$ rpki-client -vvvf rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft File: 9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft (raw, json) Hash identifier: /zeHJO1LqCCCZiwamXKKku3I3Du2J9wR+SNULEt2Q2k= Subject key identifier: 90:09:D1:8A:35:EF:02:E3:46:F3:A7:D2:A1:CB:AB:E5:26:32:D5:C8 Authority key identifier: 9B:61:7E:3E:89:75:C5:E8:37:FD:E8:E7:E3:A6:F7:F2:B0:7D:F2:FA Certificate issuer: /CN=9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA Certificate serial: 562A2CDDD99B203A3034EFC226B730F84F643A38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 11:14:27 +0000 Manifest this update: Fri 25 Sep 2026 11:09:27 +0000 Manifest next update: Sat 26 Sep 2026 14:00:27 +0000 Files and hashes: 1: 9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl (hash: hRCkR9jVaRpZiMpunOV0OL36cJIDmZArs0gG29XOq5s=) 2: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (hash: Y6VzFaG2FbyNdRwLMR4BvXhR1/TPWS0MIZ86oCceOfk=) 3: 3130332e34332e32352e302f32342d3234203d3e20313339343139.roa (hash: jbUXyMJGAUe8ArHS1H74yui1bmkFdiNku010i13gDLM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 14:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:2a:2c:dd:d9:9b:20:3a:30:34:ef:c2:26:b7:30:f8:4f:64:3a:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA Validity Not Before: Sep 25 11:09:27 2026 GMT Not After : Sep 26 14:00:27 2026 GMT Subject: CN=9009D18A35EF02E346F3A7D2A1CBABE52632D5C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:0c:08:0f:86:9e:91:d7:da:c4:b3:c2:6b: 87:b0:dc:6f:4a:32:61:dc:98:00:d6:48:44:ca:88: 68:72:93:b0:1c:a4:92:77:de:36:52:13:e2:43:20: 58:b2:56:ac:ff:f5:1d:a1:d9:07:8b:91:4c:e2:26: d5:9d:e1:f6:af:d8:b7:bb:d2:74:90:0a:53:56:c4: aa:5c:f2:a3:b1:cd:3b:01:f9:65:58:23:50:34:19: 56:11:66:c0:27:01:11:cd:ce:bd:fc:22:53:d0:47: a0:6e:29:62:b9:12:c8:42:13:a9:7a:d5:fe:29:67: 18:74:0e:5f:65:7c:5a:d2:4f:05:2b:c1:c8:2d:fe: 42:30:e0:42:7c:e3:60:c8:f1:bb:ba:70:5a:5e:ff: 1f:e5:be:c4:ad:f5:a2:83:27:8e:38:f2:8f:15:58: 3a:a2:be:95:3d:83:14:e1:cf:45:2b:c6:59:ed:e4: 62:1f:5e:4f:36:f6:37:c2:2e:02:d8:1b:17:18:9d: fb:20:e3:f8:30:1b:94:c7:23:cf:48:c9:88:98:e5: c7:59:4c:3c:eb:68:6f:aa:6b:03:55:37:51:9f:79: 51:40:28:e4:6c:62:cf:db:87:16:1e:36:e4:d0:e0: 49:83:37:e1:60:a7:fd:65:bf:b7:3d:b5:41:cb:c6: 10:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:09:D1:8A:35:EF:02:E3:46:F3:A7:D2:A1:CB:AB:E5:26:32:D5:C8 X509v3 Authority Key Identifier: keyid:9B:61:7E:3E:89:75:C5:E8:37:FD:E8:E7:E3:A6:F7:F2:B0:7D:F2:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:bd:28:60:a9:7f:0e:64:b8:ad:0f:0b:a5:64:b4:90:69:76: 