$ rpki-client -vvvf rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft File: 9290697B92D08AFAAFB01253090BE0FE28871EA9.mft (raw, json) Hash identifier: Yqxpwa1vBK52OtCN7r+kDz9cSvRumqV+IFMbM3BJKcw= Subject key identifier: 65:F3:9E:C6:B0:95:AD:92:BC:B6:2F:C6:ED:FD:40:DC:F1:DA:9D:ED Authority key identifier: 92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9 Certificate issuer: /CN=9290697B92D08AFAAFB01253090BE0FE28871EA9 Certificate serial: 6BF5C6CCECF4DEBDE706A41650434A0A8A452FE3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 18:54:02 +0000 Manifest this update: Thu 24 Sep 2026 18:49:02 +0000 Manifest next update: Fri 25 Sep 2026 19:13:02 +0000 Files and hashes: 1: 323030313a6466373a376438303a3a2f34382d3438203d3e20313431393039.roa (hash: tw5oikVlx6lbDw0PXuWWK4JNZ7QDnCFmUnX8Ug8gws8=) 2: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: hRuNQymA0Kqk7Awfu8/hFwiPFpevo38okveHDPwRfwI=) 3: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: ld7ZAKTrz/u5LDPP3+3DpOULg7oKh+lQm5wahDEcTNc=) 4: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: WJxpeyz7OfQNEVK9NO1sVdlmaQoTrq8jALq72l9BXpw=) 5: 9290697B92D08AFAAFB01253090BE0FE28871EA9.crl (hash: hq+MaR+iaD50yMeE98hFjLOGBnpu/8uqofRDUs50LdY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.crl rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 19:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f5:c6:cc:ec:f4:de:bd:e7:06:a4:16:50:43:4a:0a:8a:45:2f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9290697B92D08AFAAFB01253090BE0FE28871EA9 Validity Not Before: Sep 24 18:49:02 2026 GMT Not After : Sep 25 19:13:02 2026 GMT Subject: CN=65F39EC6B095AD92BCB62FC6EDFD40DCF1DA9DED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:33:49:6c:1f:a6:28:be:ac:8e:25:65:c5:01: 2c:7e:ac:77:ce:5f:e4:b9:90:a8:21:9f:cd:b2:ec: 8e:17:68:96:15:0b:54:89:8a:6f:d1:a5:7a:99:4c: 3f:f0:95:7d:1f:05:10:f5:b0:5a:ca:2b:bb:ab:a1: 48:ef:11:09:fa:b4:20:51:11:a9:b5:bd:34:83:89: e3:64:57:ce:33:69:a5:38:26:10:80:ca:3a:b0:0d: 4c:6c:4f:11:71:9e:64:48:c4:88:e1:ab:47:67:2c: 32:18:d2:5c:ee:8a:b2:8a:99:60:82:7f:7c:f4:5f: 79:5f:11:12:e8:6d:91:b4:37:cc:86:0d:57:0e:61: 8b:8c:5f:c8:73:5f:a8:2b:2c:46:2c:98:b9:09:d3: ce:92:2d:bd:bb:e9:07:31:3d:3f:96:cf:15:9d:38: 52:a1:fa:56:bb:4e:b2:aa:fd:a6:ff:40:e9:99:bd: 34:8c:13:94:56:c3:78:d2:50:30:b9:7c:b6:ca:ea: 11:56:40:42:68:09:d7:de:14:34:7a:ef:2b:c0:12: 55:91:ec:a6:a6:76:17:cb:bc:42:dd:3a:2d:d5:0c: 05:9f:46:21:66:2b:72:42:c4:9e:c5:43:4b:88:d6: 49:49:64:37:d0:c6:1b:4b:0b:77:ea:e7:b3:ba:7f: c5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F3:9E:C6:B0:95:AD:92:BC:B6:2F:C6:ED:FD:40:DC:F1:DA:9D:ED