$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft File: 9F018573ABC40A1244EF018EE95D73D8E54A5247.mft (raw, json) Hash identifier: P3dl1DvNhFPi33Q7EoaZakjabUFNcALZoOQG08htglM= Subject key identifier: 27:4A:98:7B:7A:9E:21:77:60:55:AA:0A:F9:31:21:05:4F:3A:EE:89 Authority key identifier: 9F:01:85:73:AB:C4:0A:12:44:EF:01:8E:E9:5D:73:D8:E5:4A:52:47 Certificate issuer: /CN=9F018573ABC40A1244EF018EE95D73D8E54A5247 Certificate serial: 421BB19DB8CA41B408694DA502C4C7DA5C253D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 04:36:22 +0000 Manifest this update: Thu 24 Sep 2026 04:31:22 +0000 Manifest next update: Fri 25 Sep 2026 07:26:22 +0000 Files and hashes: 1: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: On7lPgtr4muQ2OAv+z91B4cwc8QzzKQys3kXiufzPRc=) 2: 9F018573ABC40A1244EF018EE95D73D8E54A5247.crl (hash: sUjYY5r54i+PXYAq7pe4EAwX1MgIMlgDTK4Sat26UHQ=) 3: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: 5rI4L+b8xzlRIUsWxeEF2NdCqFStv1SMLdpn9443Ve4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.crl rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:1b:b1:9d:b8:ca:41:b4:08:69:4d:a5:02:c4:c7:da:5c:25:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F018573ABC40A1244EF018EE95D73D8E54A5247 Validity Not Before: Sep 24 04:31:22 2026 GMT Not After : Sep 25 07:26:22 2026 GMT Subject: CN=274A987B7A9E21776055AA0AF93121054F3AEE89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:90:c1:2b:dc:f5:d8:42:84:9b:32:3b:10:b8: 19:1d:c9:11:2f:be:4b:45:b4:c7:d1:ca:da:6c:9b: 87:f1:b9:32:5c:bf:05:cb:03:ab:b0:d7:92:72:9c: 78:60:f0:fe:dc:d4:e8:4d:e1:b9:f6:20:99:8c:e5: 93:bf:84:ea:4e:6b:7f:7f:8c:45:82:e8:c3:c3:25: ea:d2:57:36:ac:79:4b:88:63:3c:d3:e9:03:d8:9f: 5b:01:d2:02:5d:88:1e:2d:58:74:48:6f:3b:91:de: 1e:fb:1b:81:23:2f:8d:38:9b:cc:75:46:93:8f:59: db:ab:b8:7a:2f:0e:58:9e:00:6d:69:34:f0:92:8c: 43:0c:2d:33:9a:fe:53:31:06:9f:3e:ae:f3:05:c2: dd:93:9d:73:0a:26:1b:d2:79:19:67:d7:c5:d6:01: f4:93:42:5f:19:35:da:43:98:bc:66:d1:a6:51:13: 9f:2c:5a:a5:ca:65:02:47:61:0d:5b:6a:28:a9:45: 24:03:d4:0b:a2:6a:be:35:43:27:a9:92:78:2c:ca: 16:86:ea:95:c4:32:a9:48:d4:6b:26:d2:2c:69:ee: f7:79:e9:76:f0:68:f7:37:0b:4c:b1:a1:52:8b:bc: f3:0e:d7:1b:1b:50:98:20:ff:58:8d:2a:d5:d4:4a: 30:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4A:98:7B:7A:9E:21:77:60:55:AA:0A:F9:31:21:05:4F:3A:EE:89 X509v3 Authority Key Identifier: keyid:9F:01:85:73:AB:C4:0A:12:44:EF:01:8E:E9:5D:73:D8:E5:4A:52:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:16:b1:e5:08:d3:15:29:9f:9c:2f:82:73:4a:96:25:b4:50: 