$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft File: 092239A9C28840E7E025454A2EA108ED5A8BF369.mft (raw, json) Hash identifier: b7SmtKyQlhovrlVYnyx6yEvrjLy24vjNNuNEGJurxWI= Subject key identifier: A9:B3:7D:B4:14:9A:0B:B9:B2:C8:7F:FC:00:13:93:63:E1:3F:52:A8 Authority key identifier: 09:22:39:A9:C2:88:40:E7:E0:25:45:4A:2E:A1:08:ED:5A:8B:F3:69 Certificate issuer: /CN=092239A9C28840E7E025454A2EA108ED5A8BF369 Certificate serial: 42EE4DB5B5605A029F8411487B2AEFC2B1491CB0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft Manifest number: CB Signing time: Thu 01 Oct 2026 05:38:00 +0000 Manifest this update: Thu 01 Oct 2026 05:33:00 +0000 Manifest next update: Fri 02 Oct 2026 08:49:00 +0000 Files and hashes: 1: 092239A9C28840E7E025454A2EA108ED5A8BF369.crl (hash: j+UQ3HBDpgwHYoUuQyWYihuroNUOBduoaS8CP9gq/6o=) 2: 3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa (hash: 9NL2C7FOxcvOHwTRTmo9h9A795ncThfKAUagyOzQnW8=) 3: 323430353a346338303a3a2f33322d3438203d3e20313335343635.roa (hash: A/ozUYyvaDadcj+xsfOVvgriixFLbEAH6FL6zdv2bCc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.crl rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ee:4d:b5:b5:60:5a:02:9f:84:11:48:7b:2a:ef:c2:b1:49:1c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=092239A9C28840E7E025454A2EA108ED5A8BF369 Validity Not Before: Oct 1 05:33:00 2026 GMT Not After : Oct 2 08:49:00 2026 GMT Subject: CN=A9B37DB4149A0BB9B2C87FFC00139363E13F52A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f2:84:1f:6a:c7:bc:ac:11:21:e8:0c:8c:71: 1f:5f:e3:02:87:33:00:88:2f:42:7e:d1:25:9b:01: d9:51:b3:36:39:8b:37:70:d7:ce:4d:ae:ac:f7:de: 3a:85:ec:dd:20:78:49:1d:41:c6:4f:03:f0:88:4a: 95:14:b4:41:32:29:d7:7e:75:a9:a0:16:4a:29:4c: a2:e9:ce:87:65:bc:3f:e2:63:8e:b2:1b:83:45:87: 8d:c1:5f:52:f0:c6:0e:af:cb:09:40:fd:5a:54:bf: 78:9c:60:0e:9d:e5:77:56:eb:45:70:44:67:ea:6d: cd:86:31:b8:88:d1:28:17:4d:28:c3:64:11:59:22: fd:6a:6c:1b:e8:f1:26:76:fc:32:88:c8:ee:1d:b1: b4:97:7b:b2:02:f8:8d:0a:98:bb:e9:c3:6d:5f:db: d3:3f:30:db:06:44:0c:8b:11:fd:0d:ab:78:89:c8: 41:bf:84:b9:7b:35:57:65:0e:08:75:c2:77:2f:d5: fa:99:57:55:7f:2e:70:be:18:02:00:e0:cb:ff:5c: d1:a9:6c:4b:f3:40:0c:9f:d3:6f:eb:3a:9c:86:ae: 65:cd:57:b1:8f:e2:18:64:a5:02:b3:76:dd:5b:5f: 61:1c:10:56:0e:b1:62:f0:76:83:44:9a:c3:5a:0a: f0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B3:7D:B4:14:9A:0B:B9:B2:C8:7F:FC:00:13:93:63:E1:3F:52:A8 X509v3 Authority Key Identifier: keyid:09:22:39:A9:C2:88:40:E7:E0:25:45:4A:2E:A1:08:ED:5A:8B:F3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:c2:6a:cd:6c:e7:9e:a2:1a:2c:90:0e:63:1e:0c:f4:15:5f: 