$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft File: 9796934CE983E32FE16AC8EC0968FB6FF0339712.mft (raw, json) Hash identifier: 50CDNCWpELqPKwZzKuce5g4fHTv5QHSgFzWaDURZCl0= Subject key identifier: AA:91:AF:19:BD:B5:05:2A:B7:85:AB:A3:E6:73:AD:96:AC:66:4A:B8 Authority key identifier: 97:96:93:4C:E9:83:E3:2F:E1:6A:C8:EC:09:68:FB:6F:F0:33:97:12 Certificate issuer: /CN=9796934CE983E32FE16AC8EC0968FB6FF0339712 Certificate serial: 3A017AF53D6A282D8B5E8BC3D069F19596620842 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft Manifest number: BE Signing time: Mon 21 Sep 2026 04:01:27 +0000 Manifest this update: Mon 21 Sep 2026 03:56:27 +0000 Manifest next update: Tue 22 Sep 2026 07:42:27 +0000 Files and hashes: 1: 3130332e39302e32352e302f32342d3234203d3e203633343937.roa (hash: y59gW5BEgEi3F+rl6LRjNXAc9apuX+ON4CV36/Ae45k=) 2: 3130332e3233322e3234322e302f32342d3234203d3e203633343937.roa (hash: CyXCnh6Eu/KCDGsGPBvecfzZa94iTRYuLOf5EOeQnK4=) 3: 9796934CE983E32FE16AC8EC0968FB6FF0339712.crl (hash: kQVtZo9fY8OzT+14KYvfGBc6LLXlmG0wzJIkW+rMEKE=) 4: 3130332e39302e32342e302f32342d3234203d3e20313332363733.roa (hash: rNgJ1hrCOEzVkRLQiZgbFHzGeuIdRSxk2VHfwHrqS1k=) 5: 3130332e3233322e3234302e302f32342d3234203d3e203633343937.roa (hash: TDOsoHO/HMJ3+M/IDdZkOYM5yQ6eYeDxjPpemNYDfKc=) 6: 3130332e39302e32362e302f32342d3234203d3e203633343937.roa (hash: yEBegNseO4WhgSgnMf0UD1P9unzjG8GGfBUDaVupNxw=) 7: 3130332e3233322e3234332e302f32342d3234203d3e203633343937.roa (hash: dKhNn6GJjJO6VU2o0VhUMT3uGr0zEWCIpRqbnuOjsu4=) 8: 3130332e3235302e3139392e302f32342d3234203d3e203633343937.roa (hash: 90gI7sKaQLOikXOS30SwmXL0rMP42rJQ2sx3CKH87jQ=) 9: 3130332e3233322e3234322e302f32332d3233203d3e203633343937.roa (hash: UWBZ8HDVUh8vSiS9fwmZD70vxv5kj8iLpVqFbVQF6Ag=) 10: 3130332e39302e32372e302f32342d3234203d3e20313332363733.roa (hash: gEjgmPi52YAqYyRKLzVAHY/tcddAmwneB2Joo9b5lCU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.crl rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 07:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:01:7a:f5:3d:6a:28:2d:8b:5e:8b:c3:d0:69:f1:95:96:62:08:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9796934CE983E32FE16AC8EC0968FB6FF0339712 Validity Not Before: Sep 21 03:56:27 2026 GMT Not After : Sep 22 07:42:27 2026 GMT Subject: CN=AA91AF19BDB5052AB785ABA3E673AD96AC664AB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e5:dd:12:fd:d8:88:e2:46:32:67:f0:24:e2: 92:1e:6f:56:60:5f:cc:0c:0e:c9:c5:4f:18:fd:09: 0c:ef:cf:91:06:ed:9c:4f:41:b0:c2:b1:bd:16:67: b6:b3:a7:65:fe:55:93:21:e3:ed:7e:bd:fc:58:69: ec:32:e8:10:6b:01:cb:34:de:54:91:08:f9:c1:3e: 3a:35:43:2a:e0:9c:35:9e:ba:40:d8:f1:22:a1:9c: f8:38:1c:7a:2a:88:c4:08:22:05:0e:cd:58:e7:1d: 04:dd:1c:d0:f2:a3:51:9b:67:0e:84:1b:dd:68:0f: 69:44:06:6c:a2:2b:c7:9e:89:ea:ed:cf:a5:c5:4a: 8d:a8:02:c6:ff:38:81:54:f4:29:6b:bc:85:54:47: 27:73:12:cb:5c:98:d1:59:e1:1d:3e:9d:bd:76:43: df:d5:a0:97:64:cc:dc:93:6f:7e:e4:c6:fd:4a:1a: e7:c9:8e:bd:fb:14:0b:2b:ff:04:9c:db:48:b9:bc: 