$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft File: 9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft (raw, json) Hash identifier: DD99YFOUcve32/uZeR1cwOgysFnPIUOJj3feXHvDaxU= Subject key identifier: 25:86:20:F7:04:68:A7:4E:7C:BF:1F:37:7F:66:D7:2D:BB:74:A8:B8 Authority key identifier: 9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F Certificate issuer: /CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F Certificate serial: 43FAB72245386DA8B861BA080311D344C6DFA0E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 04:51:58 +0000 Manifest this update: Wed 23 Sep 2026 04:46:58 +0000 Manifest next update: Thu 24 Sep 2026 07:50:58 +0000 Files and hashes: 1: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: q/9H11WTYoKvscn357helrrghEhYAd3OjlCKI1SD+L4=) 2: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: iowBD0aCpON/4cxOj5FQqoJWjlXtvZSA6Ncm7S12+nI=) 3: 9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl (hash: rUmhqkzPouXW9rg9LIZig25Uw79BcxNNdMvm8GA7QD4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 07:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:fa:b7:22:45:38:6d:a8:b8:61:ba:08:03:11:d3:44:c6:df:a0:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F Validity Not Before: Sep 23 04:46:58 2026 GMT Not After : Sep 24 07:50:58 2026 GMT Subject: CN=258620F70468A74E7CBF1F377F66D72DBB74A8B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e2:ef:94:bc:03:37:55:e9:1b:17:87:ab:de: 8d:ea:16:93:35:1c:da:6e:bc:c8:b3:80:22:ac:e3: 3a:38:af:b8:d2:8d:6c:65:cf:e2:36:c1:b7:8d:3c: 6c:87:01:3e:df:25:d6:be:ac:a3:92:2b:15:1a:61: d8:78:9a:27:65:59:18:62:82:0b:35:4d:37:70:c8: 57:9e:8d:f3:76:86:e7:e2:b2:eb:b1:0e:9f:8b:84: 5c:85:5f:c8:9d:9a:f4:ba:1b:23:9a:aa:32:87:69: 7f:73:df:c1:b5:eb:67:10:74:68:04:e9:55:0e:89: 9b:26:c0:b9:1b:ae:dc:5b:03:b5:f5:79:43:61:e4: 12:f3:8a:8f:e6:44:2a:56:c8:17:8e:a5:04:67:33: 93:1d:e1:ac:b6:8e:96:10:74:56:84:87:53:f3:7d: ce:d6:a1:cf:80:b0:c1:59:54:94:24:f6:f2:43:75: a5:33:00:44:11:1e:8f:20:7c:37:ab:93:19:6c:7b: a6:79:c7:d3:78:f4:d9:07:77:96:af:b2:ca:bb:82: 2f:33:9d:25:27:0d:12:ed:cc:ee:3d:4d:0b:58:ae: 88:ab:10:58:c3:2c:61:f3:f0:8b:64:7c:0d:17:29: e8:b7:d7:7b:21:cc:03:a3:66:74:0e:30:b0:57:57: 1e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:86:20:F7:04:68:A7:4E:7C:BF:1F:37:7F:66:D7:2D:BB:74:A8:B8 X509v3 Authority Key Identifier: keyid:9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:3a:03:70:6f:88:04:a8:a6:7b:24:9c:ad:9b:14:bf:74:80: ee:f5:a3:22:d5:52:ee:ab:11:de:ba:4e:a9:41:4b:57:6c:a8: 52:da:ab:6a:f1:33:dc:31:e7:9a:55:26:ae:d0:db:67:d6:c1: 45:45:67:97:c9:e5:1b:d7:9e:5b:1f:30:81:f6:3d:5c:91:4b: cd:bc:d3:ee:24:e8:25:ae:b2:0a:2d:c2:64:c8:67:ec:3a:67: a3:37:bf:02:6c:0d:fa:76:72:bb:31:6a:c9:d3:85:95:1d:2d: 0a:14:a2:f2:e3:f8:89:a2:d1:58:5a:82:ba:6e:72:e9:6c:eb: 06:38:66:74:12:13:41:20:61:63:24:f1:af:eb:92:a3:68:2a: 2f:ec:d5:9b:f3:a6:2b:2f:75:b4:c0:57:7e:af:1c:7c:07:24: 2c:c7:c9:f9:3e:ff:cb:9c:e6:54:06:5b:0d:40:2f:77:72:b1: e9:28:0a:97:72:3f:bc:49:2f:ec:a3:eb:3c:a8:85:9b:c0:29: ba:7f:f8:8f:c7:f4:fc:43:ca:e9:ca:23:9b:c5:cb:1c:cb:3a: 2e:ff:9a:93:42:6a:24:ef:07:58:ac:ec:bf:d4:6e:a0:40:03: 2c:49:b0:83:4c:d5:b7:7d:07:3c:79:62:6b:26:20:94:09:50: cf:d2:cc:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/q3IkU4bai4YboIAxHTRMbfoOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJDRjI2MUYxRUVCRDBBOTYxNDg3NjFGQTJFOThFOTNG QkFGQjA2RjAeFw0yNjA5MjMwNDQ2NThaFw0yNjA5MjQwNzUwNThaMDMxMTAvBgNV BAMTKDI1ODYyMEY3MDQ2OEE3NEU3Q0JGMUYzNzdGNjZENzJEQkI3NEE4QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa4u+UvAM3VekbF4er3o3qFpM1 HNpuvMizgCKs4zo4r7jSjWxlz+I2wbeNPGyHAT7fJda+rKOSKxUaYdh4midlWRhi ggs1TTdwyFeejfN2hufisuuxDp+LhFyFX8idmvS6GyOaqjKHaX9z38G162cQdGgE 6VUOiZsmwLkbrtxbA7X1eUNh5BLzio/mRCpWyBeOpQRnM5Md4ay2jpYQdFaEh1Pz fc7Woc+AsMFZVJQk9vJDdaUzAEQRHo8gfDerkxlse6Z5x9N49NkHd5avssq7gi8z nSUnDRLtzO49TQtYroirEFjDLGHz8ItkfA0XKei313shzAOjZnQOMLBXVx4tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJYYg9wRop058vx83f2bXLbt0qLgwHwYDVR0j BBgwFoAUm88mHx7r0KlhSHYfoumOk/uvsG8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIzNGVmMWQtNzM0ZC00YzcxLThiYTctZDMxZTE2OGI2MzJjLzAvOUJDRjI2MUYx RUVCRDBBOTYxNDg3NjFGQTJFOThFOTNGQkFGQjA2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkNGMjYxRjFFRUJEMEE5NjE0ODc2MUZBMkU5OEU5M0ZCQUZC MDZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvOUJDRjI2MUYxRUVCRDBBOTYxNDg3NjFGQTJFOThF OTNGQkFGQjA2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABY6A3BviASopnsknK2bFL90gO71oyLVUu6r Ed66TqlBS1dsqFLaq2rxM9wx55pVJq7Q22fWwUVFZ5fJ5RvXnlsfMIH2PVyRS828 0+4k6CWusgotwmTIZ+w6Z6M3vwJsDfp2crsxasnThZUdLQoUovLj+Imi0Vhagrpu culs6wY4ZnQSE0EgYWMk8a/rkqNoKi/s1ZvzpisvdbTAV36vHHwHJCzHyfk+/8uc 5lQGWw1AL3dysekoCpdyP7xJL+yj6zyohZvAKbp/+I/H9PxDyunKI5vFyxzLOi7/ mpNCaiTvB1is7L/UbqBAAyxJsINM1bd9Bzx5YmsmIJQJUM/SzBA= -----END CERTIFICATE-----Generated at Wed Sep 23 20:19:03 2026 by rpki-client