4a:55:d9:01:0f:cd:29:c2:e9:a4:e1:a2:62:23:90:2e:ca:74: 33:d4:11:04:5d:95:b2:b9:89:0c:60:44:34:13:3b:f1:73:d8: fc:95:ca:7f:cc:bb:69:13:e6:82:f2:e8:3a:ec:a3:b7:9c:da: 9e:df:f9:e8:ab:ba:5f:9c:8f:c2:bd:53:74:ea:d4:07:98:c8: d1:d7:4d:76:07:ea:e9:57:9d:63:ee:e4:c9:22:4f:d6:a1:1d: 6f:85:9e:44:5e:f2:2b:b6:04:68:58:20:8b:de:48:81:48:30: ac:04:06:79:4b:6c:9c:cd:a4:1e:33:0a:61:34:fe:42:4e:2f: fa:64:c4:58:5c:6b:e8:f8:bb:c1:5a:2c:10:e1:f1:96:38:2b: b8:6e:8d:f1:d5:87:a2:de:a8:36:f4:ba:0e:49:06:b0:8b:36: 49:5f:0b:86:16:4c:29:bb:8e:08:0b:4c:7c:1c:85:b5:fe:2e: 5d:9c:4e:35:47:5c:5a:fe:21:52:1b:d9:13:40:c5:98:d6:96: e0:b4:dd:95:0f:c8:2b:fc:b4:0d:ba:06:88:62:97:31:09:a7: 25:51:24:4e:f1:e7:cc:4c:08:21:d2:4e:a7:5d:7a:59:fc:54: 3b:97:c1:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVios3dmbIDowNO/CJrcw+E9kOjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI2MTdFM0U4OTc1QzVFODM3RkRFOEU3RTNBNkY3RjJC MDdERjJGQTAeFw0yNjA5MjUxMTA5MjdaFw0yNjA5MjYxNDAwMjdaMDMxMTAvBgNV BAMTKDkwMDlEMThBMzVFRjAyRTM0NkYzQTdEMkExQ0JBQkU1MjYzMkQ1QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5wwID4aekdfaxLPCa4ew3G9K MmHcmADWSETKiGhyk7AcpJJ33jZSE+JDIFiyVqz/9R2h2QeLkUziJtWd4fav2Le7 0nSQClNWxKpc8qOxzTsB+WVYI1A0GVYRZsAnARHNzr38IlPQR6BuKWK5EshCE6l6 1f4pZxh0Dl9lfFrSTwUrwcgt/kIw4EJ842DI8bu6cFpe/x/lvsSt9aKDJ4448o8V WDqivpU9gxThz0Urxlnt5GIfXk829jfCLgLYGxcYnfsg4/gwG5THI89IyYiY5cdZ TDzraG+qawNVN1GfeVFAKORsYs/bhxYeNuTQ4EmDN+Fgp/1lv7c9tUHLxhC7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkAnRijXvAuNG86fSocur5SYy1cgwHwYDVR0j BBgwFoAUm2F+Pol1xeg3/ejn46b38rB98vowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDIwODNkNDQtNzgzNS00NDNkLTg1M2EtMGE3OWNmMDBlOTUwLzAvOUI2MTdFM0U4 OTc1QzVFODM3RkRFOEU3RTNBNkY3RjJCMDdERjJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QjYxN0UzRTg5NzVDNUU4MzdGREU4RTdFM0E2RjdGMkIwN0RG MkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDIwODNkNDQtNzgzNS00NDNkLTg1 M2EtMGE3OWNmMDBlOTUwLzAvOUI2MTdFM0U4OTc1QzVFODM3RkRFOEU3RTNBNkY3 RjJCMDdERjJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE29KGCpfw5kuK0PC6VktJBpdkpV2QEPzSnC 6aThomIjkC7KdDPUEQRdlbK5iQxgRDQTO/Fz2PyVyn/Mu2kT5oLy6Drso7ec2p7f +eirul+cj8K9U3Tq1AeYyNHXTXYH6ulXnWPu5MkiT9ahHW+FnkRe8iu2BGhYIIve SIFIMKwEBnlLbJzNpB4zCmE0/kJOL/pkxFhca+j4u8FaLBDh8ZY4K7hujfHVh6Le qDb0ug5JBrCLNklfC4YWTCm7jggLTHwchbX+Ll2cTjVHXFr+IVIb2RNAxZjWluC0 3ZUPyCv8tA26BohilzEJpyVRJE7x58xMCCHSTqddeln8VDuXweY= -----END CERTIFICATE-----Generated at Sat Sep 26 06:07:05 2026 by rpki-client