$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft File: E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft (raw, json) Hash identifier: 0yUToNW7PtQnGCwhDwtZgatxcuZQBkqsFXA1IBf1eII= Subject key identifier: 0C:67:BC:AD:31:06:B2:2D:1B:7C:03:8A:93:EC:2E:32:9A:D6:30:DF Authority key identifier: E9:DD:F9:8F:B3:21:D5:A9:77:AD:47:B0:C4:1C:D4:FE:29:A3:79:3A Certificate issuer: /CN=E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A Certificate serial: 679D55DF539AE33C031D8061088A4FC8C0CABA90 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 07:09:34 +0000 Manifest this update: Thu 24 Sep 2026 07:04:34 +0000 Manifest next update: Fri 25 Sep 2026 09:01:34 +0000 Files and hashes: 1: E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.crl (hash: jOfP94zhPFTFSaxmvW15McSShLqqmK2IiSUbSgYbhE0=) 2: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: CNG3TKSalvuCxf+hLEGkOQvjI+uVRC0qCR05spnG4ao=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.crl rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:9d:55:df:53:9a:e3:3c:03:1d:80:61:08:8a:4f:c8:c0:ca:ba:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A Validity Not Before: Sep 24 07:04:34 2026 GMT Not After : Sep 25 09:01:34 2026 GMT Subject: CN=0C67BCAD3106B22D1B7C038A93EC2E329AD630DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0c:12:60:c3:cb:27:3b:7f:c1:c3:c1:33:1c: d1:9e:56:47:3f:f2:73:fd:82:fd:34:8d:fc:2d:44: 5f:c1:55:a1:e2:4c:44:e9:57:d0:0c:91:2c:30:39: e3:4e:ce:14:9e:3a:98:28:f9:45:45:e0:88:66:b1: 1f:68:12:1b:12:19:fe:70:ab:b4:4e:0f:95:0f:d7: 30:9e:7c:05:7e:1a:63:6c:f2:52:80:f8:8c:f4:87: 68:65:27:61:b0:5c:6b:e8:13:0e:cf:7b:00:aa:fc: 87:75:09:33:53:d6:82:d1:36:1b:b0:29:5b:21:06: cf:2d:a7:ed:75:8f:bc:ed:75:86:16:c2:ee:b8:a0: 06:7b:de:af:ed:c9:98:e1:80:44:3f:41:3f:c3:56: fe:b2:c9:54:dd:0e:43:3f:d2:c2:d1:f2:c2:24:d5: 5b:da:49:11:e0:09:b4:d1:13:de:5d:cf:77:c8:89: cc:fa:54:e3:6e:3d:e2:e6:d0:d1:2e:1e:70:77:a6: 1c:c7:9e:ec:d9:f0:4a:7e:c3:07:a2:5f:e3:8a:7d: fa:35:5a:aa:51:88:ad:7f:f6:3e:be:c8:5f:6f:9a: ad:8e:c5:c9:a0:39:66:2a:74:27:d8:50:bd:a1:2e: f4:f1:02:dc:eb:d7:c6:7a:46:1e:57:5d:f6:10:23: 93:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:67:BC:AD:31:06:B2:2D:1B:7C:03:8A:93:EC:2E:32:9A:D6:30:DF X509v3 Authority Key Identifier: keyid:E9:DD:F9:8F:B3:21:D5:A9:77:AD:47:B0:C4:1C:D4:FE:29:A3:79:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b0:39:b3:52:b1:66:12:57:84:a7:38:cd:b5:ee:9f:0a:1b: 