$ rpki-client -vvvf rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft File: 9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft (raw, json) Hash identifier: 6msjwnG2ChMxTCJOgIIbkQFOLzy/FdgTru0ADdsvDP8= Subject key identifier: 46:1A:10:E2:BE:3D:92:DE:3D:53:85:86:23:81:86:54:1A:A8:97:1A Authority key identifier: 9F:73:03:1D:F0:49:FC:EA:B5:E8:BD:52:42:74:7E:7D:7D:C4:B4:DD Certificate issuer: /CN=9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD Certificate serial: 0C53171DA262827C666701F0565048E2FA316EF6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 08:26:42 +0000 Manifest this update: Wed 23 Sep 2026 08:21:42 +0000 Manifest next update: Thu 24 Sep 2026 08:31:42 +0000 Files and hashes: 1: 323030313a6466353a653238303a3a2f34382d3438203d3e20313431363430.roa (hash: hxbNx1sHpQ2uA7gDNNgf9BYGTMjlNV/I+vSevN2AYMQ=) 2: 3130332e3136322e31392e302f32342d3234203d3e20313431363430.roa (hash: 96iWJc2ow6yzAUODuhe0zI0zVFmk0TX0H28U4QCHRcE=) 3: 9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.crl (hash: 0qTh0Clz8xygMFgi50PgVgEtuyF1M6qEopoCGDLVM7A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.crl rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 05:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:53:17:1d:a2:62:82:7c:66:67:01:f0:56:50:48:e2:fa:31:6e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD Validity Not Before: Sep 23 08:21:42 2026 GMT Not After : Sep 24 08:31:42 2026 GMT Subject: CN=461A10E2BE3D92DE3D538586238186541AA8971A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:26:19:de:ac:04:21:4c:3d:1e:30:fe:fc:1b: 95:f0:ee:75:5c:9d:e3:89:af:9b:3f:ce:44:3a:c6: 20:2a:40:5f:18:94:03:4e:a9:91:6a:2f:f6:88:42: 76:29:0b:bb:cb:c0:fc:4e:6d:72:a9:f3:27:a4:9f: 38:3a:1b:36:23:f7:d0:66:05:d7:42:a4:ed:80:b7: 45:7c:25:79:fe:2c:88:ac:12:2f:5a:fd:fe:1e:0b: 83:14:43:06:e1:93:b5:80:c8:81:18:e6:e2:b0:a5: 3d:b6:1a:f4:38:72:25:77:8e:05:2b:c2:e8:31:b1: 31:8a:a7:11:d9:8e:ef:6c:26:b9:de:7b:67:8d:03: de:a6:78:df:32:28:59:a6:40:4e:1a:d6:03:cf:94: 89:93:ff:8d:7c:16:09:59:51:5e:da:63:35:55:9c: 88:f1:e1:16:97:f9:f8:7b:9b:a8:15:14:7a:62:d7: 74:a4:2b:96:83:2d:ba:c9:81:88:3c:3c:79:94:29: e2:5d:e2:95:87:b4:a4:e1:e9:16:b2:9b:c2:a5:9d: cb:0e:c6:70:32:fe:5e:cc:aa:bc:c3:4b:5d:ee:a3: 7c:3e:01:df:e4:dc:fa:62:be:8c:4b:5c:f9:4e:73: 94:24:84:70:d4:48:30:60:3c:84:dc:7e:d9:16:63: f6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1A:10:E2:BE:3D:92:DE:3D:53:85:86:23:81:86:54:1A:A8:97:1A X509v3 Authority Key Identifier: