$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft File: 9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft (raw, json) Hash identifier: trrY0r+tzyjPhjMBHgWq3eqEhUh7if0hASQUmnCP7hY= Subject key identifier: D2:6C:68:42:3F:FA:71:BB:4A:97:A6:2A:54:89:85:B8:33:51:BD:78 Authority key identifier: 9C:47:04:20:4D:F8:9C:A1:B4:1C:1A:06:44:39:95:B3:CC:E3:86:CB Certificate issuer: /CN=9C4704204DF89CA1B41C1A06443995B3CCE386CB Certificate serial: 19AC78E9646B8183D84B21D77F0CC88DE85C1D97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft Manifest number: 0114 Signing time: Tue 22 Sep 2026 19:40:48 +0000 Manifest this update: Tue 22 Sep 2026 19:35:48 +0000 Manifest next update: Wed 23 Sep 2026 23:13:48 +0000 Files and hashes: 1: 9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl (hash: XN+NZ317GrKWQfnaB2TpeJiyAHiHphksu2EmVWkm3+Q=) 2: AS23693.roa (hash: nQHqGrXxisNm9tItcqd6p1SSCmNnVPxWqJyFxvqukbo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 23:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ac:78:e9:64:6b:81:83:d8:4b:21:d7:7f:0c:c8:8d:e8:5c:1d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C4704204DF89CA1B41C1A06443995B3CCE386CB Validity Not Before: Sep 22 19:35:48 2026 GMT Not After : Sep 23 23:13:48 2026 GMT Subject: CN=D26C68423FFA71BB4A97A62A548985B83351BD78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b7:d1:c1:d4:45:70:55:2f:60:ef:b1:46:2e: 3b:86:a8:ca:70:4f:a3:b0:56:ca:ad:fd:8c:13:68: 22:22:2e:7c:bb:67:35:ab:01:12:5b:f8:4a:d2:d3: 0a:87:10:de:cb:e2:67:32:ba:9d:b4:8d:cf:94:0e: 20:05:a3:bf:9d:cf:8a:45:71:64:ea:22:f3:55:4e: 0b:14:6f:54:38:fc:57:59:33:5a:8f:48:7b:7a:e9: f5:98:c6:ab:b8:9d:88:b8:10:62:cd:9f:6b:01:a3: 72:18:b9:c6:c8:20:9b:e8:29:5a:15:38:a9:61:6a: 2f:ff:4e:10:04:9a:4f:77:1d:3c:ee:d6:78:b6:2f: ec:d2:a3:47:24:5b:ed:e4:02:ec:21:ed:3f:a0:b4: bc:5f:6f:85:e1:ac:35:b2:b9:5f:45:a8:47:76:62: ce:35:34:d4:8c:44:ec:06:b2:fb:cc:43:b8:4c:6a: 34:b9:95:f8:7a:a6:96:40:6d:8b:35:d7:03:5f:fb: a1:a7:18:f2:77:a0:25:7a:a8:6b:1d:ea:cc:06:ab: d5:f3:aa:1a:5b:7b:04:54:01:ee:05:b8:62:f0:42: e6:20:73:72:da:4a:62:3b:c5:bd:bc:3a:de:3f:d2: b6:cb:cd:83:9d:32:30:cd:69:c6:ac:13:93:b2:12: 9d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6C:68:42:3F:FA:71:BB:4A:97:A6:2A:54:89:85:B8:33:51:BD:78 X509v3 Authority Key Identifier: keyid:9C:47:04:20:4D:F8:9C:A1:B4:1C:1A:06:44:39:95:B3:CC:E3:86:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:d2:33:e9:4f:6c:e2:37:5d:75:8d:eb:6c:9b:3b:ff:c6:b0: ec:02:1a:35:fb:5a:4d:17:ca:87:b8:86:77:c2:a0:da:68:e7: 33:7f:5b:ba:4f:5f:2b:1d:b5:d5:b1:ea:94:a1:5f:dc:6c:24: 11:ff:d9:4e:ac:5f:86:d7:80:9d:e2:d6:c7:1a:f6:26:3a:0b: 42:ab:73:5d:59:7b:9d:ab:00:e4:41:dd:ba:c4:91:ef:29:36: 52:94:3c:18:ef:b5:3c:09:99:1c:41:5b:fa:85:cf:38:4f:a4: 73:9f:d7:7f:76:65:e1:13:8b:09:c1:5d:82:ff:05:48:cc:8f: 59:4f:7a:db:7f:cb:06:91:84:96:df:5d:03:42:f6:9b:5d:54: 2a:67:83:6c:e3:ad:86:90:80:af:31:58:68:1c:73:76:a6:e5: 08:c0:cd:f9:c0:57:0f:1a:71:5e:8e:bc:09:1c:f5:d1:ff:b6: 45:76:83:31:37:0d:43:9d:51:77:31:28:d1:84:fa:ae:65:e2: 99:d0:b7:9b:f5:77:ab:43:ee:a8:72:8e:1a:b6:d2:30:5a:eb: 41:0f:29:25:2a:4f:0d:5e:99:d4:b7:92:34:34:30:26:32:60: 6f:7e:43:98:80:df:7e:31:4a:fb:9b:f6:27:e7:49:64:fc:41: aa:55:3c:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGax46WRrgYPYSyHXfwzIjehcHZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM0NzA0MjA0REY4OUNBMUI0MUMxQTA2NDQzOTk1QjND Q0UzODZDQjAeFw0yNjA5MjIxOTM1NDhaFw0yNjA5MjMyMzEzNDhaMDMxMTAvBgNV BAMTKEQyNkM2ODQyM0ZGQTcxQkI0QTk3QTYyQTU0ODk4NUI4MzM1MUJENzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCat9HB1EVwVS9g77FGLjuGqMpw T6OwVsqt/YwTaCIiLny7ZzWrARJb+ErS0wqHEN7L4mcyup20jc+UDiAFo7+dz4pF cWTqIvNVTgsUb1Q4/FdZM1qPSHt66fWYxqu4nYi4EGLNn2sBo3IYucbIIJvoKVoV OKlhai//ThAEmk93HTzu1ni2L+zSo0ckW+3kAuwh7T+gtLxfb4XhrDWyuV9FqEd2 Ys41NNSMROwGsvvMQ7hMajS5lfh6ppZAbYs11wNf+6GnGPJ3oCV6qGsd6swGq9Xz qhpbewRUAe4FuGLwQuYgc3LaSmI7xb28Ot4/0rbLzYOdMjDNacasE5OyEp0JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0mxoQj/6cbtKl6YqVImFuDNRvXgwHwYDVR0j BBgwFoAUnEcEIE34nKG0HBoGRDmVs8zjhsswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzMyOGYyNGUtZGM3Zi00NTYyLWE1MWQtZTJlMzhjMzY3N2QxLzAvOUM0NzA0MjA0 REY4OUNBMUI0MUMxQTA2NDQzOTk1QjNDQ0UzODZDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QzQ3MDQyMDRERjg5Q0ExQjQxQzFBMDY0NDM5OTVCM0NDRTM4 NkNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvOUM0NzA0MjA0REY4OUNBMUI0MUMxQTA2NDQzOTk1 QjNDQ0UzODZDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3SM+lPbOI3XXWN62ybO//GsOwCGjX7Wk0X yoe4hnfCoNpo5zN/W7pPXysdtdWx6pShX9xsJBH/2U6sX4bXgJ3i1sca9iY6C0Kr c11Ze52rAORB3brEke8pNlKUPBjvtTwJmRxBW/qFzzhPpHOf1392ZeETiwnBXYL/ BUjMj1lPett/ywaRhJbfXQNC9ptdVCpng2zjrYaQgK8xWGgcc3am5QjAzfnAVw8a cV6OvAkc9dH/tkV2gzE3DUOdUXcxKNGE+q5l4pnQt5v1d6tD7qhyjhq20jBa60EP KSUqTw1emdS3kjQ0MCYyYG9+Q5iA334xSvub9ifnSWT8QapVPPE= -----END CERTIFICATE-----Generated at Wed Sep 23 16:50:21 2026 by rpki-client