$ rpki-client -vvvf rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft File: 9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft (raw, json) Hash identifier: a2vtiWNYFpq+1fvHmrceJaWIETkXDXkUARboqCAdnKY= Subject key identifier: 42:92:DB:3A:0A:55:09:C6:B8:60:A1:6F:6B:2B:60:43:90:4C:CF:A6 Authority key identifier: 9F:D7:FF:4D:3F:B3:73:40:FA:A8:C7:EE:71:D1:CB:9E:AF:08:59:C1 Certificate issuer: /CN=9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1 Certificate serial: 11B9CDB3B7A3F3D72949E9E7FD2B470BB25C4790 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 16:00:57 +0000 Manifest this update: Wed 23 Sep 2026 15:55:57 +0000 Manifest next update: Thu 24 Sep 2026 16:40:57 +0000 Files and hashes: 1: 3130332e31382e37362e302f32322d3234203d3e203535373031.roa (hash: ZIatr5akU/o2NWBe3N+oXda5TMJkC+DkwhEJDyTCXOU=) 2: 3230322e37332e32362e302f32342d3234203d3e20313431383932.roa (hash: 2Omj4R13yIfbTM8O99f4AEQ3eWdecD3Qz56Vk4+EoQE=) 3: 3230322e37332e32372e302f32342d3234203d3e203535373031.roa (hash: BAdz9q0heD7H4d5EINNzizZi9X7k9sip5rKeZrRgrbA=) 4: 34392e302e302e302f32322d3234203d3e203535373031.roa (hash: sLZQYwwJZGFMTL7izEAM/LPP1kYOTnZL+ruwm/tAWUw=) 5: 3130332e33312e3233322e302f32322d3234203d3e203535373031.roa (hash: LXq7hGEpfDwOU/0U2QR8rTojO84R6vUdH42Dh5XJwhA=) 6: 34332e3235322e3233382e302f32342d3234203d3e203535373031.roa (hash: jervWvS7fVPh370uN91AucyVv2pORH48B5fUUflxIjw=) 7: 9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl (hash: x6P9mVhfoGIZthjSyjw4doexD5Jlxz0zbA2pTPapLnI=) 8: 34332e3235322e3233362e302f32332d3234203d3e203535373031.roa (hash: 9/aJzkpwQD5bM8J0s7lmNbtmibtAmha33amC/3lwiTs=) 9: 3230322e37332e32352e302f32342d3234203d3e20313431383932.roa (hash: ZdJ+uJ+H3LCclcBMDstVIbOnA5HzlWlzhGq8cMXXKag=) 10: 3230322e37332e32342e302f32342d3234203d3e203535373031.roa (hash: PInvCtxVVtioPbfgKwU3owF3bAZaDoVKCpPjomKqIrc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b9:cd:b3:b7:a3:f3:d7:29:49:e9:e7:fd:2b:47:0b:b2:5c:47:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1 Validity Not Before: Sep 23 15:55:57 2026 GMT Not After : Sep 24 16:40:57 2026 GMT Subject: CN=4292DB3A0A5509C6B860A16F6B2B6043904CCFA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:94:dc:98:1d:22:53:67:ae:ba:51:f4:40:aa: 37:ba:48:31:8a:6e:a7:86:7f:f8:5f:9b:40:7c:ed: b6:59:28:6f:84:07:f4:99:01:d2:81:4b:30:a2:ab: f7:a8:3a:b8:77:a4:83:34:e2:79:94:80:11:6e:26: c4:65:8a:9d:42:ae:9d:78:b2:5a:7c:35:90:e1:54: f3:0d:4a:93:ff:cb:6e:d4:8d:bb:3d:24:60:5a:f2: 6a:e8:a6:26:3b:84:52:57:ad:e6:8c:84:74:41:68: fc:fd:15:4a:77:f4:e4:52:e6:e0:a4:31:1b:24:4b: cb:40:df:ff:cf:42:e0:58:07:1e:17:20:91:ab:74: 1a:85:1c:f2:ab:31:81:d4:fa:59:b6:29:93:db:7f: be:18:23:bc:36:ce:4a:03:a1:e1:d7:70:52:9c:48: 19:ac:9d:b0:73:0e:ab:17:90:99:1f:b7:74:5c:1c: 48:47:93:82:69:71:27:53:5c:8e:da:e9:ef:1c:98: 97:8f:f9:57:39:98:bc:f6:27:2a:21:e2:51:ce:38: ec:95:41:19:38:da:e4:8e:29:00:d6:f3:db:b8:41: fd:97:9b:33:71:5c:e2:9c:45:10:4b:2f:5c:4e:2c: 8a:12:01:ba:cd:0e:16:2b:66:5d:98:99:6f:f5:b2: 1d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:92:DB:3A:0A:55:09:C6:B8:60:A1:6F:6B:2B:60:43:90:4C:CF:A6 X509v3 Authority Key Identifier: keyid:9F:D7:FF:4D:3F:B3:73:40:FA:A8:C7:EE:71:D1:CB:9E:AF:08:59:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:52:f2:f0:3f:0b:51:10:1a:15:0a:34:9d:a2:ba:5d:49:43: 22:d6:1c:9a:64:98:ea:aa:78:d1:6e:72:96:4d:65:c7:ca:8e: 9b:34:cc:b3:c3:f2:e8:10:c9:60:f4:97:98:3f:8f:c8:fb:d8: 97:23:59:bb:a8:36:3c:82:82:38:19:4c:fd:ff:cf:a1:0d:8f: 5c:dc:23:df:00:4b:df:8e:d6:67:70:ae:d6:dc:f3:34:b3:1c: e6:e6:18:84:ae:47:d9:05:2b:9d:69:0f:86:52:a8:e6:78:58: 40:d4:56:f6:ee:23:8d:b5:33:5c:eb:fd:23:0e:0b:10:3a:3a: 8b:9a:0f:71:8c:d0:58:2a:a5:14:b2:fc:4d:de:40:cd:3b:4e: 0d:38:f7:6a:3f:82:a8:2f:fa:f1:9f:81:b0:54:73:d3:ec:17: e8:8e:ec:63:c8:b2:8a:17:df:97:50:54:8b:6b:2e:5c:9d:0b: fb:58:0f:db:b4:b4:17:cf:03:03:01:90:9c:b7:9c:24:52:90: 83:2b:f8:91:4f:28:2c:3f:b0:fa:cc:37:3e:73:76:74:e6:01: ff:ee:56:1d:81:f6:9c:de:ed:88:90:c5:ae:b3:60:dd:d2:ae: ed:b9:8e:31:f6:e8:ff:5c:91:d8:72:64:aa:08:42:a9:5d:57: ff:d6:de:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEbnNs7ej89cpSenn/StHC7JcR5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZEN0ZGNEQzRkIzNzM0MEZBQThDN0VFNzFEMUNCOUVB RjA4NTlDMTAeFw0yNjA5MjMxNTU1NTdaFw0yNjA5MjQxNjQwNTdaMDMxMTAvBgNV BAMTKDQyOTJEQjNBMEE1NTA5QzZCODYwQTE2RjZCMkI2MDQzOTA0Q0NGQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWlNyYHSJTZ666UfRAqje6SDGK bqeGf/hfm0B87bZZKG+EB/SZAdKBSzCiq/eoOrh3pIM04nmUgBFuJsRlip1Crp14 slp8NZDhVPMNSpP/y27Ujbs9JGBa8mropiY7hFJXreaMhHRBaPz9FUp39ORS5uCk MRskS8tA3//PQuBYBx4XIJGrdBqFHPKrMYHU+lm2KZPbf74YI7w2zkoDoeHXcFKc SBmsnbBzDqsXkJkft3RcHEhHk4JpcSdTXI7a6e8cmJeP+Vc5mLz2Jyoh4lHOOOyV QRk42uSOKQDW89u4Qf2XmzNxXOKcRRBLL1xOLIoSAbrNDhYrZl2YmW/1sh0nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQpLbOgpVCca4YKFvaytgQ5BMz6YwHwYDVR0j BBgwFoAUn9f/TT+zc0D6qMfucdHLnq8IWcEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjdkOWY4NTEtN2U3My00Mzg0LTk1MGUtOGJlOGUxNWZkM2VlLzAvOUZEN0ZGNEQz RkIzNzM0MEZBQThDN0VFNzFEMUNCOUVBRjA4NTlDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkQ3RkY0RDNGQjM3MzQwRkFBOEM3RUU3MUQxQ0I5RUFGMDg1 OUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjdkOWY4NTEtN2U3My00Mzg0LTk1 MGUtOGJlOGUxNWZkM2VlLzAvOUZEN0ZGNEQzRkIzNzM0MEZBQThDN0VFNzFEMUNC OUVBRjA4NTlDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNS8vA/C1EQGhUKNJ2iul1JQyLWHJpkmOqq eNFucpZNZcfKjps0zLPD8ugQyWD0l5g/j8j72JcjWbuoNjyCgjgZTP3/z6ENj1zc I98AS9+O1mdwrtbc8zSzHObmGISuR9kFK51pD4ZSqOZ4WEDUVvbuI421M1zr/SMO CxA6OouaD3GM0FgqpRSy/E3eQM07Tg0492o/gqgv+vGfgbBUc9PsF+iO7GPIsooX 35dQVItrLlydC/tYD9u0tBfPAwMBkJy3nCRSkIMr+JFPKCw/sPrMNz5zdnTmAf/u Vh2B9pze7YiQxa6zYN3Sru25jjH26P9ckdhyZKoIQqldV//W3rg= -----END CERTIFICATE-----Generated at Wed Sep 23 23:55:32 2026 by rpki-client