$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft File: 9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft (raw, json) Hash identifier: am1t/AT3fMQhmUKf0PK8Imbo4LSRiqbWqvBPYnaEFXQ= Subject key identifier: C5:8F:A1:D2:4C:28:76:C6:FD:7C:61:12:9E:98:40:1A:9C:D5:B0:12 Authority key identifier: 9E:E0:13:29:B0:8F:B2:3B:3B:84:0A:A8:0A:D1:66:E4:27:A1:2E:C8 Certificate issuer: /CN=9EE01329B08FB23B3B840AA80AD166E427A12EC8 Certificate serial: 4225D58015FA88E9DED5E417C07310DC997418CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 19:19:50 +0000 Manifest this update: Wed 23 Sep 2026 19:14:50 +0000 Manifest next update: Thu 24 Sep 2026 21:04:50 +0000 Files and hashes: 1: 9EE01329B08FB23B3B840AA80AD166E427A12EC8.crl (hash: 6PitcaGpu9Zl9LDjN5G11Q5NvQnj049twUl0xk/Yf0E=) 2: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (hash: baidtJB1I5sZbU9lybxXsdsHbmGXConPY+qLEFZYE2g=) 3: 3130332e3136312e3131302e302f32342d3234203d3e20313431363135.roa (hash: uoMkZJAPDBUsE5XNKk03G6DUQfsrgq24ZoSComGkHz4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.crl rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:25:d5:80:15:fa:88:e9:de:d5:e4:17:c0:73:10:dc:99:74:18:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EE01329B08FB23B3B840AA80AD166E427A12EC8 Validity Not Before: Sep 23 19:14:50 2026 GMT Not After : Sep 24 21:04:50 2026 GMT Subject: CN=C58FA1D24C2876C6FD7C61129E98401A9CD5B012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:66:a4:3c:25:a6:ee:62:a8:1c:75:18:3d:37: 8b:4c:5f:c2:e0:6f:13:da:0d:15:2f:b0:b7:6b:ed: 70:37:32:2b:66:67:2a:3f:62:cc:74:4a:99:af:c9: fa:47:7c:ff:19:21:ae:04:93:59:27:c7:3a:81:62: ec:e8:d1:9b:09:08:fc:c7:ac:c1:d9:15:31:37:1f: c0:21:c1:fc:a9:1c:58:24:7a:d2:bd:01:be:e0:b9: bf:e7:27:49:11:a5:01:16:b9:89:51:9e:c2:9f:6c: d1:ce:f2:06:07:5d:6a:95:f7:fd:b0:7c:ef:86:84: ae:1c:28:13:9e:37:69:41:f4:78:30:cd:c1:0b:1c: 98:e3:a2:89:a8:b3:b7:53:1a:11:e8:0d:12:d8:48: 46:0d:32:1e:9f:41:09:79:c0:11:0a:de:1f:d9:be: 04:1d:d4:f1:77:17:17:ef:6a:cd:84:22:77:fa:aa: 8e:df:1c:e1:25:9a:0a:f5:30:64:e0:d4:0c:a3:f8: cc:d5:8a:c9:ec:90:ec:65:0b:52:e5:2a:b7:2f:a9: 0b:a1:08:99:0f:fd:d1:8d:c5:1e:84:88:41:66:c9: a9:9d:73:1f:31:2a:e2:e9:3d:5b:7a:14:f5:88:e6: 4d:8d:cb:ce:e4:16:5b:42:47:f2:2b:4b:48:c5:78: 00:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8F:A1:D2:4C:28:76:C6:FD:7C:61:12:9E:98:40:1A:9C:D5:B0:12 X509v3 Authority Key Identifier: keyid:9E:E0:13:29:B0:8F:B2:3B:3B:84:0A:A8:0A:D1:66:E4:27:A1:2E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:20:e2:98:66:d4:f1:ff:96:c6:52:86:2a:60:d1:42:fb:e9: 