$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft File: 9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft (raw, json) Hash identifier: qNuWpKAbAluC4BFQKWQXZk/6GhmlalAmf+kII1pKS/E= Subject key identifier: CE:39:31:F2:74:66:C6:D2:C1:20:D0:B2:CF:78:A3:2F:76:BC:17:AE Authority key identifier: 9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0 Certificate issuer: /CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0 Certificate serial: 1960FF3D4F09081249D5745529E60570A4709190 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft Manifest number: BD Signing time: Mon 21 Sep 2026 05:07:55 +0000 Manifest this update: Mon 21 Sep 2026 05:02:55 +0000 Manifest next update: Tue 22 Sep 2026 09:03:55 +0000 Files and hashes: 1: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: g3Z9fptq9GjJPdegO4ng7rY8ayX1C1nitJgBmqVwMJ4=) 2: 9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl (hash: F2rbmp37Lk8C+Ji+y62ITYFjFXn7AXIhvFBIb96ekls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 09:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:60:ff:3d:4f:09:08:12:49:d5:74:55:29:e6:05:70:a4:70:91:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0 Validity Not Before: Sep 21 05:02:55 2026 GMT Not After : Sep 22 09:03:55 2026 GMT Subject: CN=CE3931F27466C6D2C120D0B2CF78A32F76BC17AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d4:a8:d8:df:30:26:6e:69:0a:a4:3d:6b:0f: ef:3a:ba:7c:d5:da:4f:b5:17:18:4c:6d:1c:ae:d7: fa:07:09:0b:7d:a7:45:e3:48:95:5a:85:a1:63:8e: b4:16:41:9c:a8:31:e0:e5:1f:da:0b:ca:a0:16:a7: 5c:c4:fa:aa:2d:2b:e9:fb:0c:fa:5a:4b:ea:da:fd: df:0e:5d:39:f9:c7:9e:c1:74:77:fd:f7:c4:48:5e: 80:de:fd:e9:b2:bd:43:17:6b:b2:04:c7:78:1d:ca: fb:60:3d:43:e1:af:ae:aa:a9:9c:ed:76:8d:99:69: e1:40:b0:53:dc:59:0d:35:ae:36:b0:6d:39:bd:6a: d8:c2:06:d6:87:c1:8a:89:2b:67:1f:90:f3:18:9b: 7d:e2:7b:74:dd:11:d6:a6:3f:bd:b2:9c:d3:cc:cb: 38:27:6e:d5:2f:51:9e:12:e4:9c:65:11:98:1f:cd: 09:4f:c4:6b:78:e5:44:9b:f2:f1:7d:77:96:51:90: 9d:a4:1d:b6:0d:86:5d:2d:5e:12:84:56:2e:7f:82: 70:75:78:69:92:75:9f:1f:6e:07:b6:e9:8f:d6:cb: 45:b5:19:96:d2:d8:7b:c0:68:e2:7a:e2:33:5c:89: 5c:b7:a8:cb:1d:e4:27:79:9e:72:54:8b:46:7e:7e: a8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:39:31:F2:74:66:C6:D2:C1:20:D0:B2:CF:78:A3:2F:76:BC:17:AE X509v3 Authority Key Identifier: keyid:9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:53:73:3b:62:52:56:ea:3c:fe:77:88:fe:a6:f3:7b:7a:dc: 