$ rpki-client -vvvf rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft File: D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft (raw, json) Hash identifier: AbT9dtMj8EYGxPsD4AhyJWgR74fGqo9aQx9nwtdQQmk= Subject key identifier: F7:C8:DC:07:7C:4D:7E:77:19:FE:46:CB:BF:08:94:9C:4F:E6:99:06 Authority key identifier: D9:E4:B9:E5:C2:0C:5D:24:54:5E:4B:37:44:B7:24:23:24:23:ED:B7 Certificate issuer: /CN=D9E4B9E5C20C5D24545E4B3744B724232423EDB7 Certificate serial: 0E18B4452324575B121B1403779871CA3C785BE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 23:29:38 +0000 Manifest this update: Thu 24 Sep 2026 23:24:38 +0000 Manifest next update: Sat 26 Sep 2026 00:00:38 +0000 Files and hashes: 1: 3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa (hash: OK8J5tFKOjzZkYFlXmJIuP/RnOPH7Dha6p0ILyYgDYQ=) 2: D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl (hash: bC6WMtfXJk2Rw2+OR9Y2halNH0J65Bcv7cMZjF6gAbM=) 3: 323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa (hash: cHfAqVSrYWCvGTjmxTN9VKckgkvEOepk7bQUQ5YDUTM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:18:b4:45:23:24:57:5b:12:1b:14:03:77:98:71:ca:3c:78:5b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9E4B9E5C20C5D24545E4B3744B724232423EDB7 Validity Not Before: Sep 24 23:24:38 2026 GMT Not After : Sep 26 00:00:38 2026 GMT Subject: CN=F7C8DC077C4D7E7719FE46CBBF08949C4FE69906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f6:8c:79:fe:c8:d4:11:16:61:a1:79:d3:31: ba:18:d6:76:7a:9e:de:29:3e:b4:9e:ef:b2:07:7c: ef:d7:5f:e6:c0:8d:1f:65:66:7c:f2:b7:f2:41:7e: 01:29:05:11:c5:f9:9d:4c:bc:fc:7d:04:55:35:57: 6c:28:9d:e3:48:6c:f8:ec:8c:ca:a7:28:a1:b7:bb: 18:fb:56:4a:fb:b8:0d:f9:3b:a7:0f:8f:33:24:39: 31:af:cb:33:b2:5d:b8:e4:b0:b3:4e:66:7f:8b:a2: 3d:7f:26:8d:3a:e9:03:d6:4c:67:47:6f:43:f1:23: 42:f8:ba:a0:c2:55:d9:81:ab:92:e8:e3:6b:69:b3: eb:bb:6d:8b:98:d8:ee:2f:6b:77:7c:64:9a:de:59: 3f:3c:5f:34:14:07:cf:1d:cf:f9:cc:bc:87:7c:5c: 33:c7:f4:d1:1e:f9:41:43:0d:45:1e:4c:5c:70:b1: 11:f1:17:a8:8f:8d:ba:09:aa:52:7d:07:31:cd:f2: fc:83:98:74:f2:ee:9e:0f:4e:11:a3:a9:ab:99:36: 26:50:80:59:d4:93:92:a1:c0:59:71:87:24:64:ea: ec:80:91:3d:32:3c:66:c4:dc:be:a2:ab:ed:28:34: 0b:89:36:20:15:08:e7:0e:f3:b9:94:31:e5:ad:30: c2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C8:DC:07:7C:4D:7E:77:19:FE:46:CB:BF:08:94:9C:4F:E6:99:06 X509v3 Authority Key Identifier: keyid:D9:E4:B9:E5:C2:0C:5D:24:54:5E:4B:37:44:B7:24:23:24:23:ED:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e7:75:b7:04:06:6b:d9:5f:5d:a0:25:87:31:a2:13:12:5d: 