$ rpki-client -vvvf rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft File: 9B2D9946FF043D1081C26FD38F0817310077BFC7.mft (raw, json) Hash identifier: /H03/leEYZ1ophTzlNjbRW97O69o13Z8qIFXha1coQk= Subject key identifier: DA:6D:18:A8:D0:36:62:A3:88:51:7D:DE:4D:C1:BE:30:93:97:41:FE Authority key identifier: 9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7 Certificate issuer: /CN=9B2D9946FF043D1081C26FD38F0817310077BFC7 Certificate serial: 41D060608FF6569CE45CFD7DB905EFC276748C03 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft Manifest number: BF Signing time: Tue 22 Sep 2026 23:51:03 +0000 Manifest this update: Tue 22 Sep 2026 23:46:03 +0000 Manifest next update: Thu 24 Sep 2026 03:33:03 +0000 Files and hashes: 1: 9B2D9946FF043D1081C26FD38F0817310077BFC7.crl (hash: nOCP1u+6+Q0gOQN1AlzYzZyoYLvJnCHeErm5yDFhF+U=) 2: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (hash: nWvsjEg3FhCbHhiH6HxunuDCxB9lgrvkKOpoSSa7E9Q=) 3: 3136302e32322e39322e302f32342d3234203d3e20313532383335.roa (hash: oePR/73r7MSIzHQUks2lMsK7CVUF0CNaDFGyG/xqYVQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.crl rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 03:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:d0:60:60:8f:f6:56:9c:e4:5c:fd:7d:b9:05:ef:c2:76:74:8c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2D9946FF043D1081C26FD38F0817310077BFC7 Validity Not Before: Sep 22 23:46:03 2026 GMT Not After : Sep 24 03:33:03 2026 GMT Subject: CN=DA6D18A8D03662A388517DDE4DC1BE30939741FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:84:1e:02:ad:6c:57:6b:57:c9:69:eb:51:1b: c8:2c:16:49:73:1c:ec:a7:c0:58:53:ee:be:00:16: f6:2a:4e:6d:65:61:68:0e:22:6c:60:03:10:d3:1f: 19:43:06:91:22:1e:a5:d0:4c:0e:12:24:bc:b1:0b: 7d:4b:13:6c:b8:23:27:f2:88:4d:94:2e:4d:8f:18: 42:6a:68:b9:78:bf:1d:a0:4e:71:6d:b2:42:2c:bd: 94:f0:ba:96:86:db:d1:1d:87:03:08:0f:5a:20:3c: 9b:e8:e1:b1:4a:68:a7:53:eb:4a:1e:70:b1:ae:a8: 34:e6:9a:d6:b1:d0:58:0a:2b:77:bc:cd:0d:1b:c2: 64:5b:32:0d:c3:5c:9a:1f:35:2a:cc:c2:f6:74:3e: 37:ee:d5:e2:47:6f:6d:b9:31:f2:75:2e:1d:80:6b: ca:aa:59:f9:f6:1f:60:75:f0:2b:66:b8:ae:06:89: ad:65:b3:61:59:9d:1b:25:f9:62:23:7d:aa:b5:cf: 82:5d:7e:80:78:02:56:3d:03:eb:25:91:a3:95:3c: 76:73:64:41:f6:20:6e:1b:ae:db:a0:65:89:26:dd: 24:0f:dc:20:cc:f7:fd:cb:60:fa:ec:fb:bb:18:4d: 35:9e:5f:6e:db:07:f7:11:0f:fe:da:a0:99:8b:2a: 1b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6D:18:A8:D0:36:62:A3:88:51:7D:DE:4D:C1:BE:30:93:97:41:FE X509v3 Authority Key Identifier: