$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft File: 9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft (raw, json) Hash identifier: xKH6AdbyLi2C8P4NjD3JxWRfP485lJX0zKWPlyrcVC4= Subject key identifier: 39:FA:63:2D:9B:E2:C7:60:97:A8:9B:E0:9D:CC:3E:55:0D:CC:83:81 Authority key identifier: 9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF Certificate issuer: /CN=9B995ECA9CF77E66AB04370A6C3562ADCD7413EF Certificate serial: 5B9FE6003FD8319AD24BBD0554D9D3413165B6A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 08:36:22 +0000 Manifest this update: Thu 24 Sep 2026 08:31:22 +0000 Manifest next update: Fri 25 Sep 2026 10:17:22 +0000 Files and hashes: 1: 9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl (hash: iRf3ziwONLkBV0bSlHWoKill5sVL7BsaUr/U4SxJa3E=) 2: 3130332e3133302e38322e302f32332d3233203d3e20313530393636.roa (hash: oYvVYAWqY5/XajF618G7pKQtRtEqOMlHPhGTTZeide8=) 3: 3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa (hash: 0GXiVqHET4FIeA3plxHWjQU7xk7vNPKZIk6ziqpvvGY=) 4: 3130332e3133302e38332e302f32342d3234203d3e20313530393636.roa (hash: +yASWV2qPXNVH0dMs+ql82F9yTnpzpBrn8UO30QUNqI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9f:e6:00:3f:d8:31:9a:d2:4b:bd:05:54:d9:d3:41:31:65:b6:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B995ECA9CF77E66AB04370A6C3562ADCD7413EF Validity Not Before: Sep 24 08:31:22 2026 GMT Not After : Sep 25 10:17:22 2026 GMT Subject: CN=39FA632D9BE2C76097A89BE09DCC3E550DCC8381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:47:b7:84:31:94:fd:1f:57:9e:e9:b8:57:74: 24:a4:71:a6:97:2b:65:1f:9c:cc:0a:f4:1d:95:b5: 4b:94:91:39:64:c9:ed:11:4b:32:5e:7a:d7:13:66: 5f:99:44:72:bb:f0:c5:51:54:2f:52:73:86:e5:e7: 73:2f:da:18:52:e2:5a:ac:cf:cc:40:53:11:ac:22: 5c:4a:21:e5:67:1c:d9:0f:6a:10:f7:ca:6e:eb:a4: 58:e9:53:f0:f0:23:93:bc:94:80:6e:d8:bd:d9:95: 51:8b:bb:0a:26:d8:45:4c:93:4b:59:5e:70:70:c3: f0:db:de:8a:5b:46:ca:ec:6d:33:f0:33:8c:24:05: c4:10:22:3c:d4:50:e0:95:16:c0:51:2d:8f:0d:46: 45:84:51:db:55:5f:b3:ac:74:0e:b3:8e:28:b8:d6: 2a:2f:d8:b1:7c:dc:c7:1b:8f:2b:2f:f7:75:f3:0c: 4b:30:b4:d7:97:06:ee:a5:7f:9c:9e:55:f6:6e:71: 6a:a4:16:af:bc:47:8c:70:04:e9:f6:ea:1a:30:a3: 97:81:31:9d:8d:5b:2a:d0:53:12:17:2b:9f:5a:f1: c5:59:b9:69:89:26:c5:75:e1:a8:b9:d4:2b:fa:af: 3f:0d:01:9a:c6:2d:15:63:05:d1:04:7a:9d:3b:4f: 22:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FA:63:2D:9B:E2:C7:60:97:A8:9B:E0:9D:CC:3E:55:0D:CC:83:81 X509v3 Authority Key Identifier: keyid:9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ac:7b:95:a0:5a:60:2c:cf:cc:9a:d7:1b:72:63:32:2d:d7: b7:4c:1b:a4:49:be:13:50:71:6f:fb:57:c1:d5:9e:52:8c:83: 8e:96:15:10:0e:a1:bb:ef:d8:5d:97:3f:17:20:f6:bd:22:eb: 55:a2:1c:cd:e3:04:b4:6a:a6:f4:a1:a6:9f:4e:98:95:4c:62: 86:5c:bf:5b:0d:7c:46:06:52:6a:8e:8a:00:54:f9:48:99:b0: f8:8c:8e:50:fd:a3:90:a8:0a:7c:07:16:dc:92:2a:d2:2d:73: b5:06:06:58:37:b5:2d:b5:f7:fd:29:83:90:39:f5:a4:8d:70: fa:46:73:4a:25:a0:ca:b0:48:ab:da:6d:58:11:41:d7:08:b5: 8b:4d:66:9b:2d:ed:73:ba:96:46:67:8d:3b:bb:c3:96:e7:9e: e7:e8:16:98:92:74:e4:8f:4b:d8:95:aa:6d:78:cc:cc:e8:67: 5f:3f:c1:04:6c:3c:a9:f5:29:aa:44:4a:64:83:00:0b:fb:64: 72:d2:c1:ae:79:8e:42:f8:c2:f1:58:85:48:36:59:6d:cc:bf: d8:20:38:4f:f4:9f:3b:dc:df:1d:28:1f:ac:b2:9a:7a:97:ff: 13:0d:e9:58:12:10:fc:ff:65:96:cb:41:8c:72:bf:7c:69:33: 0c:2e:ed:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW5/mAD/YMZrSS70FVNnTQTFltqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI5OTVFQ0E5Q0Y3N0U2NkFCMDQzNzBBNkMzNTYyQURD RDc0MTNFRjAeFw0yNjA5MjQwODMxMjJaFw0yNjA5MjUxMDE3MjJaMDMxMTAvBgNV BAMTKDM5RkE2MzJEOUJFMkM3NjA5N0E4OUJFMDlEQ0MzRTU1MERDQzgzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdR7eEMZT9H1ee6bhXdCSkcaaX K2UfnMwK9B2VtUuUkTlkye0RSzJeetcTZl+ZRHK78MVRVC9Sc4bl53Mv2hhS4lqs z8xAUxGsIlxKIeVnHNkPahD3ym7rpFjpU/DwI5O8lIBu2L3ZlVGLuwom2EVMk0tZ XnBww/Db3opbRsrsbTPwM4wkBcQQIjzUUOCVFsBRLY8NRkWEUdtVX7OsdA6zjii4 1iov2LF83Mcbjysv93XzDEswtNeXBu6lf5yeVfZucWqkFq+8R4xwBOn26howo5eB MZ2NWyrQUxIXK59a8cVZuWmJJsV14ai51Cv6rz8NAZrGLRVjBdEEep07TyIHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOfpjLZvix2CXqJvgncw+VQ3Mg4EwHwYDVR0j BBgwFoAUm5leypz3fmarBDcKbDVirc10E+8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE4NzA2NGItNWYyNy00MjcwLTkwZTQtOTlmNDNhZTg0ZGI3LzAvOUI5OTVFQ0E5 Q0Y3N0U2NkFCMDQzNzBBNkMzNTYyQURDRDc0MTNFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85Qjk5NUVDQTlDRjc3RTY2QUIwNDM3MEE2QzM1NjJBRENENzQx M0VGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE4NzA2NGItNWYyNy00MjcwLTkw ZTQtOTlmNDNhZTg0ZGI3LzAvOUI5OTVFQ0E5Q0Y3N0U2NkFCMDQzNzBBNkMzNTYy QURDRDc0MTNFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKse5WgWmAsz8ya1xtyYzIt17dMG6RJvhNQ cW/7V8HVnlKMg46WFRAOobvv2F2XPxcg9r0i61WiHM3jBLRqpvShpp9OmJVMYoZc v1sNfEYGUmqOigBU+UiZsPiMjlD9o5CoCnwHFtySKtItc7UGBlg3tS219/0pg5A5 9aSNcPpGc0oloMqwSKvabVgRQdcItYtNZpst7XO6lkZnjTu7w5bnnufoFpiSdOSP S9iVqm14zMzoZ18/wQRsPKn1KapESmSDAAv7ZHLSwa55jkL4wvFYhUg2WW3Mv9gg OE/0nzvc3x0oH6yymnqX/xMN6VgSEPz/ZZbLQYxyv3xpMwwu7X4= -----END CERTIFICATE-----Generated at Thu Sep 24 15:39:13 2026 by rpki-client