63:61:99:fe:4f:ae:9a:67:0b:85:a9:19:37:ad:34:14:5e:7a: 1e:95:f1:a1:4d:05:40:39:c5:1f:9d:8d:31:6c:67:85:c5:69: 03:62:cc:e7:8b:08:be:65:ba:4b:f5:01:9f:86:9c:87:55:c9: 41:9b:ec:06:4a:1e:ae:6a:f1:58:0f:bf:1c:80:04:4b:b5:19: 5e:e5:b2:90:f8:d3:ab:26:3a:13:a6:32:b3:73:13:6e:6d:ac: 7a:a6:28:ab:49:a4:3d:94:5a:6e:e3:9d:b4:42:eb:01:33:a8: 24:8f:69:85:a1:43:48:65:dc:7d:b5:b4:99:3e:10:a8:2d:38: ef:e0:e1:a3:4f:8d:c6:eb:68:ba:cd:67:15:fa:f7:e7:6e:bf: 32:79:bd:1f:71:2b:4e:29:57:46:a9:89:91:ed:ba:ac:88:d2: eb:dc:9b:d3:8d:f5:bc:96:4a:38:03:e7:76:52:d5:ba:15:bc: ad:36:76:4e:ec:09:d8:71:0a:80:7f:53:80:7d:b5:4a:22:56: 7b:20:56:b5:10:e0:ac:b2:6c:e6:7a:04:c2:82:ce:f6:72:0e: 42:74:35:06:55:31:ac:7c:48:e6:5d:64:e8:bf:86:1f:a5:5c: 11:05:b8:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGWD/PU8JCBJJ1XRVKeYFcKRwkZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ3MjhDQTMzMzA3MzY5MEYyQTdGNkI3N0QyQ0YzRkVB RTQ5QUFCMDAeFw0yNjA5MjEwNTAyNTVaFw0yNjA5MjIwOTAzNTVaMDMxMTAvBgNV BAMTKENFMzkzMUYyNzQ2NkM2RDJDMTIwRDBCMkNGNzhBMzJGNzZCQzE3QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK1KjY3zAmbmkKpD1rD+86unzV 2k+1FxhMbRyu1/oHCQt9p0XjSJVahaFjjrQWQZyoMeDlH9oLyqAWp1zE+qotK+n7 DPpaS+ra/d8OXTn5x57BdHf998RIXoDe/emyvUMXa7IEx3gdyvtgPUPhr66qqZzt do2ZaeFAsFPcWQ01rjawbTm9atjCBtaHwYqJK2cfkPMYm33ie3TdEdamP72ynNPM yzgnbtUvUZ4S5JxlEZgfzQlPxGt45USb8vF9d5ZRkJ2kHbYNhl0tXhKEVi5/gnB1 eGmSdZ8fbge26Y/Wy0W1GZbS2HvAaOJ64jNciVy3qMsd5Cd5nnJUi0Z+fqjVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzjkx8nRmxtLBINCyz3ijL3a8F64wHwYDVR0j BBgwFoAUnXKMozMHNpDyp/a3fSzz/q5JqrAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU1ZTkxMzEtM2FiYy00YWJkLWJkOTItYTc1NWZhYjkxMzA1LzAvOUQ3MjhDQTMz MzA3MzY5MEYyQTdGNkI3N0QyQ0YzRkVBRTQ5QUFCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDcyOENBMzMzMDczNjkwRjJBN0Y2Qjc3RDJDRjNGRUFFNDlB QUIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU1ZTkxMzEtM2FiYy00YWJkLWJk OTItYTc1NWZhYjkxMzA1LzAvOUQ3MjhDQTMzMzA3MzY5MEYyQTdGNkI3N0QyQ0Yz RkVBRTQ5QUFCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9TcztiUlbqPP53iP6m83t63GNhmf5Prppn C4WpGTetNBReeh6V8aFNBUA5xR+djTFsZ4XFaQNizOeLCL5lukv1AZ+GnIdVyUGb 7AZKHq5q8VgPvxyABEu1GV7lspD406smOhOmMrNzE25trHqmKKtJpD2UWm7jnbRC 6wEzqCSPaYWhQ0hl3H21tJk+EKgtOO/g4aNPjcbraLrNZxX69+duvzJ5vR9xK04p V0apiZHtuqyI0uvcm9ON9byWSjgD53ZS1boVvK02dk7sCdhxCoB/U4B9tUoiVnsg VrUQ4KyybOZ6BMKCzvZyDkJ0NQZVMax8SOZdZOi/hh+lXBEFuAA= -----END CERTIFICATE-----Generated at Mon Sep 21 23:34:50 2026 by rpki-client