$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft File: E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft (raw, json) Hash identifier: YA28xcyvJBFlqT/hFIudJO5egGLAyyJj3gUIPjGPx8M= Subject key identifier: BB:45:EC:17:D2:81:0B:46:E7:7B:83:73:2E:8B:FF:38:05:3D:D6:27 Authority key identifier: E9:EE:F0:8A:A8:35:6D:76:9B:A1:6B:98:1F:E6:9D:B5:DE:20:34:09 Certificate issuer: /CN=E9EEF08AA8356D769BA16B981FE69DB5DE203409 Certificate serial: 61DA9EC3C6BFD20C1590E38CF4C25CA09974C178 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft Manifest number: BD Signing time: Mon 21 Sep 2026 02:39:44 +0000 Manifest this update: Mon 21 Sep 2026 02:34:44 +0000 Manifest next update: Tue 22 Sep 2026 04:06:44 +0000 Files and hashes: 1: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: UaaNiDpFBSvOxzLMpx1eGc8touUo5VTmZX/HVEAL/G4=) 2: E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl (hash: W74+Z4KaVXwnOwaVsLPbr4IRpKMBJKiT6oMWGRsKm4c=) 3: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: xCU5A2qMTm4OgALTP8opeqK/3efnC4H4bV18tfZlMHk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:da:9e:c3:c6:bf:d2:0c:15:90:e3:8c:f4:c2:5c:a0:99:74:c1:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9EEF08AA8356D769BA16B981FE69DB5DE203409 Validity Not Before: Sep 21 02:34:44 2026 GMT Not After : Sep 22 04:06:44 2026 GMT Subject: CN=BB45EC17D2810B46E77B83732E8BFF38053DD627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8e:86:cf:30:2e:fd:e0:6a:cc:0a:5a:fc:88: 34:4d:96:91:18:6d:f2:d9:e3:c6:e3:94:5f:76:3e: d5:d3:1f:b8:e7:4a:42:0b:55:40:2e:12:ec:76:3d: a6:e5:f6:03:74:55:b5:2d:4f:6c:37:7e:92:00:e5: c1:4f:14:b7:4b:d6:ac:aa:fe:a9:35:fb:1d:37:ef: 35:73:03:0c:6c:65:8a:3d:df:78:1a:e4:3c:1b:05: d2:48:3d:a5:30:bf:74:6b:13:9d:a8:56:6a:4e:58: c2:49:27:f7:31:e4:98:56:47:61:e0:d2:06:4e:10: 7f:ea:a3:84:90:64:82:9d:b3:85:17:9b:3c:97:f4: 48:3e:7e:ee:7d:0c:8c:e1:4a:fa:a0:5b:72:3d:08: 2b:3f:3c:b8:9e:7e:81:f1:e8:68:f0:31:65:93:32: 5e:cb:f7:39:2e:3f:31:b7:6c:cd:26:58:66:7b:e8: 8b:72:75:d6:15:ad:82:4b:82:80:87:d6:31:5d:96: 2d:54:dd:f8:ad:1d:eb:8e:b6:ef:bf:88:b7:63:e5: df:51:8c:aa:33:22:71:f0:c2:f9:1f:f7:14:4f:a6: a2:7b:fc:a1:bc:af:95:c5:e4:64:eb:27:7c:56:0c: 62:26:f7:1f:b7:48:54:74:99:e9:dc:72:64:e2:56: 65:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:45:EC:17:D2:81:0B:46:E7:7B:83:73:2E:8B:FF:38:05:3D:D6:27 X509v3 Authority Key Identifier: keyid:E9:EE:F0:8A:A8:35:6D:76:9B:A1:6B:98:1F:E6:9D:B5:DE:20:34:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:cc:08:ed:48:79:ee:e7:3f:37:7f:8f:38:bb:f0:02:5d:99: 