$ rpki-client -vvvf rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft File: A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft (raw, json) Hash identifier: UOEHHUVNsWOiE4pWd/KNZZSvxLz7KrFYxmwmXI/GgrQ= Subject key identifier: 49:DD:64:64:76:62:D7:CA:C8:72:1E:20:A0:AE:C8:AD:76:AC:F9:66 Authority key identifier: A9:78:8B:28:1E:44:81:BB:EF:C7:DC:CD:C6:D1:8C:F4:D3:6B:3D:6E Certificate issuer: /CN=A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E Certificate serial: 5C04B6706827754C1328FD1D81E91CBE7EBAE205 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 20:25:54 +0000 Manifest this update: Fri 25 Sep 2026 20:20:54 +0000 Manifest next update: Sat 26 Sep 2026 20:40:54 +0000 Files and hashes: 1: A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.crl (hash: tLOR3rgmKqeXBOLX7I+q/rd5sLOiGQE8cR2GAt+rFJE=) 2: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: LzRdfO8uQHGjjJx+IZG72L+49qDt2LuDV7Qzeoi9vMg=) 3: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: +X4DdSQ9xtq8kPseZiuCwH6E+1VNqzzRG0A2Dn7OrXc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.crl rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:04:b6:70:68:27:75:4c:13:28:fd:1d:81:e9:1c:be:7e:ba:e2:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E Validity Not Before: Sep 25 20:20:54 2026 GMT Not After : Sep 26 20:40:54 2026 GMT Subject: CN=49DD64647662D7CAC8721E20A0AEC8AD76ACF966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:02:c9:6c:91:d0:9b:40:fa:76:b6:17:bb:81: 91:3a:1f:21:b3:83:c2:32:c6:a6:6b:08:34:cb:24: 44:99:42:e6:4e:dd:c7:89:00:41:d4:c0:7c:f9:7d: 25:f1:3d:a7:c0:82:58:43:23:00:b7:22:8b:86:49: 87:c3:47:1f:b6:3e:dc:58:64:e4:f1:ff:2d:bb:1f: cd:02:9c:7f:ea:cb:a5:3f:55:80:1b:4a:0b:1f:53: 09:c7:f2:08:33:e7:c6:59:a1:ac:82:12:59:ec:57: 96:47:02:6f:25:64:68:c0:2a:d0:56:22:44:61:60: 38:9b:57:6a:06:31:51:3f:9c:6f:61:6c:17:48:d7: 77:fa:1a:a1:ca:5a:20:1b:1c:89:ef:97:4c:67:4d: c7:43:89:90:81:5b:f1:ab:5e:ad:07:6e:34:31:c7: bd:44:ea:11:d4:94:35:bc:4b:3b:15:1b:60:5c:2a: f8:79:13:1f:18:8f:78:93:9b:cb:9c:5d:0d:50:a4: 0b:01:ca:7b:ff:1e:c6:7b:42:79:ba:2c:e9:3b:69: 81:89:ce:35:51:02:28:03:27:b1:fb:17:18:0f:2b: 48:31:20:61:04:dc:73:46:0e:2b:c3:17:51:cf:dd: 08:00:25:67:b3:b3:18:bd:63:e0:1d:fa:96:60:2c: 0c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DD:64:64:76:62:D7:CA:C8:72:1E:20:A0:AE:C8:AD:76:AC:F9:66 X509v3 Authority Key Identifier: keyid:A9:78:8B:28:1E:44:81:BB:EF:C7:DC:CD:C6:D1:8C:F4:D3:6B:3D:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:11:e8:ff:cf:6b:14:2a:a4:99:b1:48:6a:3c:50:70:ce:e0: cc:ba:34:a2:d8:fb:4a:5f:e7:40:62:fe:3f:e2:f2:06:3a:6e: 82:9e:82:13:d7:ca:ec:42:ed:13:90:43:62:78:01:e8:4e:d1: 65:13:82:9b:c9:64:37:64:ad:a3:f6:d7:56:39:4b:80:5f:06: 2c:c5:70:79:b0:10:90:17:a2:e7:4a:71:0b:4e:b1:63:78:65: 60:41:ef:d1:90:7a:b4:2c:38:d8:0a:5e:9f:6f:3b:2e:34:ad: ca:34:fc:96:90:e9:0b:b2:16:99:a2:65:8d:0a:33:4e:46:6d: 68:0d:71:04:5e:5d:16:c1:74:35:15:33:eb:1f:c5:5d:83:83: a0:e5:da:ec:4a:4b:7a:f7:42:8d:e4:1f:cc:b1:eb:7a:d3:2a: 81:8f:b9:f2:d8:1f:04:55:36:db:42:88:3e:0c:66:08:a3:70: 38:d1:2d:d1:df:93:53:49:a6:6b:b7:70:28:56:0c:f2:a2:88: a5:06:8b:ad:a7:e9:a2:d6:db:f8:7d:96:4b:b1:5f:69:3a:27: 5f:f9:67:e3:e9:55:86:fe:b6:4c:14:c0:0a:09:1a:28:c6:93: 6f:dd:ad:67:56:9e:49:d2:97:7d:b4:f2:d4:0f:a6:f2:e7:3b: 93:de:b2:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXAS2cGgndUwTKP0dgekcvn664gUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk3ODhCMjgxRTQ0ODFCQkVGQzdEQ0NEQzZEMThDRjRE MzZCM0Q2RTAeFw0yNjA5MjUyMDIwNTRaFw0yNjA5MjYyMDQwNTRaMDMxMTAvBgNV BAMTKDQ5REQ2NDY0NzY2MkQ3Q0FDODcyMUUyMEEwQUVDOEFENzZBQ0Y5NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdAslskdCbQPp2the7gZE6HyGz g8IyxqZrCDTLJESZQuZO3ceJAEHUwHz5fSXxPafAglhDIwC3IouGSYfDRx+2PtxY ZOTx/y27H80CnH/qy6U/VYAbSgsfUwnH8ggz58ZZoayCElnsV5ZHAm8lZGjAKtBW IkRhYDibV2oGMVE/nG9hbBdI13f6GqHKWiAbHInvl0xnTcdDiZCBW/GrXq0HbjQx x71E6hHUlDW8SzsVG2BcKvh5Ex8Yj3iTm8ucXQ1QpAsBynv/HsZ7Qnm6LOk7aYGJ zjVRAigDJ7H7FxgPK0gxIGEE3HNGDivDF1HP3QgAJWezsxi9Y+Ad+pZgLAzbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSd1kZHZi18rIch4goK7IrXas+WYwHwYDVR0j BBgwFoAUqXiLKB5Egbvvx9zNxtGM9NNrPW4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjkyMjY5NDgtYjFhMS00Mjk0LTkxNTAtNmFmMGUwYmViZmI4LzAvQTk3ODhCMjgx RTQ0ODFCQkVGQzdEQ0NEQzZEMThDRjREMzZCM0Q2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTc4OEIyODFFNDQ4MUJCRUZDN0RDQ0RDNkQxOENGNEQzNkIz RDZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjkyMjY5NDgtYjFhMS00Mjk0LTkx NTAtNmFmMGUwYmViZmI4LzAvQTk3ODhCMjgxRTQ0ODFCQkVGQzdEQ0NEQzZEMThD RjREMzZCM0Q2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4R6P/PaxQqpJmxSGo8UHDO4My6NKLY+0pf 50Bi/j/i8gY6boKeghPXyuxC7ROQQ2J4AehO0WUTgpvJZDdkraP211Y5S4BfBizF cHmwEJAXoudKcQtOsWN4ZWBB79GQerQsONgKXp9vOy40rco0/JaQ6QuyFpmiZY0K M05GbWgNcQReXRbBdDUVM+sfxV2Dg6Dl2uxKS3r3Qo3kH8yx63rTKoGPufLYHwRV NttCiD4MZgijcDjRLdHfk1NJpmu3cChWDPKiiKUGi62n6aLW2/h9lkuxX2k6J1/5 Z+PpVYb+tkwUwAoJGijGk2/drWdWnknSl3208tQPpvLnO5PesnA= -----END CERTIFICATE-----Generated at Sat Sep 26 05:03:56 2026 by rpki-client