$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft File: 9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft (raw, json) Hash identifier: 4bYBTynbOmTjqWPLs2t5PLJg2hvS0Oh7VBkLuvw8SeY= Subject key identifier: CA:C2:1F:69:8D:7A:1E:1C:D6:98:85:62:95:C7:B9:C9:C6:94:CE:7D Authority key identifier: 93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C Certificate issuer: /CN=9370AF17CF894C561A727E816DE3B11D5D8AAD9C Certificate serial: 1CC26AE0432E76E507FC66ABDBA42160CCDDCDF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft Manifest number: DD Signing time: Thu 15 Oct 2026 03:08:52 +0000 Manifest this update: Thu 15 Oct 2026 03:03:52 +0000 Manifest next update: Fri 16 Oct 2026 06:36:52 +0000 Files and hashes: 1: 9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl (hash: YpxmPAlx1+nin35FUCmEfdIuZE8bUF/ATq6Gzy69NEE=) 2: 3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa (hash: rp1e1zzn4/8hrijf1AXdkJbP5FeTjYw1wnI20jUxS/k=) 3: 3130332e3138362e33332e302f32342d3234203d3e20313439363930.roa (hash: 66uNmMCT6fkEdO81aZRWkTBSkfQiCejM3k2UxZQSC6k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 06:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c2:6a:e0:43:2e:76:e5:07:fc:66:ab:db:a4:21:60:cc:dd:cd:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9370AF17CF894C561A727E816DE3B11D5D8AAD9C Validity Not Before: Oct 15 03:03:52 2026 GMT Not After : Oct 16 06:36:52 2026 GMT Subject: CN=CAC21F698D7A1E1CD698856295C7B9C9C694CE7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8e:a4:c2:84:11:30:72:59:0f:9c:c7:98:23: f4:e8:3f:fd:54:0c:b7:b1:af:2b:00:1d:94:a1:75: 56:2d:62:5a:7a:05:47:35:1f:3f:5d:0d:bb:30:db: eb:2f:0d:bf:15:ab:0a:89:84:fa:d2:df:52:c5:98: 3c:c8:d2:14:b9:31:57:6a:47:f7:b2:f3:18:ea:a1: b2:88:ed:f1:92:84:2d:57:da:9a:2d:b9:d4:04:c2: e4:37:42:87:40:7f:38:92:7d:61:bf:5e:ae:dd:4e: e2:9d:c9:96:28:0a:14:29:cc:20:3f:57:0f:45:01: 11:7d:85:1f:c2:a2:6d:d5:97:49:0d:e0:39:3f:cd: 9f:74:79:b7:e4:e5:44:80:99:71:b3:c5:2d:49:62: c1:98:a6:b5:dc:94:c2:f6:8a:8c:2b:19:1c:aa:d4: 13:dd:f8:32:d9:0b:7b:1a:e1:07:ae:ca:4e:db:d0: 28:c1:02:ce:c5:ed:02:6f:3e:83:f3:37:9c:b2:60: 9e:1a:e5:c8:f6:40:7b:2c:d0:ce:ac:d9:e5:8e:7b: 20:81:57:68:47:71:a3:e5:d4:27:93:3e:e0:af:cc: a1:72:c4:bf:a6:94:5c:61:2b:05:ed:42:54:8e:8a: 7c:94:d4:82:db:8b:0a:61:74:c2:ca:6b:40:56:57: 4d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C2:1F:69:8D:7A:1E:1C:D6:98:85:62:95:C7:B9:C9:C6:94:CE:7D X509v3 Authority Key Identifier: keyid:93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a8:03:65:dc:72:5c:4e:a0:8b:96:40:be:c0:54:dc:b0:9c: