$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft File: C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft (raw, json) Hash identifier: oIqT20sWcSytBGYEqDWzoIOnGIdM8u/yo4L7ojQjEck= Subject key identifier: DC:E4:DB:3B:AB:5B:93:CF:0C:B3:36:0F:34:F0:D4:C4:FF:AD:5A:25 Authority key identifier: C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94 Certificate issuer: /CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894 Certificate serial: 0282298FDC183756EEC1C8809353BF9922B0AB98 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft Manifest number: BD Signing time: Mon 21 Sep 2026 14:49:49 +0000 Manifest this update: Mon 21 Sep 2026 14:44:49 +0000 Manifest next update: Tue 22 Sep 2026 16:36:49 +0000 Files and hashes: 1: C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl (hash: LVFIEZeH5BglP5qpmWkjutlJe2cnbmBsuag+eAHzr00=) 2: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: ZVZI5MXEYgq+QpFFWNL7lGXYAS9omg0P+vD6tywGpec=) 3: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: Pfe66TELIpbboDlTlvL4smle14adEmFMF0KS3kt6HYM=) 4: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: occ5qoM9oAkKmzdKhCiXxb0YYDDzZw7eQPlVtS1+AXA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:82:29:8f:dc:18:37:56:ee:c1:c8:80:93:53:bf:99:22:b0:ab:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894 Validity Not Before: Sep 21 14:44:49 2026 GMT Not After : Sep 22 16:36:49 2026 GMT Subject: CN=DCE4DB3BAB5B93CF0CB3360F34F0D4C4FFAD5A25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e1:8a:6d:8e:0f:a1:d1:21:77:21:1e:bf:91: bb:53:d4:4d:f4:82:5b:a4:b0:6b:78:9e:51:fd:78: 0f:73:f5:d1:3f:08:47:80:f6:bf:51:75:07:15:0a: 45:7a:d3:3e:42:8a:24:a1:91:12:65:0c:30:c6:69: 95:f1:7f:ef:d1:43:eb:92:99:b2:10:af:66:7f:44: 31:e0:72:21:46:75:0e:dc:20:66:ed:98:d8:92:f4: 79:42:38:d8:82:12:7c:41:db:e8:31:2b:06:3e:c5: c7:5c:12:07:1a:08:61:71:75:99:5f:25:53:fd:a7: 93:51:57:4e:c1:64:ae:6c:c0:46:11:26:f2:3e:c0: f2:af:d1:17:81:8e:06:89:41:b9:db:6f:f8:84:87: b9:84:30:ef:8a:1c:75:f3:c6:10:3e:00:0a:4c:2b: fe:90:94:4a:9a:37:35:ab:a2:52:a7:b7:df:fc:58: f0:b3:31:8b:01:c2:8a:fd:60:be:ba:57:94:5a:f2: 9b:09:e9:12:78:7d:73:d6:04:cc:2a:4a:a0:b5:58: 12:c2:83:b3:4c:ce:5f:d2:88:6b:58:ec:67:bb:9c: 93:83:1c:af:24:f6:30:79:9f:48:ae:1d:43:1a:29: c0:d3:7d:a0:27:3a:28:3a:80:a8:8d:47:71:68:98: 46:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E4:DB:3B:AB:5B:93:CF:0C:B3:36:0F:34:F0:D4:C4:FF:AD:5A:25 X509v3 Authority Key Identifier: keyid:C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d5:06:cc:90:f6:6b:50:79:7b:87:9d:bc:e8:50:15:a0:02: 