$ rpki-client -vvvf rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft File: B9306D640F988742BB1CB2B19AB9D729636922A3.mft (raw, json) Hash identifier: rSDH1M70MZZ2AI/V81mdKUX4sLN79RDSeXTgTQD4O/8= Subject key identifier: 0F:CE:A4:2F:DB:7A:C7:EB:75:8A:5D:04:C3:6A:51:B1:93:65:CA:E0 Authority key identifier: B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3 Certificate issuer: /CN=B9306D640F988742BB1CB2B19AB9D729636922A3 Certificate serial: 50852A8C6A0623D607F28CA61A333B15F439B89E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft Manifest number: C9 Signing time: Wed 30 Sep 2026 20:00:32 +0000 Manifest this update: Wed 30 Sep 2026 19:55:32 +0000 Manifest next update: Thu 01 Oct 2026 20:56:32 +0000 Files and hashes: 1: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: axp2eq8WjJ3oyW6DrRyrSevP2DkGuYbEvHXLlB0V2P0=) 2: B9306D640F988742BB1CB2B19AB9D729636922A3.crl (hash: zIHxs+L7WXMVx3DbgxlgxwJtUrhXs/CZjEo2COAWP7Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:85:2a:8c:6a:06:23:d6:07:f2:8c:a6:1a:33:3b:15:f4:39:b8:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9306D640F988742BB1CB2B19AB9D729636922A3 Validity Not Before: Sep 30 19:55:32 2026 GMT Not After : Oct 1 20:56:32 2026 GMT Subject: CN=0FCEA42FDB7AC7EB758A5D04C36A51B19365CAE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:e2:93:32:40:6e:4a:77:d2:e9:a1:e7:e2: d1:b1:fb:90:0b:81:21:b1:d1:9a:e3:17:21:8f:bd: 47:cb:71:87:e0:0c:0a:a1:73:c0:eb:24:76:bd:b0: 9b:15:e9:e5:7c:b2:4c:cd:b1:e3:97:30:6a:c3:cf: 99:07:af:4f:3d:16:cb:d6:4d:28:88:8a:5a:13:69: 42:03:79:72:89:e1:62:8d:12:1f:9c:4e:f4:f9:f8: 03:01:d1:d2:c8:48:7d:1d:2e:d6:71:dc:b0:19:66: a5:8c:bc:58:66:2e:77:fa:ae:d0:61:1e:1f:ae:94: bc:3f:c0:a6:d9:97:90:c8:b6:04:de:cf:5b:a1:40: 96:66:06:8e:1e:59:aa:80:fe:91:c0:b4:32:e1:5d: 10:64:a8:51:82:28:eb:fd:ab:2a:11:20:3e:0b:59: ce:00:3c:bf:c8:18:1b:21:66:2b:ed:8d:4a:c2:4f: 9e:58:88:ae:a8:75:88:e1:d7:d4:5e:f5:c1:72:8c: 1f:9c:5f:56:09:f2:a5:f5:02:c6:ed:4c:03:e0:c4: 1c:a5:b9:eb:56:87:bf:b1:59:26:00:26:00:e5:82: 19:d7:39:43:cc:d6:90:a9:5a:c2:7c:c6:6a:27:2f: 75:83:dc:27:2d:4d:bd:24:9a:3f:2d:8f:81:8f:ad: 78:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CE:A4:2F:DB:7A:C7:EB:75:8A:5D:04:C3:6A:51:B1:93:65:CA:E0 X509v3 Authority Key Identifier: keyid:B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:d5:37:d2:29:5a:b1:bc:a5:a0:93:76:85:d9:47:38:41:17: 3a:fb:5c:cf:63:b4:14:bc:9f:9c:de:90:c5:65:58:d4:5a:89: 