$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft File: 9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft (raw, json) Hash identifier: gHgOFwXlCasFk+3ghOh2034b8g99XwQ5+4fcZII4+hI= Subject key identifier: C8:8D:F9:81:5C:4C:0B:8F:8D:25:CE:C9:78:1A:A1:C7:D2:9D:50:F6 Authority key identifier: 9C:CE:21:97:D8:3C:FA:09:79:E7:92:95:EF:EE:5D:48:6F:B3:A2:3E Certificate issuer: /CN=9CCE2197D83CFA0979E79295EFEE5D486FB3A23E Certificate serial: 310040A72905DD2E8822DC23A4936E52BC7568D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 05:37:42 +0000 Manifest this update: Thu 24 Sep 2026 05:32:42 +0000 Manifest next update: Fri 25 Sep 2026 08:28:42 +0000 Files and hashes: 1: 9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.crl (hash: l3tVCezFBRrorOjAzAdq6+4hRGoBPouJiVz6dsCrqEg=) 2: 3130332e3132362e32362e302f32342d3234203d3e20313530353038.roa (hash: 6Awu2Ik5tqvQ6rEKLN4Gy/qaMR8Y4RuJeJcgKdpNQtw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.crl rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:00:40:a7:29:05:dd:2e:88:22:dc:23:a4:93:6e:52:bc:75:68:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CCE2197D83CFA0979E79295EFEE5D486FB3A23E Validity Not Before: Sep 24 05:32:42 2026 GMT Not After : Sep 25 08:28:42 2026 GMT Subject: CN=C88DF9815C4C0B8F8D25CEC9781AA1C7D29D50F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e1:a3:6d:dd:b2:a3:3e:a1:72:34:3d:0e:c6: a0:19:98:a9:8c:c6:cc:83:7f:22:05:3e:d9:49:3a: 78:41:24:d1:e2:51:9c:be:7c:57:0a:18:ba:a1:ac: a3:71:03:70:29:73:c2:c9:fe:3a:55:38:39:5e:d2: f0:bc:6a:9f:54:6e:ea:31:0d:47:f1:40:0b:32:61: 6d:60:80:ba:b9:fd:99:13:11:dc:63:c7:97:d0:bd: 54:d0:bb:63:c8:e8:25:26:9d:6a:8d:2a:83:2a:8d: c5:ad:a9:9e:e6:99:fa:27:28:4c:b7:db:85:07:e3: 97:c3:fc:06:c9:69:40:4a:cb:ce:47:a9:0f:88:e7: 1b:68:c7:94:0b:f1:d8:76:f2:31:90:5d:3e:80:b0: b6:38:9c:e3:4f:1e:e5:d2:1e:c8:c3:be:10:8d:be: 1b:64:d1:a2:0a:24:c4:06:ae:90:9d:70:2a:73:55: 64:0c:bf:07:e6:6c:04:d8:c5:6a:74:1b:2f:24:9f: 68:20:2f:07:52:0c:28:a1:21:ba:58:cb:f6:9a:2e: 95:81:8e:90:12:71:a0:e3:b9:3b:42:79:29:6f:a8: fa:5b:00:aa:cc:f7:7c:e2:bb:a9:7c:2a:cc:49:c1: 62:13:e6:8a:6a:68:3f:2e:56:80:d8:99:7b:f9:e4: 66:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8D:F9:81:5C:4C:0B:8F:8D:25:CE:C9:78:1A:A1:C7:D2:9D:50:F6 X509v3 Authority Key Identifier: keyid:9C:CE:21:97:D8:3C:FA:09:79:E7:92:95:EF:EE:5D:48:6F:B3:A2:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/9CCE2197D83CFA0979E79295EFEE5D486FB3A23E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:cb:5e:c2:6c:60:ea:44:d4:bf:09:d9:3a:1f:b1:26:c6:2d: a8:47:74:a1:47:91:44:d1:47:2a:a5:b2:93:12:46:28:71:50: a4:ff:61:8e:fc:c9:9e:2d:49:73:ee:1e:b6:6c:77:48:b2:d0: 43:5f:5b:5c:20:8a:7a:f8:8f:7c:51:c7:e9:85:bf:73:2d:5d: ad:c8:a3:66:4c:6e:82:a3:0a:7e:da:e2:3a:3f:88:1a:31:b3: bf:95:8f:4d:a4:e8:65:a6:22:fa:9e:50:da:49:96:c3:7e:0e: 86:62:cc:8b:36:39:63:48:5e:9f:bc:40:51:71:85:43:37:06: 03:25:bb:12:f4:58:a7:df:10:19:1a:54:8b:e4:d8:8c:08:f6: df:ac:c6:60:7c:52:6a:45:da:7e:6b:05:d1:d7:43:9f:55:8f: a5:75:7e:8d:43:37:34:23:eb:7d:bb:93:d5:16:41:b6:82:6d: 33:e0:49:0f:1c:11:92:cb:22:6a:b3:d2:3b:e6:de:b6:20:13: 32:13:99:e0:a0:4d:71:cb:4b:07:f0:d3:6c:32:a5:b1:7f:f3: aa:4c:1a:c3:bc:94:bc:be:49:6d:35:1c:da:0d:26:b4:3d:5d: 70:07:65:44:3c:52:26:1e:ad:6a:83:db:c4:53:1c:46:5c:a1: 3f:f5:48:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMQBApykF3S6IItwjpJNuUrx1aNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNDRTIxOTdEODNDRkEwOTc5RTc5Mjk1RUZFRTVENDg2 RkIzQTIzRTAeFw0yNjA5MjQwNTMyNDJaFw0yNjA5MjUwODI4NDJaMDMxMTAvBgNV BAMTKEM4OERGOTgxNUM0QzBCOEY4RDI1Q0VDOTc4MUFBMUM3RDI5RDUwRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4aNt3bKjPqFyND0OxqAZmKmM xsyDfyIFPtlJOnhBJNHiUZy+fFcKGLqhrKNxA3Apc8LJ/jpVODle0vC8ap9Ubuox DUfxQAsyYW1ggLq5/ZkTEdxjx5fQvVTQu2PI6CUmnWqNKoMqjcWtqZ7mmfonKEy3 24UH45fD/AbJaUBKy85HqQ+I5xtox5QL8dh28jGQXT6AsLY4nONPHuXSHsjDvhCN vhtk0aIKJMQGrpCdcCpzVWQMvwfmbATYxWp0Gy8kn2ggLwdSDCihIbpYy/aaLpWB jpAScaDjuTtCeSlvqPpbAKrM93ziu6l8KsxJwWIT5opqaD8uVoDYmXv55GZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyI35gVxMC4+NJc7JeBqhx9KdUPYwHwYDVR0j BBgwFoAUnM4hl9g8+gl555KV7+5dSG+zoj4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmNkMjRiMDUtMjY5ZS00Nzg0LWI5MzUtZjI3NjY1ODMwZmRhLzAvOUNDRTIxOTdE ODNDRkEwOTc5RTc5Mjk1RUZFRTVENDg2RkIzQTIzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85Q0NFMjE5N0Q4M0NGQTA5NzlFNzkyOTVFRkVFNUQ0ODZGQjNB MjNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmNkMjRiMDUtMjY5ZS00Nzg0LWI5 MzUtZjI3NjY1ODMwZmRhLzAvOUNDRTIxOTdEODNDRkEwOTc5RTc5Mjk1RUZFRTVE NDg2RkIzQTIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDLXsJsYOpE1L8J2TofsSbGLahHdKFHkUTR RyqlspMSRihxUKT/YY78yZ4tSXPuHrZsd0iy0ENfW1wginr4j3xRx+mFv3MtXa3I o2ZMboKjCn7a4jo/iBoxs7+Vj02k6GWmIvqeUNpJlsN+DoZizIs2OWNIXp+8QFFx hUM3BgMluxL0WKffEBkaVIvk2IwI9t+sxmB8UmpF2n5rBdHXQ59Vj6V1fo1DNzQj 6327k9UWQbaCbTPgSQ8cEZLLImqz0jvm3rYgEzITmeCgTXHLSwfw02wypbF/86pM GsO8lLy+SW01HNoNJrQ9XXAHZUQ8UiYerWqD28RTHEZcoT/1SEY= -----END CERTIFICATE-----Generated at Thu Sep 24 22:30:17 2026 by rpki-client