$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft File: B9FC538BFBE91D32C980E6C968C96604E388FD26.mft (raw, json) Hash identifier: Ivhy06OVs1TKd8+5q5/CJ5YSlGjqr75VLH4iOfCNHmY= Subject key identifier: 25:42:24:80:54:32:5B:98:72:C0:62:7F:8D:2F:21:34:BC:ED:EA:7A Authority key identifier: B9:FC:53:8B:FB:E9:1D:32:C9:80:E6:C9:68:C9:66:04:E3:88:FD:26 Certificate issuer: /CN=B9FC538BFBE91D32C980E6C968C96604E388FD26 Certificate serial: 05D9EF4E7D9C7F13C4D0F4A9AEDCA7418CFD6506 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9FC538BFBE91D32C980E6C968C96604E388FD26.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft Manifest number: C9 Signing time: Tue 29 Sep 2026 16:40:18 +0000 Manifest this update: Tue 29 Sep 2026 16:35:18 +0000 Manifest next update: Wed 30 Sep 2026 18:59:18 +0000 Files and hashes: 1: B9FC538BFBE91D32C980E6C968C96604E388FD26.crl (hash: ECnhRfq3eNXsOucuUMmVF2sKvQ3Lc3kCPPW6l6It90Q=) 2: 3130332e3138392e3235342e302f32342d3234203d3e20313439393135.roa (hash: ucIu0OXRxfc1CywG+yYTICGHOqWxj9NSpYywYNEl67o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.crl rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9FC538BFBE91D32C980E6C968C96604E388FD26.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 18:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d9:ef:4e:7d:9c:7f:13:c4:d0:f4:a9:ae:dc:a7:41:8c:fd:65:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9FC538BFBE91D32C980E6C968C96604E388FD26 Validity Not Before: Sep 29 16:35:18 2026 GMT Not After : Sep 30 18:59:18 2026 GMT Subject: CN=2542248054325B9872C0627F8D2F2134BCEDEA7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:53:4c:2d:a6:7f:ab:0f:08:f2:1e:06:aa:0c: 0d:a6:95:7a:7f:33:0e:21:fc:f7:74:6a:50:fe:af: 33:88:3b:fa:17:cc:dd:02:5a:0f:a2:ef:4b:91:a1: d3:37:05:a4:6a:81:e2:94:c9:10:f2:a9:33:82:26: 37:c6:0f:cc:7f:90:76:a6:ad:09:28:3e:cc:43:86: fb:0e:38:9d:b9:2b:f1:cb:05:e3:f8:b1:96:c4:2c: 75:7e:bb:c0:0b:f3:51:7e:e9:6c:26:e5:37:22:73: 56:21:ed:a0:70:43:87:c4:9a:79:67:84:7d:7b:1c: 9e:7e:f2:1e:a4:96:c5:bb:6e:35:09:54:cc:0e:c9: 60:05:90:21:71:e4:bc:8e:7d:a5:f2:86:3e:47:fe: ab:35:df:26:5d:2c:b1:23:e1:3c:3a:d8:7d:e0:bd: 9e:f6:17:a7:fe:5a:e6:f8:2f:39:17:50:60:f4:48: d1:6a:8a:0a:bb:9a:c0:23:c8:19:17:a3:2e:3b:f8: 65:26:45:4a:d4:dd:65:56:1d:5f:ed:ad:f2:28:3c: 4d:87:27:e6:db:2b:e1:13:8f:4e:d3:47:94:b9:15: 33:66:52:95:80:9c:2a:11:76:be:27:d7:51:8a:02: 52:a2:f6:ab:6c:f2:ae:f3:7d:65:54:fa:6f:23:e4: ea:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:42:24:80:54:32:5B:98:72:C0:62:7F:8D:2F:21:34:BC:ED:EA:7A X509v3 Authority Key Identifier: keyid:B9:FC:53:8B:FB:E9:1D:32:C9:80:E6:C9:68:C9:66:04:E3:88:FD:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9FC538BFBE91D32C980E6C968C96604E388FD26.