$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft File: 9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft (raw, json) Hash identifier: AILj8hAd7Wgl3fHc13K/Z7yz+VYaJnYtI2MxST9x8Z8= Subject key identifier: C9:C2:55:DC:2F:D2:C9:EA:3E:C5:80:97:86:E4:A5:7D:1D:20:8A:ED Authority key identifier: 9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C Certificate issuer: /CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C Certificate serial: 4FE5AC682BFB7AFFF3867ABA8CC1BA129CF548E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft Manifest number: BD Signing time: Sun 20 Sep 2026 19:05:26 +0000 Manifest this update: Sun 20 Sep 2026 19:00:26 +0000 Manifest next update: Mon 21 Sep 2026 19:43:26 +0000 Files and hashes: 1: 9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl (hash: yQK/efO7vNsfDHkm+FUhSkqSYQG6cF+aMi81OjUfXuM=) 2: 3130332e32332e39382e302f32332d3233203d3e20313530323435.roa (hash: 7xqE0F9v+EXRL9dCkePN1NHTFDTfqFm2QwKgbcBy4ao=) 3: 323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa (hash: OPLg91e3QDUz0oxlHDtfye2YYgsL8tJKKqHtqB32VO0=) 4: 3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (hash: /Ar9BLD37pzpWiMramvnEnpVLlVnDEgU4xEdcB/AMOA=) 5: 3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (hash: w0+5fhmaBdxaqda6UhvTmcPuYEdSCtqjLZVClfvW/98=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 19:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e5:ac:68:2b:fb:7a:ff:f3:86:7a:ba:8c:c1:ba:12:9c:f5:48:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C Validity Not Before: Sep 20 19:00:26 2026 GMT Not After : Sep 21 19:43:26 2026 GMT Subject: CN=C9C255DC2FD2C9EA3EC5809786E4A57D1D208AED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:36:cf:04:9e:ed:dc:84:dc:ec:0b:a4:6d:d1: 22:4a:f2:c3:91:43:0f:57:b7:f3:6e:c7:fb:62:5c: bb:34:45:2b:df:1f:be:69:c0:30:49:e3:3f:45:b5: 64:fa:af:f3:37:ca:b2:05:e9:1c:54:76:01:84:ce: c0:e2:35:cb:f1:6e:82:5e:a4:6b:d8:3a:52:e6:39: 1d:87:04:5e:9a:37:da:c7:1a:2c:a7:cb:f4:5c:c6: 05:1c:75:cd:b2:0d:3b:66:e2:01:57:75:e5:f9:dd: 94:9d:9b:9c:8a:be:4f:74:23:bf:22:e6:2f:6f:24: a4:7b:aa:c0:ce:4c:c8:10:4d:61:4e:31:e8:94:cf: e6:47:10:da:9c:0b:d1:91:ef:60:50:7c:44:0e:c1: d7:e7:31:40:c8:c4:03:3c:15:d9:a6:a2:72:e8:1d: a0:e4:49:17:92:82:90:8b:7a:f2:5f:54:8a:88:c1: db:cf:c4:9d:c8:2e:cc:96:57:f6:3b:f6:fa:3f:5c: 8e:f4:d0:ec:52:33:a9:bd:ba:ab:e5:02:31:7a:1f: 71:ea:fa:c4:b5:23:ed:0b:68:de:9b:ad:db:d4:cb: ed:c7:ee:25:99:83:67:97:0b:e5:e5:af:e8:77:98: c0:3b:7b:0e:92:6f:ea:c4:b3:42:80:4c:2e:03:6d: c5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C2:55:DC:2F:D2:C9:EA:3E:C5:80:97:86:E4:A5:7D:1D:20:8A:ED