$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft File: 09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft (raw, json) Hash identifier: l8/7YL92bOGcFV6lufMc+xU48YYpug1VAid6bntElvc= Subject key identifier: 9B:D0:73:8D:DB:EE:45:D2:C2:7B:B9:D6:6F:F2:45:D7:AA:55:5D:7D Authority key identifier: 09:C4:BA:8A:F7:41:A5:1F:DD:8C:55:09:17:C9:6D:39:5C:BE:0F:FD Certificate issuer: /CN=09C4BA8AF741A51FDD8C550917C96D395CBE0FFD Certificate serial: 34CC7D9B59AD9B9E912643DA7AB7751E2FF6260B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 05:32:38 +0000 Manifest this update: Thu 24 Sep 2026 05:27:38 +0000 Manifest next update: Fri 25 Sep 2026 08:43:38 +0000 Files and hashes: 1: 09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.crl (hash: Ld4Tg6WwBjN0jtYeXXG25gRFYkl7AiVQ8qhuDyYWH3c=) 2: 3131332e32302e3133362e302f32312d3234203d3e203435373136.roa (hash: 9Dp0sbY0tRdXCsPfX1Bi/rh765yhn92aMlIVBuucvDU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.crl rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:cc:7d:9b:59:ad:9b:9e:91:26:43:da:7a:b7:75:1e:2f:f6:26:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09C4BA8AF741A51FDD8C550917C96D395CBE0FFD Validity Not Before: Sep 24 05:27:38 2026 GMT Not After : Sep 25 08:43:38 2026 GMT Subject: CN=9BD0738DDBEE45D2C27BB9D66FF245D7AA555D7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:46:9b:99:88:d3:18:99:f0:38:66:3d:3a:1d: 2e:d2:e4:4c:00:f8:95:cf:2b:81:d0:f2:7a:24:7e: b0:38:d9:bd:ef:df:4c:57:c3:98:10:86:fa:af:c2: 36:76:e2:54:48:98:f0:db:8e:da:2c:31:44:68:49: 15:3c:a9:98:c7:4c:d7:4a:5f:8a:13:50:5a:f3:c0: 2f:ef:97:22:e2:7b:82:12:17:0d:4e:7a:ae:55:08: 04:19:60:b1:30:bd:07:a0:38:4a:97:39:09:dd:98: 25:fe:7b:5b:90:a7:ae:0f:0c:6f:5d:3b:4a:c8:48: b7:44:77:31:5c:d1:9a:b3:ff:73:ee:6c:e5:1a:a9: 17:3f:1a:20:d3:07:09:02:af:86:f1:15:68:a0:d3: ea:c3:2e:04:42:5d:62:7f:25:2b:09:c7:03:b3:42: ab:f0:c3:30:d0:b7:b7:1c:5a:25:c6:fb:3e:36:9e: 45:8a:58:17:55:3b:54:60:80:34:e4:cc:f2:9c:f2: 91:bf:b5:74:1d:4d:ee:59:a0:f5:7f:6a:84:ee:f2: 9d:e1:eb:c6:b4:73:1f:cb:07:89:fe:6e:f4:6d:cf: 1b:ff:64:82:07:77:6c:d7:f1:a8:74:8b:49:2c:08: ef:46:2b:ce:8a:fa:82:32:fd:1d:d1:63:1a:ca:ad: 6e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D0:73:8D:DB:EE:45:D2:C2:7B:B9:D6:6F:F2:45:D7:AA:55:5D:7D X509v3 Authority Key Identifier: keyid:09:C4:BA:8A:F7:41:A5:1F:DD:8C:55:09:17:C9:6D:39:5C:BE:0F:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:34:64:62:1e:b4:e0:4a:29:c6:da:de:15:d1:2f:be:a0:7a: 