keyid:9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:59:2b:af:8b:92:42:d4:63:07:83:29:b2:3e:c4:ec:cb:27: 9d:72:0c:69:ea:00:65:0c:b0:fe:0c:23:86:32:59:8a:8f:21: 96:6d:6f:16:1a:a8:54:5b:f7:7c:ef:04:a8:35:61:e6:51:f0: 30:13:a3:68:e7:e4:75:6e:db:1b:2d:b7:49:25:4c:f6:2c:1f: 95:c0:42:0e:4c:23:7a:d1:cf:ab:dc:71:dc:41:3a:8d:79:34: 74:64:3c:f2:b1:1f:96:f4:60:b7:e3:ad:dc:f8:a1:aa:73:ac: 51:24:19:67:3b:62:63:82:3c:7d:f8:ec:8c:df:e6:1a:4a:ab: 8d:f7:38:d4:b3:12:25:90:ea:53:5d:29:d8:4b:06:e4:ed:9b: d0:05:56:62:c2:7b:5b:81:6d:31:88:52:ba:07:c1:c2:46:22: e4:c5:a5:a1:ff:0a:1a:4e:a3:7f:1c:5f:a6:95:0d:92:42:6b: 4d:a5:2f:cf:ed:06:0d:ef:0f:46:97:7b:83:8b:b0:68:14:3f: c1:02:df:23:00:68:75:23:9b:b0:94:46:c1:ef:0b:2c:b0:6f: 65:90:c0:8f:e0:4f:0d:04:2d:6b:8c:3a:c5:fe:60:73:95:18: 88:34:3a:8d:41:25:52:c5:35:24:7b:a2:5e:f4:a6:ca:fa:d0: 8f:f9:4b:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQdBgYI/2VpzkXP19uQXvwnZ0jAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyRDk5NDZGRjA0M0QxMDgxQzI2RkQzOEYwODE3MzEw MDc3QkZDNzAeFw0yNjA5MjIyMzQ2MDNaFw0yNjA5MjQwMzMzMDNaMDMxMTAvBgNV BAMTKERBNkQxOEE4RDAzNjYyQTM4ODUxN0RERTREQzFCRTMwOTM5NzQxRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqhB4CrWxXa1fJaetRG8gsFklz HOynwFhT7r4AFvYqTm1lYWgOImxgAxDTHxlDBpEiHqXQTA4SJLyxC31LE2y4Iyfy iE2ULk2PGEJqaLl4vx2gTnFtskIsvZTwupaG29EdhwMID1ogPJvo4bFKaKdT60oe cLGuqDTmmtax0FgKK3e8zQ0bwmRbMg3DXJofNSrMwvZ0Pjfu1eJHb225MfJ1Lh2A a8qqWfn2H2B18CtmuK4Gia1ls2FZnRsl+WIjfaq1z4JdfoB4AlY9A+slkaOVPHZz ZEH2IG4brtugZYkm3SQP3CDM9/3LYPrs+7sYTTWeX27bB/cRD/7aoJmLKht1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2m0YqNA2YqOIUX3eTcG+MJOXQf4wHwYDVR0j BBgwFoAUmy2ZRv8EPRCBwm/TjwgXMQB3v8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJkMjliMzItM2EyOS00YTE0LWJjOWItYzc2YTAwN2NhMDMyLzAvOUIyRDk5NDZG RjA0M0QxMDgxQzI2RkQzOEYwODE3MzEwMDc3QkZDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85QjJEOTk0NkZGMDQzRDEwODFDMjZGRDM4RjA4MTczMTAwNzdC RkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJkMjliMzItM2EyOS00YTE0LWJj OWItYzc2YTAwN2NhMDMyLzAvOUIyRDk5NDZGRjA0M0QxMDgxQzI2RkQzOEYwODE3 MzEwMDc3QkZDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBZK6+LkkLUYweDKbI+xOzLJ51yDGnqAGUM sP4MI4YyWYqPIZZtbxYaqFRb93zvBKg1YeZR8DATo2jn5HVu2xstt0klTPYsH5XA Qg5MI3rRz6vccdxBOo15NHRkPPKxH5b0YLfjrdz4oapzrFEkGWc7YmOCPH347Izf 5hpKq433ONSzEiWQ6lNdKdhLBuTtm9AFVmLCe1uBbTGIUroHwcJGIuTFpaH/ChpO o38cX6aVDZJCa02lL8/tBg3vD0aXe4OLsGgUP8EC3yMAaHUjm7CURsHvCyywb2WQ wI/gTw0ELWuMOsX+YHOVGIg0Oo1BJVLFNSR7ol70psr60I/5SyQ= -----END CERTIFICATE-----Generated at Wed Sep 23 22:18:30 2026 by rpki-client