X509v3 Authority Key Identifier: keyid:92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:61:5e:40:7b:d8:53:8a:65:fb:3c:ed:d7:1a:4d:69:57:b0: 3f:2b:4e:ea:d3:e6:9b:54:b1:3f:b3:4f:ef:ab:a6:fe:59:c9: 35:b1:36:dc:9a:02:49:b8:a3:d8:93:ed:40:2f:62:13:65:3b: 09:43:79:5a:c8:ca:6e:a9:39:46:e3:78:d8:16:e3:36:6b:ce: 2f:80:33:56:eb:fc:bc:d1:95:ba:4e:05:e3:04:4e:07:02:5d: df:a1:d4:3b:d7:91:a6:07:82:48:9d:fd:ba:b4:71:73:ef:c2: 49:53:16:3b:4c:64:ae:fa:93:d6:57:04:30:0d:22:64:54:9b: 43:20:b5:ab:04:a2:9c:a3:3f:ee:77:40:dc:5c:12:8c:94:4b: 1a:9c:4e:ad:95:b1:db:c7:a1:18:f6:2f:cd:fd:71:da:8b:7a: 3f:17:a1:89:18:0b:09:b9:ec:d4:36:32:19:48:30:b2:6d:69: 0b:6e:2d:24:8c:b7:ee:92:7c:29:31:32:84:58:7b:d5:00:6e: 81:a7:02:5f:59:95:22:ec:fc:09:42:a4:07:7b:6c:a5:57:8d: 5b:28:d7:4d:eb:37:0d:69:67:e1:ed:0f:cb:e5:cc:a4:28:db: 9a:65:42:b7:43:1d:a8:73:8b:01:e6:3b:5c:f6:02:7b:aa:43: e3:43:f7:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa/XGzOz03r3nBqQWUENKCopFL+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI5MDY5N0I5MkQwOEFGQUFGQjAxMjUzMDkwQkUwRkUy ODg3MUVBOTAeFw0yNjA5MjQxODQ5MDJaFw0yNjA5MjUxOTEzMDJaMDMxMTAvBgNV BAMTKDY1RjM5RUM2QjA5NUFEOTJCQ0I2MkZDNkVERkQ0MERDRjFEQTlERUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVM0lsH6YovqyOJWXFASx+rHfO X+S5kKghn82y7I4XaJYVC1SJim/RpXqZTD/wlX0fBRD1sFrKK7uroUjvEQn6tCBR Eam1vTSDieNkV84zaaU4JhCAyjqwDUxsTxFxnmRIxIjhq0dnLDIY0lzuirKKmWCC f3z0X3lfERLobZG0N8yGDVcOYYuMX8hzX6grLEYsmLkJ086SLb276QcxPT+WzxWd OFKh+la7TrKq/ab/QOmZvTSME5RWw3jSUDC5fLbK6hFWQEJoCdfeFDR67yvAElWR 7KamdhfLvELdOi3VDAWfRiFmK3JCxJ7FQ0uI1klJZDfQxhtLC3fq57O6f8UxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZfOexrCVrZK8ti/G7f1A3PHane0wHwYDVR0j BBgwFoAUkpBpe5LQivqvsBJTCQvg/iiHHqkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAxYzRkNjEtZGNlZi00YTIwLWJkNGMtYTI4MmEzN2FhNjllLzAvOTI5MDY5N0I5 MkQwOEFGQUFGQjAxMjUzMDkwQkUwRkUyODg3MUVBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjkwNjk3QjkyRDA4QUZBQUZCMDEyNTMwOTBCRTBGRTI4ODcx RUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAxYzRkNjEtZGNlZi00YTIwLWJk NGMtYTI4MmEzN2FhNjllLzAvOTI5MDY5N0I5MkQwOEFGQUFGQjAxMjUzMDkwQkUw RkUyODg3MUVBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9hXkB72FOKZfs87dcaTWlXsD8rTurT5ptU sT+zT++rpv5ZyTWxNtyaAkm4o9iT7UAvYhNlOwlDeVrIym6pOUbjeNgW4zZrzi+A M1br/LzRlbpOBeMETgcCXd+h1DvXkaYHgkid/bq0cXPvwklTFjtMZK76k9ZXBDAN ImRUm0MgtasEopyjP+53QNxcEoyUSxqcTq2VsdvHoRj2L839cdqLej8XoYkYCwm5 7NQ2MhlIMLJtaQtuLSSMt+6SfCkxMoRYe9UAboGnAl9ZlSLs/AlCpAd7bKVXjVso 103rNw1pZ+HtD8vlzKQo25plQrdDHahziwHmO1z2AnuqQ+ND9/4= -----END CERTIFICATE-----Generated at Fri Sep 25 08:47:00 2026 by rpki-client