$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft File: C09B0826A8950269AAA9592F3B0B65A3232333C5.mft (raw, json) Hash identifier: k+IE0BhSh2NtnhvGg5hKOmrCX3xS5gI0o/1/ibZon3o= Subject key identifier: 13:BA:23:82:CF:62:5D:EA:CD:A6:9B:5B:C3:AF:62:D2:C5:47:36:33 Authority key identifier: C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 Certificate issuer: /CN=C09B0826A8950269AAA9592F3B0B65A3232333C5 Certificate serial: 28D68F7E44D2732B5063663AD3215DBF6A002D2F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft Manifest number: BE Signing time: Sun 20 Sep 2026 13:03:09 +0000 Manifest this update: Sun 20 Sep 2026 12:58:09 +0000 Manifest next update: Mon 21 Sep 2026 16:37:09 +0000 Files and hashes: 1: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: /OlYgkp/JUv7mWTKG1jRIEEEMwF4cVrVtCICjMapFuQ=) 2: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: qD0/6TXIm8wKpNkYb5k3M2VEq1Hkh2ZvC2u1LPq71Ck=) 3: C09B0826A8950269AAA9592F3B0B65A3232333C5.crl (hash: nBJF2BAChGjIx1Li3PELJZlEoRAim3gZNZQBvHGfVYs=) 4: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: u7ID+/zmEfkiBk9A2DOk1aoUvKs6xhyBLUvlSwziv+4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 16:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d6:8f:7e:44:d2:73:2b:50:63:66:3a:d3:21:5d:bf:6a:00:2d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C09B0826A8950269AAA9592F3B0B65A3232333C5 Validity Not Before: Sep 20 12:58:09 2026 GMT Not After : Sep 21 16:37:09 2026 GMT Subject: CN=13BA2382CF625DEACDA69B5BC3AF62D2C5473633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dd:88:d3:4e:a2:bd:84:2d:ab:1a:cc:2a:fa: 08:c8:66:39:ad:60:b3:a2:64:3e:e0:d7:7b:5d:5e: be:b2:84:c9:ab:75:52:d9:92:74:47:37:61:7f:f5: 61:93:2d:e9:31:70:b6:57:53:7b:6e:5b:9c:65:77: 4f:19:e1:39:1a:f8:1c:6b:89:7c:77:86:89:20:ab: 5b:92:f7:38:20:8e:79:5c:d2:e2:9f:a5:4a:91:a2: 5f:ed:3c:60:21:bc:1e:06:97:19:8c:1f:2e:6b:b6: 0c:a8:29:82:c5:08:97:42:42:7f:4f:b0:1e:a2:a8: 40:b9:fc:e9:c3:99:dc:11:07:14:b0:67:c4:24:cc: 3d:03:2b:e4:24:66:4b:74:18:a5:37:ac:e1:f3:c7: b8:b2:fa:d9:3a:5c:88:21:a2:8e:dd:c4:7a:ca:b8: 50:b9:d8:ba:54:0b:ce:8f:d3:a7:f0:5a:83:75:ef: f6:54:cb:51:b7:c1:82:e1:f3:01:23:bc:f8:33:77: c3:6b:9b:4b:7b:56:e9:7f:38:f9:c7:7e:61:16:3f: 60:55:78:ae:d5:35:80:83:0c:68:ed:b4:3a:c6:14: e5:25:09:48:33:3b:59:58:c7:09:84:61:14:45:22: 5f:e6:4f:0b:85:c8:f8:63:c8:6b:94:75:4e:47:25: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BA:23:82:CF:62:5D:EA:CD:A6:9B:5B:C3:AF:62:D2:C5:47:36:33 X509v3 Authority Key Identifier: keyid:C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:21:6a:a4:0e:ce:1b:70:be:ac:7e:34:f2:fa:b9:0f:56:4d: ee:08:6e:ca:1b:c4:5f:d7:05:2b:65:90:d1:a6:99:8c:20:1d: 9f:74:68:b7:6a:a3:9d:0b:ef:b4:c1:ef:02:92:0c:eb:ac:32: 76:d4:a0:da:fe:df:80:fe:f6:db:c3:e8:bf:45:f9:6d:74:0e: 8a:44:4f:90:1e:c8:5b:f8:1a:5b:42:5b:c2:b0:8b:b8:dc:97: bd:7b:65:91:c4:25:d0:43:c7:d4:87:81:05:4d:8d:7a:7e:eb: 96:a1:31:79:e7:3d:4e:33:8a:71:37:2e:86:a6:5f:86:20:c3: f8:c5:9b:13:ae:e6:25:97:27:cd:90:8d:69:52:b7:36:e6:9c: d5:69:0d:4f:4a:bf:60:9b:61:c9:d6:21:02:05:50:d9:82:a0: 13:c9:bc:76:c9:7e:f4:6b:7d:87:29:c4:7f:f4:ec:bc:e0:26: 0f:fb:92:e8:e6:1a:83:4e:5b:d6:17:d8:6d:c8:58:73:ce:dc: 80:29:20:8a:dc:4c:05:a7:8c:27:13:01:7c:66:d6:8e:dc:6e: 0b:a0:9c:d0:8a:11:4b:65:2d:89:f4:0b:02:8d:24:25:f1:23: e6:d0:44:81:6e:6c:fa:d5:94:2d:45:10:30:8d:4e:eb:68:27: 56:43:e2:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKNaPfkTScytQY2Y60yFdv2oALS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA5QjA4MjZBODk1MDI2OUFBQTk1OTJGM0IwQjY1QTMy MzIzMzNDNTAeFw0yNjA5MjAxMjU4MDlaFw0yNjA5MjExNjM3MDlaMDMxMTAvBgNV BAMTKDEzQkEyMzgyQ0Y2MjVERUFDREE2OUI1QkMzQUY2MkQyQzU0NzM2MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd3YjTTqK9hC2rGswq+gjIZjmt YLOiZD7g13tdXr6yhMmrdVLZknRHN2F/9WGTLekxcLZXU3tuW5xld08Z4Tka+Bxr iXx3hokgq1uS9zggjnlc0uKfpUqRol/tPGAhvB4GlxmMHy5rtgyoKYLFCJdCQn9P sB6iqEC5/OnDmdwRBxSwZ8QkzD0DK+QkZkt0GKU3rOHzx7iy+tk6XIghoo7dxHrK uFC52LpUC86P06fwWoN17/ZUy1G3wYLh8wEjvPgzd8Nrm0t7Vul/OPnHfmEWP2BV eK7VNYCDDGjttDrGFOUlCUgzO1lYxwmEYRRFIl/mTwuFyPhjyGuUdU5HJcCVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE7ojgs9iXerNpptbw69i0sVHNjMwHwYDVR0j BBgwFoAUwJsIJqiVAmmqqVkvOwtloyMjM8UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjhkYzA4NDktODNmYi00Y2M4LThjMjEtYmU2Y2E3YTJlZDgzLzAvQzA5QjA4MjZB ODk1MDI2OUFBQTk1OTJGM0IwQjY1QTMyMzIzMzNDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMDlCMDgyNkE4OTUwMjY5QUFBOTU5MkYzQjBCNjVBMzIzMjMz M0M1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvQzA5QjA4MjZBODk1MDI2OUFBQTk1OTJGM0IwQjY1 QTMyMzIzMzNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACghaqQOzhtwvqx+NPL6uQ9WTe4IbsobxF/X BStlkNGmmYwgHZ90aLdqo50L77TB7wKSDOusMnbUoNr+34D+9tvD6L9F+W10DopE T5AeyFv4GltCW8Kwi7jcl717ZZHEJdBDx9SHgQVNjXp+65ahMXnnPU4zinE3Loam X4Ygw/jFmxOu5iWXJ82QjWlStzbmnNVpDU9Kv2CbYcnWIQIFUNmCoBPJvHbJfvRr fYcpxH/07LzgJg/7kujmGoNOW9YX2G3IWHPO3IApIIrcTAWnjCcTAXxm1o7cbgug nNCKEUtlLYn0CwKNJCXxI+bQRIFubPrVlC1FEDCNTutoJ1ZD4s8= -----END CERTIFICATE-----Generated at Mon Sep 21 09:16:02 2026 by rpki-client