$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft File: 9AFC93CAEEA98CBFC0481089E308395A3234F158.mft (raw, json) Hash identifier: WpYfVf2RZ+z0p9r6uu7xLG+oEnUFG0Etup0Y/XfHTAw= Subject key identifier: 12:F9:F7:8E:07:E5:A4:94:F8:D1:62:34:B9:51:94:ED:76:08:0B:3C Authority key identifier: 9A:FC:93:CA:EE:A9:8C:BF:C0:48:10:89:E3:08:39:5A:32:34:F1:58 Certificate issuer: /CN=9AFC93CAEEA98CBFC0481089E308395A3234F158 Certificate serial: 13240EAA29CBDAFF74EBC6E966E77890C06A2827 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 08:15:46 +0000 Manifest this update: Thu 24 Sep 2026 08:10:46 +0000 Manifest next update: Fri 25 Sep 2026 10:13:46 +0000 Files and hashes: 1: 3130332e3132332e3135382e302f32342d3234203d3e20313332363433.roa (hash: CJzRoBzW5EdikhLdqGZ7+quC12AshwM5y1ZUE0mtwGE=) 2: 9AFC93CAEEA98CBFC0481089E308395A3234F158.crl (hash: YIOORzAUxkkvj3qhaL1pUIqmo18s/WWQTYfTYjXPZ7M=) 3: 3130332e32312e3232382e302f32342d3234203d3e20313332363433.roa (hash: mWMxWItQIy6KIu1MttVIKoQEGs+uqMB7va6yxk2ZK/w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.crl rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:24:0e:aa:29:cb:da:ff:74:eb:c6:e9:66:e7:78:90:c0:6a:28:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFC93CAEEA98CBFC0481089E308395A3234F158 Validity Not Before: Sep 24 08:10:46 2026 GMT Not After : Sep 25 10:13:46 2026 GMT Subject: CN=12F9F78E07E5A494F8D16234B95194ED76080B3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5c:cf:79:a2:17:aa:5b:e5:03:0e:f9:e7:09: 49:12:97:38:d4:3a:a9:21:9f:13:6a:12:2d:c1:27: a3:f5:ad:36:ba:95:66:8a:fa:04:2c:ee:c2:4c:e8: a6:ed:46:8c:ae:b1:87:23:71:14:d0:b7:d2:7e:24: 01:9a:9c:9b:de:40:fb:aa:f8:97:d9:01:e0:15:87: f3:6f:b9:69:d7:92:b3:c1:ab:2a:7b:10:5b:a8:36: a8:98:b0:96:f8:f0:02:ca:25:67:1f:34:68:1a:0c: dc:97:8d:7d:db:d6:b5:62:ea:d0:73:97:35:59:ac: 49:3a:5e:81:b7:5d:b7:58:e0:99:87:2a:8c:22:56: e0:bc:67:c3:4a:be:f8:01:63:2c:52:97:d9:0e:d8: 50:79:83:80:e4:b1:f1:b4:65:74:5b:c6:cb:63:a5: f5:2e:39:31:a1:39:52:a2:3d:a6:6b:ab:2d:60:42: e2:3b:41:88:68:9c:7f:4c:fb:63:4d:25:7f:0e:c9: 89:bd:a4:25:71:a0:66:ea:6e:ae:ce:6f:03:ad:79: 10:53:57:b7:41:cf:03:9c:f9:55:2a:4d:0f:23:97: 71:99:97:a8:0b:f2:23:e2:ab:92:01:c5:28:86:d8: e3:b7:d2:58:b7:1f:ea:bb:9f:43:43:d6:2b:88:38: 3b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F9:F7:8E:07:E5:A4:94:F8:D1:62:34:B9:51:94:ED:76:08:0B:3C X509v3 Authority Key Identifier: keyid:9A:FC:93:CA:EE:A9:8C:BF:C0:48:10:89:E3:08:39:5A:32:34:F1:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:e9:c8:36:5d:b7:58:09:10:68:75:9f:2a:27:f9:25:27:9b: 