$ rpki-client -vvvf rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft File: 9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft (raw, json) Hash identifier: TgeIoTUP5EmwMQNXb/v2aMA9wDg/UqTtRKJeZ+g313M= Subject key identifier: 33:85:6C:1C:FB:C7:12:9D:00:42:0F:6E:C0:D5:EE:5E:FE:FE:3C:4D Authority key identifier: 9D:8E:FC:0D:64:AA:98:41:BE:1E:38:43:21:BB:2C:12:15:3F:F1:D9 Certificate issuer: /CN=9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9 Certificate serial: 5414F710A77A226E1C330DE9EF4FCF7C541E2FC5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 23:04:05 +0000 Manifest this update: Fri 25 Sep 2026 22:59:05 +0000 Manifest next update: Sun 27 Sep 2026 00:27:05 +0000 Files and hashes: 1: 9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl (hash: Q5vB2JbK3aaenENs+gZKgq9S2YeNxDWP7QHNc/zkysk=) 2: 3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa (hash: 1YCliMmBjyp95uqeBYgoOHcVWy+xU/Vfr+PcnyYk678=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:14:f7:10:a7:7a:22:6e:1c:33:0d:e9:ef:4f:cf:7c:54:1e:2f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9 Validity Not Before: Sep 25 22:59:05 2026 GMT Not After : Sep 27 00:27:05 2026 GMT Subject: CN=33856C1CFBC7129D00420F6EC0D5EE5EFEFE3C4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:0f:d9:8c:d7:97:03:5e:75:c0:b2:74:ef: d1:98:5c:c0:91:e2:82:70:89:5b:6a:65:00:b4:90: 3c:86:b5:ad:2d:ef:ad:ff:f3:57:d3:83:f5:a0:26: 33:16:12:ca:cb:6c:3b:9a:81:46:f9:fb:21:ee:8c: 63:a4:d4:11:86:27:26:ac:43:a4:a9:19:ab:b6:0a: 97:20:31:38:02:6e:6e:95:53:c7:e1:80:87:d8:69: b3:fb:e3:1f:f1:b0:d1:50:8f:e2:98:eb:ec:e0:03: 86:64:a6:00:7e:4d:8e:d7:82:20:0a:3a:c2:ab:fa: c6:b1:57:f3:38:19:ee:97:89:47:70:52:10:fe:cb: eb:21:fa:5b:2f:a2:f1:e4:14:fc:ef:69:9f:46:81: ae:80:9e:39:e5:63:47:22:f9:5a:30:5f:5c:08:62: e1:db:12:75:79:2f:57:9a:d5:35:d4:1f:dc:9a:13: d4:ee:e5:0f:30:a6:0a:7f:44:37:95:b3:18:fd:35: ec:b4:52:75:f4:33:e9:ee:72:f0:0b:c3:48:5c:68: ef:26:9e:d1:f7:89:fd:c5:bc:88:f0:97:af:4f:8b: b0:3a:f4:ae:97:5e:db:38:5a:bb:44:83:b9:71:45: 69:1e:cc:a8:22:60:93:40:fe:0e:09:5d:20:9d:c1: 0a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:85:6C:1C:FB:C7:12:9D:00:42:0F:6E:C0:D5:EE:5E:FE:FE:3C:4D X509v3 Authority Key Identifier: keyid:9D:8E:FC:0D:64:AA:98:41:BE:1E:38:43:21:BB:2C:12:15:3F:F1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:b9:91:04:38:d7:20:a1:8e:2e:3d:cb:f2:d1:1a:c7:8d:91: e5:a6:b7:8d:13:4a:48:ce:2e:70:83:eb:15:6a:ee:2f:69:90: ff:e6:a3:70:f7:61:ec:53:41:d5:e5:34:d0:a4:9a:de:81:d6: 64:d5:33:09:d7:a1:c5:2f:ea:ab:40:9c:0c:82:d1:6e:0f:38: ea:f5:18:39:68:63:70:1a:3a:36:94:bc:21:4c:3e:00:c6:7f: 88:ba:e3:a2:6e:30:76:bb:a8:f9:5e:2b:85:3c:75:21:11:46: e0:85:56:49:db:8b:a1:81:89:96:72:43:c0:db:2d:f7:1c:b3: 52:20:8f:94:8d:73:f5:dc:2e:0e:c7:69:59:cc:51:3f:ab:f2: ea:57:f0:33:2d:e1:e3:f4:3a:c0:a0:e2:80:de:50:ea:7d:fe: 68:63:7e:73:e0:b6:b2:b3:91:f7:8a:0e:8f:45:3e:d4:22:3a: 1d:c4:6f:08:dd:67:07:36:14:84:82:69:11:b0:d7:2f:cc:8c: f6:36:1b:b6:02:12:3e:30:04:da:89:3a:f4:5e:7f:2f:61:45: 1b:54:bc:6d:f2:5f:d7:82:6b:66:e8:44:66:69:60:03:8e:55: 16:ce:68:2c:0f:83:9f:5e:bc:fe:7c:ad:81:6f:de:ce:36:72: e1:74:90:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVBT3EKd6Im4cMw3p70/PfFQeL8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ4RUZDMEQ2NEFBOTg0MUJFMUUzODQzMjFCQjJDMTIx NTNGRjFEOTAeFw0yNjA5MjUyMjU5MDVaFw0yNjA5MjcwMDI3MDVaMDMxMTAvBgNV BAMTKDMzODU2QzFDRkJDNzEyOUQwMDQyMEY2RUMwRDVFRTVFRkVGRTNDNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9EQ/ZjNeXA151wLJ079GYXMCR 4oJwiVtqZQC0kDyGta0t763/81fTg/WgJjMWEsrLbDuagUb5+yHujGOk1BGGJyas Q6SpGau2CpcgMTgCbm6VU8fhgIfYabP74x/xsNFQj+KY6+zgA4ZkpgB+TY7XgiAK OsKr+saxV/M4Ge6XiUdwUhD+y+sh+lsvovHkFPzvaZ9Gga6AnjnlY0ci+VowX1wI YuHbEnV5L1ea1TXUH9yaE9Tu5Q8wpgp/RDeVsxj9Ney0UnX0M+nucvALw0hcaO8m ntH3if3FvIjwl69Pi7A69K6XXts4WrtEg7lxRWkezKgiYJNA/g4JXSCdwQpJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM4VsHPvHEp0AQg9uwNXuXv7+PE0wHwYDVR0j BBgwFoAUnY78DWSqmEG+HjhDIbssEhU/8dkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDFkNTFkNDEtYjZjYy00MjBhLWI1YTgtNjdjOGJkNmIwMmFmLzAvOUQ4RUZDMEQ2 NEFBOTg0MUJFMUUzODQzMjFCQjJDMTIxNTNGRjFEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDhFRkMwRDY0QUE5ODQxQkUxRTM4NDMyMUJCMkMxMjE1M0ZG MUQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDFkNTFkNDEtYjZjYy00MjBhLWI1 YTgtNjdjOGJkNmIwMmFmLzAvOUQ4RUZDMEQ2NEFBOTg0MUJFMUUzODQzMjFCQjJD MTIxNTNGRjFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKa5kQQ41yChji49y/LRGseNkeWmt40TSkjO LnCD6xVq7i9pkP/mo3D3YexTQdXlNNCkmt6B1mTVMwnXocUv6qtAnAyC0W4POOr1 GDloY3AaOjaUvCFMPgDGf4i646JuMHa7qPleK4U8dSERRuCFVknbi6GBiZZyQ8Db Lfccs1Igj5SNc/XcLg7HaVnMUT+r8upX8DMt4eP0OsCg4oDeUOp9/mhjfnPgtrKz kfeKDo9FPtQiOh3EbwjdZwc2FISCaRGw1y/MjPY2G7YCEj4wBNqJOvRefy9hRRtU vG3yX9eCa2boRGZpYAOOVRbOaCwPg59evP58rYFv3s42cuF0kLQ= -----END CERTIFICATE-----Generated at Sat Sep 26 07:58:44 2026 by rpki-client