2e:0d:d0:6d:d8:d6:c9:36:e9:ae:f4:ac:a6:ea:fa:d5:c6:90: 45:a9:98:bd:48:3a:38:cf:a1:03:7b:4a:53:7a:85:96:28:35: a9:5d:5c:13:18:11:23:4c:ad:2e:88:b1:c8:10:28:7b:43:d1: a7:cb:3f:3b:ff:1c:00:f2:a7:6a:83:dd:30:65:fb:d9:0c:be: 28:9e:9f:8b:46:af:15:ca:ff:51:37:44:eb:40:4f:93:4f:4a: 62:0e:55:0f:2f:e0:a3:7b:de:45:11:91:bb:2b:de:03:fb:08: 61:9c:e0:ba:c1:e0:4e:16:8a:5b:8f:6b:0a:9a:08:f8:fa:2a: 4a:15:be:e8:89:36:25:35:2a:0a:6f:2d:34:52:e7:53:12:c8: 6b:0d:fa:cf:d7:b6:85:b9:04:f3:32:b5:47:78:ca:da:07:a4: 2e:1c:2f:b6:a0:34:b0:b3:8d:b0:18:7a:82:d2:ca:ea:2f:0b: 8c:ba:17:89:2b:ca:88:f2:4f:29:6c:95:9d:f9:b1:51:a9:9f: 52:ee:7a:e3:71:72:92:96:a3:95:73:67:90:b3:02:09:0a:5e: ea:80:f6:08:14:3b:4a:16:0b:14:7c:36:81:82:1a:d5:89:cd: 2b:0f:d3:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNMx9m1mtm56RJkPaerd1Hi/2JgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlDNEJBOEFGNzQxQTUxRkREOEM1NTA5MTdDOTZEMzk1 Q0JFMEZGRDAeFw0yNjA5MjQwNTI3MzhaFw0yNjA5MjUwODQzMzhaMDMxMTAvBgNV BAMTKDlCRDA3MzhEREJFRTQ1RDJDMjdCQjlENjZGRjI0NUQ3QUE1NTVEN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuRpuZiNMYmfA4Zj06HS7S5EwA +JXPK4HQ8nokfrA42b3v30xXw5gQhvqvwjZ24lRImPDbjtosMURoSRU8qZjHTNdK X4oTUFrzwC/vlyLie4ISFw1Oeq5VCAQZYLEwvQegOEqXOQndmCX+e1uQp64PDG9d O0rISLdEdzFc0Zqz/3PubOUaqRc/GiDTBwkCr4bxFWig0+rDLgRCXWJ/JSsJxwOz QqvwwzDQt7ccWiXG+z42nkWKWBdVO1RggDTkzPKc8pG/tXQdTe5ZoPV/aoTu8p3h 68a0cx/LB4n+bvRtzxv/ZIIHd2zX8ah0i0ksCO9GK86K+oIy/R3RYxrKrW7BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm9BzjdvuRdLCe7nWb/JF16pVXX0wHwYDVR0j BBgwFoAUCcS6ivdBpR/djFUJF8ltOVy+D/0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhZjAwZWMtZDA4My00YTlmLTgyMWYtN2RhMThmODE1NDE3LzAvMDlDNEJBOEFG NzQxQTUxRkREOEM1NTA5MTdDOTZEMzk1Q0JFMEZGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOUM0QkE4QUY3NDFBNTFGREQ4QzU1MDkxN0M5NkQzOTVDQkUw RkZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhZjAwZWMtZDA4My00YTlmLTgy MWYtN2RhMThmODE1NDE3LzAvMDlDNEJBOEFGNzQxQTUxRkREOEM1NTA5MTdDOTZE Mzk1Q0JFMEZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIw0ZGIetOBKKcba3hXRL76gei4N0G3Y1sk2 6a70rKbq+tXGkEWpmL1IOjjPoQN7SlN6hZYoNaldXBMYESNMrS6IscgQKHtD0afL Pzv/HADyp2qD3TBl+9kMviien4tGrxXK/1E3ROtAT5NPSmIOVQ8v4KN73kURkbsr 3gP7CGGc4LrB4E4WiluPawqaCPj6KkoVvuiJNiU1KgpvLTRS51MSyGsN+s/XtoW5 BPMytUd4ytoHpC4cL7agNLCzjbAYeoLSyuovC4y6F4kryojyTylslZ35sVGpn1Lu euNxcpKWo5VzZ5CzAgkKXuqA9ggUO0oWCxR8NoGCGtWJzSsP05I= -----END CERTIFICATE-----Generated at Thu Sep 24 10:27:00 2026 by rpki-client