3b:a6:8d:fa:bf:5b:8f:62:ed:32:95:71:f9:d5:16:46:e6:5e: ad:bc:a2:cc:a9:4e:bf:fb:80:c7:25:c2:8d:94:a3:ef:7a:ca: dd:b0:55:63:22:6e:0e:d2:4f:d4:66:ca:ef:d2:92:2b:05:89: 32:fa:88:ca:48:60:15:fa:fc:07:0a:df:1d:ed:b2:50:98:b8: a0:c1:da:0d:a8:33:26:fb:ff:0e:fe:eb:51:b9:2d:76:b1:5a: 34:48:c3:09:a8:8a:d6:c6:6d:f8:75:b7:44:6b:ae:da:f1:49: 28:10:42:ce:29:e6:96:8d:99:00:f3:af:67:5c:e8:2f:b2:11: 96:b6:76:9e:7a:dc:99:33:c7:90:75:df:4d:6e:21:26:49:2d: 75:c7:bf:44:f6:5b:26:91:b8:4e:3e:77:3d:3b:d1:07:df:55: 92:fa:bd:5a:a9:1e:b8:d0:9a:a0:ed:76:bb:f3:4f:6c:4a:0b: 05:ca:e8:e4:28:bd:44:4b:9c:77:1e:93:c4:0f:da:64:27:58: 5b:d7:c5:26:0f:7f:91:ea:b0:5a:ef:fc:d8:72:79:d9:da:88: 61:f5:5f:bb:39:8d:50:14:22:87:d0:0b:64:f3:dc:4f:ee:40: f9:98:25:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAoIpj9wYN1buwciAk1O/mSKwq5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQkRGMEVBMTRERERGMEM1NTFERjE4NjMzMkNCODU5 RUI5RDg5NDAeFw0yNjA5MjExNDQ0NDlaFw0yNjA5MjIxNjM2NDlaMDMxMTAvBgNV BAMTKERDRTREQjNCQUI1QjkzQ0YwQ0IzMzYwRjM0RjBENEM0RkZBRDVBMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr4Yptjg+h0SF3IR6/kbtT1E30 gluksGt4nlH9eA9z9dE/CEeA9r9RdQcVCkV60z5CiiShkRJlDDDGaZXxf+/RQ+uS mbIQr2Z/RDHgciFGdQ7cIGbtmNiS9HlCONiCEnxB2+gxKwY+xcdcEgcaCGFxdZlf JVP9p5NRV07BZK5swEYRJvI+wPKv0ReBjgaJQbnbb/iEh7mEMO+KHHXzxhA+AApM K/6QlEqaNzWrolKnt9/8WPCzMYsBwor9YL66V5Ra8psJ6RJ4fXPWBMwqSqC1WBLC g7NMzl/SiGtY7Ge7nJODHK8k9jB5n0iuHUMaKcDTfaAnOig6gKiNR3FomEa9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3OTbO6tbk88MszYPNPDUxP+tWiUwHwYDVR0j BBgwFoAUybvfDqFN3fDFUd8YYzLLhZ652JQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTk1OTAxY2MtMWI4ZS00ZjNmLWEzZDAtMzI2OWYwZTE2YzQxLzAvQzlCQkRGMEVB MTRERERGMEM1NTFERjE4NjMzMkNCODU5RUI5RDg5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUJCREYwRUExNEREREYwQzU1MURGMTg2MzMyQ0I4NTlFQjlE ODk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTk1OTAxY2MtMWI4ZS00ZjNmLWEz ZDAtMzI2OWYwZTE2YzQxLzAvQzlCQkRGMEVBMTRERERGMEM1NTFERjE4NjMzMkNC ODU5RUI5RDg5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPVBsyQ9mtQeXuHnbzoUBWgAjumjfq/W49i 7TKVcfnVFkbmXq28osypTr/7gMclwo2Uo+96yt2wVWMibg7ST9Rmyu/SkisFiTL6 iMpIYBX6/AcK3x3tslCYuKDB2g2oMyb7/w7+61G5LXaxWjRIwwmoitbGbfh1t0Rr rtrxSSgQQs4p5paNmQDzr2dc6C+yEZa2dp563Jkzx5B1301uISZJLXXHv0T2WyaR uE4+dz070QffVZL6vVqpHrjQmqDtdrvzT2xKCwXK6OQovURLnHcek8QP2mQnWFvX xSYPf5HqsFrv/NhyednaiGH1X7s5jVAUIofQC2Tz3E/uQPmYJZ8= -----END CERTIFICATE-----Generated at Mon Sep 21 17:40:52 2026 by rpki-client