70:4d:9c:0a:4f:1e:91:59:b5:5f:f4:53:e6:8c:e7:bf:52:00: cd:3a:74:50:22:95:78:60:a9:56:2b:3e:af:ba:ee:92:39:66: 8d:bc:15:3a:09:11:9c:00:98:dc:bf:71:31:11:f4:71:86:f5: 8d:00:20:48:74:e5:9d:25:bc:d7:db:a5:61:00:57:25:12:e0: cf:15:c8:41:03:c0:0d:41:ec:20:3b:19:e9:32:66:18:56:c9: 00:ac:a0:72:ae:80:82:f9:0b:6a:97:d7:7b:76:16:8c:82:93: 98:45:8b:ff:3f:9b:e6:06:25:bf:5a:66:16:07:17:1f:dc:44: 27:d7:5e:2f:45:ab:5f:5c:19:30:55:0e:16:2d:3c:d8:1b:92: a0:19:9a:98:16:0e:d4:1b:c8:4a:91:5f:fd:a0:cb:70:0a:45: be:4b:0b:47:50:71:94:8a:20:9c:27:fd:78:60:97:8d:d8:85: 0d:5a:24:ee:0f:aa:85:4e:0d:c3:99:b8:f5:19:e5:18:07:b6: b9:24:59:19:40:2a:34:31:2d:70:44:d3:14:7a:f8:5c:cc:be: 5d:b2:9c:be:d6:63:30:df:6a:f3:35:7d:f9:a4:9b:49:7f:55: c6:e7:2e:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYdqew8a/0gwVkOOM9MJcoJl0wXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlFRUYwOEFBODM1NkQ3NjlCQTE2Qjk4MUZFNjlEQjVE RTIwMzQwOTAeFw0yNjA5MjEwMjM0NDRaFw0yNjA5MjIwNDA2NDRaMDMxMTAvBgNV BAMTKEJCNDVFQzE3RDI4MTBCNDZFNzdCODM3MzJFOEJGRjM4MDUzREQ2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1jobPMC794GrMClr8iDRNlpEY bfLZ48bjlF92PtXTH7jnSkILVUAuEux2Pabl9gN0VbUtT2w3fpIA5cFPFLdL1qyq /qk1+x037zVzAwxsZYo933ga5DwbBdJIPaUwv3RrE52oVmpOWMJJJ/cx5JhWR2Hg 0gZOEH/qo4SQZIKds4UXmzyX9Eg+fu59DIzhSvqgW3I9CCs/PLiefoHx6GjwMWWT Ml7L9zkuPzG3bM0mWGZ76ItyddYVrYJLgoCH1jFdli1U3fitHeuOtu+/iLdj5d9R jKozInHwwvkf9xRPpqJ7/KG8r5XF5GTrJ3xWDGIm9x+3SFR0menccmTiVmUbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu0XsF9KBC0bne4NzLov/OAU91icwHwYDVR0j BBgwFoAU6e7wiqg1bXaboWuYH+adtd4gNAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWZkZTFmMGUtMjMxZi00NGNlLTkwYzMtMzJhY2RmOWQyNmMwLzAvRTlFRUYwOEFB ODM1NkQ3NjlCQTE2Qjk4MUZFNjlEQjVERTIwMzQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOUVFRjA4QUE4MzU2RDc2OUJBMTZCOTgxRkU2OURCNURFMjAz NDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWZkZTFmMGUtMjMxZi00NGNlLTkw YzMtMzJhY2RmOWQyNmMwLzAvRTlFRUYwOEFBODM1NkQ3NjlCQTE2Qjk4MUZFNjlE QjVERTIwMzQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3MCO1Iee7nPzd/jzi78AJdmXBNnApPHpFZ tV/0U+aM579SAM06dFAilXhgqVYrPq+67pI5Zo28FToJEZwAmNy/cTER9HGG9Y0A IEh05Z0lvNfbpWEAVyUS4M8VyEEDwA1B7CA7GekyZhhWyQCsoHKugIL5C2qX13t2 FoyCk5hFi/8/m+YGJb9aZhYHFx/cRCfXXi9Fq19cGTBVDhYtPNgbkqAZmpgWDtQb yEqRX/2gy3AKRb5LC0dQcZSKIJwn/Xhgl43YhQ1aJO4PqoVODcOZuPUZ5RgHtrkk WRlAKjQxLXBE0xR6+FzMvl2ynL7WYzDfavM1ffmkm0l/VcbnLpk= -----END CERTIFICATE-----Generated at Mon Sep 21 18:28:47 2026 by rpki-client