$ rpki-client -vvvf rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft File: 9C7034B698C7FF4F82CC082FF9330FF137728D54.mft (raw, json) Hash identifier: MWwuCoHG3bFparYD/6gMUbbfK6faA5G+EbVpb8g5Dc4= Subject key identifier: D0:6C:F9:4C:AF:E4:BB:FD:99:D9:B3:B5:08:90:A1:10:A3:14:6E:5C Authority key identifier: 9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54 Certificate issuer: /CN=9C7034B698C7FF4F82CC082FF9330FF137728D54 Certificate serial: 1EE086AEE23AF1133457E606F6A4E8488C04EE7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 05:47:32 +0000 Manifest this update: Fri 25 Sep 2026 05:42:32 +0000 Manifest next update: Sat 26 Sep 2026 08:30:32 +0000 Files and hashes: 1: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: TOy78GGmZmDA6OtrgiUd51MTS8SFXQdRl3WQeCtShh4=) 2: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: A0PveJD1fWZi8ZLG9jSQDXLx0OXP4OJbe2qchugQ+9k=) 3: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: uv4Ad3tws8/RhWdgc4kD3cmhisuMAvoQ5Utlm3Sezl0=) 4: 9C7034B698C7FF4F82CC082FF9330FF137728D54.crl (hash: I71Hq1lx4I78rvtcyhrgRzb3tu4KiZE/tp6Yg6wrsPc=) 5: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: bxedlCP85y9hLJaoDhEB2yAE5TUTBHMZLlN+XLPSDLU=) 6: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: xnLexvfVVhCVbKeAWwrGqbTG74y7g6OtFXMau20Rt9I=) 7: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: QME/pBUvHikqT9rtnZPTg9o0f1I9fV6K/fmu0Ood5pA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.crl rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 08:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e0:86:ae:e2:3a:f1:13:34:57:e6:06:f6:a4:e8:48:8c:04:ee:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C7034B698C7FF4F82CC082FF9330FF137728D54 Validity Not Before: Sep 25 05:42:32 2026 GMT Not After : Sep 26 08:30:32 2026 GMT Subject: CN=D06CF94CAFE4BBFD99D9B3B50890A110A3146E5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d4:63:c7:7d:c2:79:65:36:86:fe:44:d0:5e: 47:41:0b:7d:0b:23:5c:33:c7:1e:1f:75:c2:4d:0c: 3e:b6:fe:a5:29:ed:05:7d:96:b9:dd:c6:13:bd:c7: 6c:09:18:53:e0:71:ab:af:98:4b:63:25:68:03:d0: 8b:bf:7d:de:d7:1c:ce:17:ad:48:78:c8:03:cc:a5: 21:d4:39:05:7d:82:13:62:d6:49:3e:61:5a:d7:9d: 95:0e:9a:d6:40:2e:38:9b:70:2a:2a:8e:00:38:33: c4:fc:4f:e8:9b:8f:7e:e4:f4:13:47:5f:2a:24:66: 65:36:93:d8:bf:6e:78:7d:69:b7:0c:66:34:9e:97: 4d:5c:d1:e8:00:d0:6f:86:00:00:8f:0f:a1:3d:da: 01:63:3a:48:c3:6c:52:65:28:d0:b9:76:63:8f:b7: 84:c0:5b:33:20:84:53:b5:7e:f2:91:3c:62:be:e0: 54:74:94:2e:b2:c8:3f:92:06:56:48:35:8b:3f:37: 57:c4:9a:e0:9b:f0:ea:82:65:64:90:76:56:cc:49: 8c:59:33:82:91:22:bb:9c:07:1c:8a:34:48:3d:fa: cb:f6:1f:76:1f:1d:49:ee:3c:9d:93:26:2d:c4:b3: 2c:ec:f5:97:05:99:4f:81:32:50:db:93:26:77:ab: 08:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6C:F9:4C:AF:E4:BB:FD:99:D9:B3:B5:08:90:A1:10:A3:14:6E:5C X509v3 Authority Key Identifier: keyid:9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:30:5e:3b:e5:35:3d:1f:cd:c1:0e:f1:86:28:43:67:ac:86: 1f:5a:81:9e:d6:68:16:13:69:80:10:d0:63:9e:ea:b0:4a:56: 17:3b:77:8c:34:4f:a4:21:f4:bb:b9:0d:f9:70:68:c1:b7:f7: 87:dc:9d:56:bb:c2:31:e1:88:b7:fd:79:ea:1c:39:0d:de:78: 30:fc:44:83:8e:9c:e9:8a:01:b2:36:e8:86:95:b4:6c:53:f4: 62:f6:44:24:f7:83:3b:9c:1b:16:c6:10:18:56:3c:dd:b8:33: f5:42:65:cb:4a:8e:fa:16:c2:80:df:cc:70:bd:92:7b:06:10: 20:37:8b:4e:c9:b7:14:bb:c0:43:b5:e4:45:e7:d4:77:fc:50: 93:45:99:95:30:f4:bc:a9:c1:cc:e1:c1:80:72:6b:07:98:e1: 6d:c7:4a:dc:f9:22:c7:09:77:b4:d5:89:0a:77:b1:33:2c:74: 6c:f6:ac:7b:d9:19:61:a7:33:f0:01:4a:53:c0:b7:7f:7d:af: ab:cf:cd:d2:98:da:7b:c8:c8:d1:54:e6:27:58:27:ed:90:a7: 79:89:ae:72:b0:72:0c:06:4e:1e:bb:5b:65:ff:47:11:93:ec: 65:a8:c9:14:20:5d:22:40:ea:63:59:c2:a8:0e:b7:84:af:02: 47:27:3b:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHuCGruI68RM0V+YG9qToSIwE7nowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM3MDM0QjY5OEM3RkY0RjgyQ0MwODJGRjkzMzBGRjEz NzcyOEQ1NDAeFw0yNjA5MjUwNTQyMzJaFw0yNjA5MjYwODMwMzJaMDMxMTAvBgNV BAMTKEQwNkNGOTRDQUZFNEJCRkQ5OUQ5QjNCNTA4OTBBMTEwQTMxNDZFNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr1GPHfcJ5ZTaG/kTQXkdBC30L I1wzxx4fdcJNDD62/qUp7QV9lrndxhO9x2wJGFPgcauvmEtjJWgD0Iu/fd7XHM4X rUh4yAPMpSHUOQV9ghNi1kk+YVrXnZUOmtZALjibcCoqjgA4M8T8T+ibj37k9BNH XyokZmU2k9i/bnh9abcMZjSel01c0egA0G+GAACPD6E92gFjOkjDbFJlKNC5dmOP t4TAWzMghFO1fvKRPGK+4FR0lC6yyD+SBlZINYs/N1fEmuCb8OqCZWSQdlbMSYxZ M4KRIrucBxyKNEg9+sv2H3YfHUnuPJ2TJi3Esyzs9ZcFmU+BMlDbkyZ3qwiRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Gz5TK/ku/2Z2bO1CJChEKMUblwwHwYDVR0j BBgwFoAUnHA0tpjH/0+CzAgv+TMP8TdyjVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDllY2E1MGItNTcyMi00OTE4LTgzMTQtODU5ZDNjMWY1NWEyLzAvOUM3MDM0QjY5 OEM3RkY0RjgyQ0MwODJGRjkzMzBGRjEzNzcyOEQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85QzcwMzRCNjk4QzdGRjRGODJDQzA4MkZGOTMzMEZGMTM3NzI4 RDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDllY2E1MGItNTcyMi00OTE4LTgz MTQtODU5ZDNjMWY1NWEyLzAvOUM3MDM0QjY5OEM3RkY0RjgyQ0MwODJGRjkzMzBG RjEzNzcyOEQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0wXjvlNT0fzcEO8YYoQ2eshh9agZ7WaBYT aYAQ0GOe6rBKVhc7d4w0T6Qh9Lu5DflwaMG394fcnVa7wjHhiLf9eeocOQ3eeDD8 RIOOnOmKAbI26IaVtGxT9GL2RCT3gzucGxbGEBhWPN24M/VCZctKjvoWwoDfzHC9 knsGECA3i07JtxS7wEO15EXn1Hf8UJNFmZUw9LypwczhwYByaweY4W3HStz5IscJ d7TViQp3sTMsdGz2rHvZGWGnM/ABSlPAt399r6vPzdKY2nvIyNFU5idYJ+2Qp3mJ rnKwcgwGTh67W2X/RxGT7GWoyRQgXSJA6mNZwqgOt4SvAkcnO0c= -----END CERTIFICATE-----Generated at Fri Sep 25 17:47:34 2026 by rpki-client