70:9d:51:bf:74:40:2f:4f:59:31:8b:a5:89:17:3b:ad:2b:44: 4e:63:45:ed:e2:ad:da:cf:cf:ef:01:f3:d6:5c:7a:40:92:22: c0:d6:be:e8:52:8a:e1:f7:e1:c4:10:8c:21:39:e1:59:ab:41: ca:88:b2:78:ce:82:6b:6d:34:ca:71:ba:c0:30:01:cb:ea:55: cd:3a:9a:55:43:53:cd:1b:ec:4a:f2:9c:ea:7a:b0:c0:f6:aa: e6:28:e4:68:6b:09:5c:4e:13:f7:24:96:cc:8b:83:62:e5:ce: 1f:82:1f:21:7c:9c:16:88:a8:70:ac:9f:f4:bc:18:80:a0:b7: 3b:3b:56:95:f0:28:a5:ad:c2:90:98:0f:fd:1f:00:1b:39:60: b9:72:57:d4:de:d9:0c:be:da:47:17:1a:b2:c0:46:c7:10:94: 97:3d:c7:e8:25:8c:93:f2:4b:4d:b7:ce:1c:1e:51:39:74:98: 7a:82:e8:63:0f:cd:b4:f4:2d:30:e5:0c:df:9b:c0:4e:4e:87: e6:6f:a9:9b:e7:ef:11:42:b3:b0:65:32:b3:78:b5:bd:6c:11: b9:52:fb:2b:b2:fa:0a:58:0c:da:43:ef:d3:f2:dd:57:14:c9: 8f:67:cb:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhi0RSMkV1sSGxQDd5hxyjx4W+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFNEI5RTVDMjBDNUQyNDU0NUU0QjM3NDRCNzI0MjMy NDIzRURCNzAeFw0yNjA5MjQyMzI0MzhaFw0yNjA5MjYwMDAwMzhaMDMxMTAvBgNV BAMTKEY3QzhEQzA3N0M0RDdFNzcxOUZFNDZDQkJGMDg5NDlDNEZFNjk5MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn9ox5/sjUERZhoXnTMboY1nZ6 nt4pPrSe77IHfO/XX+bAjR9lZnzyt/JBfgEpBRHF+Z1MvPx9BFU1V2woneNIbPjs jMqnKKG3uxj7Vkr7uA35O6cPjzMkOTGvyzOyXbjksLNOZn+Loj1/Jo066QPWTGdH b0PxI0L4uqDCVdmBq5Lo42tps+u7bYuY2O4va3d8ZJreWT88XzQUB88dz/nMvId8 XDPH9NEe+UFDDUUeTFxwsRHxF6iPjboJqlJ9BzHN8vyDmHTy7p4PThGjqauZNiZQ gFnUk5KhwFlxhyRk6uyAkT0yPGbE3L6iq+0oNAuJNiAVCOcO87mUMeWtMMKHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU98jcB3xNfncZ/kbLvwiUnE/mmQYwHwYDVR0j BBgwFoAU2eS55cIMXSRUXks3RLckIyQj7bcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzBhMzkyZGMtMmU0ZS00NzcwLThmNjgtYmM2MWY4MGI3NGE3LzAvRDlFNEI5RTVD MjBDNUQyNDU0NUU0QjM3NDRCNzI0MjMyNDIzRURCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOUU0QjlFNUMyMEM1RDI0NTQ1RTRCMzc0NEI3MjQyMzI0MjNF REI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzBhMzkyZGMtMmU0ZS00NzcwLThm NjgtYmM2MWY4MGI3NGE3LzAvRDlFNEI5RTVDMjBDNUQyNDU0NUU0QjM3NDRCNzI0 MjMyNDIzRURCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/ndbcEBmvZX12gJYcxohMSXXCdUb90QC9P WTGLpYkXO60rRE5jRe3irdrPz+8B89ZcekCSIsDWvuhSiuH34cQQjCE54VmrQcqI snjOgmttNMpxusAwAcvqVc06mlVDU80b7ErynOp6sMD2quYo5GhrCVxOE/cklsyL g2Llzh+CHyF8nBaIqHCsn/S8GICgtzs7VpXwKKWtwpCYD/0fABs5YLlyV9Te2Qy+ 2kcXGrLARscQlJc9x+gljJPyS023zhweUTl0mHqC6GMPzbT0LTDlDN+bwE5Oh+Zv qZvn7xFCs7BlMrN4tb1sEblS+yuy+gpYDNpD79Py3VcUyY9ny2U= -----END CERTIFICATE-----Generated at Fri Sep 25 04:53:29 2026 by rpki-client