$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft File: 9A9D4BDD4311519F6A96141040EA1E98B3363388.mft (raw, json) Hash identifier: Pwq8lEri7urpkgrm5qfAGmAuxGke/zHoCjvVk1n1n1A= Subject key identifier: F8:73:19:50:A8:D1:CB:41:C4:4F:3E:C8:DC:1E:1B:2E:3C:4C:EE:F7 Authority key identifier: 9A:9D:4B:DD:43:11:51:9F:6A:96:14:10:40:EA:1E:98:B3:36:33:88 Certificate issuer: /CN=9A9D4BDD4311519F6A96141040EA1E98B3363388 Certificate serial: 24AE56C28266DDBB2F77745AA3529D9FE0946DA7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft Manifest number: BF Signing time: Tue 22 Sep 2026 09:58:51 +0000 Manifest this update: Tue 22 Sep 2026 09:53:51 +0000 Manifest next update: Wed 23 Sep 2026 12:04:51 +0000 Files and hashes: 1: 9A9D4BDD4311519F6A96141040EA1E98B3363388.crl (hash: fAcVHkJz5VtsD2eesQs/n9qCU5MryoQtGm+OzcZNTag=) 2: 3130332e3133342e36362e302f32342d3234203d3e203435333132.roa (hash: DKDIZFIIa7OPxQWCaUBiuhGDeGm6kz/UIChkAD3FgzA=) 3: 3130332e3133342e36362e302f32332d3234203d3e203435333132.roa (hash: jEIwfeqUw3Ty0aBUNoGyFFLgparqhCueZmPPzJmpnn8=) 4: 3130332e3133342e36372e302f32342d3234203d3e203435333132.roa (hash: Rjd2vE2zGKftmY05BM4C0TjHIPA+ii1Rf27f+odCFqc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.crl rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ae:56:c2:82:66:dd:bb:2f:77:74:5a:a3:52:9d:9f:e0:94:6d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A9D4BDD4311519F6A96141040EA1E98B3363388 Validity Not Before: Sep 22 09:53:51 2026 GMT Not After : Sep 23 12:04:51 2026 GMT Subject: CN=F8731950A8D1CB41C44F3EC8DC1E1B2E3C4CEEF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1f:9d:0f:22:63:f6:b9:ed:35:d9:3f:bc:8b: c5:a7:f4:b6:48:f3:f4:29:b7:a3:e9:e9:46:d4:b6: eb:fd:3d:9a:a4:b5:17:cb:f6:50:8f:f2:0f:7f:45: 88:db:26:5a:b8:71:f6:4f:ac:64:c6:7f:ad:a3:9d: ba:42:59:63:75:d5:c7:f0:84:c8:80:47:c9:0c:b7: ad:70:0d:52:70:d4:4e:af:c9:48:06:59:7c:d5:93: e6:6d:3d:c3:68:ce:17:4d:8f:fd:01:14:7f:6b:3d: 41:7f:2c:e3:77:65:eb:94:9e:f1:4d:a0:48:13:9a: c3:e2:d5:d5:c7:ab:b3:33:4c:43:54:5b:ef:04:ec: 7e:3e:51:b4:8c:27:0c:f9:33:32:b2:57:ed:56:d9: d6:37:61:90:02:cd:7a:20:b6:ad:0c:9e:c8:9e:68: cc:ce:3c:a9:c5:f8:38:e5:5b:76:9d:6c:12:b1:25: e3:a2:45:39:08:b2:99:56:53:8e:ac:96:64:19:a3: 12:e2:9b:68:dd:b9:18:2b:a8:3c:40:02:b8:de:67: bb:76:e0:00:df:eb:79:4d:70:9d:d1:21:20:36:7b: 69:2d:27:1f:0a:f3:4e:02:ac:a2:e6:4c:c0:4b:a6: 24:f9:c4:d9:5f:8c:b6:7e:5b:12:90:59:46:92:bc: f8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:73:19:50:A8:D1:CB:41:C4:4F:3E:C8:DC:1E:1B:2E:3C:4C:EE:F7 X509v3 Authority Key Identifier: keyid:9A:9D:4B:DD:43:11:51:9F:6A:96:14:10:40:EA:1E:98:B3:36:33:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:55:75:1e:b1:00:04:9a:b6:35:95:a0:8d:5a:2d:a5:1b:06: 49:25:b6:6c:dd:89:b6:a4:a1:53:6e:2e:ef:6d:b0:ba:e9:3b: 1b:d7:56:f3:0b:36:f3:bf:32:1c:8d:39:2c:a0:2f:27:9c:d6: d9:8f:fc:c4:f5:25:6f:b4:2c:b8:ac:91:c3:63:a8:28:19:59: 4c:ba:c9:fb:6f:74:4c:2d:ed:60:23:42:8d:b4:40:ec:fd:e5: 58:c3:7d:69:ea:a4:a3:83:5a:8d:c1:43:65:2a:83:b8:77:02: e5:d9:6d:06:50:5d:ec:33:ac:cc:9b:eb:1f:e7:c7:22:3e:f7: c1:90:5a:4f:91:7b:dc:18:11:b9:38:dd:d7:5b:10:ad:26:64: 0d:b3:a4:b7:2b:9e:97:e3:cf:8f:0a:8c:98:f2:df:b3:0b:f8: dd:ad:31:73:b4:0f:58:a0:72:38:e2:e1:ea:99:73:75:34:7b: 33:42:9e:56:29:fb:6b:e8:db:b4:41:af:67:18:86:11:e8:80: 15:d0:b5:68:06:62:f4:26:57:a9:d6:92:c3:51:5f:3e:fb:9c: d4:e6:64:e5:a1:9b:50:0c:f4:77:ed:04:a6:a8:51:96:ca:54: e7:d2:b5:69:5e:13:e9:a0:9f:3c:6a:0c:e0:85:50:34:8e:54: 0a:b0:ac:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJK5WwoJm3bsvd3Rao1Kdn+CUbacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5RDRCREQ0MzExNTE5RjZBOTYxNDEwNDBFQTFFOThC MzM2MzM4ODAeFw0yNjA5MjIwOTUzNTFaFw0yNjA5MjMxMjA0NTFaMDMxMTAvBgNV BAMTKEY4NzMxOTUwQThEMUNCNDFDNDRGM0VDOERDMUUxQjJFM0M0Q0VFRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCH50PImP2ue012T+8i8Wn9LZI 8/Qpt6Pp6UbUtuv9PZqktRfL9lCP8g9/RYjbJlq4cfZPrGTGf62jnbpCWWN11cfw hMiAR8kMt61wDVJw1E6vyUgGWXzVk+ZtPcNozhdNj/0BFH9rPUF/LON3ZeuUnvFN oEgTmsPi1dXHq7MzTENUW+8E7H4+UbSMJwz5MzKyV+1W2dY3YZACzXogtq0Mnsie aMzOPKnF+DjlW3adbBKxJeOiRTkIsplWU46slmQZoxLim2jduRgrqDxAArjeZ7t2 4ADf63lNcJ3RISA2e2ktJx8K804CrKLmTMBLpiT5xNlfjLZ+WxKQWUaSvPhTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+HMZUKjRy0HETz7I3B4bLjxM7vcwHwYDVR0j BBgwFoAUmp1L3UMRUZ9qlhQQQOoemLM2M4gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmY2NmJmYTYtZGM0Yy00MTA4LTkzMmMtMjA0YjYyZTg2MjcyLzAvOUE5RDRCREQ0 MzExNTE5RjZBOTYxNDEwNDBFQTFFOThCMzM2MzM4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTlENEJERDQzMTE1MTlGNkE5NjE0MTA0MEVBMUU5OEIzMzYz Mzg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmY2NmJmYTYtZGM0Yy00MTA4LTkz MmMtMjA0YjYyZTg2MjcyLzAvOUE5RDRCREQ0MzExNTE5RjZBOTYxNDEwNDBFQTFF OThCMzM2MzM4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtVdR6xAASatjWVoI1aLaUbBkkltmzdibak oVNuLu9tsLrpOxvXVvMLNvO/MhyNOSygLyec1tmP/MT1JW+0LLiskcNjqCgZWUy6 yftvdEwt7WAjQo20QOz95VjDfWnqpKODWo3BQ2Uqg7h3AuXZbQZQXewzrMyb6x/n xyI+98GQWk+Re9wYEbk43ddbEK0mZA2zpLcrnpfjz48KjJjy37ML+N2tMXO0D1ig cjji4eqZc3U0ezNCnlYp+2vo27RBr2cYhhHogBXQtWgGYvQmV6nWksNRXz77nNTm ZOWhm1AM9HftBKaoUZbKVOfStWleE+mgnzxqDOCFUDSOVAqwrMY= -----END CERTIFICATE-----Generated at Tue Sep 22 21:10:12 2026 by rpki-client