$ rpki-client -vvvf rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft File: 9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft (raw, json) Hash identifier: GVb7JwSTiZACbnfJ/yisyWK3e6mXUuYqsxACO6wmtQI= Subject key identifier: 01:54:06:28:0C:DD:69:F3:C1:AF:B0:95:FD:2B:7C:5C:22:1E:0D:B3 Authority key identifier: 9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D Certificate issuer: /CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D Certificate serial: 024964C022E20161D751A4DC364384BF25297DD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 11:19:38 +0000 Manifest this update: Thu 24 Sep 2026 11:14:38 +0000 Manifest next update: Fri 25 Sep 2026 14:45:38 +0000 Files and hashes: 1: 9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl (hash: m5Cdjd5eZc1nFBUNZCakfCosqHxR28tN5YlDWio/YaM=) 2: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: 2hLM0mgbr0R6ifa3vNzIdaR5NaWhmXwQFTpATyRbVPI=) 3: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: JZInvaWprZojdT0ogHnGT0fyYlzFziTH86i1Q0tvWkY=) 4: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: JPXdi6WPGd4vFTIpgnAdhhx+7oMRZdsbWTFXkRgyRnk=) 5: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: BTFNI8KSCzEVQjrkzQTwBs7yIRfL1AV/7o2X6tYhvoE=) 6: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: Pbg7HMIUocxPePd7OOnLCPLrq3CDhKhitltGyutZn2w=) 7: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: npHUpI+a7i9Ge4o0vqbUWZs/Np3+nJB1Rs4IQBwLbvY=) 8: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: H+4huOKuCZJDgCcIRHG5F336v2zTL76hXwSaEF33ZKg=) 9: 3131362e3231332e35342e302f32342d3234203d3e20313331363931.roa (hash: RPC7ZQJY5L1NkQcD4jYIBGIpY+dQgS7Hs1IK00SmkvM=) 10: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: zmwA1y/xC2vL0cjTkZM+ObOlDKLV7xKiwSOMXdyAr5Q=) 11: 3131362e3231332e35342e302f32332d3234203d3e20313331363931.roa (hash: ouUoI33+uoFpIjgbB9g57jirn+XArDWa2YFAjZ7zDo0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 14:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:49:64:c0:22:e2:01:61:d7:51:a4:dc:36:43:84:bf:25:29:7d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D Validity Not Before: Sep 24 11:14:38 2026 GMT Not After : Sep 25 14:45:38 2026 GMT Subject: CN=015406280CDD69F3C1AFB095FD2B7C5C221E0DB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bd:49:6b:9b:f7:1c:d4:d3:40:02:14:b7:1b: 6c:14:03:85:cc:55:87:86:0e:f9:38:b1:41:e1:ed: 10:1e:6a:a1:f7:98:0d:95:f1:c8:f7:01:c3:85:b2: 72:6f:58:df:3c:81:71:73:e9:7c:ac:a4:8e:fe:be: 32:73:98:8d:8d:ea:b7:f3:f3:7f:67:5f:c3:ed:8a: 6f:22:1c:08:67:b2:2d:e3:12:e5:5a:ec:2c:fb:ef: 4d:20:a9:0b:38:47:07:8d:55:d1:64:0a:62:12:4d: 7c:33:b6:72:87:a6:b2:63:25:48:89:f7:d5:9a:a3: c4:9e:8a:d8:5a:a5:fe:3c:f0:6d:45:01:5e:5d:24: b5:e9:79:e1:92:b5:31:af:d9:dd:9f:07:46:0d:01: e2:14:3c:9d:aa:2b:31:a5:6c:96:2f:16:5e:95:b2: a4:3e:70:70:97:e6:63:5f:da:87:51:84:c1:3c:f4: 4d:28:41:dd:1f:32:ed:d3:de:74:e8:a9:00:40:f7: 