X509v3 Authority Key Identifier: keyid:9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:81:5e:93:1e:a8:83:15:35:93:ec:f5:af:5f:d8:0c:75:6d: b3:e4:24:45:0b:eb:9e:61:6f:03:a8:df:7a:8d:f4:a4:fb:82: a4:61:14:be:05:14:93:71:0d:76:23:e3:84:61:fa:28:75:1c: 4e:7c:9e:52:96:cf:f5:d5:29:21:6c:62:80:f0:f9:a1:a2:f2: f3:44:9b:d5:7a:fc:e2:08:b3:ac:6a:d0:e7:c4:fd:60:a0:24: 0d:d6:b8:a0:7f:95:58:5d:9b:15:08:cc:04:cc:84:37:61:f5: e3:64:e0:44:bb:e8:90:f2:46:6c:1a:21:fc:5d:2b:e1:42:cb: d7:3f:46:34:53:32:27:a2:35:07:aa:20:51:e8:53:37:75:64: 32:79:4d:6e:07:37:f4:14:54:98:f9:24:65:9d:d2:c9:04:bb: d7:fe:2d:ea:e7:ac:5f:d7:fb:ae:d6:7e:80:c3:43:bf:48:cb: eb:07:b2:ad:89:11:10:d6:e1:ca:b1:78:e8:a8:48:44:d7:10: 6f:f0:2a:a7:55:65:9a:ac:3c:77:57:7c:d8:7d:2e:3f:30:4f: 0c:c9:8c:24:b6:b6:f3:f8:42:46:d9:3e:63:f9:0a:f0:fd:2c: 2e:cf:3e:ee:96:e0:e1:59:0b:2e:75:96:7e:cc:14:54:ac:fd: cc:8d:f4:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT+WsaCv7ev/zhnq6jMG6Epz1SOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURGQzdBNTE0OUQzRkNDMEFDRDlCQkVENTVDNENFOEVB ODJBMDM4QzAeFw0yNjA5MjAxOTAwMjZaFw0yNjA5MjExOTQzMjZaMDMxMTAvBgNV BAMTKEM5QzI1NURDMkZEMkM5RUEzRUM1ODA5Nzg2RTRBNTdEMUQyMDhBRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZNs8Enu3chNzsC6Rt0SJK8sOR Qw9Xt/Nux/tiXLs0RSvfH75pwDBJ4z9FtWT6r/M3yrIF6RxUdgGEzsDiNcvxboJe pGvYOlLmOR2HBF6aN9rHGiyny/RcxgUcdc2yDTtm4gFXdeX53ZSdm5yKvk90I78i 5i9vJKR7qsDOTMgQTWFOMeiUz+ZHENqcC9GR72BQfEQOwdfnMUDIxAM8FdmmonLo HaDkSReSgpCLevJfVIqIwdvPxJ3ILsyWV/Y79vo/XI700OxSM6m9uqvlAjF6H3Hq +sS1I+0LaN6brdvUy+3H7iWZg2eXC+Xlr+h3mMA7ew6Sb+rEs0KATC4DbcVdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUycJV3C/Syeo+xYCXhuSlfR0giu0wHwYDVR0j BBgwFoAUnfx6UUnT/MCs2bvtVcTOjqgqA4wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg0NmY0MjItYzMwMi00NDYyLWI1ODQtNzAwZTkzNDZjYTA5LzAvOURGQzdBNTE0 OUQzRkNDMEFDRDlCQkVENTVDNENFOEVBODJBMDM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REZDN0E1MTQ5RDNGQ0MwQUNEOUJCRUQ1NUM0Q0U4RUE4MkEw MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg0NmY0MjItYzMwMi00NDYyLWI1 ODQtNzAwZTkzNDZjYTA5LzAvOURGQzdBNTE0OUQzRkNDMEFDRDlCQkVENTVDNENF OEVBODJBMDM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmBXpMeqIMVNZPs9a9f2Ax1bbPkJEUL655h bwOo33qN9KT7gqRhFL4FFJNxDXYj44Rh+ih1HE58nlKWz/XVKSFsYoDw+aGi8vNE m9V6/OIIs6xq0OfE/WCgJA3WuKB/lVhdmxUIzATMhDdh9eNk4ES76JDyRmwaIfxd K+FCy9c/RjRTMieiNQeqIFHoUzd1ZDJ5TW4HN/QUVJj5JGWd0skEu9f+LernrF/X +67WfoDDQ79Iy+sHsq2JERDW4cqxeOioSETXEG/wKqdVZZqsPHdXfNh9Lj8wTwzJ jCS2tvP4QkbZPmP5CvD9LC7PPu6W4OFZCy51ln7MFFSs/cyN9C0= -----END CERTIFICATE-----Generated at Mon Sep 21 09:12:30 2026 by rpki-client