$ rpki-client -vvvf rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft File: 9DE0710D199DAE298457CA63B91BD20C03F148B9.mft (raw, json) Hash identifier: WnIig+FoY0ge+kXnZZ39Q8ljHSL4EWY5pCafKlg81bc= Subject key identifier: 18:40:2D:FC:1E:2F:FD:BA:E8:11:12:0F:A0:D0:26:54:AD:93:D8:0B Authority key identifier: 9D:E0:71:0D:19:9D:AE:29:84:57:CA:63:B9:1B:D2:0C:03:F1:48:B9 Certificate issuer: /CN=9DE0710D199DAE298457CA63B91BD20C03F148B9 Certificate serial: 4D23626644BF3D14BCA518860B485E62719509FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft Manifest number: CA Signing time: Wed 30 Sep 2026 03:13:19 +0000 Manifest this update: Wed 30 Sep 2026 03:08:19 +0000 Manifest next update: Thu 01 Oct 2026 04:19:19 +0000 Files and hashes: 1: 9DE0710D199DAE298457CA63B91BD20C03F148B9.crl (hash: GzJmpWm6TgtVTiHmAQJ7W+KFfjigiFKcYgg6rxZMspU=) 2: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: Wixcu+2ilRcFPig7lum9EHWYiNT3uxWOphv6H0Og4uE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.crl rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 04:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:23:62:66:44:bf:3d:14:bc:a5:18:86:0b:48:5e:62:71:95:09:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DE0710D199DAE298457CA63B91BD20C03F148B9 Validity Not Before: Sep 30 03:08:19 2026 GMT Not After : Oct 1 04:19:19 2026 GMT Subject: CN=18402DFC1E2FFDBAE811120FA0D02654AD93D80B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:30:a6:77:2e:04:71:62:f0:a4:b0:b8:a4:ac: 03:36:4b:66:c6:da:4d:20:2d:1f:ba:bf:a6:6a:7d: 8f:7f:3a:c9:08:9c:09:d9:91:36:84:3a:91:2e:6c: 3a:4f:8b:c4:51:79:ac:18:37:1c:1d:7b:61:e4:e0: 7b:85:36:35:21:5d:a0:82:7f:47:eb:52:2f:f8:60: c6:2d:3e:b3:96:36:b0:ca:28:fb:4f:60:5e:43:62: 60:32:6c:a6:a8:2e:2d:f8:7f:f1:e7:4b:1f:38:d8: 26:fe:1b:12:e2:3a:d4:06:a1:a4:12:ba:c4:66:b3: 0a:df:36:37:61:eb:89:28:e5:94:a2:63:5f:31:b9: a0:ab:00:d0:ce:73:5e:ee:ac:7f:10:58:1c:6c:cb: 22:2d:77:1f:63:31:ce:a0:14:7e:48:fa:5b:b4:5b: a1:70:70:bf:f7:cb:24:51:c7:5d:a9:4e:08:9d:2d: 90:d7:c8:b9:a8:75:7b:bf:17:4f:14:c2:dd:db:aa: 25:20:43:e2:57:7d:a1:02:2b:75:d2:b7:ff:b6:63: 26:d5:1a:be:31:f4:ba:20:b3:41:46:6f:83:7b:39: 2d:35:b9:27:67:ea:2a:18:bf:49:05:53:51:a3:90: 33:b6:6e:31:13:fc:2f:63:f4:12:9d:95:3a:08:5d: ba:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:40:2D:FC:1E:2F:FD:BA:E8:11:12:0F:A0:D0:26:54:AD:93:D8:0B X509v3 Authority Key Identifier: keyid:9D:E0:71:0D:19:9D:AE:29:84:57:CA:63:B9:1B:D2:0C:03:F1:48:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:b5:6b:70:8b:72:1d:eb:6f:2e:d1:bb:a1:fd:a3:b8:4f:bd: 