94:6d:fb:02:45:3b:1d:9c:ea:06:7b:8b:d3:43:f3: f1:0f:fd:de:11:3a:5f:d8:a4:2a:63:7c:66:a8:f7: a2:c4:e8:80:06:ee:84:5d:f7:d3:bd:ba:85:85:07: 08:5a:a5:42:27:7d:80:5c:bf:0b:a9:23:20:6e:46: c0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:54:06:28:0C:DD:69:F3:C1:AF:B0:95:FD:2B:7C:5C:22:1E:0D:B3 X509v3 Authority Key Identifier: keyid:9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:35:86:54:02:3c:92:50:02:40:cb:7b:3e:6a:f0:af:60:96: a9:ee:84:0e:13:00:84:5f:21:21:33:86:af:fd:b6:b4:e7:08: 3d:4d:22:5c:32:d5:3c:d2:69:cb:0a:4c:d7:03:aa:b1:75:c4: d7:64:77:e4:69:7f:ad:88:5e:7e:e6:37:a5:e7:d8:77:8a:33: 66:b4:d0:4b:10:cb:18:95:d9:83:ed:fe:a0:6c:7f:b1:ed:1b: f5:90:24:30:8c:db:38:d8:29:93:53:8f:af:58:65:be:bf:52: 4d:a5:77:c5:ae:e2:cc:0b:a1:6e:04:5e:82:c8:40:a9:26:1e: c5:d1:9c:58:4b:2e:8d:50:cd:be:86:43:75:d2:08:a3:45:30: 61:ce:b7:84:8a:80:1c:a3:30:6d:a5:a5:aa:48:ef:b6:b8:8a: 0e:fc:f8:af:08:99:0b:77:f9:f7:1b:24:17:25:96:7a:a1:a8: 44:0a:02:01:c4:5d:2c:61:c9:96:88:83:e2:9a:3c:9b:5d:f6: e1:6a:6f:8b:c6:c5:c6:bb:98:2a:a7:01:dc:54:de:f6:22:44: 3c:3b:85:5a:ca:98:c4:16:34:6a:ad:f6:99:23:1a:aa:75:ce: cf:b4:1a:a0:8e:52:75:3f:83:08:a4:a7:19:bc:5d:11:56:65: 2f:26:b1:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAklkwCLiAWHXUaTcNkOEvyUpfdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUREN0ZEMUMwQTc0RkUzMTdFREE0MUU0RDFDREM4NTdB RkMxNzc5RDAeFw0yNjA5MjQxMTE0MzhaFw0yNjA5MjUxNDQ1MzhaMDMxMTAvBgNV BAMTKDAxNTQwNjI4MENERDY5RjNDMUFGQjA5NUZEMkI3QzVDMjIxRTBEQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJvUlrm/cc1NNAAhS3G2wUA4XM VYeGDvk4sUHh7RAeaqH3mA2V8cj3AcOFsnJvWN88gXFz6XyspI7+vjJzmI2N6rfz 839nX8Ptim8iHAhnsi3jEuVa7Cz7700gqQs4RweNVdFkCmISTXwztnKHprJjJUiJ 99Wao8Seithapf488G1FAV5dJLXpeeGStTGv2d2fB0YNAeIUPJ2qKzGlbJYvFl6V sqQ+cHCX5mNf2odRhME89E0oQd0fMu3T3nToqQBA95Rt+wJFOx2c6gZ7i9ND8/EP /d4ROl/YpCpjfGao96LE6IAG7oRd99O9uoWFBwhapUInfYBcvwupIyBuRsD/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAVQGKAzdafPBr7CV/St8XCIeDbMwHwYDVR0j BBgwFoAUndf9HAp0/jF+2kHk0c3IV6/Bd50wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjkwYzkwMDktYWQ1My00ZmE2LWExODMtMzRiMzQ1N2JlYTAzLzAvOUREN0ZEMUMw QTc0RkUzMTdFREE0MUU0RDFDREM4NTdBRkMxNzc5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REQ3RkQxQzBBNzRGRTMxN0VEQTQxRTREMUNEQzg1N0FGQzE3 NzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvOUREN0ZEMUMwQTc0RkUzMTdFREE0MUU0RDFDREM4 NTdBRkMxNzc5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK81hlQCPJJQAkDLez5q8K9glqnuhA4TAIRf ISEzhq/9trTnCD1NIlwy1TzSacsKTNcDqrF1xNdkd+Rpf62IXn7mN6Xn2HeKM2a0 0EsQyxiV2YPt/qBsf7HtG/WQJDCM2zjYKZNTj69YZb6/Uk2ld8Wu4swLoW4EXoLI QKkmHsXRnFhLLo1Qzb6GQ3XSCKNFMGHOt4SKgByjMG2lpapI77a4ig78+K8ImQt3 +fcbJBcllnqhqEQKAgHEXSxhyZaIg+KaPJtd9uFqb4vGxca7mCqnAdxU3vYiRDw7 hVrKmMQWNGqt9pkjGqp1zs+0GqCOUnU/gwikpxm8XRFWZS8msbw= -----END CERTIFICATE-----Generated at Fri Sep 25 07:14:42 2026 by rpki-client