$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft File: D88374740C8E344956042586CFB98762292C9BED.mft (raw, json) Hash identifier: yQz2OxJocG9s9vIt5/kSQsxPVxZMq6sLJBLR5S4pnaM= Subject key identifier: 9A:F4:EA:BF:06:F0:04:54:5E:4B:37:71:C1:9D:37:93:32:22:16:A5 Authority key identifier: D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED Certificate issuer: /CN=D88374740C8E344956042586CFB98762292C9BED Certificate serial: 30C3E012D76B439E2417058970336E04A4C9EA5D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft Manifest number: BD Signing time: Mon 21 Sep 2026 12:57:29 +0000 Manifest this update: Mon 21 Sep 2026 12:52:29 +0000 Manifest next update: Tue 22 Sep 2026 16:14:29 +0000 Files and hashes: 1: D88374740C8E344956042586CFB98762292C9BED.crl (hash: 195vXjK0OfdUlpEcp63rXgdn5parfiQPXzzEMtEq2RY=) 2: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: lP4x2eURdSlbv1g2ymW9KzMnGg6tWIQJ2QaIxsnxvtg=) 3: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: pi4GpQEqsy5D0pG1/itP4Rd3gKkO+zB1DmoOxM7Tnmw=) 4: 3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa (hash: 5Is2TaaRgt6RZbxF5fTOe8DOSBDKMRf8+8dK8LxpkgM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:c3:e0:12:d7:6b:43:9e:24:17:05:89:70:33:6e:04:a4:c9:ea:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D88374740C8E344956042586CFB98762292C9BED Validity Not Before: Sep 21 12:52:29 2026 GMT Not After : Sep 22 16:14:29 2026 GMT Subject: CN=9AF4EABF06F004545E4B3771C19D3793322216A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d7:a3:4d:79:b7:11:e4:e2:0e:54:b4:ad:34: c2:1c:ab:73:89:de:00:57:0d:97:cd:79:18:93:5a: f3:72:32:6c:94:54:97:16:ff:d4:51:cd:1a:17:87: 0f:87:39:51:f3:98:ac:95:fb:0b:07:a0:45:0e:cd: 6d:9c:67:12:5e:1b:e8:d8:e1:d1:b5:ee:7e:bf:9f: a8:c7:49:86:c4:8f:4a:d6:c2:7d:d6:45:2f:6f:3f: 7a:e8:77:6b:44:c9:57:2c:0c:c4:bb:ec:60:0e:69: 7c:6c:93:0d:fc:f9:8d:89:6e:72:7a:fb:d5:c4:6d: 5c:80:15:e3:80:2c:5c:03:fe:48:0e:75:84:00:99: 36:c2:49:a2:46:83:07:c4:53:be:6e:f4:a1:32:88: 08:03:57:dc:a4:48:ea:f1:59:94:0b:32:c9:aa:59: cc:84:9c:30:24:cc:29:fd:c0:0f:b9:2e:3e:24:f7: 1f:29:b2:bb:fe:20:55:d9:98:c4:9b:5b:ad:39:45: 4c:ab:02:d8:ae:df:91:f4:10:77:90:26:58:58:8a: 88:7d:f6:4f:44:9c:77:72:a8:ce:39:96:9f:1b:98: 9d:c4:04:c9:8f:08:fe:8c:13:fa:07:00:46:23:93: a3:31:d6:a6:55:cd:fe:4d:e7:b9:d4:42:4c:f0:c7: f1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F4:EA:BF:06:F0:04:54:5E:4B:37:71:C1:9D:37:93:32:22:16:A5 X509v3 Authority Key Identifier: keyid:D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:4c:c5:3d:cc:60:36:5c:83:0b:c1:62:10:2a:0e:55:27:26: 