37:1e:73:64:75:93:28:ce:c0:43:9f:6c:c6:16:13: 7f:ae:82:a8:8f:3d:4f:ec:bf:bf:d7:87:7a:1a:b9: 6e:fe:d2:57:a8:77:7d:19:5c:3a:e5:49:9d:bf:46: 0c:64:97:d8:e4:e7:50:77:d3:4f:90:a4:ac:91:d6: e5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:91:AF:19:BD:B5:05:2A:B7:85:AB:A3:E6:73:AD:96:AC:66:4A:B8 X509v3 Authority Key Identifier: keyid:97:96:93:4C:E9:83:E3:2F:E1:6A:C8:EC:09:68:FB:6F:F0:33:97:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:df:9a:19:07:52:bd:47:66:43:61:de:87:06:a2:3a:40:49: af:22:7d:e7:cf:29:55:0c:2c:b6:9e:05:99:38:89:d9:0f:af: eb:8d:8b:5f:37:53:9b:27:4f:94:70:84:e7:40:ef:5a:d6:14: 38:65:8e:5b:28:31:ca:8e:ee:0d:68:e4:a3:5e:cb:ef:a5:09: 8c:63:6b:26:64:c3:99:31:f0:a5:0e:78:00:d5:46:f7:70:ef: 94:86:e5:1f:d2:06:c1:dc:a4:ff:b6:27:78:4b:bd:a6:1c:70: e7:58:95:5c:35:bc:10:1d:37:4b:83:0a:e4:66:b8:a1:20:f8: 2a:4d:36:e2:9f:9f:15:f0:63:51:91:9f:ab:79:d9:1b:31:47: 39:63:20:7f:c2:9c:f4:72:c6:d2:96:5c:bb:ef:26:25:e6:c8: f2:e3:9f:e5:59:dd:e4:56:4d:58:3a:15:7b:54:c4:aa:ea:14: 03:e9:ff:7c:f0:04:a8:d2:55:c2:eb:7c:3f:17:93:df:9e:13: a3:d7:dc:9f:f2:3f:70:ea:49:6a:c5:93:98:31:0a:7e:5f:a3: 9a:52:e9:7a:1c:75:b7:95:d3:8b:b0:81:95:0c:6e:32:da:95: 73:21:0c:ef:cd:47:c7:cb:75:ba:cd:ac:24:0a:e5:2f:8c:de: e5:1b:84:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOgF69T1qKC2LXovD0GnxlZZiCEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc5NjkzNENFOTgzRTMyRkUxNkFDOEVDMDk2OEZCNkZG MDMzOTcxMjAeFw0yNjA5MjEwMzU2MjdaFw0yNjA5MjIwNzQyMjdaMDMxMTAvBgNV BAMTKEFBOTFBRjE5QkRCNTA1MkFCNzg1QUJBM0U2NzNBRDk2QUM2NjRBQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC5d0S/diI4kYyZ/Ak4pIeb1Zg X8wMDsnFTxj9CQzvz5EG7ZxPQbDCsb0WZ7azp2X+VZMh4+1+vfxYaewy6BBrAcs0 3lSRCPnBPjo1QyrgnDWeukDY8SKhnPg4HHoqiMQIIgUOzVjnHQTdHNDyo1GbZw6E G91oD2lEBmyiK8eeiertz6XFSo2oAsb/OIFU9ClrvIVURydzEstcmNFZ4R0+nb12 Q9/VoJdkzNyTb37kxv1KGufJjr37FAsr/wSc20i5vDcec2R1kyjOwEOfbMYWE3+u gqiPPU/sv7/Xh3oauW7+0leod30ZXDrlSZ2/Rgxkl9jk51B300+QpKyR1uVZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqpGvGb21BSq3hauj5nOtlqxmSrgwHwYDVR0j BBgwFoAUl5aTTOmD4y/hasjsCWj7b/AzlxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE2MzNiOGUtMGRmOS00NGFjLTljYWUtZDZmNjc2NWE1MmM5LzAvOTc5NjkzNENF OTgzRTMyRkUxNkFDOEVDMDk2OEZCNkZGMDMzOTcxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85Nzk2OTM0Q0U5ODNFMzJGRTE2QUM4RUMwOTY4RkI2RkYwMzM5 NzEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE2MzNiOGUtMGRmOS00NGFjLTlj YWUtZDZmNjc2NWE1MmM5LzAvOTc5NjkzNENFOTgzRTMyRkUxNkFDOEVDMDk2OEZC NkZGMDMzOTcxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDfmhkHUr1HZkNh3ocGojpASa8ifefPKVUM LLaeBZk4idkPr+uNi183U5snT5RwhOdA71rWFDhljlsoMcqO7g1o5KNey++lCYxj ayZkw5kx8KUOeADVRvdw75SG5R/SBsHcpP+2J3hLvaYccOdYlVw1vBAdN0uDCuRm uKEg+CpNNuKfnxXwY1GRn6t52RsxRzljIH/CnPRyxtKWXLvvJiXmyPLjn+VZ3eRW TVg6FXtUxKrqFAPp/3zwBKjSVcLrfD8Xk9+eE6PX3J/yP3DqSWrFk5gxCn5fo5pS 6XocdbeV04uwgZUMbjLalXMhDO/NR8fLdbrNrCQK5S+M3uUbhFE= -----END CERTIFICATE-----Generated at Mon Sep 21 23:42:53 2026 by rpki-client