$ rpki-client -vvvf rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft File: A9E3887289ED85663942126250F7D66CD58FE1F5.mft (raw, json) Hash identifier: 4UyMXTMNa2dCx7mg+TwnT0CacbAX95Lc8zFcLlPAXSw= Subject key identifier: C1:73:51:B7:90:4A:AF:15:26:EC:80:01:EE:EA:78:F8:69:52:79:52 Authority key identifier: A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5 Certificate issuer: /CN=A9E3887289ED85663942126250F7D66CD58FE1F5 Certificate serial: 0B45BDF9DB2A707C9F5A2EB0E3CFDFF0A8229526 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 13:37:45 +0000 Manifest this update: Thu 24 Sep 2026 13:32:45 +0000 Manifest next update: Fri 25 Sep 2026 14:48:45 +0000 Files and hashes: 1: A9E3887289ED85663942126250F7D66CD58FE1F5.crl (hash: PObN8j9nz18J+XnV2A7MQ/et3kOSildD9bnj44ES3bs=) 2: 3130332e3136362e3132322e302f32332d3233203d3e20313431393435.roa (hash: JytxgR9jZstQPJBZYCIpgiXASID1MDjbIa5qz0t9YDc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.crl rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:45:bd:f9:db:2a:70:7c:9f:5a:2e:b0:e3:cf:df:f0:a8:22:95:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E3887289ED85663942126250F7D66CD58FE1F5 Validity Not Before: Sep 24 13:32:45 2026 GMT Not After : Sep 25 14:48:45 2026 GMT Subject: CN=C17351B7904AAF1526EC8001EEEA78F869527952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:45:56:61:a4:a3:36:f0:a8:64:cb:f2:55:dc: 46:75:e8:d9:64:95:af:58:ed:65:0e:19:ed:de:93: 3a:b8:88:29:9d:b5:d9:25:1d:7d:24:19:31:71:51: ab:7c:fa:04:9b:f4:a9:55:b9:37:24:2a:97:00:f4: cd:7b:6d:7f:6b:a5:13:fd:01:5a:2e:46:61:05:c6: d0:59:8c:7d:3d:60:71:07:29:84:0f:1d:97:d5:ec: 06:84:ab:96:2e:bb:6d:71:dc:c0:f2:ff:08:54:76: 33:71:e6:94:8a:8c:cc:5c:53:97:0b:44:d9:b8:c9: 9d:57:0f:c1:2f:45:55:96:7d:6a:04:3f:03:27:35: 75:44:1e:29:2e:ca:00:69:65:5c:e7:a2:4d:e0:e7: 14:e8:2f:0c:9a:c1:8d:23:75:f1:82:c0:13:b5:80: 86:a5:89:f0:fd:5c:16:33:ef:20:e1:b7:a3:51:f5: a6:67:1b:0e:af:02:6a:ff:79:d1:45:ad:cf:b7:ca: e4:31:b2:6c:d7:cc:2e:e5:17:00:8f:cd:c6:53:7e: df:b8:4e:71:4a:c8:a2:34:4e:af:53:33:bf:47:71: ee:ee:e3:f1:e0:75:d8:23:09:b1:a9:be:1c:4e:e8: d2:82:15:da:a4:84:d1:54:d7:0e:8f:02:d8:d4:7e: 06:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:73:51:B7:90:4A:AF:15:26:EC:80:01:EE:EA:78:F8:69:52:79:52 X509v3 Authority Key Identifier: keyid:A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:c1:dd:b4:94:6a:fe:5e:b4:0f:55:87:c6:bf:99:c3:56:b3: 