47:9f:50:14:cc:3a:dd:de:9a:8a:4c:b4:40:04:9f:42:07:77: 6e:97:38:84:84:51:e4:c2:cc:b1:ac:73:ab:42:1b:5b:19:7f: bf:aa:9f:92:ca:99:30:cd:6a:da:2e:5c:30:6d:94:37:e8:f8: 55:3b:44:fe:59:d5:e9:4e:2f:7d:0d:27:5d:78:67:58:2d:e4: d7:25:eb:71:2a:31:4a:f0:81:e8:e7:c4:87:7c:71:7a:0d:2c: 19:e6:a4:7a:71:5c:38:a7:be:4f:b7:94:bf:ed:b8:51:a1:da: 0d:f8:d6:47:71:06:90:a6:36:4d:d8:49:31:41:50:96:6a:66: 03:de:4a:ab:a8:15:23:81:16:b9:f5:d7:86:9a:75:fa:d6:76: 31:91:db:98:27:c4:b0:12:02:57:06:a4:fb:c5:4f:e3:4c:eb: 04:2b:e2:48:99:c7:c9:9e:f4:93:4b:37:74:80:57:9a:d5:2a: 2f:dd:bc:71:06:a2:77:a1:72:99:55:79:c1:db:4a:a0:98:de: 42:db:15:ae:be:ee:b5:bf:01:78:4e:0a:29:8a:2a:4a:89:b5: 12:88:1d:e0:80:0f:7e:32:f9:0d:01:79:fe:4c:19:19:f6:a7: 9d:53:d3:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ51V31Oa4zwDHYBhCIpPyMDKupAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlEREY5OEZCMzIxRDVBOTc3QUQ0N0IwQzQxQ0Q0RkUy OUEzNzkzQTAeFw0yNjA5MjQwNzA0MzRaFw0yNjA5MjUwOTAxMzRaMDMxMTAvBgNV BAMTKDBDNjdCQ0FEMzEwNkIyMkQxQjdDMDM4QTkzRUMyRTMyOUFENjMwREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlDBJgw8snO3/Bw8EzHNGeVkc/ 8nP9gv00jfwtRF/BVaHiTETpV9AMkSwwOeNOzhSeOpgo+UVF4IhmsR9oEhsSGf5w q7ROD5UP1zCefAV+GmNs8lKA+Iz0h2hlJ2GwXGvoEw7PewCq/Id1CTNT1oLRNhuw KVshBs8tp+11j7ztdYYWwu64oAZ73q/tyZjhgEQ/QT/DVv6yyVTdDkM/0sLR8sIk 1VvaSRHgCbTRE95dz3fIicz6VONuPeLm0NEuHnB3phzHnuzZ8Ep+wweiX+OKffo1 WqpRiK1/9j6+yF9vmq2OxcmgOWYqdCfYUL2hLvTxAtzr18Z6Rh5XXfYQI5MbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDGe8rTEGsi0bfAOKk+wuMprWMN8wHwYDVR0j BBgwFoAU6d35j7Mh1al3rUewxBzU/imjeTowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQzM2ExYzYtMGY3MC00Yzk4LTk2YjAtY2FiNTgxMjZhYjk0LzAvRTlEREY5OEZC MzIxRDVBOTc3QUQ0N0IwQzQxQ0Q0RkUyOUEzNzkzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOURERjk4RkIzMjFENUE5NzdBRDQ3QjBDNDFDRDRGRTI5QTM3 OTNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2 YjAtY2FiNTgxMjZhYjk0LzAvRTlEREY5OEZCMzIxRDVBOTc3QUQ0N0IwQzQxQ0Q0 RkUyOUEzNzkzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuwObNSsWYSV4SnOM217p8KG0efUBTMOt3e mopMtEAEn0IHd26XOISEUeTCzLGsc6tCG1sZf7+qn5LKmTDNatouXDBtlDfo+FU7 RP5Z1elOL30NJ114Z1gt5Ncl63EqMUrwgejnxId8cXoNLBnmpHpxXDinvk+3lL/t uFGh2g341kdxBpCmNk3YSTFBUJZqZgPeSquoFSOBFrn114aadfrWdjGR25gnxLAS AlcGpPvFT+NM6wQr4kiZx8me9JNLN3SAV5rVKi/dvHEGonehcplVecHbSqCY3kLb Fa6+7rW/AXhOCimKKkqJtRKIHeCAD34y+Q0Bef5MGRn2p51T0/4= -----END CERTIFICATE-----Generated at Thu Sep 24 12:11:17 2026 by rpki-client