$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft File: 9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft (raw, json) Hash identifier: EUN90rmaygdGxvgP/QhuuKHAJ84rhCxED9w36tuiGiY= Subject key identifier: 4D:D1:35:F0:C2:2B:F8:82:7F:03:E3:84:CB:DD:72:40:A2:62:8F:D8 Authority key identifier: 95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0 Certificate issuer: /CN=9588905DE5DA3CEB7B575E4C7B475E22276450F0 Certificate serial: 14F27989BFAF6EC4EDF4CCBBA7E134D3453705B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 14:43:59 +0000 Manifest this update: Thu 24 Sep 2026 14:38:59 +0000 Manifest next update: Fri 25 Sep 2026 18:30:59 +0000 Files and hashes: 1: 9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl (hash: z1ryg4n1KgXuDDxTYILPHdnU0+E9fU3Qn727yQQBYGI=) 2: 34392e3135362e36302e302f32342d3234203d3e203535363637.roa (hash: dUcYMxyxr0kR8WWHVwUrDj577thKceAoVrMPKHmFvPk=) 3: 34392e3135362e35372e302f32342d3234203d3e203535363637.roa (hash: t5M4q+wjV6k977kCQYS5NWkmORi7rVl+URL29ZG5i/Y=) 4: 34392e3135362e35362e302f32332d3233203d3e203535363637.roa (hash: LXofhMEruHNZkVP/FDGdRjlE9GAdxzBp7sQ6AFEv168=) 5: 34392e3135362e35362e302f32342d3234203d3e203535363637.roa (hash: aLMfdsIVj+NArpBFKbx+R57YG2afPDJAmU3iGMb6+6c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:f2:79:89:bf:af:6e:c4:ed:f4:cc:bb:a7:e1:34:d3:45:37:05:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9588905DE5DA3CEB7B575E4C7B475E22276450F0 Validity Not Before: Sep 24 14:38:59 2026 GMT Not After : Sep 25 18:30:59 2026 GMT Subject: CN=4DD135F0C22BF8827F03E384CBDD7240A2628FD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a5:46:fa:23:b6:3f:f7:de:57:cb:25:9b:3a: 1b:bb:b7:4c:d7:2d:85:ff:5a:ee:20:97:74:56:ea: b8:72:2f:68:3d:78:89:9f:9a:ab:6c:99:07:89:a8: 41:61:c6:0a:9e:f7:61:bf:5d:ef:3d:06:ea:4c:85: 6b:19:30:2e:3e:7b:d9:13:be:94:45:37:04:83:45: df:40:72:7a:a4:fd:a5:8f:9a:06:3c:2b:13:80:15: cb:5c:5c:3a:2b:96:ce:05:54:43:e3:48:f9:d2:89: 84:9b:e0:a4:83:b3:7d:c5:8b:d9:aa:ad:c7:36:b8: ea:7a:c3:80:dc:fb:1f:14:b6:78:67:a8:b4:ea:b7: 86:2b:1b:84:23:cf:fb:7d:68:4c:de:fa:b0:97:98: ab:36:71:e6:77:ab:f4:d9:86:16:de:bd:ff:2c:f0: 87:43:e1:5e:80:9c:1a:37:46:bc:79:7d:74:79:5d: 60:5d:5f:7b:e5:0f:66:d2:da:b1:32:4e:28:4f:e6: de:35:85:5f:e5:6f:b9:f7:db:49:38:61:ee:a8:30: b0:1e:f5:6d:0d:c5:e0:bc:d9:87:20:0d:19:95:c0: c4:78:1e:b8:92:ec:6f:11:4b:5c:53:f1:23:c0:61: bb:c3:da:e5:fc:e1:b1:3c:dd:85:c3:4c:d9:82:50: be:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D1:35:F0:C2:2B:F8:82:7F:03:E3:84:CB:DD:72:40:A2:62:8F:D8 X509v3 Authority Key Identifier: