$ rpki-client -vvvf rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft File: 9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft (raw, json) Hash identifier: J2Xf5twu8NjDKg+VSAA4W4cm0cctVA9QJ4hPsHrsA/s= Subject key identifier: 93:A3:A1:F9:3A:CA:C2:1C:99:02:DA:CA:C2:19:0F:78:C9:AE:C4:F1 Authority key identifier: 9E:FF:7D:BB:CC:32:80:07:85:86:E6:71:60:5F:4B:D3:C6:AF:62:A0 Certificate issuer: /CN=9EFF7DBBCC3280078586E671605F4BD3C6AF62A0 Certificate serial: 0AEAF4926AFA0D5BD673F5679DC074C54BAC8F27 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 08:36:56 +0000 Manifest this update: Wed 23 Sep 2026 08:31:56 +0000 Manifest next update: Thu 24 Sep 2026 09:00:56 +0000 Files and hashes: 1: 9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.crl (hash: H1vvs6klm1Bv9Jnl0uZXJzvdcUdc2NYCKf1HA1HP8/c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.crl rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ea:f4:92:6a:fa:0d:5b:d6:73:f5:67:9d:c0:74:c5:4b:ac:8f:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EFF7DBBCC3280078586E671605F4BD3C6AF62A0 Validity Not Before: Sep 23 08:31:56 2026 GMT Not After : Sep 24 09:00:56 2026 GMT Subject: CN=93A3A1F93ACAC21C9902DACAC2190F78C9AEC4F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:68:e3:4e:06:79:ce:f8:f5:db:48:2b:96:bc: 53:02:79:af:6e:0c:24:af:75:87:30:28:c6:42:75: e3:12:44:40:a5:4f:af:d2:3b:3b:0d:a5:f7:e3:5a: a7:a6:0f:93:f0:ea:08:90:bb:e9:43:df:6a:93:03: fd:90:b7:f5:e4:66:7e:b0:0c:fe:c7:7c:24:18:c0: 14:79:67:e4:da:3b:ff:19:98:2d:af:50:e5:8e:35: b4:9a:b2:18:3f:99:7e:c8:da:40:ad:7e:6a:f0:46: f5:99:82:7e:8e:e2:04:9c:90:b8:0f:b8:31:10:6c: ac:b9:f9:56:da:dc:8e:7e:6c:e1:a3:3b:2f:21:34: 03:ac:fe:9c:2d:d4:ae:3b:4c:2c:59:db:1f:4c:85: 7a:14:d5:90:74:57:23:a0:07:a9:28:68:54:95:78: 2b:55:53:bb:73:32:a8:bf:b6:27:0e:9a:fc:32:2a: 8c:b9:04:d0:14:4b:88:8a:2f:52:b8:08:01:fa:09: ac:b3:b3:ac:5f:76:4c:5f:fb:fd:35:88:b3:87:71: 88:45:c4:f4:b4:08:d9:3d:1b:5a:bf:bd:bd:e1:9d: d4:b4:9a:dc:81:f8:cf:fc:7b:c2:8e:28:b2:56:3e: ea:a3:24:32:55:bb:0f:ab:86:62:fe:e2:05:be:e7: 6a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A3:A1:F9:3A:CA:C2:1C:99:02:DA:CA:C2:19:0F:78:C9:AE:C4:F1 X509v3 Authority Key Identifier: keyid:9E:FF:7D:BB:CC:32:80:07:85:86:E6:71:60:5F:4B:D3:C6:AF:62:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:4f:d0:01:88:85:4d:2e:55:bc:4e:2e:46:e3:0e:cb:d1:e2: 7c:51:6b:6e:48:16:3c:16:52:95:56:75:4a:2a:9e:d5:3a:0e: ea:9a:2d:ad:ea:3a:61:fe:72:f2:a1:7f:fd:51:fd:ba:32:01: f2:3b:d9:62:83:9d:7a:24:69:a2:fe:cd:92:aa:64:7e:4a:e9: 84:86:84:bc:39:49:a5:42:3b:a4:c7:8b:de:d1:9a:eb:be:03: 94:73:ee:a6:fb:05:ed:f6:b0:95:04:bb:68:5e:ff:dc:d8:cd: 72:4d:38:7b:e5:0a:39:ed:68:4c:3f:d4:5f:fe:92:78:61:60: 4f:4d:7f:78:56:09:54:54:3e:c5:f4:09:2d:ca:72:5b:bb:b3: 8f:41:82:d9:58:e8:24:8d:79:40:1c:f2:42:0e:8c:84:d2:02: aa:68:9e:de:b7:35:9f:5a:f5:fa:ea:2d:e2:89:93:a7:f8:25: 0a:93:c5:0c:a8:83:75:9a:35:a6:a7:58:b7:f9:eb:d8:ea:19: 01:45:84:fd:7f:c1:9f:4a:6e:df:d8:f1:0d:82:1a:05:8a:12: 02:88:1b:72:5d:1f:37:a5:b2:2a:99:85:f2:8a:93:07:fa:6a: 28:c5:15:a5:b5:72:d7:97:05:90:f2:cb:b0:c1:da:41:3b:e5: 47:f6:57:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCur0kmr6DVvWc/VnncB0xUusjycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVGRjdEQkJDQzMyODAwNzg1ODZFNjcxNjA1RjRCRDND NkFGNjJBMDAeFw0yNjA5MjMwODMxNTZaFw0yNjA5MjQwOTAwNTZaMDMxMTAvBgNV BAMTKDkzQTNBMUY5M0FDQUMyMUM5OTAyREFDQUMyMTkwRjc4QzlBRUM0RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoaONOBnnO+PXbSCuWvFMCea9u DCSvdYcwKMZCdeMSREClT6/SOzsNpffjWqemD5Pw6giQu+lD32qTA/2Qt/XkZn6w DP7HfCQYwBR5Z+TaO/8ZmC2vUOWONbSashg/mX7I2kCtfmrwRvWZgn6O4gSckLgP uDEQbKy5+Vba3I5+bOGjOy8hNAOs/pwt1K47TCxZ2x9MhXoU1ZB0VyOgB6koaFSV eCtVU7tzMqi/ticOmvwyKoy5BNAUS4iKL1K4CAH6Cayzs6xfdkxf+/01iLOHcYhF xPS0CNk9G1q/vb3hndS0mtyB+M/8e8KOKLJWPuqjJDJVuw+rhmL+4gW+52rPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk6Oh+TrKwhyZAtrKwhkPeMmuxPEwHwYDVR0j BBgwFoAUnv99u8wygAeFhuZxYF9L08avYqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ0ZjI0NjAtZmU1MC00ODAwLWFlMDItNTdjYjNlODE1ZDVlLzAvOUVGRjdEQkJD QzMyODAwNzg1ODZFNjcxNjA1RjRCRDNDNkFGNjJBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RUZGN0RCQkNDMzI4MDA3ODU4NkU2NzE2MDVGNEJEM0M2QUY2 MkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ0ZjI0NjAtZmU1MC00ODAwLWFl MDItNTdjYjNlODE1ZDVlLzAvOUVGRjdEQkJDQzMyODAwNzg1ODZFNjcxNjA1RjRC RDNDNkFGNjJBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBP0AGIhU0uVbxOLkbjDsvR4nxRa25IFjwW UpVWdUoqntU6DuqaLa3qOmH+cvKhf/1R/boyAfI72WKDnXokaaL+zZKqZH5K6YSG hLw5SaVCO6THi97Rmuu+A5Rz7qb7Be32sJUEu2he/9zYzXJNOHvlCjntaEw/1F/+ knhhYE9Nf3hWCVRUPsX0CS3Kclu7s49BgtlY6CSNeUAc8kIOjITSAqpont63NZ9a 9frqLeKJk6f4JQqTxQyog3WaNaanWLf569jqGQFFhP1/wZ9Kbt/Y8Q2CGgWKEgKI G3JdHzelsiqZhfKKkwf6aijFFaW1cteXBZDyy7DB2kE75Uf2V4Q= -----END CERTIFICATE-----Generated at Wed Sep 23 22:12:06 2026 by rpki-client