2c:11:fe:63:3c:69:3d:be:3f:24:b7:ea:78:bf:65:91:48:09: 00:ed:6d:e2:48:00:86:e6:e8:57:d2:e1:00:c9:a1:b8:c7:b7: 39:1e:38:63:98:8a:ee:48:2b:13:3f:b6:87:cf:a6:0f:bb:a7: 72:59:17:31:39:8b:d6:7a:a8:f2:c3:b1:6d:5a:85:cb:6d:a4: 8e:3e:b0:51:56:ba:b9:26:53:4f:db:be:8a:e5:ae:c7:c2:3c: 74:de:49:74:9d:73:c8:8c:be:69:e6:d2:e9:96:77:6e:4e:66: 2c:e3:ce:2f:12:39:95:73:3d:57:a8:fa:5a:11:ea:1f:63:ca: a9:8b:d1:26:f1:2b:54:24:a9:96:1c:3c:7e:3a:44:48:40:c7: 93:da:7a:17:19:92:b7:1c:65:73:67:2e:a8:fb:ef:37:d0:98: b4:35:75:de:23:ac:85:31:78:2c:48:c9:d8:68:33:1a:43:97: 7d:e0:59:70:88:d0:00:03:a4:81:5f:24:e6:51:b5:2b:e1:c6: 27:04:d3:6b:da:14:3f:41:1e:a8:3a:c7:f9:8b:4a:f9:c2:2f: 5f:b4:33:61:7f:e4:ef:24:9b:db:c7:b3:ec:82:1d:5a:e2:43: c7:b6:a5:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQu5NtbVgWgKfhBFIeyrvwrFJHLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkyMjM5QTlDMjg4NDBFN0UwMjU0NTRBMkVBMTA4RUQ1 QThCRjM2OTAeFw0yNjEwMDEwNTMzMDBaFw0yNjEwMDIwODQ5MDBaMDMxMTAvBgNV BAMTKEE5QjM3REI0MTQ5QTBCQjlCMkM4N0ZGQzAwMTM5MzYzRTEzRjUyQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl8oQfase8rBEh6AyMcR9f4wKH MwCIL0J+0SWbAdlRszY5izdw185Nrqz33jqF7N0geEkdQcZPA/CISpUUtEEyKdd+ damgFkopTKLpzodlvD/iY46yG4NFh43BX1Lwxg6vywlA/VpUv3icYA6d5XdW60Vw RGfqbc2GMbiI0SgXTSjDZBFZIv1qbBvo8SZ2/DKIyO4dsbSXe7IC+I0KmLvpw21f 29M/MNsGRAyLEf0Nq3iJyEG/hLl7NVdlDgh1wncv1fqZV1V/LnC+GAIA4Mv/XNGp bEvzQAyf02/rOpyGrmXNV7GP4hhkpQKzdt1bX2EcEFYOsWLwdoNEmsNaCvBlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqbN9tBSaC7myyH/8ABOTY+E/UqgwHwYDVR0j BBgwFoAUCSI5qcKIQOfgJUVKLqEI7VqL82kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNhNjJjOWEtZDRmMC00NTRiLTgwN2YtODRmOWIzYzIwMmIzLzAvMDkyMjM5QTlD Mjg4NDBFN0UwMjU0NTRBMkVBMTA4RUQ1QThCRjM2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTIyMzlBOUMyODg0MEU3RTAyNTQ1NEEyRUExMDhFRDVBOEJG MzY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNhNjJjOWEtZDRmMC00NTRiLTgw N2YtODRmOWIzYzIwMmIzLzAvMDkyMjM5QTlDMjg4NDBFN0UwMjU0NTRBMkVBMTA4 RUQ1QThCRjM2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbCas1s556iGiyQDmMeDPQVXywR/mM8aT2+ PyS36ni/ZZFICQDtbeJIAIbm6FfS4QDJobjHtzkeOGOYiu5IKxM/tofPpg+7p3JZ FzE5i9Z6qPLDsW1ahcttpI4+sFFWurkmU0/bvorlrsfCPHTeSXSdc8iMvmnm0umW d25OZizjzi8SOZVzPVeo+loR6h9jyqmL0SbxK1QkqZYcPH46REhAx5PaehcZkrcc ZXNnLqj77zfQmLQ1dd4jrIUxeCxIydhoMxpDl33gWXCI0AADpIFfJOZRtSvhxicE 02vaFD9BHqg6x/mLSvnCL1+0M2F/5O8km9vHs+yCHVriQ8e2pWE= -----END CERTIFICATE-----Generated at Thu Oct 1 20:28:10 2026 by rpki-client