$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft File: C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft (raw, json) Hash identifier: vi2IyyFsIJ4wwtMLSnXDjNZ+0QVjl56rVNacyC4ArEU= Subject key identifier: 97:29:D0:4E:3C:D4:D5:01:4A:91:8C:85:0C:8D:A3:58:BB:5C:0C:4C Authority key identifier: C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94 Certificate issuer: /CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894 Certificate serial: 4F81CDD94FC36A9701B02DCDC3BDF86918FF21A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft Manifest number: BC Signing time: Sun 20 Sep 2026 22:29:40 +0000 Manifest this update: Sun 20 Sep 2026 22:24:40 +0000 Manifest next update: Mon 21 Sep 2026 22:45:40 +0000 Files and hashes: 1: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: Pfe66TELIpbboDlTlvL4smle14adEmFMF0KS3kt6HYM=) 2: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: ZVZI5MXEYgq+QpFFWNL7lGXYAS9omg0P+vD6tywGpec=) 3: C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl (hash: Kd9HEtBNjeMt474kw2r7AbsNJpRU0ODzYgbvSGQRmvY=) 4: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: occ5qoM9oAkKmzdKhCiXxb0YYDDzZw7eQPlVtS1+AXA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 22:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:81:cd:d9:4f:c3:6a:97:01:b0:2d:cd:c3:bd:f8:69:18:ff:21:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894 Validity Not Before: Sep 20 22:24:40 2026 GMT Not After : Sep 21 22:45:40 2026 GMT Subject: CN=9729D04E3CD4D5014A918C850C8DA358BB5C0C4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8d:fa:3b:cd:04:24:22:8c:6f:1b:96:79:bd: ce:fd:ab:45:2f:75:78:7d:6f:bc:30:b4:06:0a:10: df:84:a1:15:e4:03:48:a3:af:93:3c:d2:27:56:bb: 85:12:61:09:85:45:b5:ed:46:dc:c6:b7:1d:2d:1d: a5:7c:7f:3c:66:be:0b:b3:24:40:d7:e9:53:6c:bd: 39:b0:90:b4:34:cf:28:60:43:3d:28:8a:c1:b6:53: bb:54:ea:a0:2c:83:8b:27:ae:6c:8d:6f:e2:b5:bd: 3d:5d:54:19:6a:95:73:cd:95:ab:28:c4:0f:f0:17: a6:42:20:1d:9b:66:c9:f5:09:ea:ef:94:32:fc:c1: 60:cd:e9:10:27:fd:a5:37:1a:d3:29:30:24:a5:1a: 3f:e6:7e:ae:72:4a:06:08:80:76:f3:ff:1c:cb:31: d6:80:f7:97:5a:25:8b:37:94:64:b6:6a:ed:2c:bc: 00:92:f8:c5:2b:d1:12:93:fd:97:a7:a5:3f:48:69: 62:be:8e:52:3c:8c:6e:97:2a:0d:58:f9:8b:36:26: e5:fe:7f:88:53:63:95:0e:d1:dd:d0:6e:ba:5c:b0: a5:35:d6:b2:41:5b:82:ea:e4:21:5f:ec:f3:95:69: 9f:86:5e:97:3b:55:fc:b5:a3:ea:c0:ac:f3:43:db: d9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:29:D0:4E:3C:D4:D5:01:4A:91:8C:85:0C:8D:A3:58:BB:5C:0C:4C X509v3 Authority Key Identifier: keyid:C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:95:10:5d:2c:10:ce:13:cf:23:80:ad:4c:3d:d8:b2:81:be: 20:3f:44:c3:cf:25:b5:e7:97:cc:3a:39:9a:a0:90:47:81:5f: 3e:76:bf:c4:81:96:78:ab:d7:34:9e:84:a1:fc:bc:4e:6d:4b: 3d:90:fb:53:3a:f1:55:db:3b:2d:a3:2b:bd:26:32:c6:1a:46: ae:d9:5f:e2:b5:4b:ee:df:f0:28:2e:37:ad:01:16:8d:cd:e7: 91:a0:0f:f7:24:9a:54:b0:73:be:ec:a8:8a:99:70:e5:ac:4a: 12:79:f0:85:9f:f0:18:ab:4d:a2:59:25:1a:66:eb:a4:96:c5: 2f:d9:99:15:c5:30:97:76:32:03:e8:6a:0b:ec:fd:fa:bf:7f: b3:42:ad:ea:fe:0d:bb:92:09:aa:71:fe:7c:83:92:12:7e:39: 5e:9f:32:4c:0f:5f:da:35:70:55:2c:f1:10:d4:33:96:b9:43: 0d:f6:3a:53:f5:da:8e:85:e5:b6:ff:cd:e4:bf:f9:9a:6e:b7: fd:76:e4:e6:a0:6c:50:89:05:b1:c3:67:04:73:ab:9a:b3:dc: a1:83:3d:3c:e0:48:d8:78:c6:5a:8e:fe:5b:d2:fa:c2:c7:79: 17:50:14:f1:44:4a:ad:10:74:48:c6:7b:7d:ed:92:c9:27:ec: 58:e1:6f:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT4HN2U/DapcBsC3Nw734aRj/IaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQkRGMEVBMTRERERGMEM1NTFERjE4NjMzMkNCODU5 RUI5RDg5NDAeFw0yNjA5MjAyMjI0NDBaFw0yNjA5MjEyMjQ1NDBaMDMxMTAvBgNV BAMTKDk3MjlEMDRFM0NENEQ1MDE0QTkxOEM4NTBDOERBMzU4QkI1QzBDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjfo7zQQkIoxvG5Z5vc79q0Uv dXh9b7wwtAYKEN+EoRXkA0ijr5M80idWu4USYQmFRbXtRtzGtx0tHaV8fzxmvguz JEDX6VNsvTmwkLQ0zyhgQz0oisG2U7tU6qAsg4snrmyNb+K1vT1dVBlqlXPNlaso xA/wF6ZCIB2bZsn1CervlDL8wWDN6RAn/aU3GtMpMCSlGj/mfq5ySgYIgHbz/xzL MdaA95daJYs3lGS2au0svACS+MUr0RKT/ZenpT9IaWK+jlI8jG6XKg1Y+Ys2JuX+ f4hTY5UO0d3QbrpcsKU11rJBW4Lq5CFf7POVaZ+GXpc7Vfy1o+rArPND29mxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlynQTjzU1QFKkYyFDI2jWLtcDEwwHwYDVR0j BBgwFoAUybvfDqFN3fDFUd8YYzLLhZ652JQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTk1OTAxY2MtMWI4ZS00ZjNmLWEzZDAtMzI2OWYwZTE2YzQxLzAvQzlCQkRGMEVB MTRERERGMEM1NTFERjE4NjMzMkNCODU5RUI5RDg5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUJCREYwRUExNEREREYwQzU1MURGMTg2MzMyQ0I4NTlFQjlE ODk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTk1OTAxY2MtMWI4ZS00ZjNmLWEz ZDAtMzI2OWYwZTE2YzQxLzAvQzlCQkRGMEVBMTRERERGMEM1NTFERjE4NjMzMkNC ODU5RUI5RDg5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2VEF0sEM4TzyOArUw92LKBviA/RMPPJbXn l8w6OZqgkEeBXz52v8SBlnir1zSehKH8vE5tSz2Q+1M68VXbOy2jK70mMsYaRq7Z X+K1S+7f8CguN60BFo3N55GgD/ckmlSwc77sqIqZcOWsShJ58IWf8BirTaJZJRpm 66SWxS/ZmRXFMJd2MgPoagvs/fq/f7NCrer+DbuSCapx/nyDkhJ+OV6fMkwPX9o1 cFUs8RDUM5a5Qw32OlP12o6F5bb/zeS/+Zput/125OagbFCJBbHDZwRzq5qz3KGD PTzgSNh4xlqO/lvS+sLHeRdQFPFESq0QdEjGe33tkskn7Fjhbx8= -----END CERTIFICATE-----Generated at Mon Sep 21 15:43:52 2026 by rpki-client