb:21:07:c8:6e:76:8a: 21:58:79:96:1b:77:97:0b:be:98:b6:d3:d8:3f:45:4e:ad:46: 15:c1:a3:46:a1:ac:a8:e1:3a:bd:bf:18:89:5e:03:d0:1b:29: 43:0b:12:68:45:34:50:74:65:26:d4:f7:f7:f1:db:3a:6c:9c: 7d:eb:69:13:82:b6:21:67:40:a5:f5:7e:35:fc:32:09:ee:a1: 68:81:ac:4f:5c:ac:2d:8b:1d:d6:89:2a:48:45:46:ab:5f:b6: a4:0b:2b:cd:42:a1:89:3a:83:4e:d9:6d:01:7f:80:4b:29:0d: 33:ee:d6:07:62:b3:e9:df:f6:00:38:74:ff:da:4a:a5:59:37: 7f:08:12:e0:46:d7:05:63:83:f6:7c:a2:2d:26:c4:c6:f4:63: ab:46:d3:fc:56:cf:6b:19:5b:e5:0b:f2:2a:9e:ed:43:f2:18: 7f:c5:f6:25:42:81:5a:1a:f6:e1:01:08:24:e3:06:98:75:90: ab:e6:f7:f1:5f:e9:c7:de:73:45:28:90:06:44:9f:5a:af:88: 40:4e:35:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBrD2IsHY6YQW87xpgmlAbQN2k24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMyMjc3ODVFN0ExOTAyNzFBNjI4RTI5RkZCOTM3NEJF Q0E2MTE1NDAeFw0yNjA5MjIwMDAxMzdaFw0yNjA5MjMwMzU5MzdaMDMxMTAvBgNV BAMTKEY4QTIyRTA2MzNENEQ4ODc4QTA5NDdBODRDMTIwREUwN0Y3NzYzRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLf2ulDNuzp05WNZ066Srz0jDc 87oDUIIjfV87M34BSu0Uqux1hrB1u2wTDdHf1BnFmATI9Bj6bbUftWATfukBkFue 82lx5wLPpa7emwc4IKwuFW5N87V8qa3Bvugr+Fp7wMUzhZW6sf+a44MXTcXX5lAv oGMrSVQv/Mlb0y2zxQ5ZjFjiRdtGtR+Nbp0kkb/VEnt8pLn+KAoHzOg1bBjsI6Uy 8pFbpIzsa2B8aCVnShKCHwJHtuqA+dfO6ODNYaU1xvj3g8FcOURbgvD+z2+Pep09 xpgfCExCJLCAkrkEz0JR9QVUE9UblDMqHN6kp2xjunkeBTp5VA6hsUpCIDaxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+KIuBjPU2IeKCUeoTBIN4H93Y9MwHwYDVR0j BBgwFoAUnCJ3heehkCcaYo4p/7k3S+ymEVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWQ0ZjYzZTQtNmZiMy00YjAzLWIyMTAtYjU2ODZjZDViMzk3LzAvOUMyMjc3ODVF N0ExOTAyNzFBNjI4RTI5RkZCOTM3NEJFQ0E2MTE1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QzIyNzc4NUU3QTE5MDI3MUE2MjhFMjlGRkI5Mzc0QkVDQTYx MTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWQ0ZjYzZTQtNmZiMy00YjAzLWIy MTAtYjU2ODZjZDViMzk3LzAvOUMyMjc3ODVFN0ExOTAyNzFBNjI4RTI5RkZCOTM3 NEJFQ0E2MTE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLqkf7b7IPi2pqgK1mU+vexspJTnT3x2D6Y xejdr0FxjSPlmRnarmOOySPGrsK6uyEHyG52iiFYeZYbd5cLvpi209g/RU6tRhXB o0ahrKjhOr2/GIleA9AbKUMLEmhFNFB0ZSbU9/fx2zpsnH3raROCtiFnQKX1fjX8 MgnuoWiBrE9crC2LHdaJKkhFRqtftqQLK81CoYk6g07ZbQF/gEspDTPu1gdis+nf 9gA4dP/aSqVZN38IEuBG1wVjg/Z8oi0mxMb0Y6tG0/xWz2sZW+UL8iqe7UPyGH/F 9iVCgVoa9uEBCCTjBph1kKvm9/Ff6cfec0UokAZEn1qviEBONQs= -----END CERTIFICATE-----Generated at Tue Sep 22 13:37:13 2026 by rpki-client