$ rpki-client -vvvf rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft File: 9E6973F078195021DC7E37753A16BDC3BD2CE345.mft (raw, json) Hash identifier: G3uqFc9SmbWTRo3rcEquZRE6YGxGssK6dB1FRNUfbRU= Subject key identifier: 4E:A7:11:CF:01:10:BE:7C:A7:62:EC:DA:6F:16:06:48:2D:55:4D:4D Authority key identifier: 9E:69:73:F0:78:19:50:21:DC:7E:37:75:3A:16:BD:C3:BD:2C:E3:45 Certificate issuer: /CN=9E6973F078195021DC7E37753A16BDC3BD2CE345 Certificate serial: 5C808E15E1744224BBFE9BD5EAF75606CBF69223 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 10:38:41 +0000 Manifest this update: Fri 25 Sep 2026 10:33:41 +0000 Manifest next update: Sat 26 Sep 2026 12:18:41 +0000 Files and hashes: 1: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: rDhWNdSE+MiC9nWV9xic84xxhEExen6QKYzm8hSRAZY=) 2: 9E6973F078195021DC7E37753A16BDC3BD2CE345.crl (hash: wRuq3ck5ckD+b+QmGupwiS+IfdARyakJCMT5DUn9zyQ=) 3: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: 70nvBnU+j3RyzkTv1EtBoPc4XFT8NOWYE+TEopumrFA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.crl rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 12:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:80:8e:15:e1:74:42:24:bb:fe:9b:d5:ea:f7:56:06:cb:f6:92:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6973F078195021DC7E37753A16BDC3BD2CE345 Validity Not Before: Sep 25 10:33:41 2026 GMT Not After : Sep 26 12:18:41 2026 GMT Subject: CN=4EA711CF0110BE7CA762ECDA6F1606482D554D4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:d0:09:9b:1a:dc:25:a2:40:42:0d:52:39: b8:99:1b:3a:77:98:f4:37:4d:43:19:02:91:8b:2f: 2e:2d:8c:a0:15:21:82:2a:54:e0:bf:dd:ea:c5:1c: 13:56:03:09:05:f1:28:bc:9a:8e:66:59:29:69:a4: cd:0d:61:c9:2c:61:b8:ad:03:f7:80:71:5a:68:9a: d1:6c:14:04:f2:f0:24:7e:f2:b1:63:2b:21:c9:40: e5:e4:99:ba:45:27:12:33:5c:62:d7:da:54:57:b3: 97:78:6c:48:3e:c1:61:40:aa:15:99:b4:dc:a9:90: e5:16:1d:b3:d5:ff:cc:66:8b:ad:ca:ab:d6:f3:ab: 06:9a:87:07:7a:04:ab:74:64:ef:d7:a0:38:b2:ab: 4a:d4:f0:57:d4:52:7d:a7:d3:d7:06:11:47:da:2e: 86:9d:f9:59:be:cf:22:aa:10:ec:68:8d:9f:c9:1c: 1d:b5:a2:de:80:60:28:8d:5e:e5:ca:41:24:45:6b: b9:53:ba:e7:6b:c5:12:3d:f7:44:10:7e:17:51:30: 90:41:f6:c0:68:ff:46:9c:d9:9f:71:ba:fa:f3:82: 55:31:35:6b:3c:bf:f5:d6:89:e5:06:66:ce:08:59: 0f:38:29:e6:06:1e:84:58:17:32:4f:37:af:63:b5: 25:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A7:11:CF:01:10:BE:7C:A7:62:EC:DA:6F:16:06:48:2D:55:4D:4D X509v3 Authority Key Identifier: keyid:9E:69:73:F0:78:19:50:21:DC:7E:37:75:3A:16:BD:C3:BD:2C:E3:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:62:ff:ab:3d:7f:77:3f:cc:e9:96:fa:88:85:b3:f7:39:ac: 