$ rpki-client -vvvf rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft File: 9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft (raw, json) Hash identifier: dSL26e0I7rqjjkRvOrXRpbfa8fgtGExosrBM54MVDvA= Subject key identifier: 8B:E0:2C:9E:6B:DB:69:3F:3D:03:02:5B:EB:8D:90:66:FE:C8:32:2D Authority key identifier: 9A:2E:70:15:61:0F:91:22:97:C9:C4:B0:FF:DE:85:57:63:38:C9:EA Certificate issuer: /CN=9A2E7015610F912297C9C4B0FFDE85576338C9EA Certificate serial: 5405F5FBC45A614B2468EF9FF3EAE74445129741 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 21:26:33 +0000 Manifest this update: Sat 26 Sep 2026 21:21:33 +0000 Manifest next update: Sun 27 Sep 2026 23:27:33 +0000 Files and hashes: 1: 9A2E7015610F912297C9C4B0FFDE85576338C9EA.crl (hash: lUJTTAs2EPla4IWnfkPSGtPgeswcfn5X2o0ZriThzFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.crl rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:27:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:05:f5:fb:c4:5a:61:4b:24:68:ef:9f:f3:ea:e7:44:45:12:97:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A2E7015610F912297C9C4B0FFDE85576338C9EA Validity Not Before: Sep 26 21:21:33 2026 GMT Not After : Sep 27 23:27:33 2026 GMT Subject: CN=8BE02C9E6BDB693F3D03025BEB8D9066FEC8322D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:56:90:b4:af:7c:c1:20:b7:e5:3e:2c:a5:68: 3d:5f:11:70:36:cc:a0:20:db:d5:06:a1:3f:a9:26: 2f:93:6e:69:e2:8b:e2:21:f0:50:1b:82:cf:5c:8c: 3b:f2:31:a9:63:66:43:f6:c9:0c:c7:1e:71:0a:b9: d2:df:2e:5b:6c:0b:a8:33:79:6d:1f:98:a3:2d:79: 2f:dc:28:3a:c1:61:f4:10:b2:97:2f:01:dd:6d:b7: 57:b0:f9:3d:fc:3b:c8:e0:c7:c7:ec:c1:9a:ab:47: d2:72:f7:0c:14:5d:38:2e:1f:bc:37:ae:0b:4f:54: bd:a7:9e:7c:76:bd:1f:b0:42:fd:c7:6b:50:85:04: 3d:13:d1:da:40:ed:7b:fb:cb:df:56:c9:80:7d:94: 7e:92:33:bc:e9:ed:7e:75:5d:04:3b:84:05:37:75: 9e:53:7d:0b:ff:65:dd:5b:a5:70:e6:3e:d4:8e:6e: 69:c9:89:af:60:1f:f6:75:c1:13:9b:fe:fc:ba:83: bb:ef:de:ae:8f:4f:4b:8b:90:6d:bf:63:f0:fc:6a: ac:88:7d:c8:5a:dc:87:e0:b9:ca:4e:8b:e9:77:8e: 2a:9f:b0:b2:19:73:7c:01:aa:20:be:b5:c0:ed:99: a5:e1:c6:15:8a:31:78:bf:19:74:c1:7e:dd:7a:33: 0e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E0:2C:9E:6B:DB:69:3F:3D:03:02:5B:EB:8D:90:66:FE:C8:32:2D X509v3 Authority Key Identifier: keyid:9A:2E:70:15:61:0F:91:22:97:C9:C4:B0:FF:DE:85:57:63:38:C9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e3:10:2b:fe:67:e3:89:90:36:de:a9:2c:3a:f8:36:c6:03: 