$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft File: D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft (raw, json) Hash identifier: mnR43yzVss53q/IevOZZOf+/FlsL5gXOpYDb0bJXbiw= Subject key identifier: 1A:87:8D:5C:86:EB:53:1E:6D:A9:7C:B8:13:22:86:E3:90:8A:57:74 Authority key identifier: D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6 Certificate issuer: /CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6 Certificate serial: 6C9CCFFEF6152651A68E64E28B17AFA98F55B67F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft Manifest number: BE Signing time: Mon 21 Sep 2026 01:33:29 +0000 Manifest this update: Mon 21 Sep 2026 01:28:29 +0000 Manifest next update: Tue 22 Sep 2026 01:50:29 +0000 Files and hashes: 1: 3136302e32322e3133372e302f32342d3234203d3e20313532383131.roa (hash: UJBNMpcsHaasyvcJ4Sq3J89ZHMIFKcGiQvcCBcd8DHY=) 2: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: e4bsRLScbecV3EUW42ypNee+dC4atMUS4ULfB5R1TMs=) 3: D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl (hash: jYu2eaZs/2626vd0lBMMk+pcJl5VYLwUV6KisHZwXfs=) 4: 3136302e32322e3133362e302f32342d3234203d3e20313532383131.roa (hash: mzkKba2j66n6wraFNQYRS+UC4ztp7C2s0dllCrbur4g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:9c:cf:fe:f6:15:26:51:a6:8e:64:e2:8b:17:af:a9:8f:55:b6:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6 Validity Not Before: Sep 21 01:28:29 2026 GMT Not After : Sep 22 01:50:29 2026 GMT Subject: CN=1A878D5C86EB531E6DA97CB8132286E3908A5774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:77:0f:b2:c3:03:e7:ba:f7:09:94:e9:27: b8:c7:67:30:ce:e9:fe:51:52:93:85:38:cf:a0:cf: 03:f7:c5:7b:23:f9:95:60:0b:0b:bd:80:5b:f6:b4: 07:6b:2f:9d:a2:30:af:3e:51:2e:28:08:2e:b5:e4: 1f:21:63:a1:8a:39:b1:89:d5:76:64:33:26:0b:5c: 60:a3:e7:89:db:fc:f0:21:07:f0:48:c9:03:64:1e: 37:2d:4f:62:3b:42:bd:28:12:b5:b0:5c:54:6f:c8: 22:14:14:fa:88:6f:ab:e1:98:47:2f:e5:88:c7:d6: c3:b0:da:5e:d8:e0:36:b0:f9:f5:6b:72:4d:cd:24: 3c:ee:2c:2a:c2:dd:2e:bd:cd:2b:da:a5:6a:2c:bb: d2:4e:a6:bd:1d:58:b4:24:94:bf:49:da:f2:00:c5: e3:d7:1a:87:fe:84:4e:a9:83:c6:1c:23:29:fa:83: 0c:68:69:da:d9:3c:bf:41:65:48:1e:73:4a:95:15: e2:00:34:b6:76:09:49:6d:29:d0:9f:3d:3c:45:86: 53:d4:d4:7e:4d:de:53:0d:1b:b6:af:ff:51:5a:1b: 37:7a:17:79:bc:8e:56:02:93:18:5d:b9:74:e9:0c: 6e:75:aa:f7:32:15:a7:3e:6a:1e:74:76:ed:aa:d4: 43:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:87:8D:5C:86:EB:53:1E:6D:A9:7C:B8:13:22:86:E3:90:8A:57:74 X509v3 Authority Key Identifier: keyid:D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:cd:a0:84:18:94:e2:b5:a6:c0:1a:54:0c:26:de:36:ea:57: 38:df:3d:3e:a1:b0:97:a4:41:02:43:93:71:c8:88:35:d8:54: e3:a5:6f:4c:bb:1b:e4:93:90:93:f0:b8:0e:90:01:58:50:c9: 7f:92:ca:2d:a1:78:79:0b:b1:b6:d1:24:2c:f2:86:19:bc:f4: 8e:1c:b0:4e:e2:c6:d5:1a:0b:8f:55:53:0c:b7:66:c7:98:74: 35:8a:31:a2:a9:db:57:a3:46:6f:a3:51:bf:b4:4f:8c:d7:53: 03:64:a7:95:d8:4f:0d:8d:f5:98:3c:1c:6a:d1:45:b4:75:b1: 7d:7e:69:74:2b:a5:c5:7b:7f:17:43:db:92:b5:d8:71:df:c1: 09:1f:49:88:62:24:e7:bd:6e:3c:7f:84:2d:76:44:21:60:c4: d2:7b:ad:de:d1:3d:1a:ac:76:64:8e:9e:f6:19:2b:02:94:e1: 21:7b:47:30:f7:2f:a4:46:c8:85:56:1e:36:ab:36:e3:74:68: 82:4a:0e:2a:37:08:b5:c2:56:93:48:88:e8:8d:1d:00:3c:50: 74:87:04:75:5c:c6:62:10:15:16:8c:9a:ec:f9:3f:1c:61:4d: f0:dc:5a:61:e3:14:5d:43:0d:49:39:92:ee:a4:4c:5d:de:a5: 5a:d8:4b:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbJzP/vYVJlGmjmTiixevqY9Vtn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDNEI2QkU4NEM5MEJDNDA2QUI2NzFFNUY3NUE4Qzg2 NTYyOTRGNjAeFw0yNjA5MjEwMTI4MjlaFw0yNjA5MjIwMTUwMjlaMDMxMTAvBgNV BAMTKDFBODc4RDVDODZFQjUzMUU2REE5N0NCODEzMjI4NkUzOTA4QTU3NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/3cPssMD57r3CZTpJ7jHZzDO 6f5RUpOFOM+gzwP3xXsj+ZVgCwu9gFv2tAdrL52iMK8+US4oCC615B8hY6GKObGJ 1XZkMyYLXGCj54nb/PAhB/BIyQNkHjctT2I7Qr0oErWwXFRvyCIUFPqIb6vhmEcv 5YjH1sOw2l7Y4Daw+fVrck3NJDzuLCrC3S69zSvapWosu9JOpr0dWLQklL9J2vIA xePXGof+hE6pg8YcIyn6gwxoadrZPL9BZUgec0qVFeIANLZ2CUltKdCfPTxFhlPU 1H5N3lMNG7av/1FaGzd6F3m8jlYCkxhduXTpDG51qvcyFac+ah50du2q1EOvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGoeNXIbrUx5tqXy4EyKG45CKV3QwHwYDVR0j BBgwFoAU2cS2voTJC8QGq2ceX3WoyGVilPYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE5NWI0YjQtYmM4YS00Y2U1LWI1NTAtOWFhN2IzNmVlMWZhLzAvRDlDNEI2QkU4 NEM5MEJDNDA2QUI2NzFFNUY3NUE4Qzg2NTYyOTRGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EOUM0QjZCRTg0QzkwQkM0MDZBQjY3MUU1Rjc1QThDODY1NjI5 NEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvRDlDNEI2QkU4NEM5MEJDNDA2QUI2NzFFNUY3NUE4 Qzg2NTYyOTRGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMzNoIQYlOK1psAaVAwm3jbqVzjfPT6hsJek QQJDk3HIiDXYVOOlb0y7G+STkJPwuA6QAVhQyX+Syi2heHkLsbbRJCzyhhm89I4c sE7ixtUaC49VUwy3ZseYdDWKMaKp21ejRm+jUb+0T4zXUwNkp5XYTw2N9Zg8HGrR RbR1sX1+aXQrpcV7fxdD25K12HHfwQkfSYhiJOe9bjx/hC12RCFgxNJ7rd7RPRqs dmSOnvYZKwKU4SF7RzD3L6RGyIVWHjarNuN0aIJKDio3CLXCVpNIiOiNHQA8UHSH BHVcxmIQFRaMmuz5PxxhTfDcWmHjFF1DDUk5ku6kTF3epVrYS3s= -----END CERTIFICATE-----Generated at Mon Sep 21 06:12:00 2026 by rpki-client