$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft File: 9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft (raw, json) Hash identifier: 3dwfzMyMCLu3TQHlmLmLsQNqd0nvnDSpaMegnCBoHvA= Subject key identifier: 8A:AE:7D:86:AE:57:42:DB:4E:B1:E7:FC:D2:6A:1C:E4:F5:9A:5A:79 Authority key identifier: 9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B Certificate issuer: /CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B Certificate serial: 66B8CB3A2E1D487E482B84B86B42EF3DDCA1C912 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft Manifest number: CB Signing time: Thu 01 Oct 2026 01:17:25 +0000 Manifest this update: Thu 01 Oct 2026 01:12:25 +0000 Manifest next update: Fri 02 Oct 2026 04:51:25 +0000 Files and hashes: 1: 34332e3235322e3133362e302f32322d3233203d3e203538343034.roa (hash: VOA028A1R3RrEVD4Qi7zXJp992kxYY/J4fv4wuhxPKY=) 2: 34332e3235322e3133362e302f32342d3234203d3e203538343034.roa (hash: oJcDC3gbkkbl6CgR5ozKOicxGaK/b8KkIxtfAPuJSR4=) 3: 9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl (hash: jv2OJTKwHMEDj7waSmvAY1n8KZOeJXt9qobG33tvU40=) 4: 323030313a6466303a3266633a3a2f34382d3438203d3e203538343034.roa (hash: lNPR2Tg6FsNQHU8b29t3TQ5Lu6T1+vm92/GyLs+/lXo=) 5: 34332e3235322e3133372e302f32342d3234203d3e203538343034.roa (hash: yzlUlkzhlS0Tkdbt12yLVL6Icb64xveQ3bA5i4msJ2M=) 6: 34332e3235322e3133392e302f32342d3234203d3e203538343034.roa (hash: v6dOLx0SCwjzqMjQ3ImqjGTnffSPJhWT9kStYUIxMa8=) 7: 34332e3235322e3133382e302f32342d3234203d3e203538343034.roa (hash: aDJ/BlhAr3ZuI6P3BU0POvE1//aOF15U+ofqLi0TcqU=) 8: 3130332e32382e31322e302f32332d3234203d3e203538343034.roa (hash: rtaQaHq+P5lP9auuPcmaB5K4uqxx/eB7GaUrzPNCTXU=) 9: 3130332e32382e31342e302f32332d3234203d3e203538343034.roa (hash: aOkYTZDHg/L8yWlo8vIxFqsm7+o0K/8UpGxOwkkG7Ss=) 10: 3130332e32382e31322e302f32322d3233203d3e203538343034.roa (hash: B7lLwYyGx/CkKBE8Qhv5JNipvmsoWuu5k92uqzr9wrU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b8:cb:3a:2e:1d:48:7e:48:2b:84:b8:6b:42:ef:3d:dc:a1:c9:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B Validity Not Before: Oct 1 01:12:25 2026 GMT Not After : Oct 2 04:51:25 2026 GMT Subject: CN=8AAE7D86AE5742DB4EB1E7FCD26A1CE4F59A5A79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:aa:7a:0f:1b:c4:68:29:26:a3:03:a0:9d:84: e8:8c:f5:d4:81:92:ac:b5:17:be:98:52:42:a0:bb: 93:3e:a4:28:6c:7f:59:78:8e:93:1c:8e:8e:58:68: af:8e:c5:bb:d9:19:30:37:da:cd:40:f3:45:ee:ff: b3:3f:87:c5:ed:6b:dd:5b:fa:b9:f1:05:e1:9a:8c: e5:2f:d3:52:d5:7d:6a:ea:f0:6a:1a:16:4c:b4:3d: 9a:06:ec:bc:2c:4a:77:1e:f4:ef:54:b5:c7:fb:06: 45:8b:d8:fb:2a:e5:60:43:5c:21:42:54:5a:7c:47: 34:55:06:35:d4:58:7b:8f:65:cf:7b:c0:53:4f:f9: 68:e8:6e:5b:fb:27:16:16:a4:81:bd:8b:cb:a7:d5: d0:ca:9c:fc:b1:35:1d:56:81:ee:0a:68:a3:3b:23: 4e:84:14:dc:a7:50:fd:e2:ad:ab:a9:96:42:d3:75: 8c:4d:d4:33:12:8c:72:9c:1d:4b:12:1f:e2:c6:af: 4d:b4:dc:85:ad:cb:e8:9f:d7:a3:00:8b:c2:f4:5e: 