2f:e4:86:57:8a:e9:4a:5a:44:38:a9:22:6a:ac:bb:e8:9f:79: bd:b5:ca:48:5c:71:32:80:0c:98:cf:8d:c5:90:f1:90:09:93: 83:e6:40:83:01:eb:24:f0:0a:9d:2b:e4:a4:c8:fd:52:4c:b3: c0:f9:00:b4:66:5e:ae:fe:01:4a:24:45:da:c9:93:bd:ce:c4: 59:47:8d:6d:11:74:2c:b8:ab:21:16:df:56:83:ab:2c:5f:11: 88:e1:8e:a0:71:99:21:b7:9f:b7:74:d9:9a:e9:76:96:b4:f9: 08:44:48:10:91:ab:16:ac:ea:97:2a:fd:1f:eb:fd:0b:b2:78: d9:24:07:0c:54:a1:8c:fe:0e:a6:d4:78:0d:1b:25:00:51:4e: d2:93:b4:84:d8:26:76:c3:1e:6e:cb:0e:74:aa:c0:8f:0b:35: 4f:0f:6b:42:40:d1:0b:42:0b:3a:91:08:07:20:48:6e:c5:27: e5:ab:65:51:36:31:d7:e6:58:4c:2e:59:93:e6:13:e9:78:1f: ca:91:83:c5:fd:20:3a:79:09:fb:d8:de:16:69:3d:fc:d4:94: cb:df:99:05:13:68:be:ca:d0:70:45:ef:fe:7e:f0:27:ad:0b: d9:50:ce:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVAX1+8RaYUskaO+f8+rnREUSl0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyRTcwMTU2MTBGOTEyMjk3QzlDNEIwRkZERTg1NTc2 MzM4QzlFQTAeFw0yNjA5MjYyMTIxMzNaFw0yNjA5MjcyMzI3MzNaMDMxMTAvBgNV BAMTKDhCRTAyQzlFNkJEQjY5M0YzRDAzMDI1QkVCOEQ5MDY2RkVDODMyMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTVpC0r3zBILflPiylaD1fEXA2 zKAg29UGoT+pJi+Tbmnii+Ih8FAbgs9cjDvyMaljZkP2yQzHHnEKudLfLltsC6gz eW0fmKMteS/cKDrBYfQQspcvAd1tt1ew+T38O8jgx8fswZqrR9Jy9wwUXTguH7w3 rgtPVL2nnnx2vR+wQv3Ha1CFBD0T0dpA7Xv7y99WyYB9lH6SM7zp7X51XQQ7hAU3 dZ5TfQv/Zd1bpXDmPtSObmnJia9gH/Z1wROb/vy6g7vv3q6PT0uLkG2/Y/D8aqyI fcha3IfgucpOi+l3jiqfsLIZc3wBqiC+tcDtmaXhxhWKMXi/GXTBft16Mw4ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi+AsnmvbaT89AwJb642QZv7IMi0wHwYDVR0j BBgwFoAUmi5wFWEPkSKXycSw/96FV2M4yeowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTNmYTdkNWMtMzY4ZC00YWYzLWI4ZTctMTc4NjI0NmRkNjJmLzAvOUEyRTcwMTU2 MTBGOTEyMjk3QzlDNEIwRkZERTg1NTc2MzM4QzlFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTJFNzAxNTYxMEY5MTIyOTdDOUM0QjBGRkRFODU1NzYzMzhD OUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTNmYTdkNWMtMzY4ZC00YWYzLWI4 ZTctMTc4NjI0NmRkNjJmLzAvOUEyRTcwMTU2MTBGOTEyMjk3QzlDNEIwRkZERTg1 NTc2MzM4QzlFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3jECv+Z+OJkDbeqSw6+DbGAy/khleK6Upa RDipImqsu+ifeb21ykhccTKADJjPjcWQ8ZAJk4PmQIMB6yTwCp0r5KTI/VJMs8D5 ALRmXq7+AUokRdrJk73OxFlHjW0RdCy4qyEW31aDqyxfEYjhjqBxmSG3n7d02Zrp dpa0+QhESBCRqxas6pcq/R/r/QuyeNkkBwxUoYz+DqbUeA0bJQBRTtKTtITYJnbD Hm7LDnSqwI8LNU8Pa0JA0QtCCzqRCAcgSG7FJ+WrZVE2MdfmWEwuWZPmE+l4H8qR g8X9IDp5CfvY3hZpPfzUlMvfmQUTaL7K0HBF7/5+8CetC9lQzlo= -----END CERTIFICATE-----Generated at Sun Sep 27 10:00:33 2026 by rpki-client