$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft File: 9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft (raw, json) Hash identifier: l29vwDav5k7pCKftH5SZjtJMmEfzGIvGN19kNrnSr5o= Subject key identifier: 42:61:0F:63:5E:3A:74:27:FF:0C:1D:90:49:45:C4:C0:09:1C:23:34 Authority key identifier: 9C:0A:D7:06:2A:3E:06:0D:75:A5:5B:4E:50:47:F6:AF:D8:8C:13:44 Certificate issuer: /CN=9C0AD7062A3E060D75A55B4E5047F6AFD88C1344 Certificate serial: 73EB6A1D4DB3C6459C3E4718F00C22EFAF95A352 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 09:17:14 +0000 Manifest this update: Thu 24 Sep 2026 09:12:14 +0000 Manifest next update: Fri 25 Sep 2026 11:53:14 +0000 Files and hashes: 1: 3130332e3139312e3230302e302f32342d3234203d3e20313432333636.roa (hash: zW2qkXEpoz4y3CxwswSc/8npi9VR1vmLGxgHBmxtWZc=) 2: 9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.crl (hash: mR8BK2/8sgYvcrgsBIrU2ZXPc/hkXG4q52X/9RaOhUc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.crl rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:eb:6a:1d:4d:b3:c6:45:9c:3e:47:18:f0:0c:22:ef:af:95:a3:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0AD7062A3E060D75A55B4E5047F6AFD88C1344 Validity Not Before: Sep 24 09:12:14 2026 GMT Not After : Sep 25 11:53:14 2026 GMT Subject: CN=42610F635E3A7427FF0C1D904945C4C0091C2334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:64:3a:98:7b:3a:bd:22:e0:69:a1:f0:3a:11: 6b:17:1d:9a:40:b7:88:b7:07:6e:72:d5:af:1e:c3: 9c:fd:4f:95:09:78:7c:ea:f3:83:30:ea:11:be:ac: bb:41:07:e4:6c:a4:4b:30:18:96:6e:a8:f3:67:35: f6:09:2e:79:ca:81:e2:09:9c:da:de:c2:6c:09:be: 46:2c:e9:b8:bb:f1:b0:08:6d:34:26:82:fd:9e:c7: d9:13:dc:9c:db:44:9b:93:a4:c2:3a:5c:0a:cb:98: 03:d6:78:29:ee:56:fc:45:3f:73:da:68:7d:68:2f: ba:ce:63:90:ae:da:20:33:4a:b6:f7:57:84:75:d3: 77:80:cf:dc:51:5b:f4:3a:15:9b:f4:99:46:55:d4: 70:70:3f:13:bc:af:97:bc:85:1d:89:2b:62:4b:fc: 91:c2:2b:42:83:d3:39:8a:af:ab:8f:2a:70:78:8f: a5:dc:9c:33:a7:15:f0:35:52:a1:07:1d:3a:af:c1: 6a:4c:86:d7:01:35:e4:41:84:1b:7a:c4:a2:57:54: 5b:d2:67:f0:17:da:aa:b8:7b:05:4e:3a:ac:41:20: 33:c7:c8:45:7a:19:7c:2d:d4:b0:29:54:ff:6f:7a: 7a:fa:92:3d:90:03:fc:b0:67:9f:84:42:10:c1:81: db:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:61:0F:63:5E:3A:74:27:FF:0C:1D:90:49:45:C4:C0:09:1C:23:34 X509v3 Authority Key Identifier: keyid:9C:0A:D7:06:2A:3E:06:0D:75:A5:5B:4E:50:47:F6:AF:D8:8C:13:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7c:5f:4f:03:98:60:ab:a3:7d:41:3d:c2:a6:31:02:55:b0: d8:82:25:fd:db:e6:c0:7e:9e:ac:38:43:bc:12:10:60:83:aa: db:d7:14:ec:e3:4b:0c:cf:90:39:a6:9f:88:c7:42:5b:0b:c7: 8b:64:8a:5c:59:b7:c1:d4:16:c2:47:4f:ef:ef:de:ca:56:2e: 3a:d5:ec:ee:8b:2f:d5:98:8d:22:e5:e9:13:98:fd:d4:cf:0c: 3f:6c:9e:4f:bc:62:e7:8a:ae:6d:d6:db:94:a5:32:7e:c8:1d: 55:e9:f0:17:75:0c:f7:30:bd:6f:30:d8:ee:be:47:20:a3:b3: 08:73:0b:3d:1f:32:b1:b9:ce:c9:b1:b8:e5:e9:1a:05:e4:97: d5:83:54:83:4e:a9:c9:33:96:4b:25:71:86:77:40:b1:f8:3d: 86:07:a0:17:8b:b6:2b:61:7e:f4:ff:93:b6:63:cc:28:d7:a2: 17:d7:16:08:ac:be:8e:ac:70:7a:27:07:3e:41:0e:d9:f0:82: 40:ea:9d:86:97:e3:00:7a:ca:6a:a0:69:16:43:26:48:43:b2: 72:39:75:a0:68:84:00:f6:91:f1:4f:84:01:80:e2:c0:8b:89: 59:3d:c2:48:eb:5f:90:ea:76:b3:56:5d:bd:76:04:a8:39:d6: 07:0a:91:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc+tqHU2zxkWcPkcY8Awi76+Vo1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwQUQ3MDYyQTNFMDYwRDc1QTU1QjRFNTA0N0Y2QUZE ODhDMTM0NDAeFw0yNjA5MjQwOTEyMTRaFw0yNjA5MjUxMTUzMTRaMDMxMTAvBgNV BAMTKDQyNjEwRjYzNUUzQTc0MjdGRjBDMUQ5MDQ5NDVDNEMwMDkxQzIzMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ZDqYezq9IuBpofA6EWsXHZpA t4i3B25y1a8ew5z9T5UJeHzq84Mw6hG+rLtBB+RspEswGJZuqPNnNfYJLnnKgeIJ nNrewmwJvkYs6bi78bAIbTQmgv2ex9kT3JzbRJuTpMI6XArLmAPWeCnuVvxFP3Pa aH1oL7rOY5Cu2iAzSrb3V4R103eAz9xRW/Q6FZv0mUZV1HBwPxO8r5e8hR2JK2JL /JHCK0KD0zmKr6uPKnB4j6XcnDOnFfA1UqEHHTqvwWpMhtcBNeRBhBt6xKJXVFvS Z/AX2qq4ewVOOqxBIDPHyEV6GXwt1LApVP9venr6kj2QA/ywZ5+EQhDBgdt9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQmEPY146dCf/DB2QSUXEwAkcIzQwHwYDVR0j BBgwFoAUnArXBio+Bg11pVtOUEf2r9iME0QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTAzZTcxZmUtYWQzMy00ZDEyLTg3MjAtNDMxNDNmZjAxZGJmLzAvOUMwQUQ3MDYy QTNFMDYwRDc1QTU1QjRFNTA0N0Y2QUZEODhDMTM0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QzBBRDcwNjJBM0UwNjBENzVBNTVCNEU1MDQ3RjZBRkQ4OEMx MzQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTAzZTcxZmUtYWQzMy00ZDEyLTg3 MjAtNDMxNDNmZjAxZGJmLzAvOUMwQUQ3MDYyQTNFMDYwRDc1QTU1QjRFNTA0N0Y2 QUZEODhDMTM0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH58X08DmGCro31BPcKmMQJVsNiCJf3b5sB+ nqw4Q7wSEGCDqtvXFOzjSwzPkDmmn4jHQlsLx4tkilxZt8HUFsJHT+/v3spWLjrV 7O6LL9WYjSLl6ROY/dTPDD9snk+8YueKrm3W25SlMn7IHVXp8Bd1DPcwvW8w2O6+ RyCjswhzCz0fMrG5zsmxuOXpGgXkl9WDVINOqckzlkslcYZ3QLH4PYYHoBeLtith fvT/k7ZjzCjXohfXFgisvo6scHonBz5BDtnwgkDqnYaX4wB6ymqgaRZDJkhDsnI5 daBohAD2kfFPhAGA4sCLiVk9wkjrX5DqdrNWXb12BKg51gcKkWY= -----END CERTIFICATE-----Generated at Thu Sep 24 14:01:50 2026 by rpki-client