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a3:40:a6:bd:b8:93:bf:d5:14:e3:66:e8:68:0a:7d:38:45: 01:ac:d1:da:e3:0d:9b:fa:8d:b9:63:98:5f:75:cd:a5:8e:21: 0d:b9:6a:82:af:87:20:08:36:d8:e3:bb:80:ce:89:11:02:3d: e4:51:e4:2a:63:ee:49:f5:f7:0b:66:1a:c2:d0:8b:35:1c:76: 6a:57:81:d3:a3:0c:88:94:e9:ee:f8:9f:e8:09:4f:66:cc:6e: 53:2e:51:a5:87:bd:6a:c7:11:e1:a6:38:95:53:05:07:d9:16: f7:d4:c1:95:77:ba:db:b6:e0:e5:2c:51:6e:7d:63:8c:5f:96: 46:38:ec:08:09:9b:59:47:e1:6e:51:f0:13:20:1a:01:1f:b9: 72:00:75:22:43:0e:0b:11:8e:85:bd:60:2b:39:c2:6a:60:43: 61:16:b3:e2:c5:64:17:1b:13:94:c3:fb:24:d5:f1:8b:47:11: c9:f6:2d:28:8a:d2:71:cd:41:67:bf:c0:ab:60:07:31:6a:6f: 1b:30:b2:b2:2b:d7:58:02:bd:bd:be:14:5a:8f:33:e0:04:8e: 29:b7:78:c9:46:85:e8:64:7a:b8:df:58:6d:53:a7:18:fe:56: 4f:bc:0f:8d:de:e0:e6:5d:2a:35:5d:52:64:1c:a8:4d:ae:30: 5c:f6:b9:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBdnvTn2cfxPE0PSprtynQYz9ZQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlGQzUzOEJGQkU5MUQzMkM5ODBFNkM5NjhDOTY2MDRF Mzg4RkQyNjAeFw0yNjA5MjkxNjM1MThaFw0yNjA5MzAxODU5MThaMDMxMTAvBgNV BAMTKDI1NDIyNDgwNTQzMjVCOTg3MkMwNjI3RjhEMkYyMTM0QkNFREVBN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpU0wtpn+rDwjyHgaqDA2mlXp/ Mw4h/Pd0alD+rzOIO/oXzN0CWg+i70uRodM3BaRqgeKUyRDyqTOCJjfGD8x/kHam rQkoPsxDhvsOOJ25K/HLBeP4sZbELHV+u8AL81F+6Wwm5Tcic1Yh7aBwQ4fEmnln hH17HJ5+8h6klsW7bjUJVMwOyWAFkCFx5LyOfaXyhj5H/qs13yZdLLEj4Tw62H3g vZ72F6f+Wub4LzkXUGD0SNFqigq7msAjyBkXoy47+GUmRUrU3WVWHV/trfIoPE2H J+bbK+ETj07TR5S5FTNmUpWAnCoRdr4n11GKAlKi9qts8q7zfWVU+m8j5OqtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJUIkgFQyW5hywGJ/jS8hNLzt6nowHwYDVR0j BBgwFoAUufxTi/vpHTLJgObJaMlmBOOI/SYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMwMDU2YjQtZjAyNy00NGZhLTk3NGQtNGExZWQxOTFhZTU2LzAvQjlGQzUzOEJG QkU5MUQzMkM5ODBFNkM5NjhDOTY2MDRFMzg4RkQyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUZDNTM4QkZCRTkxRDMyQzk4MEU2Qzk2OEM5NjYwNEUzODhG RDI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMwMDU2YjQtZjAyNy00NGZhLTk3 NGQtNGExZWQxOTFhZTU2LzAvQjlGQzUzOEJGQkU5MUQzMkM5ODBFNkM5NjhDOTY2 MDRFMzg4RkQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGejQKa9uJO/1RTjZuhoCn04RQGs0drjDZv6 jbljmF91zaWOIQ25aoKvhyAINtjju4DOiRECPeRR5Cpj7kn19wtmGsLQizUcdmpX gdOjDIiU6e74n+gJT2bMblMuUaWHvWrHEeGmOJVTBQfZFvfUwZV3utu24OUsUW59 Y4xflkY47AgJm1lH4W5R8BMgGgEfuXIAdSJDDgsRjoW9YCs5wmpgQ2EWs+LFZBcb E5TD+yTV8YtHEcn2LSiK0nHNQWe/wKtgBzFqbxswsrIr11gCvb2+FFqPM+AEjim3 eMlGhehkerjfWG1Tpxj+Vk+8D43e4OZdKjVdUmQcqE2uMFz2uY8= -----END CERTIFICATE-----Generated at Wed Sep 30 04:46:23 2026 by rpki-client