$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft File: 9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft (raw, json) Hash identifier: HtRJXgBYYN9RX9XseztbhBjgLzWEtjXAvi84DeISCTU= Subject key identifier: 5D:A9:C5:2C:1E:FA:DC:10:44:0A:D4:C3:BA:D2:67:EC:05:D8:50:B2 Authority key identifier: 9D:4D:B6:9E:1B:34:49:3D:B5:07:7A:AB:18:31:EA:08:E6:94:62:D1 Certificate issuer: /CN=9D4DB69E1B34493DB5077AAB1831EA08E69462D1 Certificate serial: 308C69269B47A29F557964597EC3ADB16C2A36C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft Manifest number: BF Signing time: Wed 23 Sep 2026 17:58:07 +0000 Manifest this update: Wed 23 Sep 2026 17:53:07 +0000 Manifest next update: Thu 24 Sep 2026 21:26:07 +0000 Files and hashes: 1: 9D4DB69E1B34493DB5077AAB1831EA08E69462D1.crl (hash: BTwKZpNB2G3zPFJK51GmhI3T2lTrYn1clbXKfM9ctyQ=) 2: 3231302e38372e3132342e302f32332d3234203d3e20313532303539.roa (hash: F1D8qXB1kPa12d9QgeEIlBgwwS/bqZZ5YMaSMkPMuvU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.crl rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:8c:69:26:9b:47:a2:9f:55:79:64:59:7e:c3:ad:b1:6c:2a:36:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D4DB69E1B34493DB5077AAB1831EA08E69462D1 Validity Not Before: Sep 23 17:53:07 2026 GMT Not After : Sep 24 21:26:07 2026 GMT Subject: CN=5DA9C52C1EFADC10440AD4C3BAD267EC05D850B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6a:2d:b1:b8:fd:01:93:9d:b8:fa:29:72:63: 1a:6c:ea:e9:21:3e:5f:cd:f5:51:9d:13:9b:55:d6: 26:08:55:02:b3:15:f7:f1:f0:39:56:54:e7:f3:ed: 92:ec:2a:59:b4:17:4c:91:24:c8:ae:96:37:44:48: 0f:de:02:ae:21:e5:4f:6b:a6:33:82:b3:03:c2:16: 09:f2:eb:70:d0:4c:a9:85:8c:c8:8d:3d:ba:ea:e7: db:f9:61:3d:66:af:a3:9d:54:ba:8f:80:6a:de:4c: ae:20:d3:a0:a9:ce:96:1d:b1:4f:9b:fb:f6:d8:9a: 16:c4:5d:44:2e:5f:e5:46:28:b5:97:15:b0:9f:7f: 4a:5e:55:29:f5:02:e5:26:5d:b8:94:b5:e3:a1:d0: 91:30:73:cf:0d:3a:bd:8d:20:c1:38:2b:b4:12:1d: 66:3c:ea:17:c5:07:eb:f8:aa:1d:3b:af:34:16:60: df:ef:f4:63:37:b9:13:ac:76:b8:79:27:6c:c4:4f: 6b:69:32:e5:5c:ac:9a:80:3a:2a:81:41:b5:41:fa: 69:92:8a:eb:65:9a:35:f6:74:b5:70:dd:2b:fd:b0: 3b:e1:f1:25:fd:55:48:66:56:3e:8e:2f:b1:89:01: b9:2d:0e:e5:d9:ff:4e:0c:3c:53:e6:38:66:73:73: 15:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A9:C5:2C:1E:FA:DC:10:44:0A:D4:C3:BA:D2:67:EC:05:D8:50:B2 X509v3 Authority Key Identifier: keyid:9D:4D:B6:9E:1B:34:49:3D:B5:07:7A:AB:18:31:EA:08:E6:94:62:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:d9:f6:c5:24:83:f3:a5:cc:af:be:29:f9:fe:1a:db:aa:07: 