keyid:95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:49:08:ad:c8:cf:6c:a5:1c:24:6c:67:0d:51:07:1f:da:aa: 58:ca:77:2e:51:d0:f8:e0:a6:3f:f7:50:70:66:e2:80:82:a9: 6e:94:9f:de:67:9e:17:b9:2e:79:24:8a:19:9d:98:97:f0:fc: ea:7c:2e:0b:92:c5:ee:8b:8c:5f:3e:e6:46:7e:1b:73:cb:d9: 83:b3:41:5b:29:8e:e7:24:6a:47:31:0e:dc:c8:1a:6b:4c:42: 43:22:32:f6:eb:9f:95:54:87:4d:90:bb:29:fe:3a:49:f1:c4: c2:cd:e9:2f:58:31:ed:ae:20:09:70:24:c9:ee:4a:89:11:1c: ae:e1:94:f0:93:cb:e3:5b:97:b8:77:5f:06:cc:cf:3e:74:46: 58:0a:25:58:c2:97:60:bb:fc:31:d3:9d:fd:28:6c:18:36:6a: 9e:2b:65:1d:9b:03:41:f4:23:61:e8:bc:9e:dd:c7:b9:7d:70: 8a:c7:10:7c:60:9b:60:65:0e:88:24:22:17:a0:2f:30:a8:29: 2e:07:c8:0b:4c:ca:a2:cb:b9:9a:74:d9:ef:cc:fe:86:52:1d: 58:db:1d:80:03:fa:40:c8:3c:21:2f:fe:dc:12:a8:b9:2d:e2: 12:8b:3d:d9:2e:d6:d8:9a:13:b0:d1:15:da:ab:19:35:26:6d: bf:25:74:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFPJ5ib+vbsTt9My7p+E000U3BbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU4ODkwNURFNURBM0NFQjdCNTc1RTRDN0I0NzVFMjIy NzY0NTBGMDAeFw0yNjA5MjQxNDM4NTlaFw0yNjA5MjUxODMwNTlaMDMxMTAvBgNV BAMTKDRERDEzNUYwQzIyQkY4ODI3RjAzRTM4NENCREQ3MjQwQTI2MjhGRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXpUb6I7Y/995XyyWbOhu7t0zX LYX/Wu4gl3RW6rhyL2g9eImfmqtsmQeJqEFhxgqe92G/Xe89BupMhWsZMC4+e9kT vpRFNwSDRd9Acnqk/aWPmgY8KxOAFctcXDorls4FVEPjSPnSiYSb4KSDs33Fi9mq rcc2uOp6w4Dc+x8UtnhnqLTqt4YrG4Qjz/t9aEze+rCXmKs2ceZ3q/TZhhbevf8s 8IdD4V6AnBo3Rrx5fXR5XWBdX3vlD2bS2rEyTihP5t41hV/lb7n320k4Ye6oMLAe 9W0NxeC82YcgDRmVwMR4HriS7G8RS1xT8SPAYbvD2uX84bE83YXDTNmCUL5LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTdE18MIr+IJ/A+OEy91yQKJij9gwHwYDVR0j BBgwFoAUlYiQXeXaPOt7V15Me0deIidkUPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIwNmNmNTAtYTNkMS00Y2M5LTkyNjAtOTg3YjJjYTBjOTI3LzAvOTU4ODkwNURF NURBM0NFQjdCNTc1RTRDN0I0NzVFMjIyNzY0NTBGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTg4OTA1REU1REEzQ0VCN0I1NzVFNEM3QjQ3NUUyMjI3NjQ1 MEYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIwNmNmNTAtYTNkMS00Y2M5LTky NjAtOTg3YjJjYTBjOTI3LzAvOTU4ODkwNURFNURBM0NFQjdCNTc1RTRDN0I0NzVF MjIyNzY0NTBGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdJCK3Iz2ylHCRsZw1RBx/aqljKdy5R0Pjg pj/3UHBm4oCCqW6Un95nnhe5LnkkihmdmJfw/Op8LguSxe6LjF8+5kZ+G3PL2YOz QVspjuckakcxDtzIGmtMQkMiMvbrn5VUh02Quyn+OknxxMLN6S9YMe2uIAlwJMnu SokRHK7hlPCTy+Nbl7h3XwbMzz50RlgKJVjCl2C7/DHTnf0obBg2ap4rZR2bA0H0 I2HovJ7dx7l9cIrHEHxgm2BlDogkIhegLzCoKS4HyAtMyqLLuZp02e/M/oZSHVjb HYAD+kDIPCEv/twSqLkt4hKLPdku1tiaE7DRFdqrGTUmbb8ldDU= -----END CERTIFICATE-----Generated at Thu Sep 24 17:52:54 2026 by rpki-client