$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft File: 9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft (raw, json) Hash identifier: 8YaJuyI6tCgFo1trbpa36HUFl2fjZ27YS2VhXAXfQmM= Subject key identifier: 3D:D8:B1:93:D7:67:2C:11:85:A7:29:94:F0:49:2B:AE:40:E0:C7:C9 Authority key identifier: 9B:F4:E3:BF:C9:0E:2E:55:6F:B0:33:A6:F6:1D:F5:52:E1:31:51:4B Certificate issuer: /CN=9BF4E3BFC90E2E556FB033A6F61DF552E131514B Certificate serial: 391D8646A489FDB49F759F157F258AFCE867563A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft Manifest number: BE Signing time: Mon 21 Sep 2026 20:06:20 +0000 Manifest this update: Mon 21 Sep 2026 20:01:20 +0000 Manifest next update: Tue 22 Sep 2026 21:22:20 +0000 Files and hashes: 1: 9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl (hash: cYen/ks2aTi/JSiZ9Y5EuTFQ8SZ+4/f8URsCRaCIGjE=) 2: 3130332e3132312e3130322e302f32332d3234203d3e20313335343738.roa (hash: HYL8rmsnXXXs/BoqrngiGYdSN3TKjR8GgZKUfGOUHuE=) 3: 3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa (hash: c0+q/NVTLzO/hS8+W37na92ADaS9y92HcCmUqDS60d0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 21:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:1d:86:46:a4:89:fd:b4:9f:75:9f:15:7f:25:8a:fc:e8:67:56:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF4E3BFC90E2E556FB033A6F61DF552E131514B Validity Not Before: Sep 21 20:01:20 2026 GMT Not After : Sep 22 21:22:20 2026 GMT Subject: CN=3DD8B193D7672C1185A72994F0492BAE40E0C7C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a4:33:b1:be:80:c3:a5:fe:72:cb:db:bd:10: 92:ab:b5:66:78:1b:6b:ec:51:d9:ab:97:4c:2e:88: 6a:d3:e5:64:96:87:9e:c2:bb:d9:ed:43:34:3e:e2: 29:c0:ff:d6:03:15:9a:b0:9e:32:91:13:d2:3e:39: 14:6f:82:1d:51:39:90:c6:9f:94:da:5f:a7:93:80: bb:89:63:19:ea:ec:14:f8:dc:96:af:39:02:58:49: 50:c8:39:6d:14:45:f9:bb:6f:cb:60:fd:18:81:a6: a8:9c:ae:05:b8:bf:8c:ff:84:2b:e6:50:a2:11:6f: c0:25:3a:4e:40:33:34:a4:9b:1a:97:68:46:9b:22: f8:8c:b4:10:a2:31:9f:04:79:b7:b7:45:df:59:b5: 38:cc:1d:a3:ce:e3:6c:90:74:8e:8f:ab:e5:9a:95: 3e:bc:33:d5:8d:51:c4:a6:10:b5:f3:76:72:3b:65: 99:10:7c:3c:fb:f5:82:70:3d:73:93:c7:61:19:50: 8a:39:d3:97:d1:2c:23:84:b7:08:39:6f:18:d9:a0: 38:b7:50:e4:96:9a:ac:c7:af:00:7a:2e:d4:a8:86: 73:4d:78:a9:a3:d5:a7:c2:7a:f1:90:4f:c8:15:03: 00:bb:3e:f5:d6:4d:f4:4a:b3:16:a8:68:35:38:dd: cd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D8:B1:93:D7:67:2C:11:85:A7:29:94:F0:49:2B:AE:40:E0:C7:C9 X509v3 Authority Key Identifier: keyid:9B:F4:E3:BF:C9:0E:2E:55:6F:B0:33:A6:F6:1D:F5:52:E1:31:51:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:8e:66:c5:8a:89:4b:42:74:7e:a7:e2:01:25:40:84:9c:08: cd:e5:ac:fc:05:8a:03:42:8f:e0:a9:52:4e:07:39:d6:22:59: 95:80:9d:15:2d:85:0a:64:f2:bb:a8:b3:8f:ff:79:ed:73:25: 34:45:c1:15:fe:22:c1:12:17:1e:a3:a5:ef:41:fd:1e:e6:9d: 05:af:95:a3:96:a3:b8:c8:be:55:e8:57:01:b9:f2:0c:14:fa: 4a:cd:42:cf:0d:04:2d:88:10:d4:77:a3:23:32:e1:52:66:f2: 94:20:d8:3e:d2:bc:7c:31:4f:bf:b6:e0:4d:72:c3:70:24:02: 93:00:2c:70:4d:4c:20:bd:d3:41:22:b4:1a:49:3f:3c:f1:53: 6f:d3:5d:5d:5b:d0:ef:2c:41:e6:d3:09:d2:2a:95:61:95:e0: f2:61:80:f9:87:f8:66:c3:87:39:c1:f1:be:3b:28:9c:f7:a5: 71:fa:33:0c:db:ce:84:44:b4:90:b2:aa:d6:7f:72:82:92:21: 58:65:8f:20:a9:f5:cf:0a:19:c6:b4:52:50:f3:66:12:a1:2b: c3:8a:5a:80:6d:a3:24:47:9e:56:d6:2f:f1:7e:77:a4:f8:81: 7d:ee:c2:e8:9e:65:cd:ce:d3:1a:54:9c:ad:5c:34:98:30:58: 14:50:70:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOR2GRqSJ/bSfdZ8VfyWK/OhnVjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGNEUzQkZDOTBFMkU1NTZGQjAzM0E2RjYxREY1NTJF MTMxNTE0QjAeFw0yNjA5MjEyMDAxMjBaFw0yNjA5MjIyMTIyMjBaMDMxMTAvBgNV BAMTKDNERDhCMTkzRDc2NzJDMTE4NUE3Mjk5NEYwNDkyQkFFNDBFMEM3QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCupDOxvoDDpf5yy9u9EJKrtWZ4 G2vsUdmrl0wuiGrT5WSWh57Cu9ntQzQ+4inA/9YDFZqwnjKRE9I+ORRvgh1ROZDG n5TaX6eTgLuJYxnq7BT43JavOQJYSVDIOW0URfm7b8tg/RiBpqicrgW4v4z/hCvm UKIRb8AlOk5AMzSkmxqXaEabIviMtBCiMZ8Eebe3Rd9ZtTjMHaPO42yQdI6Pq+Wa lT68M9WNUcSmELXzdnI7ZZkQfDz79YJwPXOTx2EZUIo505fRLCOEtwg5bxjZoDi3 UOSWmqzHrwB6LtSohnNNeKmj1afCevGQT8gVAwC7PvXWTfRKsxaoaDU43c35AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPdixk9dnLBGFpymU8EkrrkDgx8kwHwYDVR0j BBgwFoAUm/Tjv8kOLlVvsDOm9h31UuExUUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTExMzI0OTctNTk2My00N2FhLTlkZTEtNmM4NDk2YTM2ZWI2LzAvOUJGNEUzQkZD OTBFMkU1NTZGQjAzM0E2RjYxREY1NTJFMTMxNTE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkY0RTNCRkM5MEUyRTU1NkZCMDMzQTZGNjFERjU1MkUxMzE1 MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTExMzI0OTctNTk2My00N2FhLTlk ZTEtNmM4NDk2YTM2ZWI2LzAvOUJGNEUzQkZDOTBFMkU1NTZGQjAzM0E2RjYxREY1 NTJFMTMxNTE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCOZsWKiUtCdH6n4gElQIScCM3lrPwFigNC j+CpUk4HOdYiWZWAnRUthQpk8ruos4//ee1zJTRFwRX+IsESFx6jpe9B/R7mnQWv laOWo7jIvlXoVwG58gwU+krNQs8NBC2IENR3oyMy4VJm8pQg2D7SvHwxT7+24E1y w3AkApMALHBNTCC900EitBpJPzzxU2/TXV1b0O8sQebTCdIqlWGV4PJhgPmH+GbD hznB8b47KJz3pXH6MwzbzoREtJCyqtZ/coKSIVhljyCp9c8KGca0UlDzZhKhK8OK WoBtoyRHnlbWL/F+d6T4gX3uwuieZc3O0xpUnK1cNJgwWBRQcDU= -----END CERTIFICATE-----Generated at Tue Sep 22 02:32:36 2026 by rpki-client