$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft File: 9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft (raw, json) Hash identifier: DbkW4muu/5dkEuGHinw9EQKH0GwZ+IOvndnYS7otScM= Subject key identifier: DD:BA:4A:35:3A:E6:C7:17:43:3C:7F:C9:A9:3E:8C:74:BD:1C:CC:A3 Authority key identifier: 9F:0E:DA:9B:A3:F7:B2:4D:18:F6:E1:7A:5B:61:08:F3:E9:EC:41:E4 Certificate issuer: /CN=9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4 Certificate serial: 5A610183F7D94DE2D63C48A5BAEB474A3BD53C17 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 09:58:59 +0000 Manifest this update: Mon 21 Sep 2026 09:53:59 +0000 Manifest next update: Tue 22 Sep 2026 11:16:59 +0000 Files and hashes: 1: 9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.crl (hash: FwZImlDvmJgvboFlK9bLAkpO+pihlnUb/uvw9MlTGj0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.crl rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:61:01:83:f7:d9:4d:e2:d6:3c:48:a5:ba:eb:47:4a:3b:d5:3c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4 Validity Not Before: Sep 21 09:53:59 2026 GMT Not After : Sep 22 11:16:59 2026 GMT Subject: CN=DDBA4A353AE6C717433C7FC9A93E8C74BD1CCCA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:88:b0:f7:76:b0:87:a8:e0:dc:71:57:b2:11: 99:9d:74:65:ca:a6:37:e7:5b:4b:cd:53:a5:40:d4: 23:14:17:aa:97:3c:19:2d:ba:5a:70:a0:c2:f0:f5: 73:dc:44:6a:38:02:0c:52:64:8d:cb:5b:e6:4d:51: 3d:5e:50:d3:69:89:f2:5a:3e:3b:62:13:bd:0f:d2: 81:5f:e2:26:97:34:39:56:ee:44:ac:4c:d9:af:21: 71:6d:3e:0c:08:07:cc:24:bc:f1:dd:8f:c5:b1:de: 0c:11:ea:c1:7d:21:2b:75:50:fa:54:ad:36:0c:db: 7f:e4:d2:67:cf:cb:c6:96:c2:4a:a8:28:fd:72:56: cd:f1:14:09:39:0a:53:ba:7b:d2:43:d0:f8:e2:af: 88:e5:7e:b3:72:6f:48:b4:e8:7f:f7:87:a9:0e:f5: 65:b5:b1:90:36:8c:44:3a:0c:b2:19:58:b5:fa:3f: 7a:86:b8:24:be:d8:6c:2f:ed:6b:02:64:68:dd:23: cd:cb:e4:74:d5:d9:3e:d4:9f:32:7f:e1:d3:f8:d0: 8d:8d:91:7c:33:dc:9b:00:a3:51:e0:1a:99:53:cc: cc:50:5e:ad:e2:c7:7b:90:8c:b3:76:b0:23:ae:46: 88:25:9c:be:1f:b7:18:8d:6b:e7:f6:93:f1:47:b3: 97:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BA:4A:35:3A:E6:C7:17:43:3C:7F:C9:A9:3E:8C:74:BD:1C:CC:A3 X509v3 Authority Key Identifier: keyid:9F:0E:DA:9B:A3:F7:B2:4D:18:F6:E1:7A:5B:61:08:F3:E9:EC:41:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:cc:08:f0:cc:68:c9:4e:2e:75:f1:41:a0:a9:46:00:8f:e9: ab:f1:22:71:28:81:a7:8f:74:15:7e:41:67:ef:77:c8:fd:0d: da:93:54:41:ed:4f:b7:51:4a:92:69:41:ae:71:39:2b:77:f0: c8:8c:48:76:b8:57:6e:e0:3f:d6:c4:82:50:5a:29:21:94:22: 88:5d:68:ba:c0:45:09:33:26:d3:a8:9e:a8:d2:f6:e8:8b:2a: 1d:86:f8:e5:e8:c4:50:81:ab:63:13:d1:7a:6b:74:00:96:af: bd:ce:11:ed:2a:73:df:4a:1f:3f:d4:92:cb:22:c0:0d:c7:ff: 5a:c5:94:bd:5a:40:08:90:8e:ef:cd:be:1d:a5:df:02:b8:70: 17:4a:e2:2d:97:46:a0:f3:29:06:1c:d3:4e:58:7c:4b:c5:4c: ca:6f:36:67:13:0e:13:b1:e0:df:cd:ac:f7:2e:c6:27:70:fb: 5c:9b:0f:d7:ad:21:61:fa:9d:33:55:9e:58:46:7d:2d:81:2d: 25:36:d9:47:32:c5:b8:4f:a7:d4:27:e1:da:e6:76:3c:31:29: d0:ba:2a:4d:e0:62:b0:86:c0:b4:f7:e8:62:2d:68:ad:dc:9b: 44:98:95:c5:3b:22:2c:44:63:8d:d0:dd:1b:05:3b:31:e7:d5: 6d:f9:6c:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWmEBg/fZTeLWPEiluutHSjvVPBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwRURBOUJBM0Y3QjI0RDE4RjZFMTdBNUI2MTA4RjNF OUVDNDFFNDAeFw0yNjA5MjEwOTUzNTlaFw0yNjA5MjIxMTE2NTlaMDMxMTAvBgNV BAMTKEREQkE0QTM1M0FFNkM3MTc0MzNDN0ZDOUE5M0U4Qzc0QkQxQ0NDQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkiLD3drCHqODccVeyEZmddGXK pjfnW0vNU6VA1CMUF6qXPBktulpwoMLw9XPcRGo4AgxSZI3LW+ZNUT1eUNNpifJa PjtiE70P0oFf4iaXNDlW7kSsTNmvIXFtPgwIB8wkvPHdj8Wx3gwR6sF9ISt1UPpU rTYM23/k0mfPy8aWwkqoKP1yVs3xFAk5ClO6e9JD0Pjir4jlfrNyb0i06H/3h6kO 9WW1sZA2jEQ6DLIZWLX6P3qGuCS+2Gwv7WsCZGjdI83L5HTV2T7UnzJ/4dP40I2N kXwz3JsAo1HgGplTzMxQXq3ix3uQjLN2sCOuRoglnL4ftxiNa+f2k/FHs5cJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3bpKNTrmxxdDPH/JqT6MdL0czKMwHwYDVR0j BBgwFoAUnw7am6P3sk0Y9uF6W2EI8+nsQeQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzAzODAyZTItMDNhZi00ZGQwLThkY2UtNTRjMjhhNzI1NjNkLzAvOUYwRURBOUJB M0Y3QjI0RDE4RjZFMTdBNUI2MTA4RjNFOUVDNDFFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjBFREE5QkEzRjdCMjREMThGNkUxN0E1QjYxMDhGM0U5RUM0 MUU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzAzODAyZTItMDNhZi00ZGQwLThk Y2UtNTRjMjhhNzI1NjNkLzAvOUYwRURBOUJBM0Y3QjI0RDE4RjZFMTdBNUI2MTA4 RjNFOUVDNDFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHMCPDMaMlOLnXxQaCpRgCP6avxInEogaeP dBV+QWfvd8j9DdqTVEHtT7dRSpJpQa5xOSt38MiMSHa4V27gP9bEglBaKSGUIohd aLrARQkzJtOonqjS9uiLKh2G+OXoxFCBq2MT0XprdACWr73OEe0qc99KHz/Ukssi wA3H/1rFlL1aQAiQju/Nvh2l3wK4cBdK4i2XRqDzKQYc005YfEvFTMpvNmcTDhOx 4N/NrPcuxidw+1ybD9etIWH6nTNVnlhGfS2BLSU22UcyxbhPp9Qn4drmdjwxKdC6 Kk3gYrCGwLT36GItaK3cm0SYlcU7IixEY43Q3RsFOzHn1W35bLU= -----END CERTIFICATE-----Generated at Mon Sep 21 20:03:46 2026 by rpki-client