keyid:9F:73:03:1D:F0:49:FC:EA:B5:E8:BD:52:42:74:7E:7D:7D:C4:B4:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:2f:60:56:3c:ac:d0:b1:22:3e:21:6e:6b:02:9e:37:c2:78: 28:39:3c:55:f4:08:5d:f3:89:ac:d9:db:2b:11:e5:4c:3e:6f: 9c:d5:9b:1d:a5:bb:07:ab:9b:08:03:59:0d:64:c1:c4:18:59: a2:5a:84:a5:1c:a3:02:bc:58:7b:42:46:c2:05:29:79:d3:1f: 59:8f:40:92:66:3d:66:6d:9b:8e:b8:64:d7:77:81:54:84:20: 29:6a:cc:95:d9:7c:8b:f1:bf:9a:2a:ec:8a:96:4c:6f:55:2a: f0:9b:ac:25:95:d6:24:be:70:51:d8:f5:0e:5d:d7:19:89:de: 46:1c:16:f5:e4:e5:94:bd:41:a0:8e:df:33:f9:0f:7f:34:76: bf:09:fe:17:e0:10:a1:1b:6c:8d:79:55:a4:3e:ad:67:93:0d: d2:3d:dc:5f:b9:33:9e:69:be:01:15:bc:d5:e6:85:e3:08:b9: ab:3a:37:15:22:12:82:af:57:ab:83:02:b0:c8:c8:b1:08:46: 61:4f:ee:6a:9d:5f:66:2c:e8:77:d2:9c:35:62:f2:11:7e:e5: 06:f0:58:9a:dc:74:4c:73:e8:94:c7:58:33:75:8f:a3:eb:a9: d1:6d:a9:7d:00:7b:13:a0:36:67:d6:b5:3a:08:12:37:b1:6e: 1e:c8:16:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDFMXHaJignxmZwHwVlBI4voxbvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY3MzAzMURGMDQ5RkNFQUI1RThCRDUyNDI3NDdFN0Q3 REM0QjRERDAeFw0yNjA5MjMwODIxNDJaFw0yNjA5MjQwODMxNDJaMDMxMTAvBgNV BAMTKDQ2MUExMEUyQkUzRDkyREUzRDUzODU4NjIzODE4NjU0MUFBODk3MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0JhnerAQhTD0eMP78G5Xw7nVc neOJr5s/zkQ6xiAqQF8YlANOqZFqL/aIQnYpC7vLwPxObXKp8yeknzg6GzYj99Bm BddCpO2At0V8JXn+LIisEi9a/f4eC4MUQwbhk7WAyIEY5uKwpT22GvQ4ciV3jgUr wugxsTGKpxHZju9sJrnee2eNA96meN8yKFmmQE4a1gPPlImT/418FglZUV7aYzVV nIjx4RaX+fh7m6gVFHpi13SkK5aDLbrJgYg8PHmUKeJd4pWHtKTh6Raym8KlncsO xnAy/l7MqrzDS13uo3w+Ad/k3PpivoxLXPlOc5QkhHDUSDBgPITcftkWY/bRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURhoQ4r49kt49U4WGI4GGVBqolxowHwYDVR0j BBgwFoAUn3MDHfBJ/Oq16L1SQnR+fX3EtN0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWNjNjM3YmQtNTk3MS00MjY0LTk5N2EtNzQ5ZDgwNGE2ODU4LzAvOUY3MzAzMURG MDQ5RkNFQUI1RThCRDUyNDI3NDdFN0Q3REM0QjRERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjczMDMxREYwNDlGQ0VBQjVFOEJENTI0Mjc0N0U3RDdEQzRC NERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWNjNjM3YmQtNTk3MS00MjY0LTk5 N2EtNzQ5ZDgwNGE2ODU4LzAvOUY3MzAzMURGMDQ5RkNFQUI1RThCRDUyNDI3NDdF N0Q3REM0QjRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUvYFY8rNCxIj4hbmsCnjfCeCg5PFX0CF3z iazZ2ysR5Uw+b5zVmx2luwermwgDWQ1kwcQYWaJahKUcowK8WHtCRsIFKXnTH1mP QJJmPWZtm464ZNd3gVSEIClqzJXZfIvxv5oq7IqWTG9VKvCbrCWV1iS+cFHY9Q5d 1xmJ3kYcFvXk5ZS9QaCO3zP5D380dr8J/hfgEKEbbI15VaQ+rWeTDdI93F+5M55p vgEVvNXmheMIuas6NxUiEoKvV6uDArDIyLEIRmFP7mqdX2Ys6HfSnDVi8hF+5Qbw WJrcdExz6JTHWDN1j6PrqdFtqX0AexOgNmfWtToIEjexbh7IFpI= -----END CERTIFICATE-----Generated at Wed Sep 23 12:04:20 2026 by rpki-client