$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft File: A9DFB6024D05A37CA0C756EC747E898140885BC9.mft (raw, json) Hash identifier: wjzVQf+g5abTw2lPLU9CWyS9gs+81J7fpskRh/u/jL4= Subject key identifier: DF:01:C1:97:D1:CF:3B:35:7B:99:AE:1B:43:A5:B8:A8:23:52:10:9E Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9 Certificate issuer: /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9 Certificate serial: 3A7122510D7C3D605B86F8894493198306BB895B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 15:54:33 +0000 Manifest this update: Sat 26 Sep 2026 15:49:33 +0000 Manifest next update: Sun 27 Sep 2026 17:11:33 +0000 Files and hashes: 1: 3131362e31322e34342e302f32342d3234203d3e203338313635.roa (hash: 4eVsgYjQx/GwRQGHLYtsEEdD640KhW1jdNg/AXAmGj8=) 2: A9DFB6024D05A37CA0C756EC747E898140885BC9.crl (hash: 52+NOy6kYrL8usyDGKIC6uyrF275AXLDXyHV5qgGPjE=) 3: 3131342e33302e39332e302f32342d3234203d3e203338313635.roa (hash: Y4OQkQ+6pCKwFE7J9SktmKY2Oia99e7uSzB1cyzK/sw=) 4: 323430313a646363303a3a2f33322d3438203d3e203338313635.roa (hash: 2ylo3HpAhVkvHZhTyyQa6+TpBddihUGH17bMztGMO8Y=) 5: 3131362e31322e34362e302f32342d3234203d3e203338313635.roa (hash: VdZyujauditCo5BInDzGT86RLe022tUhB8aqRECGwWM=) 6: 3130332e3234372e31362e302f32342d3234203d3e203338313635.roa (hash: glySjVWaeYKKJGdVLX98kL01SxrrhC2o5DvZ/OFZzes=) 7: 3130332e38332e3134322e302f32342d3234203d3e203338313635.roa (hash: YrZIFaqaTChjnkZ/BX+Yt+LiIgZZAfEd+7+0eXA8anQ=) 8: 3131362e31322e34352e302f32342d3234203d3e203338313635.roa (hash: /Qbizla9Rd9j7hntYwBfkRjqiwhDVjGQMjdVjta/V4o=) 9: 3131362e31322e34332e302f32342d3234203d3e203338313635.roa (hash: vuNc4l/9yLIs4KyCpx5p6F1jMwXXBMM4BQHYhbheraI=) 10: 3131342e33302e38392e302f32342d3234203d3e203338313635.roa (hash: maWh9CwQAwSd/hgh31AypikUc85sBDX5Qkb/wXAwqQ4=) 11: 3130332e38332e3134312e302f32342d3234203d3e203338313635.roa (hash: caorMzAk2rhKrHkZPEylYGbz3q7q/4kgUFG0ZpSaKuk=) 12: 3131342e33302e39312e302f32342d3234203d3e203338313635.roa (hash: hwrp8oltXPCRSuxrHgsojYMMFzDn1UCIz4HCYehypeU=) 13: 3131342e33302e38382e302f32342d3234203d3e203338313635.roa (hash: TYxvOObRiApVHdygkcJ79px01l2EeTEanmBRk9sEhU8=) 14: 3131362e31322e34322e302f32342d3234203d3e203338313635.roa (hash: Tzz51V+z7G+M0amuU470kd9KxBTkAYh2VanJBe/CIik=) 15: 3131342e33302e38382e302f32312d3234203d3e203338313635.roa (hash: PbHEb+XaCGRxOonc9+PyBhvmLickz9HVhiTfl0wL8wY=) 16: 3130332e3234372e31372e302f32342d3234203d3e203338313635.roa (hash: 5amtZ+LM77tqz27nu3gKgm99BvgZZy43q/i93530bY0=) 17: 3131362e31322e34372e302f32342d3234203d3e203338313635.roa (hash: ls6pClLibFG+ZtAvlvA5DPGIjVB65RJG/A/2js2edZI=) 18: 3131362e31322e34302e302f32312d3234203d3e203338313635.roa (hash: XG2kEfirxjj/sDq/rblsGtFwcedIIKGdVI/XxKks4EQ=) 19: 3130332e38332e3134302e302f32322d3234203d3e203338313635.roa (hash: Ik3fxLSlXA2Xnh23AevRPdy9KUS+oUVTjYCiGIABhYM=) 20: 3131362e31322e34302e302f32342d3234203d3e203338313635.roa (hash: solCgiJ0IBXmILHhdk+WcwssrUHzmifkTZH0iCFde94=) 21: 3131342e33302e39322e302f32342d3234203d3e203338313635.roa (hash: XxFeX4bK2Dh55oFKthxbGwYO1QPL6JkUjpiac/LGmFc=) 22: 3130332e38332e3134332e302f32342d3234203d3e203338313635.roa (hash: PzK9iamlsHrrCIK36AFek4huEos9vJO/Mb+qJmCN8TU=) 23: 3130332e3234372e31362e302f32332d3234203d3e203338313635.roa (hash: X2L0BGiTvmgLJtgSEYwPB9xF12na1ku6hIINh+wHP14=) 24: 3130332e38332e3134302e302f32342d3234203d3e203338313635.roa (hash: fksrul4lMZ1/XL5r5cu/WNsWpdzw6wwNzqAHD2IefPw=) 25: 3131362e31322e34312e302f32342d3234203d3e203338313635.roa (hash: F7W3l45HCPDJENu+RobZMG7HgvBdxexYhGm3GKsDUsc=) 26: 3131342e33302e39342e302f32342d3234203d3e203338313635.roa (hash: G8aUIjts1s/SyprhduUQ7undoZSDOgnTsSv1h0ZIPBI=) 27: 3131342e33302e39302e302f32342d3234203d3e203338313635.roa (hash: sDSoeXLG7m9Vd+TPJvOtkj0D0bh9+lF74Y6p0yHJT2w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:71:22:51:0d:7c:3d:60:5b:86:f8:89:44:93:19:83:06:bb:89:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9 Validity Not Before: Sep 26 15:49:33 2026 GMT Not After : Sep 27 17:11:33 2026 GMT Subject: CN=DF01C197D1CF3B357B99AE1B43A5B8A82352109E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:d8:f5:b9:b0:ee:5c:01:53:cd:79:64:10: f9:23:27:34:c7:42:52:ae:73:d4:9d:e2:40:bb:d0: 3d:38:5f:a6:d2:e0:87:4a:64:cf:64:af:81:3c:12: 46:cc:05:7b:50:e7:b9:70:a4:68:37:3c:7e:9d:97: e8:da:ab:65:f2:13:42:5a:04:34:cd:77:89:a0:1c: 14:c3:4b:8b:04:36:2e:19:a9:b9:c7:15:cf:f7:0b: c1:e9:bd:5f:a0:26:a2:35:7c:4e:d7:af:c2:bc:82: 01:99:28:c3:41:b6:ea:fd:83:31:00:62:52:2b:fc: dc:ac:af:35:21:5a:8d:eb:8a:b7:61:14:e7:4f:37: 13:43:2e:27:bb:98:30:8f:fc:5a:05:8e:cf:81:14: 20:f3:86:f4:28:2d:45:38:5a:24:71:20:9e:ec:f1: 6e:46:8e:7c:2d:45:8a:7f:8e:2f:72:72:0b:fa:46: 4a:19:ef:20:7a:c1:cc:00:83:69:54:d6:fc:f5:b6: 67:15:b8:78:0a:a5:ec:e0:bc:e5:99:de:6b:1a:d2: bb:c3:a6:73:1d:de:67:70:94:0b:bf:f8:bc:c4:0a: cc:19:a1:87:9f:88:1d:10:67:02:eb:02:fc:3a:20: 89:66:45:85:7e:58:fd:04:fc:00:2f:e7:54:f1:ba: 05:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:01:C1:97:D1:CF:3B:35:7B:99:AE:1B:43:A5:B8:A8:23:52:10:9E X509v3 Authority Key Identifier: keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:17:65:92:74:df:ee:c4:ae:9e:c3:b4:37:0e:08:4e:b0:c4: d2:71:37:43:b1:d6:b9:c6:1f:fc:7d:3d:b8:8e:e3:d7:ef:17: 3f:f2:26:55:ed:86:74:4d:a6:4c:43:81:03:3e:8a:52:e5:90: 7d:83:c9:f2:44:88:c2:77:63:12:62:3f:66:7d:41:e0:1d:bd: 6c:08:bd:9f:d1:23:59:cf:b0:b7:8c:06:bb:48:4a:ae:c9:a5: bb:8a:fd:cc:7b:e6:d9:03:5f:4b:01:13:5a:da:bd:19:77:18: 34:b1:a5:a1:b6:31:41:cf:66:bc:da:42:ad:e2:c1:c4:34:8d: 50:23:54:8d:4c:f9:c1:6d:bc:65:c0:de:36:1a:5a:12:49:07: 72:cc:d5:55:3e:b3:ce:48:3d:55:a8:bb:00:22:ff:cd:cc:75: 89:cb:0d:a9:ad:69:fa:21:33:2e:79:9f:47:1c:40:7d:98:a5: cf:ca:37:25:95:9a:c2:71:a8:85:e8:40:e4:7e:26:b1:4b:7a: e2:fa:ec:4f:76:53:e3:c8:a2:ba:44:25:88:22:cf:15:ca:cc: af:e0:76:6b:ea:fc:4e:c0:f6:e7:69:3f:56:8b:80:ef:4c:59: 6a:f9:37:29:23:00:74:65:02:6f:8c:5a:d6:66:d0:88:e7:a3: 46:61:e7:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOnEiUQ18PWBbhviJRJMZgwa7iVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlERkI2MDI0RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5ODE0 MDg4NUJDOTAeFw0yNjA5MjYxNTQ5MzNaFw0yNjA5MjcxNzExMzNaMDMxMTAvBgNV BAMTKERGMDFDMTk3RDFDRjNCMzU3Qjk5QUUxQjQzQTVCOEE4MjM1MjEwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgM9j1ubDuXAFTzXlkEPkjJzTH QlKuc9Sd4kC70D04X6bS4IdKZM9kr4E8EkbMBXtQ57lwpGg3PH6dl+jaq2XyE0Ja BDTNd4mgHBTDS4sENi4ZqbnHFc/3C8HpvV+gJqI1fE7Xr8K8ggGZKMNBtur9gzEA YlIr/NysrzUhWo3rirdhFOdPNxNDLie7mDCP/FoFjs+BFCDzhvQoLUU4WiRxIJ7s 8W5GjnwtRYp/ji9ycgv6RkoZ7yB6wcwAg2lU1vz1tmcVuHgKpezgvOWZ3msa0rvD pnMd3mdwlAu/+LzECswZoYefiB0QZwLrAvw6IIlmRYV+WP0E/AAv51TxugVNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3wHBl9HPOzV7ma4bQ6W4qCNSEJ4wHwYDVR0j BBgwFoAUqd+2Ak0Fo3ygx1bsdH6JgUCIW8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjc0NDhjMTEtZjhkMy00NTdkLThlMjItODQ4ODdhYjIyYTMwLzAvQTlERkI2MDI0 RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5ODE0MDg4NUJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOURGQjYwMjREMDVBMzdDQTBDNzU2RUM3NDdFODk4MTQwODg1 QkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjc0NDhjMTEtZjhkMy00NTdkLThl MjItODQ4ODdhYjIyYTMwLzAvQTlERkI2MDI0RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5 ODE0MDg4NUJDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwXZZJ03+7Erp7DtDcOCE6wxNJxN0Ox1rnG H/x9PbiO49fvFz/yJlXthnRNpkxDgQM+ilLlkH2DyfJEiMJ3YxJiP2Z9QeAdvWwI vZ/RI1nPsLeMBrtISq7JpbuK/cx75tkDX0sBE1ravRl3GDSxpaG2MUHPZrzaQq3i wcQ0jVAjVI1M+cFtvGXA3jYaWhJJB3LM1VU+s85IPVWouwAi/83MdYnLDamtafoh My55n0ccQH2Ypc/KNyWVmsJxqIXoQOR+JrFLeuL67E92U+PIorpEJYgizxXKzK/g dmvq/E7A9udpP1aLgO9MWWr5NykjAHRlAm+MWtZm0Ijno0Zh50M= -----END CERTIFICATE-----Generated at Sat Sep 26 18:56:38 2026 by rpki-client