$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft File: 9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft (raw, json) Hash identifier: PquE0Lvn/c0Xm/Ihtcc7q+iRXt5fQ+6lKK1iPTUF8ZU= Subject key identifier: 4B:65:3C:A9:4C:16:32:85:4B:33:37:56:9E:CF:4C:A5:4E:37:8A:89 Authority key identifier: 9D:68:AC:E3:A8:F4:CD:6B:9B:D7:AB:C6:95:E6:A2:16:24:B1:C5:6C Certificate issuer: /CN=9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C Certificate serial: 75B1B1B3A340275FFA2F00FEFE4E335427AF6E22 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft Manifest number: BF Signing time: Mon 21 Sep 2026 19:15:18 +0000 Manifest this update: Mon 21 Sep 2026 19:10:18 +0000 Manifest next update: Tue 22 Sep 2026 20:56:18 +0000 Files and hashes: 1: 9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.crl (hash: cQt1BlkGUMMnfv+DsgKCXAPGYX1Cs4YkbPvDyR7Hooo=) 2: 3130332e3136302e3133362e302f32342d3234203d3e20313431353838.roa (hash: xiHN/v3vXzzSYuBqvcK2Zxp9gL/Vai3nTROredoBVU8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.crl rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b1:b1:b3:a3:40:27:5f:fa:2f:00:fe:fe:4e:33:54:27:af:6e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C Validity Not Before: Sep 21 19:10:18 2026 GMT Not After : Sep 22 20:56:18 2026 GMT Subject: CN=4B653CA94C1632854B3337569ECF4CA54E378A89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:02:24:10:f7:a1:0d:74:c7:dc:fd:92:d3:f7: fb:6f:28:c5:db:7d:30:2b:de:f8:23:20:b0:0b:80: b7:d5:f2:8c:49:e8:5a:31:72:39:fe:34:fd:96:45: 09:e4:59:c9:25:e2:1c:ac:96:33:54:e2:15:e4:a7: a3:bd:fe:a1:8b:b7:44:6a:30:1c:7d:1d:4f:67:43: 14:70:c0:8a:79:22:4a:b1:39:65:f7:e3:a0:2e:b5: 39:c7:7f:05:57:a7:5a:f0:36:70:3e:86:05:c3:20: 14:48:81:c2:9e:b7:ee:ac:43:10:eb:66:0d:ff:f3: 45:b4:03:a8:b3:da:63:c6:de:67:6c:7b:4e:bc:4b: d4:8e:b5:0e:37:90:20:a4:8e:85:00:3c:ba:93:e7: 8c:6f:50:ef:70:dd:73:86:96:3e:64:e8:a5:b4:a0: af:7d:27:37:bf:d1:8c:40:2b:7f:6b:6b:bf:f1:49: 53:1f:bd:9a:18:ee:91:f8:ba:17:9c:67:5c:1a:53: da:8c:c6:61:11:a6:ea:31:82:2d:73:f8:89:e2:97: 9b:0f:55:3c:c5:fd:09:87:6e:ea:bc:bf:25:f9:74: 37:25:2e:67:8c:5f:37:a2:fc:9d:80:90:03:05:16: 3d:b2:42:9b:10:f5:6b:66:39:47:8f:15:c2:da:fd: 1c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:65:3C:A9:4C:16:32:85:4B:33:37:56:9E:CF:4C:A5:4E:37:8A:89 X509v3 Authority Key Identifier: keyid:9D:68:AC:E3:A8:F4:CD:6B:9B:D7:AB:C6:95:E6:A2:16:24:B1:C5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a8:fe:f5:5a:03:59:e9:eb:19:09:23:47:8b:ed:75:c2:2d: fe:3d:b2:24:d6:29:cb:05:87:4c:29:c0:26:04:2b:c6:a6:b3: c2:fe:7d:58:38:e3:e7:54:57:eb:45:d3:10:a6:dd:4e:0f:17: af:8d:9c:48:f0:01:e9:61:73:3a:4b:1f:2e:b3:18:8b:10:9b: cf:62:7b:50:50:82:1d:63:fb:15:6f:58:77:9c:93:ae:72:eb: 38:af:d9:5e:a4:a2:f8:3c:6d:e6:ee:f2:4b:fd:d6:c6:61:85: fc:35:94:1a:11:a5:0d:e9:6d:03:e1:75:86:a2:46:63:06:c2: 63:4b:64:74:a1:fe:64:9a:08:c4:83:3e:0a:c2:6a:df:de:61: 62:c3:2d:dc:d1:b0:ff:68:72:5d:9c:4d:74:8f:43:8c:b9:8d: 2f:a1:7c:4a:a6:14:a3:42:d2:c5:9d:cb:2b:c5:9c:82:5e:bd: 9e:1d:55:73:36:fe:eb:7a:51:38:35:db:3d:15:07:cb:68:6a: 36:b8:2e:18:de:a8:e9:6a:ed:8e:96:09:d4:0a:66:d2:bf:01: fc:74:24:b4:67:e0:e7:7b:b0:72:08:e9:f7:85:38:b0:c7:4b: 86:e6:59:1e:af:66:7f:e5:41:2a:ea:fe:5b:d7:c6:e6:20:39: 44:af:e4:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdbGxs6NAJ1/6LwD+/k4zVCevbiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ2OEFDRTNBOEY0Q0Q2QjlCRDdBQkM2OTVFNkEyMTYy NEIxQzU2QzAeFw0yNjA5MjExOTEwMThaFw0yNjA5MjIyMDU2MThaMDMxMTAvBgNV BAMTKDRCNjUzQ0E5NEMxNjMyODU0QjMzMzc1NjlFQ0Y0Q0E1NEUzNzhBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoAiQQ96ENdMfc/ZLT9/tvKMXb fTAr3vgjILALgLfV8oxJ6Foxcjn+NP2WRQnkWckl4hysljNU4hXkp6O9/qGLt0Rq MBx9HU9nQxRwwIp5IkqxOWX346AutTnHfwVXp1rwNnA+hgXDIBRIgcKet+6sQxDr Zg3/80W0A6iz2mPG3mdse068S9SOtQ43kCCkjoUAPLqT54xvUO9w3XOGlj5k6KW0 oK99Jze/0YxAK39ra7/xSVMfvZoY7pH4uhecZ1waU9qMxmERpuoxgi1z+Inil5sP VTzF/QmHbuq8vyX5dDclLmeMXzei/J2AkAMFFj2yQpsQ9WtmOUePFcLa/Rx5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS2U8qUwWMoVLMzdWns9MpU43iokwHwYDVR0j BBgwFoAUnWis46j0zWub16vGleaiFiSxxWwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFlZWQwOWMtNjA2OC00MDdhLWIwYTYtNTliN2QwYjg3ODU1LzAvOUQ2OEFDRTNB OEY0Q0Q2QjlCRDdBQkM2OTVFNkEyMTYyNEIxQzU2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDY4QUNFM0E4RjRDRDZCOUJEN0FCQzY5NUU2QTIxNjI0QjFD NTZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFlZWQwOWMtNjA2OC00MDdhLWIw YTYtNTliN2QwYjg3ODU1LzAvOUQ2OEFDRTNBOEY0Q0Q2QjlCRDdBQkM2OTVFNkEy MTYyNEIxQzU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABio/vVaA1np6xkJI0eL7XXCLf49siTWKcsF h0wpwCYEK8ams8L+fVg44+dUV+tF0xCm3U4PF6+NnEjwAelhczpLHy6zGIsQm89i e1BQgh1j+xVvWHeck65y6ziv2V6kovg8bebu8kv91sZhhfw1lBoRpQ3pbQPhdYai RmMGwmNLZHSh/mSaCMSDPgrCat/eYWLDLdzRsP9ocl2cTXSPQ4y5jS+hfEqmFKNC 0sWdyyvFnIJevZ4dVXM2/ut6UTg12z0VB8toaja4LhjeqOlq7Y6WCdQKZtK/Afx0 JLRn4Od7sHII6feFOLDHS4bmWR6vZn/lQSrq/lvXxuYgOUSv5Gg= -----END CERTIFICATE-----Generated at Tue Sep 22 01:24:17 2026 by rpki-client