32:f8:3b:69:73:3e:50:df:52:5b:5e:04:95:ac:d6:d3:4f:91: e1:91:54:15:c7:fc:b7:a2:87:d2:ec:4e:43:11:de:02:4a:7e: bc:a0:76:ae:0d:b9:e3:36:68:43:86:5b:d9:6c:4f:f9:ab:fa: 73:79:f4:e0:95:54:0c:71:4b:99:ab:bf:25:d5:bb:9e:ed:e4: 1c:e9:b4:b3:f4:46:00:27:ad:f3:88:d7:4c:b5:58:eb:0c:24: 6b:70:e0:bf:3b:a5:b6:f6:3d:df:27:8b:da:6e:04:98:ff:0f: f2:33:28:24:4d:73:ff:0c:e9:10:e1:7f:68:96:48:b2:d1:ba: 41:0b:da:1e:a1:a8:55:2b:4b:81:38:39:5e:b6:00:ad:68:1f: 94:34:5d:3a:b9:f0:78:fe:20:c1:51:aa:6d:04:6c:81:de:73: 99:fc:21:87:35:79:ce:19:8b:2e:c2:d9:38:5b:3a:95:5f:48: c2:64:28:36:05:68:f3:41:0f:19:6f:58:10:78:f2:75:5e:40: 69:aa:45:b5:47:c3:1c:c5:84:20:e4:0f:8e:d1:5e:bb:34:03: 79:57:27:3a:72:fc:e0:c8:80:91:a6:1b:ac:09:86:bb:69:66: 3f:2e:04:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTSNiZkS/PRS8pRiGC0heYnGVCfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURFMDcxMEQxOTlEQUUyOTg0NTdDQTYzQjkxQkQyMEMw M0YxNDhCOTAeFw0yNjA5MzAwMzA4MTlaFw0yNjEwMDEwNDE5MTlaMDMxMTAvBgNV BAMTKDE4NDAyREZDMUUyRkZEQkFFODExMTIwRkEwRDAyNjU0QUQ5M0Q4MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeMKZ3LgRxYvCksLikrAM2S2bG 2k0gLR+6v6ZqfY9/OskInAnZkTaEOpEubDpPi8RReawYNxwde2Hk4HuFNjUhXaCC f0frUi/4YMYtPrOWNrDKKPtPYF5DYmAybKaoLi34f/HnSx842Cb+GxLiOtQGoaQS usRmswrfNjdh64ko5ZSiY18xuaCrANDOc17urH8QWBxsyyItdx9jMc6gFH5I+lu0 W6FwcL/3yyRRx12pTgidLZDXyLmodXu/F08Uwt3bqiUgQ+JXfaECK3XSt/+2YybV Gr4x9Logs0FGb4N7OS01uSdn6ioYv0kFU1GjkDO2bjET/C9j9BKdlToIXbqpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGEAt/B4v/broERIPoNAmVK2T2AswHwYDVR0j BBgwFoAUneBxDRmdrimEV8pjuRvSDAPxSLkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjVmODQyNzgtZTA2ZC00MTE5LWJhNDQtNWMzMjk2OGE4YmJkLzAvOURFMDcxMEQx OTlEQUUyOTg0NTdDQTYzQjkxQkQyMEMwM0YxNDhCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REUwNzEwRDE5OURBRTI5ODQ1N0NBNjNCOTFCRDIwQzAzRjE0 OEI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjVmODQyNzgtZTA2ZC00MTE5LWJh NDQtNWMzMjk2OGE4YmJkLzAvOURFMDcxMEQxOTlEQUUyOTg0NTdDQTYzQjkxQkQy MEMwM0YxNDhCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADW1a3CLch3rby7Ru6H9o7hPvTL4O2lzPlDf UlteBJWs1tNPkeGRVBXH/Leih9LsTkMR3gJKfrygdq4NueM2aEOGW9lsT/mr+nN5 9OCVVAxxS5mrvyXVu57t5BzptLP0RgAnrfOI10y1WOsMJGtw4L87pbb2Pd8ni9pu BJj/D/IzKCRNc/8M6RDhf2iWSLLRukEL2h6hqFUrS4E4OV62AK1oH5Q0XTq58Hj+ IMFRqm0EbIHec5n8IYc1ec4Ziy7C2ThbOpVfSMJkKDYFaPNBDxlvWBB48nVeQGmq RbVHwxzFhCDkD47RXrs0A3lXJzpy/ODIgJGmG6wJhrtpZj8uBAg= -----END CERTIFICATE-----Generated at Wed Sep 30 19:19:43 2026 by rpki-client