27:ab:5f:84:32:65:6d:16:38:1c:3c:f3:f7:e3:e0:ce:0d:34: 2f:88:e8:9d:8c:29:b2:05:5f:68:73:4c:ad:4d:d6:73:c8:8b: 12:01:88:72:dd:29:d0:b6:9d:03:84:51:46:81:c1:11:d9:e7: e2:9c:0a:60:1c:d7:e8:a5:07:bf:f0:7c:ab:87:81:ed:95:40: 74:72:dd:3f:b0:ff:fe:c9:22:d1:89:fb:8c:0b:e8:24:f4:85: 4c:de:94:76:f6:4d:72:5a:e8:ba:65:bf:eb:2d:90:81:fa:60: 04:ff:66:1f:75:80:fc:cc:0d:1f:cd:5c:ef:13:9a:5d:9e:b1: 9c:cb:52:e8:73:f8:65:36:0f:e0:50:c0:24:25:eb:26:ae:06: 74:10:dd:59:06:ed:d3:c2:cd:4f:ab:63:fe:14:e4:03:a5:b1: 4a:27:b8:05:63:99:60:8c:bc:43:78:b2:e1:15:4a:5d:e0:3d: 28:d0:c2:41:ff:ff:34:68:58:0f:57:98:be:df:11:91:1e:88: f0:d6:55:69:a8:c1:08:ee:05:87:ec:73:de:dc:f2:01:4e:e8: a8:63:fb:7f:2c:15:fa:14:06:bf:5f:cf:3d:60:2f:74:2b:f8: 84:bc:0e:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMIxpJptHop9VeWRZfsOtsWwqNsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ0REI2OUUxQjM0NDkzREI1MDc3QUFCMTgzMUVBMDhF Njk0NjJEMTAeFw0yNjA5MjMxNzUzMDdaFw0yNjA5MjQyMTI2MDdaMDMxMTAvBgNV BAMTKDVEQTlDNTJDMUVGQURDMTA0NDBBRDRDM0JBRDI2N0VDMDVEODUwQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcai2xuP0Bk524+ilyYxps6ukh Pl/N9VGdE5tV1iYIVQKzFffx8DlWVOfz7ZLsKlm0F0yRJMiuljdESA/eAq4h5U9r pjOCswPCFgny63DQTKmFjMiNPbrq59v5YT1mr6OdVLqPgGreTK4g06CpzpYdsU+b +/bYmhbEXUQuX+VGKLWXFbCff0peVSn1AuUmXbiUteOh0JEwc88NOr2NIME4K7QS HWY86hfFB+v4qh07rzQWYN/v9GM3uROsdrh5J2zET2tpMuVcrJqAOiqBQbVB+mmS iutlmjX2dLVw3Sv9sDvh8SX9VUhmVj6OL7GJAbktDuXZ/04MPFPmOGZzcxWhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXanFLB763BBECtTDutJn7AXYULIwHwYDVR0j BBgwFoAUnU22nhs0ST21B3qrGDHqCOaUYtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdiZThiN2MtMjMyZi00N2U4LTljZGQtODgxN2QzOWI3MGVhLzAvOUQ0REI2OUUx QjM0NDkzREI1MDc3QUFCMTgzMUVBMDhFNjk0NjJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDREQjY5RTFCMzQ0OTNEQjUwNzdBQUIxODMxRUEwOEU2OTQ2 MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdiZThiN2MtMjMyZi00N2U4LTlj ZGQtODgxN2QzOWI3MGVhLzAvOUQ0REI2OUUxQjM0NDkzREI1MDc3QUFCMTgzMUVB MDhFNjk0NjJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfZ9sUkg/OlzK++Kfn+GtuqByerX4QyZW0W OBw88/fj4M4NNC+I6J2MKbIFX2hzTK1N1nPIixIBiHLdKdC2nQOEUUaBwRHZ5+Kc CmAc1+ilB7/wfKuHge2VQHRy3T+w//7JItGJ+4wL6CT0hUzelHb2TXJa6Lplv+st kIH6YAT/Zh91gPzMDR/NXO8Tml2esZzLUuhz+GU2D+BQwCQl6yauBnQQ3VkG7dPC zU+rY/4U5AOlsUonuAVjmWCMvEN4suEVSl3gPSjQwkH//zRoWA9XmL7fEZEeiPDW VWmowQjuBYfsc97c8gFO6Khj+38sFfoUBr9fzz1gL3Qr+IS8DoY= -----END CERTIFICATE-----Generated at Thu Sep 24 12:04:19 2026 by rpki-client