$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft File: C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft (raw, json) Hash identifier: CvsgJ8nUOWwRr+H0xPZFdZXFCbJFle+xkhc3bEGogDo= Subject key identifier: 45:F6:45:F1:75:D3:3F:A9:03:41:28:0A:70:6B:4C:02:E7:73:FA:56 Authority key identifier: C9:A0:E9:83:26:93:84:F0:0C:CE:85:7E:3A:8E:88:87:BE:9B:7F:C8 Certificate issuer: /CN=C9A0E983269384F00CCE857E3A8E8887BE9B7FC8 Certificate serial: 6ED96038F743375879BD73DF8445B0986286749A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 12:36:06 +0000 Manifest this update: Fri 25 Sep 2026 12:31:06 +0000 Manifest next update: Sat 26 Sep 2026 15:22:06 +0000 Files and hashes: 1: C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl (hash: fSbSaw+3uZY8071MW/Shk58xR8yVJ4CYvCfOsARo4Hg=) 2: 3130332e38312e3131312e302f32342d3234203d3e20313530393538.roa (hash: l+i6wCpyx98LrkN6bI1lbQddhWqft7YLNRfJYsyxYlA=) 3: 3130332e38312e3131302e302f32342d3234203d3e20313530393538.roa (hash: 1X7ytOOeZ7baYbrptPG956jTOlJu9VRB/BLTjRkOU00=) 4: 323030313a6466323a623263303a3a2f34382d3438203d3e20313530393538.roa (hash: DNfu6S0MfyEIbWVxydJYNYlQdSHELvJkaaSCCqoydj0=) 5: 3130332e38312e3131302e302f32332d3234203d3e20313530393538.roa (hash: PAwVQ07BR901R53ceqUz7lmumWNjRRTL4GW80ND0yx0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 15:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d9:60:38:f7:43:37:58:79:bd:73:df:84:45:b0:98:62:86:74:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9A0E983269384F00CCE857E3A8E8887BE9B7FC8 Validity Not Before: Sep 25 12:31:06 2026 GMT Not After : Sep 26 15:22:06 2026 GMT Subject: CN=45F645F175D33FA90341280A706B4C02E773FA56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b1:83:7c:66:d9:19:e1:66:c8:0e:1d:82:f6: 07:fe:80:2d:68:c7:36:29:5f:2f:a3:ea:d4:1b:f8: 24:78:b8:fc:b7:7e:ec:82:3e:1b:dd:de:bf:90:b4: 52:82:e2:fd:00:93:b7:8c:9c:b3:b3:b7:3e:52:31: f4:04:66:60:3e:d6:6e:11:f9:95:58:6d:b4:e6:30: 3a:0e:6c:3b:1a:9f:e1:53:b7:f5:9c:88:a8:52:5e: 58:e7:0a:c6:58:98:af:1b:bb:4f:49:a0:eb:12:19: 45:2b:d1:10:c8:03:25:a4:30:cf:ac:18:d0:dd:16: 6e:1f:e5:83:be:14:46:9f:1e:0f:b1:45:81:78:a7: b8:d8:e2:3f:cc:17:5a:4b:c2:a1:e6:26:12:5e:22: df:c1:48:44:a6:40:9f:b3:37:2a:15:62:51:76:c8: 5b:5b:1d:35:5b:54:fb:aa:b0:e1:1b:7e:be:6b:9e: c6:31:d2:16:9f:91:ac:41:9b:62:38:69:f6:01:e9: 50:4a:df:62:1c:b2:21:be:42:bb:dc:03:c8:f6:13: af:2c:f2:3e:6a:65:e6:aa:a2:41:a2:83:7d:6c:41: 96:8c:bc:e4:d4:94:94:f3:df:6a:16:18:30:94:70: c5:8e:0d:57:46:e0:d0:d2:90:c0:d7:25:54:6d:13: 8b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F6:45:F1:75:D3:3F:A9:03:41:28:0A:70:6B:4C:02:E7:73:FA:56 X509v3 Authority Key