$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft File: 9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft (raw, json) Hash identifier: oyDmdHnW3OvgBf/txYEdESWVdm9dsloeXTvNzpBY6Gc= Subject key identifier: 43:61:6C:C3:F0:C4:8D:0D:98:0E:77:1F:CF:7D:C1:0D:CC:43:1D:4D Authority key identifier: 9A:EB:58:DC:D8:2B:E9:C8:49:6A:50:61:29:6B:76:9F:D6:CE:57:23 Certificate issuer: /CN=9AEB58DCD82BE9C8496A5061296B769FD6CE5723 Certificate serial: 5AA8F2E2BBF5630703AB455B3474B88734127614 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 06:39:46 +0000 Manifest this update: Tue 22 Sep 2026 06:34:46 +0000 Manifest next update: Wed 23 Sep 2026 09:03:46 +0000 Files and hashes: 1: 9AEB58DCD82BE9C8496A5061296B769FD6CE5723.crl (hash: YsIkWV8BwiiSQQf2XdnzM4n3YtgKvvxtP1VR08kYoSg=) 2: 3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (hash: R4MBAYAEX9Tv0xootJiGEA1eln9suXnVGRSSaR5WyEA=) 3: 3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (hash: G6mJxfPd30UDcz5ag6UPMmbiQqjncxx0XmGW9whSIV4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.crl rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a8:f2:e2:bb:f5:63:07:03:ab:45:5b:34:74:b8:87:34:12:76:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AEB58DCD82BE9C8496A5061296B769FD6CE5723 Validity Not Before: Sep 22 06:34:46 2026 GMT Not After : Sep 23 09:03:46 2026 GMT Subject: CN=43616CC3F0C48D0D980E771FCF7DC10DCC431D4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:07:fd:30:14:ff:01:77:85:18:c8:79:1b: 09:5c:7e:8d:06:30:b8:38:69:fa:4c:22:55:f4:1d: ff:dc:9d:7a:e2:db:ec:b8:d2:47:a1:78:06:52:25: b7:db:d0:9e:07:52:8c:8e:48:5b:61:d2:a7:b7:48: bb:b1:bb:9d:e9:34:02:de:da:5b:7f:05:31:f1:e4: 40:7b:15:06:5a:35:44:f3:e2:a4:a8:d8:3d:2a:ed: 9d:84:e6:ca:ec:bf:22:b7:4d:d8:ff:19:fd:72:38: 79:48:51:87:be:64:cb:41:0d:f6:50:1b:5f:12:aa: d2:9c:df:fa:d9:fa:56:5b:1b:69:80:da:e7:7c:63: 75:32:85:c1:94:9a:6f:75:cf:17:3a:18:38:a5:b3: 91:63:01:c4:be:09:2b:55:d2:7b:00:15:75:21:da: 2a:71:dc:e5:66:f3:53:b6:de:43:96:0f:4b:83:cc: 1e:1d:3d:19:dc:20:e2:3e:24:14:77:d2:ae:64:4b: 21:c6:98:89:07:2c:f3:bc:a4:9a:8f:d4:1b:1d:21: a2:6e:e1:dc:fd:ea:7b:c6:ff:b4:de:0f:47:a7:1d: bd:9e:89:90:fe:de:01:c6:d9:0c:b1:db:e8:9b:49: e4:d3:23:21:df:27:f4:ca:fd:7f:28:a1:fc:4a:05: e8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:61:6C:C3:F0:C4:8D:0D:98:0E:77:1F:CF:7D:C1:0D:CC:43:1D:4D X509v3 Authority Key Identifier: keyid:9A:EB:58:DC:D8:2B:E9:C8:49:6A:50:61:29:6B:76:9F:D6:CE:57:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:13:a8:fe:1f:82:a7:08:b3:ac:7e:d4:ef:98:03:94:1c:b4: 