$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft File: 9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft (raw, json) Hash identifier: K2HZsVH0dZPIh5pNj3jBc7b350eHN9fw4nQqyehHCMg= Subject key identifier: A3:DF:ED:0A:30:7B:D0:E4:1E:C9:9E:EA:D0:AD:EE:15:26:3A:9C:06 Authority key identifier: 9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9 Certificate issuer: /CN=9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9 Certificate serial: 408DEDF442BA75DC1C36603CFD8A3F401BC2946C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft Manifest number: BE Signing time: Mon 21 Sep 2026 00:52:37 +0000 Manifest this update: Mon 21 Sep 2026 00:47:37 +0000 Manifest next update: Tue 22 Sep 2026 04:32:37 +0000 Files and hashes: 1: 9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl (hash: 0m0CmWzUXmrtYWqdglqoCGZlAEV7VEZvwa9th+N7q5U=) 2: 3136302e32322e3230382e302f32332d3234203d3e20313532383239.roa (hash: geTlR2xlRfEtN72u5a2Y4lLKK2jTFc1FYHlhZP1ErB8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:8d:ed:f4:42:ba:75:dc:1c:36:60:3c:fd:8a:3f:40:1b:c2:94:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9 Validity Not Before: Sep 21 00:47:37 2026 GMT Not After : Sep 22 04:32:37 2026 GMT Subject: CN=A3DFED0A307BD0E41EC99EEAD0ADEE15263A9C06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:85:85:88:c0:67:00:f7:cb:3b:58:c0:1b:6b: 5e:51:27:9e:cf:7e:03:1c:c4:d7:29:b0:45:93:48: 7e:0b:5e:0b:87:25:37:ac:9f:16:ff:da:e4:81:09: 89:e5:ca:a7:6e:f2:74:76:04:28:da:28:e5:0b:59: 22:dc:28:3b:fc:ba:6f:8e:4f:d9:e9:2d:46:d4:5f: e8:28:f1:e7:07:96:a4:af:9b:7d:b2:f9:b9:65:c6: 89:52:11:58:ad:2d:07:1c:5a:b1:77:db:00:8c:bf: 8e:4f:f5:33:5f:64:12:07:f1:1a:c0:d1:a1:66:a7: 5e:66:28:ba:76:4d:19:30:ba:3a:3d:0e:75:a1:83: 79:c1:b3:15:f1:67:92:df:4f:ed:13:61:ef:eb:15: 14:51:8e:54:aa:96:2a:ea:cc:9f:58:87:a0:21:2f: c7:e1:48:11:3a:15:74:c5:1c:b7:71:de:14:5f:95: ff:90:14:f2:b8:43:98:cb:4d:7e:e7:c3:b5:c8:ea: e6:24:52:a6:bd:6f:b6:a2:62:e8:a9:fe:c9:39:b0: 8f:36:4e:69:05:7c:2e:8b:aa:83:c0:7d:8a:0f:e8: dc:9d:8c:f3:f8:48:a7:dd:a4:72:e8:fc:ad:73:3f: b6:ed:55:e2:66:53:4d:0d:89:05:06:da:1f:79:01: bd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DF:ED:0A:30:7B:D0:E4:1E:C9:9E:EA:D0:AD:EE:15:26:3A:9C:06 X509v3 Authority Key Identifier: keyid:9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:b9:fc:01:e4:dc:8a:54:f8:a6:d8:b8:ff:9e:e0:f9:9b:a0: a6:34:04:1f:d6:fd:da:9b:99:f7:d6:16:5d:46:69:78:be:03: 97:4e:81:d0:4a:0a:7c:d8:93:2c:b8:5c:64:be:dc:f9:3f:14: 39:29:9f:66:9d:43:e4:86:c8:d6:4c:96:eb:19:23:42:34:5c: fd:8c:63:0a:3d:1c:e8:47:0c:c1:7d:e0:39:fe:89:27:f2:37: 34:f0:9e:d4:c5:94:64:46:c2:e4:39:71:b6:64:75:3a:3b:a9: e0:b8:ba:a7:6e:76:02:25:4a:54:ca:67:6e:a8:ad:d6:57:a1: 51:d7:dc:be:f9:00:e9:81:b4:3a:8c:f6:8c:3d:0e:33:18:8c: 37:19:1b:50:68:ae:06:21:8b:19:8f:94:c2:b5:28:e9:c2:53: 2b:3a:51:b0:07:27:3e:10:f6:26:b3:07:9d:7c:99:cd:7a:9a: d4:45:4c:7f:55:c6:16:34:e3:1c:dd:e4:dd:c8:5b:3a:e4:f8: ac:64:b7:e0:c0:06:90:b0:ba:05:5e:b0:73:fe:ff:9d:8d:fe: f5:9c:b2:9a:b9:66:ab:9e:73:b8:2f:c6:ad:05:f7:db:c2:aa: e4:aa:8f:27:fa:e8:75:8f:0e:d4:79:b9:ee:62:ee:98:51:60: 18:4b:de:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQI3t9EK6ddwcNmA8/Yo/QBvClGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMyM0ZCM0U4Qjg1OTYxRkQ0OEJDNzgwREFGNDRDRUZC NjQ3QzZFOTAeFw0yNjA5MjEwMDQ3MzdaFw0yNjA5MjIwNDMyMzdaMDMxMTAvBgNV BAMTKEEzREZFRDBBMzA3QkQwRTQxRUM5OUVFQUQwQURFRTE1MjYzQTlDMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCphYWIwGcA98s7WMAba15RJ57P fgMcxNcpsEWTSH4LXguHJTesnxb/2uSBCYnlyqdu8nR2BCjaKOULWSLcKDv8um+O T9npLUbUX+go8ecHlqSvm32y+bllxolSEVitLQccWrF32wCMv45P9TNfZBIH8RrA 0aFmp15mKLp2TRkwujo9DnWhg3nBsxXxZ5LfT+0TYe/rFRRRjlSqlirqzJ9Yh6Ah L8fhSBE6FXTFHLdx3hRflf+QFPK4Q5jLTX7nw7XI6uYkUqa9b7aiYuip/sk5sI82 TmkFfC6LqoPAfYoP6NydjPP4SKfdpHLo/K1zP7btVeJmU00NiQUG2h95Ab1pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo9/tCjB70OQeyZ7q0K3uFSY6nAYwHwYDVR0j BBgwFoAUnCP7PouFlh/Ui8eA2vRM77ZHxukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNjYjUwYjAtNDNjYy00OGQwLTkxZjQtMDViYmRlN2FjMWQwLzAvOUMyM0ZCM0U4 Qjg1OTYxRkQ0OEJDNzgwREFGNDRDRUZCNjQ3QzZFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85QzIzRkIzRThCODU5NjFGRDQ4QkM3ODBEQUY0NENFRkI2NDdD NkU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvOUMyM0ZCM0U4Qjg1OTYxRkQ0OEJDNzgwREFGNDRD RUZCNjQ3QzZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALi5/AHk3IpU+KbYuP+e4PmboKY0BB/W/dqb mffWFl1GaXi+A5dOgdBKCnzYkyy4XGS+3Pk/FDkpn2adQ+SGyNZMlusZI0I0XP2M Ywo9HOhHDMF94Dn+iSfyNzTwntTFlGRGwuQ5cbZkdTo7qeC4uqdudgIlSlTKZ26o rdZXoVHX3L75AOmBtDqM9ow9DjMYjDcZG1BorgYhixmPlMK1KOnCUys6UbAHJz4Q 9iazB518mc16mtRFTH9VxhY04xzd5N3IWzrk+Kxkt+DABpCwugVesHP+/52N/vWc spq5Zquec7gvxq0F99vCquSqjyf66HWPDtR5ue5i7phRYBhL3sM= -----END CERTIFICATE-----Generated at Mon Sep 21 23:15:37 2026 by rpki-client