$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft File: 9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft (raw, json) Hash identifier: iC87SgqqrpN8gYU1b8MFXeTQntWNlcJpRSdcshrWnUc= Subject key identifier: D4:DD:6C:A6:7C:4C:0D:0A:6B:7F:64:24:25:E0:8C:22:F9:9E:9A:65 Authority key identifier: 9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9 Certificate issuer: /CN=9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9 Certificate serial: 541D49DC65F302AE9C56CC507DF7C9FFC7071A0F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft Manifest number: BF Signing time: Mon 21 Sep 2026 20:37:05 +0000 Manifest this update: Mon 21 Sep 2026 20:32:05 +0000 Manifest next update: Tue 22 Sep 2026 23:07:05 +0000 Files and hashes: 1: 3136302e32322e3230382e302f32332d3234203d3e20313532383239.roa (hash: geTlR2xlRfEtN72u5a2Y4lLKK2jTFc1FYHlhZP1ErB8=) 2: 9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl (hash: jM0zU5kIo9dGPWdwiInR6HpDn0ReZ2XZRjISf5Rhw38=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:1d:49:dc:65:f3:02:ae:9c:56:cc:50:7d:f7:c9:ff:c7:07:1a:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9 Validity Not Before: Sep 21 20:32:05 2026 GMT Not After : Sep 22 23:07:05 2026 GMT Subject: CN=D4DD6CA67C4C0D0A6B7F642425E08C22F99E9A65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:48:29:e6:0d:de:27:d1:bc:0f:7d:fa:6b:af: 8c:9f:70:36:43:3d:2e:61:b5:20:b9:0a:12:95:d4: f4:29:ac:67:d5:a9:82:5a:d3:ec:fc:2b:71:5c:a5: a6:ac:73:ed:fc:03:c9:8c:96:0f:93:80:3a:33:e3: 4e:63:e4:26:49:0e:18:95:72:52:cf:b3:5b:f7:e5: ea:8e:b8:92:11:93:89:6c:58:49:05:05:a9:02:95: f5:3b:34:00:18:fe:69:9e:41:cf:88:63:a8:7a:c6: 19:59:45:5a:ca:a6:65:81:6f:e3:02:7f:5d:75:78: 62:b8:38:36:07:4f:5f:be:59:15:6b:ee:6e:e3:b6: c2:55:1f:47:13:a1:08:c4:51:81:0b:cd:8b:b2:20: 55:23:9f:c8:9f:0f:e4:b0:bd:c6:6d:21:18:13:2f: 21:b9:c5:c7:ff:6a:60:58:48:64:ea:62:66:14:ed: 3a:3f:82:83:28:e5:2b:f8:a0:b3:4e:9d:8e:5f:bb: 55:bc:da:4f:45:af:0d:1f:b9:e0:e0:54:80:e9:3f: 23:55:2a:d6:44:a5:59:eb:5c:f4:75:28:64:0c:e3: 4d:67:52:6d:bd:4f:9e:a0:40:b9:46:58:bc:a2:f2: ac:76:f3:64:48:74:a7:fe:e8:c4:c4:0b:f3:70:3e: 84:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DD:6C:A6:7C:4C:0D:0A:6B:7F:64:24:25:E0:8C:22:F9:9E:9A:65 X509v3 Authority Key Identifier: keyid:9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:bf:dc:5c:d4:b9:8e:f7:dd:e2:1b:5e:2b:24:3b:e8:e2:21: af:44:89:a4:3c:08:83:56:81:ce:6b:df:65:e6:f3:c5:e7:f2: de:f0:e9:c9:ac:9c:2a:24:70:0e:62:cf:64:49:63:a1:b9:b2: 4e:80:6c:45:43:20:b1:ca:32:68:bd:ac:df:fd:70:e2:36:12: 80:20:d8:09:34:8e:bd:f8:2a:8b:4b:4d:e2:57:3e:36:0e:df: 60:0a:3a:5c:ef:34:1f:47:24:e5:2d:03:08:4b:61:34:8c:9f: f7:e1:c6:8d:8c:1f:ba:26:84:20:69:f2:15:aa:77:85:2b:31: d0:ab:5f:e5:ad:7d:1f:ed:42:be:3b:e0:13:a4:d5:85:c8:91: 35:a3:9d:26:2a:f0:aa:86:b6:3c:1b:b1:f9:ff:a4:b6:95:d2: d8:06:21:8b:d5:73:e0:38:c2:71:62:5d:f1:57:10:b0:c4:84: 73:59:52:24:fa:e8:5e:87:c9:1f:09:d7:4a:ff:b3:a1:7c:11: 4f:2a:ed:ae:e6:27:89:f5:9b:d6:80:82:9e:fa:d3:48:e2:e4: 59:6b:a0:6d:f3:06:68:15:f0:da:47:fa:ac:00:df:95:3e:66: fb:3c:1f:78:5c:1a:f9:ec:3d:bf:36:44:39:a1:0b:39:01:52: ee:12:5f:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVB1J3GXzAq6cVsxQfffJ/8cHGg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMyM0ZCM0U4Qjg1OTYxRkQ0OEJDNzgwREFGNDRDRUZC NjQ3QzZFOTAeFw0yNjA5MjEyMDMyMDVaFw0yNjA5MjIyMzA3MDVaMDMxMTAvBgNV BAMTKEQ0REQ2Q0E2N0M0QzBEMEE2QjdGNjQyNDI1RTA4QzIyRjk5RTlBNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzSCnmDd4n0bwPffprr4yfcDZD PS5htSC5ChKV1PQprGfVqYJa0+z8K3Fcpaasc+38A8mMlg+TgDoz405j5CZJDhiV clLPs1v35eqOuJIRk4lsWEkFBakClfU7NAAY/mmeQc+IY6h6xhlZRVrKpmWBb+MC f111eGK4ODYHT1++WRVr7m7jtsJVH0cToQjEUYELzYuyIFUjn8ifD+SwvcZtIRgT LyG5xcf/amBYSGTqYmYU7To/goMo5Sv4oLNOnY5fu1W82k9Frw0fueDgVIDpPyNV KtZEpVnrXPR1KGQM401nUm29T56gQLlGWLyi8qx282RIdKf+6MTEC/NwPoSLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1N1spnxMDQprf2QkJeCMIvmemmUwHwYDVR0j BBgwFoAUnCP7PouFlh/Ui8eA2vRM77ZHxukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNjYjUwYjAtNDNjYy00OGQwLTkxZjQtMDViYmRlN2FjMWQwLzAvOUMyM0ZCM0U4 Qjg1OTYxRkQ0OEJDNzgwREFGNDRDRUZCNjQ3QzZFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85QzIzRkIzRThCODU5NjFGRDQ4QkM3ODBEQUY0NENFRkI2NDdD NkU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvOUMyM0ZCM0U4Qjg1OTYxRkQ0OEJDNzgwREFGNDRD RUZCNjQ3QzZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAS/3FzUuY733eIbXiskO+jiIa9EiaQ8CINW gc5r32Xm88Xn8t7w6cmsnCokcA5iz2RJY6G5sk6AbEVDILHKMmi9rN/9cOI2EoAg 2Ak0jr34KotLTeJXPjYO32AKOlzvNB9HJOUtAwhLYTSMn/fhxo2MH7omhCBp8hWq d4UrMdCrX+WtfR/tQr474BOk1YXIkTWjnSYq8KqGtjwbsfn/pLaV0tgGIYvVc+A4 wnFiXfFXELDEhHNZUiT66F6HyR8J10r/s6F8EU8q7a7mJ4n1m9aAgp7600ji5Flr oG3zBmgV8NpH+qwA35U+Zvs8H3hcGvnsPb82RDmhCzkBUu4SX/s= -----END CERTIFICATE-----Generated at Tue Sep 22 02:20:50 2026 by rpki-client