68:aa:fd:c2:bd:82:01:bb:09:d9:17:e8:3e:ad:8a:e2:d9:08: 6f:26:67:a7:49:2c:70:8f:1f:a4:e7:b4:9b:04:71:17:53:58: e7:c8:90:aa:b6:6f:d4:2c:d3:23:2e:00:1b:0a:22:90:f0:39: 82:ec:be:78:62:0d:58:df:64:ff:4c:87:37:34:f2:f0:3c:93: f9:ae:ea:49:de:9b:7a:a4:13:96:e3:29:9b:c2:86:fc:93:7b: c6:44:59:48:5e:d2:13:7f:07:d2:82:e5:58:e2:bf:a0:70:79: ae:94:07:cf:9c:10:36:58:ae:8f:89:06:03:e5:2a:51:5a:67: 83:dc:e5:ce:0f:10:9b:41:d9:98:4f:50:26:ba:65:62:4d:76: e9:7e:8e:39:cc:ce:e1:db:05:c2:a0:00:fc:04:6c:b2:62:34: 61:d2:cb:27:38:b4:d4:fe:09:1e:05:b8:ba:aa:cf:0c:54:60: 0f:04:0a:9b:5d:a7:fc:af:18:f1:96:c6:ce:b0:ef:54:54:e4: f7:96:77:99:2f:be:4d:3d:da:a6:7b:b1:2b:ab:01:b3:cf:5d: 88:85:65:9e:eb:78:23:0d:26:21:92:94:fc:c3:39:60:f3:3f: 1f:f3:3d:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMMPgEtdrQ54kFwWJcDNuBKTJ6l0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg4Mzc0NzQwQzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIy OTJDOUJFRDAeFw0yNjA5MjExMjUyMjlaFw0yNjA5MjIxNjE0MjlaMDMxMTAvBgNV BAMTKDlBRjRFQUJGMDZGMDA0NTQ1RTRCMzc3MUMxOUQzNzkzMzIyMjE2QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP16NNebcR5OIOVLStNMIcq3OJ 3gBXDZfNeRiTWvNyMmyUVJcW/9RRzRoXhw+HOVHzmKyV+wsHoEUOzW2cZxJeG+jY 4dG17n6/n6jHSYbEj0rWwn3WRS9vP3rod2tEyVcsDMS77GAOaXxskw38+Y2JbnJ6 +9XEbVyAFeOALFwD/kgOdYQAmTbCSaJGgwfEU75u9KEyiAgDV9ykSOrxWZQLMsmq WcyEnDAkzCn9wA+5Lj4k9x8psrv+IFXZmMSbW605RUyrAtiu35H0EHeQJlhYioh9 9k9EnHdyqM45lp8bmJ3EBMmPCP6ME/oHAEYjk6Mx1qZVzf5N57nUQkzwx/GZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmvTqvwbwBFReSzdxwZ03kzIiFqUwHwYDVR0j BBgwFoAU2IN0dAyONElWBCWGz7mHYiksm+0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWViZTdhZDgtZTE1Yy00MDE0LWJmYjMtYmU2OWI3ZDVkZTg4LzAvRDg4Mzc0NzQw QzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIyOTJDOUJFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODgzNzQ3NDBDOEUzNDQ5NTYwNDI1ODZDRkI5ODc2MjI5MkM5 QkVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm YjMtYmU2OWI3ZDVkZTg4LzAvRDg4Mzc0NzQwQzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3 NjIyOTJDOUJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBMxT3MYDZcgwvBYhAqDlUnJmiq/cK9ggG7 CdkX6D6tiuLZCG8mZ6dJLHCPH6TntJsEcRdTWOfIkKq2b9Qs0yMuABsKIpDwOYLs vnhiDVjfZP9Mhzc08vA8k/mu6knem3qkE5bjKZvChvyTe8ZEWUhe0hN/B9KC5Vji v6Bwea6UB8+cEDZYro+JBgPlKlFaZ4Pc5c4PEJtB2ZhPUCa6ZWJNdul+jjnMzuHb BcKgAPwEbLJiNGHSyyc4tNT+CR4FuLqqzwxUYA8ECptdp/yvGPGWxs6w71RU5PeW d5kvvk092qZ7sSurAbPPXYiFZZ7reCMNJiGSlPzDOWDzPx/zPS4= -----END CERTIFICATE-----Generated at Mon Sep 21 15:34:34 2026 by rpki-client