$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft File: 9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft (raw, json) Hash identifier: llyO0o6AO8+ejuOSTkJgvK4dIuClqvNhdCdNjjQTIjQ= Subject key identifier: 03:04:77:78:BB:75:AF:B4:72:79:61:19:0A:13:66:61:C3:06:F9:A3 Authority key identifier: 9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13 Certificate issuer: /CN=9A347241E9DA18B0BB748E5558F85DFA6AD14F13 Certificate serial: 0BDE6DC241D526860C4B07DE0E56F992F0D3CC0D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 12:25:56 +0000 Manifest this update: Fri 25 Sep 2026 12:20:56 +0000 Manifest next update: Sat 26 Sep 2026 13:23:56 +0000 Files and hashes: 1: 9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl (hash: 0JPazxusXuRyOJEkK5TtVtDWrW2dQVyirvUCyqwU71c=) 2: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: vdwdHoa0dxzBT4qxWDgRcyQiniSgsgBOI6Tm2dJ4lDY=) 3: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: PjTS4Hn+0nQcRzsQo6Ms0LRYKKTZlFXIqpYw+ixRnkk=) 4: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: wInMUXHOP8RJI5eoz/+Dc4x331OyQaS/P4AI/7E+Chw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 13:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:de:6d:c2:41:d5:26:86:0c:4b:07:de:0e:56:f9:92:f0:d3:cc:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A347241E9DA18B0BB748E5558F85DFA6AD14F13 Validity Not Before: Sep 25 12:20:56 2026 GMT Not After : Sep 26 13:23:56 2026 GMT Subject: CN=03047778BB75AFB4727961190A136661C306F9A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0b:d6:6d:f1:95:19:17:c3:aa:91:44:ac:19: 74:57:4f:b5:37:a3:14:a6:f9:fc:23:a1:c4:b3:36: e5:00:de:c9:9e:12:51:56:7a:95:6e:0a:f5:90:b7: 96:ef:7e:5e:e2:50:77:9c:74:ab:95:0e:88:82:74: 2c:0f:78:12:3f:29:7b:5c:0f:0f:35:f0:72:01:b0: ae:ce:3e:e1:f1:1e:cc:df:bc:86:f3:fd:5c:14:04: 8d:b3:1c:bb:61:ed:d5:11:2e:00:92:55:9a:0e:a9: ba:4d:da:21:b6:87:e2:38:08:ae:61:c7:90:9c:f0: d5:2e:5d:48:5f:03:8d:9c:b1:85:63:36:cd:d7:16: be:6b:d5:8a:6f:e0:ed:73:6c:59:af:4a:aa:89:a0: e6:66:eb:ed:8b:fa:69:0a:ca:b0:5e:c6:59:37:77: 2e:20:5e:e3:e3:12:f3:e5:b0:ec:d9:1a:40:e1:4c: 2e:39:e4:59:0b:1f:e9:8a:4d:b5:ef:75:f7:d0:7a: f4:d4:3a:2c:48:69:5e:c3:6f:52:93:0b:76:ae:72: b7:7e:a9:56:b0:bb:0a:d0:6e:50:2b:7c:e1:23:cd: 0f:43:71:c3:c2:f6:e4:c5:b0:e3:e1:11:04:f4:8c: 3b:d4:7b:fa:b2:2b:6a:56:84:dc:e3:f1:26:79:68: 29:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:04:77:78:BB:75:AF:B4:72:79:61:19:0A:13:66:61:C3:06:F9:A3 X509v3 Authority Key Identifier: keyid:9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:40:2c:d9:7a:e3:ca:e9:f7:f2:e1:a3:d3:b2:e9:90:7e:22: 44:12:4c:e0:29:12:1f:c3:05:f4:7f:23:f1:98:33:84:27:dd: e8:64:7f:7e:2b:55:bf:d7:d5:89:cc:41:e1:d6:67:c4:d0:72: 16:d4:40:4a:96:1d:e6:6d:e2:bd:31:d3:2c:e9:20:ee:9c:bf: d5:d1:79:48:2d:67:6c:94:33:3c:c1:00:bb:dd:fd:1f:43:14: 2d:e8:28:9c:7f:53:51:ee:ac:ad:a2:e0:88:c1:24:ac:e8:1d: 6c:ee:ad:09:4f:db:de:34:8f:3a:18:de:1c:4b:b6:a9:c5:e1: 49:2d:18:c5:d3:3a:90:1e:b9:b0:49:49:23:f2:9c:79:78:1a: e0:4a:18:ab:42:53:85:bd:f3:c8:4c:99:6f:2f:5c:d1:7e:61: a4:f1:6d:63:a9:85:8f:43:e4:f7:54:d0:20:6f:15:7b:b2:ae: 75:31:7c:f0:8f:bb:e9:2b:1b:e2:fa:ec:f5:18:f9:77:b5:c6: 16:a9:9c:05:18:70:39:25:16:3d:a7:f7:ad:ff:4a:38:4d:58: 70:8f:b7:47:7c:62:cf:f8:cf:05:74:41:bf:b2:fb:ad:40:c6: 3c:25:78:2a:0f:a2:d4:05:bf:d8:90:17:d8:91:d3:f5:76:d3: 9a:f6:9e:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC95twkHVJoYMSwfeDlb5kvDTzA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEzNDcyNDFFOURBMThCMEJCNzQ4RTU1NThGODVERkE2 QUQxNEYxMzAeFw0yNjA5MjUxMjIwNTZaFw0yNjA5MjYxMzIzNTZaMDMxMTAvBgNV BAMTKDAzMDQ3Nzc4QkI3NUFGQjQ3Mjc5NjExOTBBMTM2NjYxQzMwNkY5QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaC9Zt8ZUZF8OqkUSsGXRXT7U3 oxSm+fwjocSzNuUA3smeElFWepVuCvWQt5bvfl7iUHecdKuVDoiCdCwPeBI/KXtc Dw818HIBsK7OPuHxHszfvIbz/VwUBI2zHLth7dURLgCSVZoOqbpN2iG2h+I4CK5h x5Cc8NUuXUhfA42csYVjNs3XFr5r1Ypv4O1zbFmvSqqJoOZm6+2L+mkKyrBexlk3 dy4gXuPjEvPlsOzZGkDhTC455FkLH+mKTbXvdffQevTUOixIaV7Db1KTC3aucrd+ qVawuwrQblArfOEjzQ9DccPC9uTFsOPhEQT0jDvUe/qyK2pWhNzj8SZ5aCl3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAwR3eLt1r7RyeWEZChNmYcMG+aMwHwYDVR0j BBgwFoAUmjRyQenaGLC7dI5VWPhd+mrRTxMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NkZDU3NzQtMzBkZC00YTAwLWIxYTktOWIxMjgyNjkzMGMyLzAvOUEzNDcyNDFF OURBMThCMEJCNzQ4RTU1NThGODVERkE2QUQxNEYxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTM0NzI0MUU5REExOEIwQkI3NDhFNTU1OEY4NURGQTZBRDE0 RjEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NkZDU3NzQtMzBkZC00YTAwLWIx YTktOWIxMjgyNjkzMGMyLzAvOUEzNDcyNDFFOURBMThCMEJCNzQ4RTU1NThGODVE RkE2QUQxNEYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlALNl648rp9/Lho9Oy6ZB+IkQSTOApEh/D BfR/I/GYM4Qn3ehkf34rVb/X1YnMQeHWZ8TQchbUQEqWHeZt4r0x0yzpIO6cv9XR eUgtZ2yUMzzBALvd/R9DFC3oKJx/U1HurK2i4IjBJKzoHWzurQlP2940jzoY3hxL tqnF4UktGMXTOpAeubBJSSPynHl4GuBKGKtCU4W988hMmW8vXNF+YaTxbWOphY9D 5PdU0CBvFXuyrnUxfPCPu+krG+L67PUY+Xe1xhapnAUYcDklFj2n963/SjhNWHCP t0d8Ys/4zwV0Qb+y+61AxjwleCoPotQFv9iQF9iR0/V205r2nvM= -----END CERTIFICATE-----Generated at Fri Sep 25 22:07:00 2026 by rpki-client