72:3f:86:6e:c9:08:aa:5e:06:bd:9c:49:6a:8f:88:4d:f5:45: 85:0d:87:81:75:4a:7f:e7:7a:8f:1d:b2:9d:26:15:4f:41:45: cc:d7:12:93:98:cc:97:2d:a8:30:cc:3e:c1:12:d1:5d:51:ae: fd:2a:fd:d1:3e:2c:f9:0b:f6:b3:c5:be:dd:9b:62:e8:14:51: cb:22:7d:0c:89:6b:c8:4f:c4:02:24:1a:82:5f:77:70:11:50: e2:f0:0f:69:ca:4d:b7:20:a6:e5:5e:47:eb:da:6f:f4:60:29: 9f:e4:bd:f9:74:a4:b2:23:72:df:aa:92:1c:8f:c9:3a:f0:21: 1d:3d:4d:6e:2b:41:ff:a5:d7:a6:30:15:4d:34:22:58:ff:bf: d8:db:f8:69:ad:b0:f1:d6:52:a2:b7:3f:83:b0:ae:3e:29:d3: 86:d2:df:e3:4d:7b:10:dd:60:2d:db:f4:1c:4f:ff:de:fb:ce: aa:49:86:c3:18:58:e2:ad:fb:78:25:ae:8d:94:a9:90:1d:b0: f3:62:de:8f:d3:e0:03:e1:fd:98:d4:04:f7:c3:e8:56:96:04: ac:17:8d:22:55:6f:cb:eb:8f:05:65:99:56:60:40:39:52:15: 4e:06:58:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEyQOqinL2v9068bpZud4kMBqKCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGQzkzQ0FFRUE5OENCRkMwNDgxMDg5RTMwODM5NUEz MjM0RjE1ODAeFw0yNjA5MjQwODEwNDZaFw0yNjA5MjUxMDEzNDZaMDMxMTAvBgNV BAMTKDEyRjlGNzhFMDdFNUE0OTRGOEQxNjIzNEI5NTE5NEVENzYwODBCM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeXM95oheqW+UDDvnnCUkSlzjU OqkhnxNqEi3BJ6P1rTa6lWaK+gQs7sJM6KbtRoyusYcjcRTQt9J+JAGanJveQPuq +JfZAeAVh/NvuWnXkrPBqyp7EFuoNqiYsJb48ALKJWcfNGgaDNyXjX3b1rVi6tBz lzVZrEk6XoG3XbdY4JmHKowiVuC8Z8NKvvgBYyxSl9kO2FB5g4DksfG0ZXRbxstj pfUuOTGhOVKiPaZrqy1gQuI7QYhonH9M+2NNJX8OyYm9pCVxoGbqbq7ObwOteRBT V7dBzwOc+VUqTQ8jl3GZl6gL8iPiq5IBxSiG2OO30li3H+q7n0ND1iuIODtNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEvn3jgflpJT40WI0uVGU7XYICzwwHwYDVR0j BBgwFoAUmvyTyu6pjL/ASBCJ4wg5WjI08VgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNhZjI3MWYtYzgzZC00NDFlLWJlYTktMThhMjQ0ZDBlMDBlLzAvOUFGQzkzQ0FF RUE5OENCRkMwNDgxMDg5RTMwODM5NUEzMjM0RjE1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QUZDOTNDQUVFQTk4Q0JGQzA0ODEwODlFMzA4Mzk1QTMyMzRG MTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNhZjI3MWYtYzgzZC00NDFlLWJl YTktMThhMjQ0ZDBlMDBlLzAvOUFGQzkzQ0FFRUE5OENCRkMwNDgxMDg5RTMwODM5 NUEzMjM0RjE1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnpyDZdt1gJEGh1nyon+SUnm3I/hm7JCKpe Br2cSWqPiE31RYUNh4F1Sn/neo8dsp0mFU9BRczXEpOYzJctqDDMPsES0V1Rrv0q /dE+LPkL9rPFvt2bYugUUcsifQyJa8hPxAIkGoJfd3ARUOLwD2nKTbcgpuVeR+va b/RgKZ/kvfl0pLIjct+qkhyPyTrwIR09TW4rQf+l16YwFU00Ilj/v9jb+GmtsPHW UqK3P4Owrj4p04bS3+NNexDdYC3b9BxP/977zqpJhsMYWOKt+3glro2UqZAdsPNi 3o/T4APh/ZjUBPfD6FaWBKwXjSJVb8vrjwVlmVZgQDlSFU4GWGM= -----END CERTIFICATE-----Generated at Thu Sep 24 17:37:25 2026 by rpki-client