$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft File: 9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft (raw, json) Hash identifier: tt5kPCvUsGAKctIsV0B5ujqODDghn4wHWcT6jrg+tno= Subject key identifier: AC:D7:47:D5:63:4C:4D:E8:BB:16:19:4C:CC:D9:8F:1C:4B:7F:53:47 Authority key identifier: 9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00 Certificate issuer: /CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800 Certificate serial: 4560C703682FAE3180D547A63A7951CD59A2524A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft Manifest number: D5 Signing time: Thu 08 Oct 2026 10:15:39 +0000 Manifest this update: Thu 08 Oct 2026 10:10:39 +0000 Manifest next update: Fri 09 Oct 2026 13:08:39 +0000 Files and hashes: 1: 9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl (hash: DjkbgsJmh0uWtMN1L/AIAp8pXIHGvEczu3yPBFaEZWU=) 2: 3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (hash: WkzU0ifpIbp5OQ/6TDxMH+vwFG2tqv2mqNzHskMqmF0=) 3: 3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (hash: 2N+TEQ769mQU4C1i4Rld3w1DT7X5Tq5lgzhroXjz5Hg=) 4: 3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (hash: J9RbUPOqUx6qGs/3TSnBbVnRso5umnmyOklAgJwt1Js=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 11:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:60:c7:03:68:2f:ae:31:80:d5:47:a6:3a:79:51:cd:59:a2:52:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800 Validity Not Before: Oct 8 10:10:39 2026 GMT Not After : Oct 9 13:08:39 2026 GMT Subject: CN=ACD747D5634C4DE8BB16194CCCD98F1C4B7F5347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:56:20:14:30:66:02:be:37:4f:5c:bc:1a:2b: b6:25:a7:de:35:02:5c:9f:e8:15:93:32:8d:bd:16: 4d:3f:ea:e0:ed:0d:ab:a6:41:e4:46:62:6c:e6:35: 25:53:3c:7f:dd:8a:ae:ce:bc:ee:87:85:10:66:17: 6d:22:35:bc:65:f1:19:99:12:dc:f1:bc:4d:1e:6e: 9c:0c:8d:23:bb:66:51:44:5f:dc:f5:35:91:13:c7: 24:fd:18:06:da:b3:cd:3f:15:9b:ba:5c:1e:71:3f: 39:76:f6:c1:05:fb:f7:4e:cd:bf:d1:03:4b:0c:8b: d9:d3:56:6f:45:13:b4:28:96:3a:dc:41:5a:4c:24: a0:2e:73:4f:12:cb:07:d9:2c:49:04:fa:42:ff:bd: 9c:c8:ff:47:e2:f5:03:17:38:ce:dc:3f:e2:ef:d4: a3:8e:b1:90:e3:2b:17:81:d2:06:73:3b:c7:e6:73: 8a:44:7a:36:51:ee:be:b8:9d:7f:1d:ca:f9:47:ab: d1:90:19:b9:1a:bb:dd:9b:6a:39:7d:bb:ec:a2:82: 00:e1:64:f5:2f:f3:f6:d2:49:99:51:15:2f:d3:d2: 0c:d1:50:66:00:32:8f:c6:03:1d:b6:f2:43:a9:94: 5b:17:a2:9b:9c:86:af:71:b6:a8:7e:21:d5:56:eb: 58:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D7:47:D5:63:4C:4D:E8:BB:16:19:4C:CC:D9:8F:1C:4B:7F:53:47 X509v3 Authority Key Identifier: keyid:9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:9d:8b:2a:c4:6d:21:f2:be:cb:5d:1a:ca:96:b6:b6:1b:96: 26:74:80:eb:26:56:32:f8:46:ab:a5:5c:51:72:65:fc:ea:43: d4:39:de:fd:83:b9:0d:41:fd:f4:10:56:46:97:dd:47:ed:70: 4e:47:b3:7e:4b:2d:2b:81:14:57:75:2d:01:4c:d3:d8:51:15: 2b:29:bb:22:54:8d:89:e5:65:27:4d:3e:45:df:cb:02:28:ac: d6:d8:a9:f5:dd:9b:9c:e0:aa:ec:49:a3:55:e2:9f:a3:5b:1c: 95:56:9a:01:41:45:b9:15:c7:a3:41:b9:c0:32:a4:03:f0:41: 3e:a9:c8:99:fd:c2:b7:8b:be:3f:53:84:78:8d:6f:d2:94:f6: 95:45:da:b8:e5:d4:61:ae:6e:68:2d:60:ba:9a:80:a9:9d:13: bb:ae:d7:39:a6:18:a2:da:b5:37:e8:60:f5:21:a2:db:2e:02: 5f:0a:94:e8:a7:0f:b9:a2:74:64:c4:c9:dd:80:1f:be:85:0d: 3c:b2:c4:a0:c9:68:01:73:f0:87:af:79:ba:63:e2:14:47:4d: b7:95:26:eb:2b:9d:59:58:5e:87:83:fd:aa:52:67:bc:3a:03: c8:cb:ab:b2:a6:c4:21:e4:fd:8f:7d:ca:55:38:7b:78:12:ac: fd:69:b6:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURWDHA2gvrjGA1UemOnlRzVmiUkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJENzU5OTkyM0I4RkI4QzgzQUIzQjMwMjg3RkJDQzZB OTg3NDgwMDAeFw0yNjEwMDgxMDEwMzlaFw0yNjEwMDkxMzA4MzlaMDMxMTAvBgNV BAMTKEFDRDc0N0Q1NjM0QzRERThCQjE2MTk0Q0NDRDk4RjFDNEI3RjUzNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOViAUMGYCvjdPXLwaK7Ylp941 Alyf6BWTMo29Fk0/6uDtDaumQeRGYmzmNSVTPH/diq7OvO6HhRBmF20iNbxl8RmZ EtzxvE0ebpwMjSO7ZlFEX9z1NZETxyT9GAbas80/FZu6XB5xPzl29sEF+/dOzb/R A0sMi9nTVm9FE7QoljrcQVpMJKAuc08SywfZLEkE+kL/vZzI/0fi9QMXOM7cP+Lv 1KOOsZDjKxeB0gZzO8fmc4pEejZR7r64nX8dyvlHq9GQGbkau92bajl9u+yiggDh ZPUv8/bSSZlRFS/T0gzRUGYAMo/GAx228kOplFsXopuchq9xtqh+IdVW61jNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrNdH1WNMTei7FhlMzNmPHEt/U0cwHwYDVR0j BBgwFoAUm9dZmSO4+4yDqzswKH+8xqmHSAAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGIzODhmNmUtOTk3NC00NDU3LWFmNGItNWM5YzgyZjUwZTk3LzAvOUJENzU5OTky M0I4RkI4QzgzQUIzQjMwMjg3RkJDQzZBOTg3NDgwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkQ3NTk5OTIzQjhGQjhDODNBQjNCMzAyODdGQkNDNkE5ODc0 ODAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGIzODhmNmUtOTk3NC00NDU3LWFm NGItNWM5YzgyZjUwZTk3LzAvOUJENzU5OTkyM0I4RkI4QzgzQUIzQjMwMjg3RkJD QzZBOTg3NDgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAediyrEbSHyvstdGsqWtrYbliZ0gOsmVjL4 RqulXFFyZfzqQ9Q53v2DuQ1B/fQQVkaX3UftcE5Hs35LLSuBFFd1LQFM09hRFSsp uyJUjYnlZSdNPkXfywIorNbYqfXdm5zgquxJo1Xin6NbHJVWmgFBRbkVx6NBucAy pAPwQT6pyJn9wreLvj9ThHiNb9KU9pVF2rjl1GGubmgtYLqagKmdE7uu1zmmGKLa tTfoYPUhotsuAl8KlOinD7midGTEyd2AH76FDTyyxKDJaAFz8Ievebpj4hRHTbeV JusrnVlYXoeD/apSZ7w6A8jLq7KmxCHk/Y99ylU4e3gSrP1ptlI= -----END CERTIFICATE-----Generated at Thu Oct 8 18:56:12 2026 by rpki-client