85:e3:b7:e7:28:d3:b3:f6:50:fd:cc:9c:5b:89:13:b5:61:b3: 96:94:26:6e:ec:11:9d:86:01:98:47:c1:2c:c2:98:2a:d9:8c: 6b:6c:d6:3a:24:52:23:b5:3d:38:92:8b:b3:da:d5:d5:e4:32: 56:c9:53:d8:ff:24:63:e2:ad:61:0a:75:87:e4:ca:3b:4b:6e: ef:1c:6a:c5:74:6f:55:91:d7:ed:6d:88:d7:87:fe:a9:e2:68: c2:e5:87:84:eb:39:f0:2d:e1:56:99:09:af:fa:58:62:9a:c1: 4d:70:f9:21:fd:fd:64:b9:c1:a3:38:17:bf:b1:2d:09:7b:17: d6:e5:30:aa:64:00:10:82:d9:d7:18:7c:16:d0:d8:78:94:44: f3:d7:a5:fc:51:26:68:f0:d7:4e:99:05:69:a8:78:a2:7e:27: 6f:98:c2:6a:fe:39:f3:23:e8:b7:29:a1:42:ba:31:df:87:34: 3a:78:a8:13:80:c6:47:8e:a1:63:d8:ee:30:e8:54:99:c2:56: 00:6d:3b:5d:af:73:16:43:40:f0:44:73:89:71:ef:3a:ae:ab: 84:ef:56:ae:b9:b2:18:01:fe:65:7d:3b:87:bb:5d:4c:ca:46: 2d:1a:03:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWqjy4rv1YwcDq0VbNHS4hzQSdhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFFQjU4RENEODJCRTlDODQ5NkE1MDYxMjk2Qjc2OUZE NkNFNTcyMzAeFw0yNjA5MjIwNjM0NDZaFw0yNjA5MjMwOTAzNDZaMDMxMTAvBgNV BAMTKDQzNjE2Q0MzRjBDNDhEMEQ5ODBFNzcxRkNGN0RDMTBEQ0M0MzFENEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC57Af9MBT/AXeFGMh5Gwlcfo0G MLg4afpMIlX0Hf/cnXri2+y40keheAZSJbfb0J4HUoyOSFth0qe3SLuxu53pNALe 2lt/BTHx5EB7FQZaNUTz4qSo2D0q7Z2E5srsvyK3Tdj/Gf1yOHlIUYe+ZMtBDfZQ G18SqtKc3/rZ+lZbG2mA2ud8Y3UyhcGUmm91zxc6GDils5FjAcS+CStV0nsAFXUh 2ipx3OVm81O23kOWD0uDzB4dPRncIOI+JBR30q5kSyHGmIkHLPO8pJqP1BsdIaJu 4dz96nvG/7TeD0enHb2eiZD+3gHG2Qyx2+ibSeTTIyHfJ/TK/X8oofxKBei/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ2Fsw/DEjQ2YDncfz33BDcxDHU0wHwYDVR0j BBgwFoAUmutY3Ngr6chJalBhKWt2n9bOVyMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjc0MTgwMTMtMTY3OS00OTZiLTgwZjYtMmQwNWNjNWJlNzJmLzAvOUFFQjU4RENE ODJCRTlDODQ5NkE1MDYxMjk2Qjc2OUZENkNFNTcyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QUVCNThEQ0Q4MkJFOUM4NDk2QTUwNjEyOTZCNzY5RkQ2Q0U1 NzIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjc0MTgwMTMtMTY3OS00OTZiLTgw ZjYtMmQwNWNjNWJlNzJmLzAvOUFFQjU4RENEODJCRTlDODQ5NkE1MDYxMjk2Qjc2 OUZENkNFNTcyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABITqP4fgqcIs6x+1O+YA5QctIXjt+co07P2 UP3MnFuJE7Vhs5aUJm7sEZ2GAZhHwSzCmCrZjGts1jokUiO1PTiSi7Pa1dXkMlbJ U9j/JGPirWEKdYfkyjtLbu8casV0b1WR1+1tiNeH/qniaMLlh4TrOfAt4VaZCa/6 WGKawU1w+SH9/WS5waM4F7+xLQl7F9blMKpkABCC2dcYfBbQ2HiURPPXpfxRJmjw 106ZBWmoeKJ+J2+Ywmr+OfMj6LcpoUK6Md+HNDp4qBOAxkeOoWPY7jDoVJnCVgBt O12vcxZDQPBEc4lx7zquq4TvVq65shgB/mV9O4e7XUzKRi0aA+Q= -----END CERTIFICATE-----Generated at Tue Sep 22 08:51:18 2026 by rpki-client