13:b3:2a:5e:7a:6a:3a:e0:8a:58:ca:a6:54:b7:e4:87:51:03: 8c:61:e2:aa:be:cb:93:62:20:0b:a9:9b:e3:7c:5a:2d:61:cb: 0b:61:12:f8:e8:30:4f:a5:8c:37:81:4d:9a:65:f0:7f:b8:46: b1:db:49:e0:27:7b:7f:9a:dc:37:2c:d2:ec:1d:78:49:e2:70: 1a:b8:55:61:21:a1:df:f9:94:5a:89:90:91:84:8a:f8:86:f2: ba:9f:66:8f:95:74:73:97:8a:17:71:ed:87:3a:87:e1:2a:f0: 82:1e:c3:72:02:f5:81:d7:ee:bd:ef:16:8e:20:bd:3d:b5:66: 64:b9:be:ed:9f:e2:b6:4f:9a:9c:4b:62:5c:08:7e:55:ca:a0: 39:c0:0f:ed:bc:f1:56:84:fa:4d:4d:3d:7a:cd:d9:00:55:c3: 0f:cb:96:d9:f1:21:96:8f:a5:a0:89:af:39:61:b7:23:ea:e0: 2a:9d:dc:c0:dc:07:58:be:2a:f3:58:2c:35:0f:6f:37:5e:43: f8:65:23:4f:a5:6b:b6:e9:1b:0f:30:80:32:c8:78:ff:b9:76: 61:e7:ad:9c:8d:a4:93:bc:76:14:bc:fb:ce:b3:f9:fb:4b:7b: 2e:09:73:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQiXVgBX6iOne1eQXwHMQ3Jl0GMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVFMDEzMjlCMDhGQjIzQjNCODQwQUE4MEFEMTY2RTQy N0ExMkVDODAeFw0yNjA5MjMxOTE0NTBaFw0yNjA5MjQyMTA0NTBaMDMxMTAvBgNV BAMTKEM1OEZBMUQyNEMyODc2QzZGRDdDNjExMjlFOTg0MDFBOUNENUIwMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoZqQ8JabuYqgcdRg9N4tMX8Lg bxPaDRUvsLdr7XA3MitmZyo/Ysx0SpmvyfpHfP8ZIa4Ek1knxzqBYuzo0ZsJCPzH rMHZFTE3H8AhwfypHFgketK9Ab7gub/nJ0kRpQEWuYlRnsKfbNHO8gYHXWqV9/2w fO+GhK4cKBOeN2lB9HgwzcELHJjjoomos7dTGhHoDRLYSEYNMh6fQQl5wBEK3h/Z vgQd1PF3Fxfvas2EInf6qo7fHOElmgr1MGTg1Ayj+MzVisnskOxlC1LlKrcvqQuh CJkP/dGNxR6EiEFmyamdcx8xKuLpPVt6FPWI5k2Ny87kFltCR/IrS0jFeAADAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxY+h0kwodsb9fGESnphAGpzVsBIwHwYDVR0j BBgwFoAUnuATKbCPsjs7hAqoCtFm5CehLsgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2Y0MDhlNDQtM2U5Yy00NWU1LWJjYTQtNWRmYmQ0YjI3MTMwLzAvOUVFMDEzMjlC MDhGQjIzQjNCODQwQUE4MEFEMTY2RTQyN0ExMkVDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RUUwMTMyOUIwOEZCMjNCM0I4NDBBQTgwQUQxNjZFNDI3QTEy RUM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2Y0MDhlNDQtM2U5Yy00NWU1LWJj YTQtNWRmYmQ0YjI3MTMwLzAvOUVFMDEzMjlCMDhGQjIzQjNCODQwQUE4MEFEMTY2 RTQyN0ExMkVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMg4phm1PH/lsZShipg0UL76ROzKl56ajrg iljKplS35IdRA4xh4qq+y5NiIAupm+N8Wi1hywthEvjoME+ljDeBTZpl8H+4RrHb SeAne3+a3Dcs0uwdeEnicBq4VWEhod/5lFqJkJGEiviG8rqfZo+VdHOXihdx7Yc6 h+Eq8IIew3IC9YHX7r3vFo4gvT21ZmS5vu2f4rZPmpxLYlwIflXKoDnAD+288VaE +k1NPXrN2QBVww/LltnxIZaPpaCJrzlhtyPq4Cqd3MDcB1i+KvNYLDUPbzdeQ/hl I0+la7bpGw8wgDLIeP+5dmHnrZyNpJO8dhS8+86z+ftLey4Jcxs= -----END CERTIFICATE-----Generated at Thu Sep 24 08:33:31 2026 by rpki-client