66:ba:d9:7d:71:03:07:d6:2a:48:6f:08:a0:8f:f8: 27:44:8c:98:56:0b:ca:57:36:78:9e:c9:7b:00:b2: 45:57:2b:1f:b7:3f:2a:48:09:18:1a:43:3e:b8:80: 0c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AE:7D:86:AE:57:42:DB:4E:B1:E7:FC:D2:6A:1C:E4:F5:9A:5A:79 X509v3 Authority Key Identifier: keyid:9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:12:5d:a7:2a:6c:44:0e:57:42:d4:f6:54:3e:c4:34:66:8a: 5c:c2:9a:2e:b6:c2:6f:8b:89:d3:94:22:7d:9a:0e:40:79:f4: 9e:ee:1f:96:19:a8:87:b3:b8:18:4d:c0:b2:2b:1e:4d:e4:e8: 44:6c:84:5b:84:ba:73:28:ca:97:dd:06:cc:26:6c:6b:b6:5d: 2b:d9:e2:d4:18:cc:76:80:28:b8:84:fd:08:24:a2:21:17:5d: 36:2a:65:3c:25:39:76:80:b3:80:9e:ae:5d:d0:d8:c8:10:67: 28:29:81:13:32:77:75:da:c1:4d:68:4b:b4:74:e5:d8:b5:f7: f3:ac:a6:56:57:0c:9c:55:28:da:64:15:8e:80:56:b6:53:f1: 50:eb:d9:8e:a2:df:28:ac:02:0f:82:01:14:a9:13:c1:22:33: b6:43:28:ad:fe:43:42:24:96:d5:4c:d6:02:ba:b3:01:6c:71: ce:10:bc:83:48:c6:11:35:07:2a:75:52:73:ae:0c:9b:1f:03: a2:8f:e5:e2:32:d8:87:69:14:6c:8e:38:a2:b4:be:07:10:49: 61:6f:98:33:1c:63:3f:fa:c6:7a:ad:0f:1a:68:01:b9:c6:a8: 53:64:d1:65:30:56:30:48:07:38:2b:73:2b:6d:35:e7:f3:38: 3f:5d:3a:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZrjLOi4dSH5IK4S4a0LvPdyhyRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM1OEMxQzZBRkJCNUI2NkM2NDA2OTRBOTg1OTczMDZD Qzg4REEwQjAeFw0yNjEwMDEwMTEyMjVaFw0yNjEwMDIwNDUxMjVaMDMxMTAvBgNV BAMTKDhBQUU3RDg2QUU1NzQyREI0RUIxRTdGQ0QyNkExQ0U0RjU5QTVBNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaqnoPG8RoKSajA6CdhOiM9dSB kqy1F76YUkKgu5M+pChsf1l4jpMcjo5YaK+OxbvZGTA32s1A80Xu/7M/h8Xta91b +rnxBeGajOUv01LVfWrq8GoaFky0PZoG7LwsSnce9O9Utcf7BkWL2Psq5WBDXCFC VFp8RzRVBjXUWHuPZc97wFNP+Wjoblv7JxYWpIG9i8un1dDKnPyxNR1Wge4KaKM7 I06EFNynUP3irauplkLTdYxN1DMSjHKcHUsSH+LGr0203IWty+if16MAi8L0Xma6 2X1xAwfWKkhvCKCP+CdEjJhWC8pXNnieyXsAskVXKx+3PypICRgaQz64gAyrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiq59hq5XQttOsef80moc5PWaWnkwHwYDVR0j BBgwFoAUnFjBxq+7W2bGQGlKmFlzBsyI2gswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmUwZjkxNjMtM2U1YS00ZWZhLThiZDktNGFjNGJjNjMwNDE0LzAvOUM1OEMxQzZB RkJCNUI2NkM2NDA2OTRBOTg1OTczMDZDQzg4REEwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QzU4QzFDNkFGQkI1QjY2QzY0MDY5NEE5ODU5NzMwNkNDODhE QTBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmUwZjkxNjMtM2U1YS00ZWZhLThi ZDktNGFjNGJjNjMwNDE0LzAvOUM1OEMxQzZBRkJCNUI2NkM2NDA2OTRBOTg1OTcz MDZDQzg4REEwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFASXacqbEQOV0LU9lQ+xDRmilzCmi62wm+L idOUIn2aDkB59J7uH5YZqIezuBhNwLIrHk3k6ERshFuEunMoypfdBswmbGu2XSvZ 4tQYzHaAKLiE/QgkoiEXXTYqZTwlOXaAs4Cerl3Q2MgQZygpgRMyd3XawU1oS7R0 5di19/OsplZXDJxVKNpkFY6AVrZT8VDr2Y6i3yisAg+CARSpE8EiM7ZDKK3+Q0Ik ltVM1gK6swFscc4QvINIxhE1Byp1UnOuDJsfA6KP5eIy2IdpFGyOOKK0vgcQSWFv mDMcYz/6xnqtDxpoAbnGqFNk0WUwVjBIBzgrcyttNefzOD9dOrY= -----END CERTIFICATE-----Generated at Thu Oct 1 20:58:20 2026 by rpki-client