$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft File: B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft (raw, json) Hash identifier: vjmnFTRJzOws2NqhqXYnmUaxF+gzpHq37i4ZfvPDweA= Subject key identifier: 1D:27:DE:DD:1D:17:51:5A:D7:DD:DC:72:0B:C9:48:C6:95:7A:9A:49 Authority key identifier: B9:D7:A5:A4:9B:32:2E:D9:87:28:18:32:AB:CF:B5:DC:50:9A:B8:89 Certificate issuer: /CN=B9D7A5A49B322ED987281832ABCFB5DC509AB889 Certificate serial: 3705539A21E12F298AF63C7ACEB22B30861C0EEF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 09:57:56 +0000 Manifest this update: Thu 24 Sep 2026 09:52:56 +0000 Manifest next update: Fri 25 Sep 2026 09:57:56 +0000 Files and hashes: 1: B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl (hash: 3YF0awmA6VOBdEaOIXi6fpZ0SJmJtgzhDvwYvsRXQFQ=) 2: 3130332e3137362e3132312e302f32342d3234203d3e20313437313330.roa (hash: mPIkuQVE9R3LTUTej85wxcqgd13oKy/e6VbDwXPFIhY=) 3: 3130332e3137362e36382e302f32342d3234203d3e20313437313330.roa (hash: huLq2YMQLck+XmMqgf5+tIkuWDJY1pNSg4kGrXts0QE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:05:53:9a:21:e1:2f:29:8a:f6:3c:7a:ce:b2:2b:30:86:1c:0e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9D7A5A49B322ED987281832ABCFB5DC509AB889 Validity Not Before: Sep 24 09:52:56 2026 GMT Not After : Sep 25 09:57:56 2026 GMT Subject: CN=1D27DEDD1D17515AD7DDDC720BC948C6957A9A49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7e:9c:f4:97:9d:f4:23:a3:b0:2a:4e:8b:72: 72:b1:58:80:af:d3:06:f1:c3:60:5c:c0:79:10:06: 5b:36:55:ad:12:64:e5:f2:f6:bf:d4:19:4a:dd:51: 43:26:72:4b:14:6a:f4:dc:7b:75:9f:60:d0:8d:13: 4f:be:a3:57:87:07:37:06:a6:91:c9:4e:62:00:c4: 57:0f:f9:46:44:d4:f3:53:00:d5:88:f5:7a:a8:af: bc:e6:0d:a3:02:a9:48:b7:35:a0:39:0f:d3:1c:5a: 5d:f5:fc:03:cb:5b:8d:72:15:c5:c9:7f:51:c5:57: 48:2b:31:de:66:af:ae:94:a2:b1:c1:3e:51:1c:44: 35:a2:4e:73:cf:b0:94:df:27:1b:bc:83:38:55:f8: 56:17:a9:b8:de:43:c6:b7:f4:5e:25:bf:a4:c7:32: 0e:97:8b:d6:30:32:7a:83:e8:73:17:92:20:c0:87: 0a:ce:f7:c5:57:48:52:05:ea:09:f9:ad:29:d4:5b: bf:d2:7a:0a:15:7a:f8:83:92:7b:94:98:2f:d1:1a: e6:05:96:76:fe:a1:08:d0:c3:23:e2:50:72:d9:f8: 7b:f2:23:38:48:ac:eb:45:15:f0:5b:9d:25:c4:2b: a8:ab:f9:82:6f:80:bb:18:c8:de:3d:a1:16:62:b6: 68:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:27:DE:DD:1D:17:51:5A:D7:DD:DC:72:0B:C9:48:C6:95:7A:9A:49 X509v3 Authority Key Identifier: keyid:B9:D7:A5:A4:9B:32:2E:D9:87:28:18:32:AB:CF:B5:DC:50:9A:B8:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:20:dd:27:91:20:a9:f9:9b:6b:53:93:a1:bf:77:b4:ea:7f: ab:92:d4:cf:93:98:01:7a:59:9f:94:be:0c:a8:7f:1e:a6:28: 73:e9:08:87:ff:23:9c:f0:2d:91:b4:14:46:f3:a8:b4:cd:69: 27:d1:63:3f:bb:23:c5:54:76:1f:45:e6:ac:31:a5:b5:b0:39: 2c:8c:67:5b:f9:51:ea:dc:36:5a:7c:5f:a3:48:eb:27:5e:d4: b4:10:0e:56:c0:11:81:14:a5:d9:c6:ee:8a:33:35:53:29:b1: 66:7d:6c:bb:ea:0d:ca:d7:53:09:56:33:63:f7:43:9d:eb:30: 5d:52:d6:b3:ce:c8:4c:9e:87:bb:e2:fa:0c:2d:ec:b6:be:59: 17:e6:50:99:1f:eb:11:5c:87:f4:1b:13:b0:d6:03:bd:b6:a2: 51:54:20:b3:25:0a:58:dc:7e:3e:f1:a1:65:40:ab:73:9b:0a: cf:45:2a:76:53:0f:8a:cd:0f:8d:c0:e1:00:7e:cb:e8:ca:46: d4:44:a0:84:ed:7b:0b:34:9f:ef:f7:37:02:7e:11:54:cf:e3: 6b:ff:1e:95:93:fe:ce:db:a4:75:b4:ff:f7:62:d4:43:27:50: 38:b0:3d:ae:c4:f8:52:42:11:51:bf:6d:0a:53:73:9d:81:ee: b3:96:89:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNwVTmiHhLymK9jx6zrIrMIYcDu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlEN0E1QTQ5QjMyMkVEOTg3MjgxODMyQUJDRkI1REM1 MDlBQjg4OTAeFw0yNjA5MjQwOTUyNTZaFw0yNjA5MjUwOTU3NTZaMDMxMTAvBgNV BAMTKDFEMjdERUREMUQxNzUxNUFEN0REREM3MjBCQzk0OEM2OTU3QTlBNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtfpz0l530I6OwKk6LcnKxWICv 0wbxw2BcwHkQBls2Va0SZOXy9r/UGUrdUUMmcksUavTce3WfYNCNE0++o1eHBzcG ppHJTmIAxFcP+UZE1PNTANWI9Xqor7zmDaMCqUi3NaA5D9McWl31/APLW41yFcXJ f1HFV0grMd5mr66UorHBPlEcRDWiTnPPsJTfJxu8gzhV+FYXqbjeQ8a39F4lv6TH Mg6Xi9YwMnqD6HMXkiDAhwrO98VXSFIF6gn5rSnUW7/SegoVeviDknuUmC/RGuYF lnb+oQjQwyPiUHLZ+HvyIzhIrOtFFfBbnSXEK6ir+YJvgLsYyN49oRZitmj5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHSfe3R0XUVrX3dxyC8lIxpV6mkkwHwYDVR0j BBgwFoAUudelpJsyLtmHKBgyq8+13FCauIkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTk1MWRmZWUtYTc1Yi00NDIwLWE3NTUtMmM3MzU4YmFmN2QzLzAvQjlEN0E1QTQ5 QjMyMkVEOTg3MjgxODMyQUJDRkI1REM1MDlBQjg4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUQ3QTVBNDlCMzIyRUQ5ODcyODE4MzJBQkNGQjVEQzUwOUFC ODg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTk1MWRmZWUtYTc1Yi00NDIwLWE3 NTUtMmM3MzU4YmFmN2QzLzAvQjlEN0E1QTQ5QjMyMkVEOTg3MjgxODMyQUJDRkI1 REM1MDlBQjg4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEg3SeRIKn5m2tTk6G/d7Tqf6uS1M+TmAF6 WZ+Uvgyofx6mKHPpCIf/I5zwLZG0FEbzqLTNaSfRYz+7I8VUdh9F5qwxpbWwOSyM Z1v5UercNlp8X6NI6yde1LQQDlbAEYEUpdnG7oozNVMpsWZ9bLvqDcrXUwlWM2P3 Q53rMF1S1rPOyEyeh7vi+gwt7La+WRfmUJkf6xFch/QbE7DWA722olFUILMlCljc fj7xoWVAq3ObCs9FKnZTD4rND43A4QB+y+jKRtREoITtews0n+/3NwJ+EVTP42v/ HpWT/s7bpHW0//di1EMnUDiwPa7E+FJCEVG/bQpTc52B7rOWiYo= -----END CERTIFICATE-----Generated at Thu Sep 24 14:45:39 2026 by rpki-client