$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft File: 9FA20A14AF60219662C9668DE75D25F0C8B84220.mft (raw, json) Hash identifier: 1tsBG4CFerSlBkiQCBym1VpAqCvNveN95+CRDRwn+CU= Subject key identifier: 6A:64:68:27:97:A1:B9:9C:E8:E3:78:E4:46:FB:0E:DF:EC:DD:FD:8D Authority key identifier: 9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20 Certificate issuer: /CN=9FA20A14AF60219662C9668DE75D25F0C8B84220 Certificate serial: 2EF9A769E568A6F269F069D15DD46282B185D858 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 13:07:36 +0000 Manifest this update: Tue 22 Sep 2026 13:02:36 +0000 Manifest next update: Wed 23 Sep 2026 13:29:36 +0000 Files and hashes: 1: 9FA20A14AF60219662C9668DE75D25F0C8B84220.crl (hash: a1ajUcuschFslruEAHoJJ1KTmOBOwq4JYJNYXjolWQc=) 2: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: YS2T4alON/4lMEWof38ueY05KIoXFInJbn/EVbWzFdU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 13:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f9:a7:69:e5:68:a6:f2:69:f0:69:d1:5d:d4:62:82:b1:85:d8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FA20A14AF60219662C9668DE75D25F0C8B84220 Validity Not Before: Sep 22 13:02:36 2026 GMT Not After : Sep 23 13:29:36 2026 GMT Subject: CN=6A64682797A1B99CE8E378E446FB0EDFECDDFD8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e3:74:98:84:bf:f6:f7:a7:71:04:4e:a4:7e: f0:75:66:5c:47:1f:0b:c8:20:ab:1f:2e:e4:cb:e5: 78:c0:8b:ee:be:0b:fb:d3:5a:7a:bf:3e:9c:a5:d7: fa:f6:28:b1:91:e9:55:c1:a7:7a:aa:39:a7:e9:0d: c5:06:1b:e8:20:a6:9b:48:41:53:72:8b:5a:2e:f0: ec:a4:47:04:c9:cb:21:42:5f:03:45:27:0c:72:b7: bf:05:f0:b8:0c:ee:db:2a:62:a5:d1:b1:a1:f7:b7: ea:db:e8:95:b5:f2:43:5e:49:50:88:f8:0d:76:1a: f7:bc:1d:e0:3d:c7:ae:22:9e:98:c3:d1:19:f5:24: 5d:cc:d6:f3:d7:96:55:b6:18:2c:fa:10:8a:14:2e: b8:be:63:4c:99:63:d0:fb:da:9a:e2:f2:a8:94:2b: a4:03:cb:fe:33:3f:b3:4e:0b:b6:22:0b:a1:3e:d7: 30:1b:d7:0c:2a:fe:34:9d:9a:34:6d:b9:66:2e:52: b1:39:1a:95:35:02:90:ff:79:9d:23:75:79:69:f4: cf:82:ef:e7:46:82:88:8a:09:52:e0:49:bd:01:b2: 3c:d7:95:da:3c:40:8d:d8:16:20:50:ea:4c:0a:74: 58:34:aa:f2:86:c5:59:b1:48:4a:ad:d1:15:bc:66: a3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:64:68:27:97:A1:B9:9C:E8:E3:78:E4:46:FB:0E:DF:EC:DD:FD:8D X509v3 Authority Key Identifier: keyid:9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:8b:a1:76:27:6f:b1:1e:bd:bd:b4:25:9b:02:5f:0f:9b:5d: 