47:4f:91:5f:6f:60:3a:1b:dc:d4:b1:70:0f:5f:b6:d0:4b:5d: 42:e9:36:70:ce:cc:de:02:f5:9c:c8:bd:3c:74:a0:7b:48:f2: 8b:bc:35:2a:be:cc:f6:4c:57:41:1b:17:a3:ce:9a:90:6e:f8: c1:d0:28:b7:74:32:4d:14:dc:cf:07:2c:57:f7:85:81:1e:2a: da:0e:b4:f5:3b:7e:d0:f2:66:98:1c:64:b4:48:00:fa:34:d7: a5:6b:3c:bb:1c:b5:95:f4:d3:ad:78:d5:44:23:8a:7e:2c:80: 8f:77:b2:93:38:88:a9:00:04:e6:60:cb:dc:2e:65:9c:f0:cb: 1e:39:ae:ef:26:be:ec:da:47:34:53:31:e4:9c:1c:7e:99:3a: 24:fd:94:55:75:d1:35:70:07:25:8c:9b:d2:53:35:4c:83:48: 4a:2f:fe:14:02:da:d7:1f:04:ba:71:48:4f:ce:7e:da:55:d9: 28:5e:60:fc:f7:34:c0:41:e6:2b:1a:a2:fe:c5:f5:f6:f4:ec: 08:34:84:a3:9b:72:b8:64:b2:37:a4:28:3d:63:7d:c6:8b:a2: 5c:2e:c3:30:3e:17:bb:72:ad:19:c4:ee:1a:e5:8b:f3:05:3e: 5e:91:c4:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC0W9+dsqcHyfWi6w48/f8KgilSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFMzg4NzI4OUVEODU2NjM5NDIxMjYyNTBGN0Q2NkNE NThGRTFGNTAeFw0yNjA5MjQxMzMyNDVaFw0yNjA5MjUxNDQ4NDVaMDMxMTAvBgNV BAMTKEMxNzM1MUI3OTA0QUFGMTUyNkVDODAwMUVFRUE3OEY4Njk1Mjc5NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXRVZhpKM28Khky/JV3EZ16Nlk la9Y7WUOGe3ekzq4iCmdtdklHX0kGTFxUat8+gSb9KlVuTckKpcA9M17bX9rpRP9 AVouRmEFxtBZjH09YHEHKYQPHZfV7AaEq5Yuu21x3MDy/whUdjNx5pSKjMxcU5cL RNm4yZ1XD8EvRVWWfWoEPwMnNXVEHikuygBpZVznok3g5xToLwyawY0jdfGCwBO1 gIalifD9XBYz7yDht6NR9aZnGw6vAmr/edFFrc+3yuQxsmzXzC7lFwCPzcZTft+4 TnFKyKI0Tq9TM79Hce7u4/HgddgjCbGpvhxO6NKCFdqkhNFU1w6PAtjUfgbZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwXNRt5BKrxUm7IAB7up4+GlSeVIwHwYDVR0j BBgwFoAUqeOIconthWY5QhJiUPfWbNWP4fUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTQzY2M2YTgtZTdhYS00ZjM3LWJkMDgtZjJlYjU3ZTg4NzM2LzAvQTlFMzg4NzI4 OUVEODU2NjM5NDIxMjYyNTBGN0Q2NkNENThGRTFGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOUUzODg3Mjg5RUQ4NTY2Mzk0MjEyNjI1MEY3RDY2Q0Q1OEZF MUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTQzY2M2YTgtZTdhYS00ZjM3LWJk MDgtZjJlYjU3ZTg4NzM2LzAvQTlFMzg4NzI4OUVEODU2NjM5NDIxMjYyNTBGN0Q2 NkNENThGRTFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHB3bSUav5etA9Vh8a/mcNWs0dPkV9vYDob 3NSxcA9fttBLXULpNnDOzN4C9ZzIvTx0oHtI8ou8NSq+zPZMV0EbF6POmpBu+MHQ KLd0Mk0U3M8HLFf3hYEeKtoOtPU7ftDyZpgcZLRIAPo016VrPLsctZX006141UQj in4sgI93spM4iKkABOZgy9wuZZzwyx45ru8mvuzaRzRTMeScHH6ZOiT9lFV10TVw ByWMm9JTNUyDSEov/hQC2tcfBLpxSE/OftpV2SheYPz3NMBB5isaov7F9fb07Ag0 hKObcrhksjekKD1jfcaLolwuwzA+F7tyrRnE7hrli/MFPl6RxJQ= -----END CERTIFICATE-----Generated at Thu Sep 24 23:34:10 2026 by rpki-client