$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft File: 9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft (raw, json) Hash identifier: DjtVIYVODAmc3gXEprpYeVnfe4MJxvrAiGPwfsQP9yU= Subject key identifier: 8B:77:E9:6D:36:B3:05:D9:6E:A7:A4:42:44:5B:E6:59:6F:87:F3:3C Authority key identifier: 9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A Certificate issuer: /CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A Certificate serial: 686F8A59571218BA507D704FCFACB83CCC7637AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 12:06:03 +0000 Manifest this update: Wed 23 Sep 2026 12:01:03 +0000 Manifest next update: Thu 24 Sep 2026 14:35:03 +0000 Files and hashes: 1: 3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa (hash: rpX5Z9CNMyEUL+veiVsOhDnQwGzSm68cJVDfJbI5SIE=) 2: 3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (hash: y7jgS/ZISqQ0Ejz5jszYlUpeJRIijdmrHPSpWEnYBQg=) 3: 3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa (hash: Dgai9I/TT4G/oQBQ3mEn1fS7dXTCrr7cZjoLYBavMXQ=) 4: 9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl (hash: PeiP4z7CzEevtdIJ0RBQacXiCCW0w1bZHiSnMbmvatw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:6f:8a:59:57:12:18:ba:50:7d:70:4f:cf:ac:b8:3c:cc:76:37:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A Validity Not Before: Sep 23 12:01:03 2026 GMT Not After : Sep 24 14:35:03 2026 GMT Subject: CN=8B77E96D36B305D96EA7A442445BE6596F87F33C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:57:27:9f:50:02:fe:94:34:96:25:55:d5:e2: 08:3d:35:27:57:c9:f0:c5:6b:00:5b:ad:6d:c2:6c: 90:6c:ee:b0:f6:b4:ce:c0:37:dd:58:de:1e:c6:14: 62:2e:ab:fe:17:dd:1c:87:fe:9a:44:36:8f:2b:10: 0a:86:71:8e:d9:d5:72:a0:f7:8a:30:a1:c3:a8:ed: 83:18:3d:b8:a9:92:e2:9d:58:54:5a:67:71:83:58: 32:88:d7:75:ee:4e:9f:97:1a:ee:a1:f5:ad:d0:fc: 84:fa:e7:ae:21:aa:13:92:1c:d4:85:cc:cc:d3:f1: 1c:4d:7e:5c:d6:70:ae:69:d4:05:43:0b:2d:db:c3: ab:78:0c:97:18:cd:ce:1a:f8:2f:e3:c1:b0:e7:dc: 37:ab:bc:5d:f1:11:50:2d:c3:2c:70:69:ee:5f:54: 66:2e:30:2a:bb:99:98:92:dd:e6:e7:a9:73:4e:74: 4e:81:8f:bf:30:3d:a1:20:cd:25:2a:a1:c3:a4:f3: 18:4e:bb:92:30:eb:21:c1:1f:a9:65:ba:f7:1b:00: 9c:28:c6:53:a7:7f:bc:8b:79:f6:f7:43:e5:d0:c5: 55:6a:60:8b:53:fa:83:f3:60:04:17:c0:2b:48:5c: d1:e3:2b:f3:78:42:f4:77:fe:c3:9c:9f:21:e7:ee: 55:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:77:E9:6D:36:B3:05:D9:6E:A7:A4:42:44:5B:E6:59:6F:87:F3:3C X509v3 Authority Key Identifier: keyid:9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:52:a8:78:19:5a:87:99:0e:a8:e7:36:23:3e:f4:78:99:df: 