Identifier: keyid:C9:A0:E9:83:26:93:84:F0:0C:CE:85:7E:3A:8E:88:87:BE:9B:7F:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e5:78:55:ac:0e:67:79:ba:56:7a:0c:01:08:8a:d0:42:0a: 08:cf:b6:05:15:fb:16:7c:84:91:63:5b:02:8b:8c:e6:d6:8c: d8:2e:c2:bc:2b:ae:24:8a:4c:d3:f0:06:28:4f:66:f8:ed:0e: 21:45:f0:78:eb:d9:80:ff:3f:ab:71:3c:a4:5a:f0:e2:66:df: 8c:70:f8:6e:f9:30:7a:8f:2c:47:f3:12:13:0d:2e:90:a8:33: e4:0f:6f:1c:c4:2b:ab:ee:e0:7c:53:43:76:6a:56:a4:d2:02: 08:0e:2a:7b:f5:fc:68:46:97:8b:f0:f1:6c:92:85:46:6f:88: 17:e4:79:73:1c:4a:e4:1d:ee:87:56:b6:2a:29:c4:8d:93:43: b2:ab:7f:a6:73:8c:1e:a4:05:30:4c:67:ce:3f:d1:ef:70:68: aa:1c:13:86:20:a5:56:b4:ed:6a:4a:ad:eb:7f:00:f9:03:61: 59:52:3e:84:91:a9:a5:e6:20:07:0a:d8:af:73:53:e6:50:ba: d3:be:e8:8a:16:33:70:54:d9:eb:46:10:e2:28:f9:b7:c8:a3: d8:b9:13:7c:4e:4f:67:2c:7d:2e:a7:ef:e0:b3:16:47:37:dc: 19:f7:00:51:16:be:92:c5:4b:cd:dc:b6:4a:61:37:4a:d2:1c: 24:14:bb:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbtlgOPdDN1h5vXPfhEWwmGKGdJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlBMEU5ODMyNjkzODRGMDBDQ0U4NTdFM0E4RTg4ODdC RTlCN0ZDODAeFw0yNjA5MjUxMjMxMDZaFw0yNjA5MjYxNTIyMDZaMDMxMTAvBgNV BAMTKDQ1RjY0NUYxNzVEMzNGQTkwMzQxMjgwQTcwNkI0QzAyRTc3M0ZBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfsYN8ZtkZ4WbIDh2C9gf+gC1o xzYpXy+j6tQb+CR4uPy3fuyCPhvd3r+QtFKC4v0Ak7eMnLOztz5SMfQEZmA+1m4R +ZVYbbTmMDoObDsan+FTt/WciKhSXljnCsZYmK8bu09JoOsSGUUr0RDIAyWkMM+s GNDdFm4f5YO+FEafHg+xRYF4p7jY4j/MF1pLwqHmJhJeIt/BSESmQJ+zNyoVYlF2 yFtbHTVbVPuqsOEbfr5rnsYx0hafkaxBm2I4afYB6VBK32IcsiG+QrvcA8j2E68s 8j5qZeaqokGig31sQZaMvOTUlJTz32oWGDCUcMWODVdG4NDSkMDXJVRtE4urAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURfZF8XXTP6kDQSgKcGtMAudz+lYwHwYDVR0j BBgwFoAUyaDpgyaThPAMzoV+Oo6Ih76bf8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGYwYmNkYzMtMGZlYS00NzQ3LTk5MDctNjU2NDg2YmFlOGRhLzAvQzlBMEU5ODMy NjkzODRGMDBDQ0U4NTdFM0E4RTg4ODdCRTlCN0ZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUEwRTk4MzI2OTM4NEYwMENDRTg1N0UzQThFODg4N0JFOUI3 RkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGYwYmNkYzMtMGZlYS00NzQ3LTk5 MDctNjU2NDg2YmFlOGRhLzAvQzlBMEU5ODMyNjkzODRGMDBDQ0U4NTdFM0E4RTg4 ODdCRTlCN0ZDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/leFWsDmd5ulZ6DAEIitBCCgjPtgUV+xZ8 hJFjWwKLjObWjNguwrwrriSKTNPwBihPZvjtDiFF8Hjr2YD/P6txPKRa8OJm34xw +G75MHqPLEfzEhMNLpCoM+QPbxzEK6vu4HxTQ3ZqVqTSAggOKnv1/GhGl4vw8WyS hUZviBfkeXMcSuQd7odWtiopxI2TQ7Krf6ZzjB6kBTBMZ84/0e9waKocE4YgpVa0 7WpKret/APkDYVlSPoSRqaXmIAcK2K9zU+ZQutO+6IoWM3BU2etGEOIo+bfIo9i5 E3xOT2csfS6n7+CzFkc33Bn3AFEWvpLFS83ctkphN0rSHCQUu70= -----END CERTIFICATE-----Generated at Fri Sep 25 17:17:02 2026 by rpki-client