$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft File: 9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft (raw, json) Hash identifier: 9Mss0CEWThnYcoZ1sTXp5J1hI82/0e7TP403sdQMLHk= Subject key identifier: 8B:BC:32:62:0F:8C:97:9B:79:B9:13:EC:B8:2A:88:F5:A6:7D:44:92 Authority key identifier: 9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00 Certificate issuer: /CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800 Certificate serial: 3FF22951BB134A6373B5859790DEC5489DBDAE59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft Manifest number: C8 Signing time: Mon 28 Sep 2026 16:29:59 +0000 Manifest this update: Mon 28 Sep 2026 16:24:59 +0000 Manifest next update: Tue 29 Sep 2026 19:17:59 +0000 Files and hashes: 1: 3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (hash: J9RbUPOqUx6qGs/3TSnBbVnRso5umnmyOklAgJwt1Js=) 2: 3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (hash: WkzU0ifpIbp5OQ/6TDxMH+vwFG2tqv2mqNzHskMqmF0=) 3: 9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl (hash: kt68VV0JoODlxQI2ctqczz3BMMus6p+Ov+x4zmn4ueM=) 4: 3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (hash: 2N+TEQ769mQU4C1i4Rld3w1DT7X5Tq5lgzhroXjz5Hg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f2:29:51:bb:13:4a:63:73:b5:85:97:90:de:c5:48:9d:bd:ae:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800 Validity Not Before: Sep 28 16:24:59 2026 GMT Not After : Sep 29 19:17:59 2026 GMT Subject: CN=8BBC32620F8C979B79B913ECB82A88F5A67D4492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d8:f1:f3:53:41:8c:e7:eb:cd:72:26:ba:7a: 40:23:1e:aa:2b:bb:c5:3d:0f:50:ea:0e:c8:a2:de: 55:9e:e5:72:48:2e:1c:9c:ca:4c:d6:07:fd:e8:cc: 25:ec:36:8a:cd:27:11:7b:32:aa:e5:76:bf:38:25: e4:d0:ac:89:1a:df:85:97:4f:9e:0e:85:77:00:f9: fb:73:6d:37:8f:36:63:a4:61:43:91:4b:20:50:f7: d2:6a:62:07:20:38:8d:7d:b0:47:6c:19:3b:ab:5c: 90:7d:c9:fa:54:d7:d6:62:b6:bb:bf:6b:78:7e:a0: 63:03:cf:92:00:a8:2b:7d:20:b3:8d:03:2b:f6:fb: a3:c7:d9:13:dc:9a:a2:30:14:2d:c4:cf:61:dc:5e: b2:a6:9c:65:c9:50:9c:e5:b3:9d:65:7a:98:c5:d4: 7d:75:73:be:5a:03:a8:e9:61:cc:dc:6d:24:96:fd: 78:a9:64:01:00:7a:ed:55:5c:e2:e6:78:03:f6:8a: 5c:02:b4:63:c4:d3:1e:60:82:52:da:ec:1e:83:e9: ec:db:6e:b1:c5:7a:ab:da:c5:2a:4c:04:e2:d5:eb: 3e:0a:e3:58:85:75:5b:f6:7b:82:54:7e:74:40:ec: c0:89:02:83:13:79:22:02:b6:35:55:7a:04:4b:eb: 22:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:BC:32:62:0F:8C:97:9B:79:B9:13:EC:B8:2A:88:F5:A6:7D:44:92 X509v3 Authority Key Identifier: keyid:9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:54:d4:b8:9b:82:fd:88:c8:e6:c6:1d:83:4d:29:59:6d:b7: 5b:0d:9a:66:6e:95:b3:5e:c3:09:f8:c6:2c:fb:2d:70:4d:4c: 22:5c:0d:6e:cf:53:57:f0:a5:d1:28:b6:fe:72:04:dd:29:96: 72:7e:88:70:c9:d9:d2:f3:e9:b5:58:99:f1:55:ee:7e:3f:23: 77:93:78:3c:8a:c6:70:7a:d0:b1:fb:60:1a:14:62:4f:6e:af: 1e:7c:75:e9:74:7a:87:7d:12:fb:1a:63:34:78:67:e6:9c:6c: ee:c5:2e:d5:15:d3:d6:12:b2:a8:70:19:55:fc:f0:95:5d:55: 40:2f:70:f9:25:46:5d:a6:02:e6:2c:8e:32:bc:40:8c:85:e4: 7e:22:1d:62:37:7c:b5:22:89:f7:a5:81:34:8c:8f:70:ed:bc: d5:db:01:b1:17:18:4e:df:70:55:cb:ff:37:45:63:6a:a4:ad: c5:01:66:27:45:24:34:d1:2a:2f:76:4a:95:47:ca:56:8a:c6: 4d:55:cf:d0:24:47:de:71:2d:a1:0e:f2:53:a3:70:c2:79:7f: 6a:7e:15:c4:76:8b:f2:02:fe:ef:c5:dc:49:6a:1c:33:66:a2: ae:b2:75:26:e8:50:07:c3:6e:00:46:b1:9a:f0:59:0f:15:37: 6d:e6:0a:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP/IpUbsTSmNztYWXkN7FSJ29rlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJENzU5OTkyM0I4RkI4QzgzQUIzQjMwMjg3RkJDQzZB OTg3NDgwMDAeFw0yNjA5MjgxNjI0NTlaFw0yNjA5MjkxOTE3NTlaMDMxMTAvBgNV BAMTKDhCQkMzMjYyMEY4Qzk3OUI3OUI5MTNFQ0I4MkE4OEY1QTY3RDQ0OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82PHzU0GM5+vNcia6ekAjHqor u8U9D1DqDsii3lWe5XJILhycykzWB/3ozCXsNorNJxF7Mqrldr84JeTQrIka34WX T54OhXcA+ftzbTePNmOkYUORSyBQ99JqYgcgOI19sEdsGTurXJB9yfpU19Zitru/ a3h+oGMDz5IAqCt9ILONAyv2+6PH2RPcmqIwFC3Ez2HcXrKmnGXJUJzls51lepjF 1H11c75aA6jpYczcbSSW/XipZAEAeu1VXOLmeAP2ilwCtGPE0x5gglLa7B6D6ezb brHFeqvaxSpMBOLV6z4K41iFdVv2e4JUfnRA7MCJAoMTeSICtjVVegRL6yLLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi7wyYg+Ml5t5uRPsuCqI9aZ9RJIwHwYDVR0j BBgwFoAUm9dZmSO4+4yDqzswKH+8xqmHSAAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGIzODhmNmUtOTk3NC00NDU3LWFmNGItNWM5YzgyZjUwZTk3LzAvOUJENzU5OTky M0I4RkI4QzgzQUIzQjMwMjg3RkJDQzZBOTg3NDgwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkQ3NTk5OTIzQjhGQjhDODNBQjNCMzAyODdGQkNDNkE5ODc0 ODAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGIzODhmNmUtOTk3NC00NDU3LWFm NGItNWM5YzgyZjUwZTk3LzAvOUJENzU5OTkyM0I4RkI4QzgzQUIzQjMwMjg3RkJD QzZBOTg3NDgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVU1Libgv2IyObGHYNNKVltt1sNmmZulbNe wwn4xiz7LXBNTCJcDW7PU1fwpdEotv5yBN0plnJ+iHDJ2dLz6bVYmfFV7n4/I3eT eDyKxnB60LH7YBoUYk9urx58del0eod9EvsaYzR4Z+acbO7FLtUV09YSsqhwGVX8 8JVdVUAvcPklRl2mAuYsjjK8QIyF5H4iHWI3fLUiifelgTSMj3DtvNXbAbEXGE7f cFXL/zdFY2qkrcUBZidFJDTRKi92SpVHylaKxk1Vz9AkR95xLaEO8lOjcMJ5f2p+ FcR2i/IC/u/F3ElqHDNmoq6ydSboUAfDbgBGsZrwWQ8VN23mChc= -----END CERTIFICATE-----Generated at Mon Sep 28 21:16:56 2026 by rpki-client