5b:ee:b7:7b:86:2b:1d:60:8a:66:ca:03:19:43:cb:6f:47:59: 39:b8:84:e3:08:f1:05:37:cb:af:4d:62:f0:7c:83:be:cf:5e: 1f:e9:de:41:48:8f:86:94:cd:42:ae:45:e5:17:04:0d:6c:18: ce:c7:69:e2:9c:a5:5a:ce:02:6c:37:4e:14:d2:04:6b:8d:b1: 2d:28:20:56:d0:8d:49:c4:f0:90:e1:71:35:b2:82:ba:ea:32: 97:ee:43:01:31:dc:a5:be:e9:1b:09:22:93:56:ee:d8:22:90: cb:db:fd:31:7a:3c:f3:be:8f:f7:b5:1b:8c:aa:cf:bf:24:e7: 5d:fa:b0:7d:61:3c:31:a8:2a:9a:61:29:f0:99:da:a6:87:01: 7a:ec:83:25:42:01:8f:97:35:23:ff:e0:1f:95:33:36:d6:67: 27:7e:e1:dc:bb:8e:9b:fa:b2:4b:ad:0e:bc:a2:ef:8c:5a:95: d9:ce:c4:8d:9d:f2:88:26:fa:8c:f3:d3:3c:a4:69:d4:2f:10: b0:28:08:10:c4:ce:03:79:6a:5c:49:c3:12:54:be:6c:96:84: 16:51:5a:62:ab:0e:94:24:79:72:ce:f0:0d:00:fe:c5:a5:11: 55:d6:d8:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXICOFeF0QiS7/pvV6vdWBsv2kiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2OTczRjA3ODE5NTAyMURDN0UzNzc1M0ExNkJEQzNC RDJDRTM0NTAeFw0yNjA5MjUxMDMzNDFaFw0yNjA5MjYxMjE4NDFaMDMxMTAvBgNV BAMTKDRFQTcxMUNGMDExMEJFN0NBNzYyRUNEQTZGMTYwNjQ4MkQ1NTRENEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4E9AJmxrcJaJAQg1SObiZGzp3 mPQ3TUMZApGLLy4tjKAVIYIqVOC/3erFHBNWAwkF8Si8mo5mWSlppM0NYcksYbit A/eAcVpomtFsFATy8CR+8rFjKyHJQOXkmbpFJxIzXGLX2lRXs5d4bEg+wWFAqhWZ tNypkOUWHbPV/8xmi63Kq9bzqwaahwd6BKt0ZO/XoDiyq0rU8FfUUn2n09cGEUfa Load+Vm+zyKqEOxojZ/JHB21ot6AYCiNXuXKQSRFa7lTuudrxRI990QQfhdRMJBB 9sBo/0ac2Z9xuvrzglUxNWs8v/XWieUGZs4IWQ84KeYGHoRYFzJPN69jtSUNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTqcRzwEQvnynYuzabxYGSC1VTU0wHwYDVR0j BBgwFoAUnmlz8HgZUCHcfjd1Oha9w70s40UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjdkYjIzYjctOTE1OS00NmM3LTg4NTMtMDY2NTRhZTQ3YWVkLzAvOUU2OTczRjA3 ODE5NTAyMURDN0UzNzc1M0ExNkJEQzNCRDJDRTM0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RTY5NzNGMDc4MTk1MDIxREM3RTM3NzUzQTE2QkRDM0JEMkNF MzQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjdkYjIzYjctOTE1OS00NmM3LTg4 NTMtMDY2NTRhZTQ3YWVkLzAvOUU2OTczRjA3ODE5NTAyMURDN0UzNzc1M0ExNkJE QzNCRDJDRTM0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFi/6s9f3c/zOmW+oiFs/c5rFvut3uGKx1g imbKAxlDy29HWTm4hOMI8QU3y69NYvB8g77PXh/p3kFIj4aUzUKuReUXBA1sGM7H aeKcpVrOAmw3ThTSBGuNsS0oIFbQjUnE8JDhcTWygrrqMpfuQwEx3KW+6RsJIpNW 7tgikMvb/TF6PPO+j/e1G4yqz78k5136sH1hPDGoKpphKfCZ2qaHAXrsgyVCAY+X NSP/4B+VMzbWZyd+4dy7jpv6skutDryi74xaldnOxI2d8ogm+ozz0zykadQvELAo CBDEzgN5alxJwxJUvmyWhBZRWmKrDpQkeXLO8A0A/sWlEVXW2D0= -----END CERTIFICATE-----Generated at Sat Sep 26 03:58:19 2026 by rpki-client