8c:10:c8:97:c6:27:43:61:31:88:9b:72:b6:31:2b:ae:90:f0: 81:33:c6:17:03:33:7c:2f:eb:0e:df:fd:33:e9:8e:61:08:42: d9:c9:03:4e:36:8b:4a:6f:94:89:1b:50:46:d2:1f:ae:4c:9c: 27:1f:10:49:aa:b1:9d:0e:42:ed:3d:ed:3a:02:c1:5e:40:4b: fd:d5:0c:e6:4c:b9:d1:2c:20:36:a6:d5:c3:a0:f8:5d:f6:fa: cd:6e:04:c8:c9:c6:80:c5:42:b0:98:2f:a4:3f:d3:86:54:0b: fe:01:34:ce:05:3f:c6:d2:48:61:ff:bb:d3:b2:24:63:bc:ac: 08:8b:9c:cd:ce:68:c3:a6:35:9d:37:42:ec:62:2e:4f:03:7e: 6f:2a:77:18:6f:2a:63:01:c8:c3:5e:5f:6f:0f:fa:c4:82:2c: 8e:5f:a1:84:85:b2:45:32:98:6b:8e:b4:fd:79:2c:78:2d:5c: 94:23:eb:cc:44:a4:ae:a5:b9:aa:a0:c8:9c:86:03:5a:a1:f6: ae:43:f4:11:e6:56:bd:a8:bb:d1:ad:0e:00:7e:55:7f:a1:e0: 99:ab:10:3b:1b:cc:7d:61:31:49:ff:d6:45:80:bd:a9:15:84: bb:1a:5b:f5 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITQhuxnbjKQbQIaU2lAsTH2lwlPTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg5RjAxODU3M0FCQzQwQTEyNDRFRjAxOEVFOTVENzNEOEU1 NEE1MjQ3MB4XDTI2MDkyNDA0MzEyMloXDTI2MDkyNTA3MjYyMlowMzExMC8GA1UE AxMoMjc0QTk4N0I3QTlFMjE3NzYwNTVBQTBBRjkzMTIxMDU0RjNBRUU4OTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMOQwSvc9dhChJsyOxC4GR3JES++ S0W0x9HK2mybh/G5Mly/BcsDq7DXknKceGDw/tzU6E3hufYgmYzlk7+E6k5rf3+M RYLow8Ml6tJXNqx5S4hjPNPpA9ifWwHSAl2IHi1YdEhvO5HeHvsbgSMvjTibzHVG k49Z26u4ei8OWJ4AbWk08JKMQwwtM5r+UzEGnz6u8wXC3ZOdcwomG9J5GWfXxdYB 9JNCXxk12kOYvGbRplETnyxapcplAkdhDVtqKKlFJAPUC6JqvjVDJ6mSeCzKFobq lcQyqUjUaybSLGnu93npdvBo9zcLTLGhUou88w7XGxtQmCD/WI0q1dRKMIkCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQnSph7ep4hd2BVqgr5MSEFTzruiTAfBgNVHSME GDAWgBSfAYVzq8QKEkTvAY7pXXPY5UpSRzAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81 M2Y3NWU5OC0xNGVmLTQ0NTctOTRmMy1lNWI3M2E5MjJmYzUvMC85RjAxODU3M0FC QzQwQTEyNDRFRjAxOEVFOTVENzNEOEU1NEE1MjQ3LmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzlGMDE4NTczQUJDNDBBMTI0NEVGMDE4RUU5NUQ3M0Q4RTU0QTUy NDcuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81M2Y3NWU5OC0xNGVmLTQ0NTctOTRm My1lNWI3M2E5MjJmYzUvMC85RjAxODU3M0FCQzQwQTEyNDRFRjAxOEVFOTVENzNE OEU1NEE1MjQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAmhax5QjTFSmfnC+Cc0qWJbRQjBDIl8YnQ2Ex iJtytjErrpDwgTPGFwMzfC/rDt/9M+mOYQhC2ckDTjaLSm+UiRtQRtIfrkycJx8Q SaqxnQ5C7T3tOgLBXkBL/dUM5ky50SwgNqbVw6D4Xfb6zW4EyMnGgMVCsJgvpD/T hlQL/gE0zgU/xtJIYf+707IkY7ysCIuczc5ow6Y1nTdC7GIuTwN+byp3GG8qYwHI w15fbw/6xIIsjl+hhIWyRTKYa460/XkseC1clCPrzESkrqW5qqDInIYDWqH2rkP0 EeZWvai70a0OAH5Vf6HgmasQOxvMfWExSf/WRYC9qRWEuxpb9Q== -----END CERTIFICATE-----Generated at Thu Sep 24 08:29:18 2026 by rpki-client