7b:02:85:24:2c:af:83:18:9c:2b:b1:0c:e3:7f:52:c6:7c:a7: b8:cc:97:ea:2a:d5:15:9a:29:63:cc:af:73:f8:e0:78:90:f1: e1:d1:57:cf:3d:27:79:d3:e4:2e:f5:3d:13:c0:59:ed:06:53: 88:d9:84:82:29:8e:6d:fb:95:6f:8d:04:cd:8b:89:19:05:3e: 60:b7:7a:90:94:a2:73:d7:3b:99:da:0e:7a:b2:43:1e:c8:e5: 75:8d:ce:f2:0f:2a:7a:8e:1f:1c:3e:db:c8:a7:73:2f:04:58: 76:a7:50:0c:b8:0c:ca:30:5c:c8:33:55:79:39:57:59:fb:8a: 0e:e1:2e:0a:5c:b1:5a:76:14:81:15:07:43:40:b4:de:00:ff: f4:d8:41:ce:91:a6:72:13:fa:46:c2:3f:d5:52:a6:4b:c1:35: 19:22:c3:e4:ba:77:5c:aa:0e:84:cd:fd:90:e6:7d:d3:aa:a7: 17:5e:5c:38:36:3e:ee:56:29:0e:11:a2:99:fa:bf:c2:67:57: b7:23:32:7c:b0:71:93:e1:6a:3a:de:2e:7a:ff:62:d3:28:5d: 0f:c8:13:8c:7a:4c:dc:55:5d:a6:44:81:fb:03:f1:7e:3a:e5: 6e:ba:b6:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaG+KWVcSGLpQfXBPz6y4PMx2N64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBODgwMDU2RENGOUFEQjdBNzBENDYxRkY4MzA4NkQ4 RkU4ODk3QTAeFw0yNjA5MjMxMjAxMDNaFw0yNjA5MjQxNDM1MDNaMDMxMTAvBgNV BAMTKDhCNzdFOTZEMzZCMzA1RDk2RUE3QTQ0MjQ0NUJFNjU5NkY4N0YzM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiVyefUAL+lDSWJVXV4gg9NSdX yfDFawBbrW3CbJBs7rD2tM7AN91Y3h7GFGIuq/4X3RyH/ppENo8rEAqGcY7Z1XKg 94owocOo7YMYPbipkuKdWFRaZ3GDWDKI13XuTp+XGu6h9a3Q/IT6564hqhOSHNSF zMzT8RxNflzWcK5p1AVDCy3bw6t4DJcYzc4a+C/jwbDn3DervF3xEVAtwyxwae5f VGYuMCq7mZiS3ebnqXNOdE6Bj78wPaEgzSUqocOk8xhOu5Iw6yHBH6lluvcbAJwo xlOnf7yLefb3Q+XQxVVqYItT+oPzYAQXwCtIXNHjK/N4QvR3/sOcnyHn7lX5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi3fpbTazBdlup6RCRFvmWW+H8zwwHwYDVR0j BBgwFoAUn6iABW3Pmtt6cNRh/4MIbY/oiXowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0NDI1MmItZDMwZS00YmRjLTgzMmYtYjM4YjA1YzdhMDM1LzAvOUZBODgwMDU2 RENGOUFEQjdBNzBENDYxRkY4MzA4NkQ4RkU4ODk3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkE4ODAwNTZEQ0Y5QURCN0E3MEQ0NjFGRjgzMDg2RDhGRTg4 OTdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0NDI1MmItZDMwZS00YmRjLTgz MmYtYjM4YjA1YzdhMDM1LzAvOUZBODgwMDU2RENGOUFEQjdBNzBENDYxRkY4MzA4 NkQ4RkU4ODk3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlSqHgZWoeZDqjnNiM+9HiZ33sChSQsr4MY nCuxDON/UsZ8p7jMl+oq1RWaKWPMr3P44HiQ8eHRV889J3nT5C71PRPAWe0GU4jZ hIIpjm37lW+NBM2LiRkFPmC3epCUonPXO5naDnqyQx7I5XWNzvIPKnqOHxw+28in cy8EWHanUAy4DMowXMgzVXk5V1n7ig7hLgpcsVp2FIEVB0NAtN4A//TYQc6RpnIT +kbCP9VSpkvBNRkiw+S6d1yqDoTN/ZDmfdOqpxdeXDg2Pu5WKQ4Ropn6v8JnV7cj MnywcZPhajreLnr/YtMoXQ/IE4x6TNxVXaZEgfsD8X465W66tgA= -----END CERTIFICATE-----Generated at Thu Sep 24 06:10:51 2026 by rpki-client