be:98:d4:44:c6:61:c6:f5:bd:43:e0:25:72:ad:05:21:32:93: ee:e1:e1:b5:f5:e8:ad:a5:d3:01:aa:32:7c:b5:b0:fd:ce:8f: 68:66:4d:6a:ef:63:11:f5:d9:67:c9:c2:f6:fb:1b:b3:0e:51: 42:aa:3a:5b:df:eb:a6:cb:21:73:de:13:26:b0:b9:83:b5:50: 59:f0:5a:77:aa:46:6f:43:ca:4c:11:ff:c6:9b:3e:d2:89:05: c7:69:7f:62:55:f9:53:c3:50:ef:f0:c6:98:09:0e:a1:2c:b7: f6:94:84:c6:31:bd:6d:45:7f:c7:55:7c:46:90:f3:8d:31:53: 80:33:3c:dd:c5:df:bb:6e:2d:68:46:0c:4c:2a:aa:6e:55:fc: 08:c7:7a:b3:2c:de:9f:16:2a:24:eb:0d:67:47:28:aa:e6:1f: 32:a8:d2:aa:40:97:6c:d2:cf:7a:8d:ed:14:50:76:0d:8f:36: d4:72:d9:6b:98:ed:5d:30:bd:de:d9:56:11:7c:2e:0a:ab:2b: 81:2e:a1:f8:b4:f5:3d:1b:a9:50:08:1d:c6:34:68:e8:8c:19: cf:25:60:6a:28:f2:b0:df:80:95:32:12:0e:b1:34:23:a1:db: 4e:96:45:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHMJq4EMuduUH/Gar26QhYMzdzfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM3MEFGMTdDRjg5NEM1NjFBNzI3RTgxNkRFM0IxMUQ1 RDhBQUQ5QzAeFw0yNjEwMTUwMzAzNTJaFw0yNjEwMTYwNjM2NTJaMDMxMTAvBgNV BAMTKENBQzIxRjY5OEQ3QTFFMUNENjk4ODU2Mjk1QzdCOUM5QzY5NENFN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxjqTChBEwclkPnMeYI/ToP/1U DLexrysAHZShdVYtYlp6BUc1Hz9dDbsw2+svDb8VqwqJhPrS31LFmDzI0hS5MVdq R/ey8xjqobKI7fGShC1X2potudQEwuQ3QodAfziSfWG/Xq7dTuKdyZYoChQpzCA/ Vw9FARF9hR/Com3Vl0kN4Dk/zZ90ebfk5USAmXGzxS1JYsGYprXclML2iowrGRyq 1BPd+DLZC3sa4Qeuyk7b0CjBAs7F7QJvPoPzN5yyYJ4a5cj2QHss0M6s2eWOeyCB V2hHcaPl1CeTPuCvzKFyxL+mlFxhKwXtQlSOinyU1ILbiwphdMLKa0BWV01LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUysIfaY16HhzWmIVilce5ycaUzn0wHwYDVR0j BBgwFoAUk3CvF8+JTFYacn6BbeOxHV2KrZwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGNlOWY0M2QtMDhiYS00ZDAyLThmMzgtNzQ3MzJmMTVjZDhjLzAvOTM3MEFGMTdD Rjg5NEM1NjFBNzI3RTgxNkRFM0IxMUQ1RDhBQUQ5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzcwQUYxN0NGODk0QzU2MUE3MjdFODE2REUzQjExRDVEOEFB RDlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGNlOWY0M2QtMDhiYS00ZDAyLThm MzgtNzQ3MzJmMTVjZDhjLzAvOTM3MEFGMTdDRjg5NEM1NjFBNzI3RTgxNkRFM0Ix MUQ1RDhBQUQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACeoA2XcclxOoIuWQL7AVNywnL6Y1ETGYcb1 vUPgJXKtBSEyk+7h4bX16K2l0wGqMny1sP3Oj2hmTWrvYxH12WfJwvb7G7MOUUKq Olvf66bLIXPeEyawuYO1UFnwWneqRm9DykwR/8abPtKJBcdpf2JV+VPDUO/wxpgJ DqEst/aUhMYxvW1Ff8dVfEaQ840xU4AzPN3F37tuLWhGDEwqqm5V/AjHerMs3p8W KiTrDWdHKKrmHzKo0qpAl2zSz3qN7RRQdg2PNtRy2WuY7V0wvd7ZVhF8LgqrK4Eu ofi09T0bqVAIHcY0aOiMGc8lYGoo8rDfgJUyEg6xNCOh206WRZE= -----END CERTIFICATE-----Generated at Thu Oct 15 16:34:59 2026 by rpki-client