$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft File: 9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft (raw, json) Hash identifier: hIPpujmHQUwJF6FNKJPej3MmGrKyk/NJZOMRrkdyfX8= Subject key identifier: 1F:1D:B0:AD:1B:8B:7D:74:CF:F3:0D:4C:87:7C:8F:1D:7B:E8:B9:18 Authority key identifier: 9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C Certificate issuer: /CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Certificate serial: 667BDB3D08D2E9C52C2AA7A4809F89CEBBF2C38F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft Manifest number: CB Signing time: Fri 25 Sep 2026 01:52:32 +0000 Manifest this update: Fri 25 Sep 2026 01:47:32 +0000 Manifest next update: Sat 26 Sep 2026 02:10:32 +0000 Files and hashes: 1: 9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl (hash: G7e24zy6ZXqvCIkIwc6pP2pB2uBXp5PHU5fq95yt/jo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 02:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:7b:db:3d:08:d2:e9:c5:2c:2a:a7:a4:80:9f:89:ce:bb:f2:c3:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Validity Not Before: Sep 25 01:47:32 2026 GMT Not After : Sep 26 02:10:32 2026 GMT Subject: CN=1F1DB0AD1B8B7D74CFF30D4C877C8F1D7BE8B918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:0b:90:ea:c1:ae:da:19:a7:b0:17:d5:bc: 0d:71:ab:90:f9:a4:18:1e:8a:fa:c7:92:e1:85:91: 3b:b6:90:36:cb:b8:d0:65:c5:a0:45:a1:ec:3b:83: b8:1b:7d:ac:f5:70:4e:4f:1a:2e:b3:aa:93:f4:be: b4:26:92:92:f4:a7:3d:96:20:42:28:04:8d:bd:70: cb:bf:16:98:44:e1:47:6b:4b:e0:0a:74:71:16:7e: fb:11:04:dd:07:0f:1f:b3:c9:4e:b0:11:6d:8d:6b: f9:69:bd:02:af:7a:a6:e5:88:76:0d:07:c7:a9:e5: 74:a6:52:b3:88:f1:c0:67:04:75:a9:31:01:d5:37: 2e:70:e9:41:95:42:40:20:d0:ad:4a:43:6a:7b:80: 0d:ff:80:54:85:3a:40:67:8c:f6:f4:5c:10:75:49: 3f:f0:2f:41:e1:ca:f9:71:b7:4c:38:b4:90:9b:7a: 4e:99:b2:02:b0:f3:25:f3:df:bf:89:a4:5b:3d:9e: 0b:c3:0e:4d:35:97:65:11:ca:24:64:90:15:e8:d3: d3:6b:06:c8:41:c8:a8:a9:cb:8c:e9:5a:77:e0:cc: 45:8a:b5:9a:b1:1e:bb:b4:04:40:b5:59:9e:19:b2: 81:ea:9d:02:26:b5:8b:af:5d:c5:2e:47:1d:06:74: 1c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1D:B0:AD:1B:8B:7D:74:CF:F3:0D:4C:87:7C:8F:1D:7B:E8:B9:18 X509v3 Authority Key Identifier: keyid:9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:35:ee:3d:d4:c0:aa:1f:b3:9b:13:b5:a9:e5:cb:a8:1d:b4: 43:bd:d3:75:74:ce:24:ee:7c:81:c1:91:26:61:7b:ed:4f:b0: 3a:11:f0:6a:f4:47:67:e5:12:54:59:83:6d:37:36:10:37:a3: 6d:91:6b:f6:a2:59:01:ce:08:9a:2c:fd:1f:63:92:6e:ac:c0: 68:91:a2:31:d5:3a:b9:44:51:20:cf:fb:07:22:04:27:aa:4e: 85:ed:91:fe:3b:c4:f7:53:9a:52:e7:9d:f6:8a:df:cf:08:85: d3:be:12:e0:bb:2b:0f:38:90:ed:c4:de:a4:96:d7:78:94:f4: 5e:00:de:f6:03:e5:ef:2b:1d:a3:55:a2:20:05:99:a1:a7:9c: b6:db:df:31:2b:90:10:29:67:a9:d1:07:2a:89:41:bf:89:66: 03:49:ee:4b:95:8c:c4:dc:49:3d:04:65:e9:11:f7:2b:aa:20: 7f:2d:13:7b:41:db:2b:45:7c:d0:c6:96:ca:78:1a:ec:f8:19: a2:9f:58:18:98:da:5c:00:e8:cd:ae:49:7b:e3:ea:32:d2:ba: dc:17:cf:d2:54:59:21:0a:33:bd:b5:d8:b0:57:1c:b7:54:4a: fe:7e:a7:69:1c:b1:ed:9f:e9:5e:03:aa:e6:ec:55:d9:07:17: 3a:bc:18:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZnvbPQjS6cUsKqekgJ+Jzrvyw48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURCOEM0NzIzRTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1 QzgyQ0Q5QzAeFw0yNjA5MjUwMTQ3MzJaFw0yNjA5MjYwMjEwMzJaMDMxMTAvBgNV BAMTKDFGMURCMEFEMUI4QjdENzRDRkYzMEQ0Qzg3N0M4RjFEN0JFOEI5MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCipguQ6sGu2hmnsBfVvA1xq5D5 pBgeivrHkuGFkTu2kDbLuNBlxaBFoew7g7gbfaz1cE5PGi6zqpP0vrQmkpL0pz2W IEIoBI29cMu/FphE4UdrS+AKdHEWfvsRBN0HDx+zyU6wEW2Na/lpvQKveqbliHYN B8ep5XSmUrOI8cBnBHWpMQHVNy5w6UGVQkAg0K1KQ2p7gA3/gFSFOkBnjPb0XBB1 ST/wL0Hhyvlxt0w4tJCbek6ZsgKw8yXz37+JpFs9ngvDDk01l2URyiRkkBXo09Nr BshByKipy4zpWnfgzEWKtZqxHru0BEC1WZ4ZsoHqnQImtYuvXcUuRx0GdBxHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHx2wrRuLfXTP8w1Mh3yPHXvouRgwHwYDVR0j BBgwFoAUnbjEcj47/dATinkWqLsSxFyCzZwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGQzZjA5NWItNzEzMC00MTIyLWFmMjUtN2QyZTdhMTFiMWIxLzAvOURCOEM0NzIz RTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1QzgyQ0Q5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REI4QzQ3MjNFM0JGREQwMTM4QTc5MTZBOEJCMTJDNDVDODJD RDlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGQzZjA5NWItNzEzMC00MTIyLWFm MjUtN2QyZTdhMTFiMWIxLzAvOURCOEM0NzIzRTNCRkREMDEzOEE3OTE2QThCQjEy QzQ1QzgyQ0Q5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB017j3UwKofs5sTtanly6gdtEO903V0ziTu fIHBkSZhe+1PsDoR8Gr0R2flElRZg203NhA3o22Ra/aiWQHOCJos/R9jkm6swGiR ojHVOrlEUSDP+wciBCeqToXtkf47xPdTmlLnnfaK388IhdO+EuC7Kw84kO3E3qSW 13iU9F4A3vYD5e8rHaNVoiAFmaGnnLbb3zErkBApZ6nRByqJQb+JZgNJ7kuVjMTc ST0EZekR9yuqIH8tE3tB2ytFfNDGlsp4Guz4GaKfWBiY2lwA6M2uSXvj6jLSutwX z9JUWSEKM7212LBXHLdUSv5+p2kcse2f6V4DqubsVdkHFzq8GGM= -----END CERTIFICATE-----Generated at Fri Sep 25 06:31:58 2026 by rpki-client