0a:e6:2d:17:a4:be:ec:a1:a2:7b:86:13:25:d0:5d:0a:0c:5e: 98:02:94:81:fe:dd:df:26:76:00:cc:fe:11:cd:4a:c9:2b:ac: 1d:ba:aa:ae:ff:c1:ae:60:05:7d:1a:c4:86:18:47:55:e7:18: 24:ad:48:18:03:81:66:8a:9f:be:36:26:a4:b2:a5:b6:72:5e: 27:71:f6:6d:25:65:68:52:85:c5:c6:63:35:f4:e7:bd:2b:e3: d5:33:a5:92:0b:20:d0:62:2d:46:52:ee:fd:33:4e:67:d0:4f: c4:9e:68:36:b2:91:56:b1:56:99:da:b5:6b:b8:89:da:f3:a1: a2:e8:7f:0f:a8:78:bd:cc:79:1b:cb:a0:68:dd:1c:a6:c3:7d: fc:eb:38:ba:e9:a8:11:dd:e7:cf:25:e6:98:4d:ea:6f:ad:44: 24:dd:78:a2:73:a7:a4:d5:46:6c:fa:4b:8d:26:bf:10:18:40: f1:05:03:68:0c:18:b4:82:f9:8b:5e:dc:47:1f:87:7f:7c:09: da:04:8f:b4:cd:f5:0f:e6:0d:5d:3a:e5:6d:fa:1d:a9:54:e1: 74:9f:2f:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUIUqjGoGI9YH8oymGjM7FfQ5uJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkzMDZENjQwRjk4ODc0MkJCMUNCMkIxOUFCOUQ3Mjk2 MzY5MjJBMzAeFw0yNjA5MzAxOTU1MzJaFw0yNjEwMDEyMDU2MzJaMDMxMTAvBgNV BAMTKDBGQ0VBNDJGREI3QUM3RUI3NThBNUQwNEMzNkE1MUIxOTM2NUNBRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42eKTMkBuSnfS6aHn4tGx+5AL gSGx0ZrjFyGPvUfLcYfgDAqhc8DrJHa9sJsV6eV8skzNseOXMGrDz5kHr089FsvW TSiIiloTaUIDeXKJ4WKNEh+cTvT5+AMB0dLISH0dLtZx3LAZZqWMvFhmLnf6rtBh Hh+ulLw/wKbZl5DItgTez1uhQJZmBo4eWaqA/pHAtDLhXRBkqFGCKOv9qyoRID4L Wc4APL/IGBshZivtjUrCT55YiK6odYjh19Re9cFyjB+cX1YJ8qX1AsbtTAPgxByl uetWh7+xWSYAJgDlghnXOUPM1pCpWsJ8xmonL3WD3CctTb0kmj8tj4GPrXgTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD86kL9t6x+t1il0Ew2pRsZNlyuAwHwYDVR0j BBgwFoAUuTBtZA+Yh0K7HLKxmrnXKWNpIqMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNiMmVlNzQtOGMzYy00YmMzLWI2ZmItZjM1YjIwMGEyMGViLzAvQjkzMDZENjQw Rjk4ODc0MkJCMUNCMkIxOUFCOUQ3Mjk2MzY5MjJBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTMwNkQ2NDBGOTg4NzQyQkIxQ0IyQjE5QUI5RDcyOTYzNjky MkEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNiMmVlNzQtOGMzYy00YmMzLWI2 ZmItZjM1YjIwMGEyMGViLzAvQjkzMDZENjQwRjk4ODc0MkJCMUNCMkIxOUFCOUQ3 Mjk2MzY5MjJBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbVN9IpWrG8paCTdoXZRzhBFzr7XM9jtBS8 n5zekMVlWNRaiQrmLRekvuyhonuGEyXQXQoMXpgClIH+3d8mdgDM/hHNSskrrB26 qq7/wa5gBX0axIYYR1XnGCStSBgDgWaKn742JqSypbZyXidx9m0lZWhShcXGYzX0 570r49UzpZILINBiLUZS7v0zTmfQT8SeaDaykVaxVpnatWu4idrzoaLofw+oeL3M eRvLoGjdHKbDffzrOLrpqBHd588l5phN6m+tRCTdeKJzp6TVRmz6S40mvxAYQPEF A2gMGLSC+Yte3Ecfh398CdoEj7TN9Q/mDV065W36HalU4XSfL/0= -----END CERTIFICATE-----Generated at Thu Oct 1 15:07:55 2026 by rpki-client