78:65:d5:8b:bf:97:f7:79:68:dc:9e:0c:72:00:03:b9:ed:ce: cb:11:d4:c9:40:4b:fa:f8:8a:23:00:2e:ab:15:01:a8:22:d1: 6a:21:4e:5f:b4:35:41:bf:70:22:00:94:9b:c7:73:cc:c2:d0: f0:c2:16:d6:4e:f9:fd:df:a7:69:42:4f:de:27:45:0e:ac:8d: d7:97:cc:9a:4e:c7:79:fd:a1:03:c8:ce:6c:31:5f:70:f3:a5: 9a:20:b6:ac:d1:62:d4:e4:cd:98:ae:2e:63:6c:e6:6d:2b:7c: f4:05:86:b7:39:9c:10:79:de:c5:5f:ce:89:06:c2:dd:e4:90: a5:af:70:7a:40:e4:f8:18:19:42:d8:8b:21:87:32:c3:eb:69: a1:33:df:7c:93:20:d9:98:2e:3c:25:5e:8e:98:d2:62:05:24: 25:95:a8:4d:aa:7e:43:8d:14:c1:9f:f0:e5:50:d2:57:e1:a0: ed:39:45:0d:0f:94:58:7b:f2:5f:94:ae:45:77:40:a1:7f:31: 9b:50:bf:6a:3f:b1:8f:11:cd:c4:e6:30:93:4d:58:97:55:ff: 36:37:ae:d7:50:4c:74:16:5f:f8:84:e9:79:ae:d4:40:8a:00: 3b:9d:30:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULvmnaeVopvJp8GnRXdRigrGF2FgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBMjBBMTRBRjYwMjE5NjYyQzk2NjhERTc1RDI1RjBD OEI4NDIyMDAeFw0yNjA5MjIxMzAyMzZaFw0yNjA5MjMxMzI5MzZaMDMxMTAvBgNV BAMTKDZBNjQ2ODI3OTdBMUI5OUNFOEUzNzhFNDQ2RkIwRURGRUNEREZEOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj43SYhL/296dxBE6kfvB1ZlxH HwvIIKsfLuTL5XjAi+6+C/vTWnq/Ppyl1/r2KLGR6VXBp3qqOafpDcUGG+ggpptI QVNyi1ou8OykRwTJyyFCXwNFJwxyt78F8LgM7tsqYqXRsaH3t+rb6JW18kNeSVCI +A12Gve8HeA9x64inpjD0Rn1JF3M1vPXllW2GCz6EIoULri+Y0yZY9D72pri8qiU K6QDy/4zP7NOC7YiC6E+1zAb1wwq/jSdmjRtuWYuUrE5GpU1ApD/eZ0jdXlp9M+C 7+dGgoiKCVLgSb0BsjzXldo8QI3YFiBQ6kwKdFg0qvKGxVmxSEqt0RW8ZqNpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUamRoJ5ehuZzo43jkRvsO3+zd/Y0wHwYDVR0j BBgwFoAUn6IKFK9gIZZiyWaN510l8Mi4QiAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzVlNTQ2OGMtMGFjNy00NGE5LTg4MjEtMjgyNTdjNWE4NjA3LzAvOUZBMjBBMTRB RjYwMjE5NjYyQzk2NjhERTc1RDI1RjBDOEI4NDIyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkEyMEExNEFGNjAyMTk2NjJDOTY2OERFNzVEMjVGMEM4Qjg0 MjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvOUZBMjBBMTRBRjYwMjE5NjYyQzk2NjhERTc1RDI1 RjBDOEI4NDIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCLoXYnb7Eevb20JZsCXw+bXXhl1Yu/l/d5 aNyeDHIAA7ntzssR1MlAS/r4iiMALqsVAagi0WohTl+0NUG/cCIAlJvHc8zC0PDC FtZO+f3fp2lCT94nRQ6sjdeXzJpOx3n9oQPIzmwxX3DzpZogtqzRYtTkzZiuLmNs 5m0rfPQFhrc5nBB53sVfzokGwt3kkKWvcHpA5PgYGULYiyGHMsPraaEz33yTINmY LjwlXo6Y0mIFJCWVqE2qfkONFMGf8OVQ0lfhoO05RQ0PlFh78l+UrkV3QKF/MZtQ v2o/sY8RzcTmMJNNWJdV/zY3rtdQTHQWX/iE6Xmu1ECKADudMGY= -----END CERTIFICATE-----Generated at Wed Sep 23 04:35:32 2026 by rpki-client