$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft File: C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft (raw, json) Hash identifier: bAxFsBHqFtDM9blz25LfG83m2vhT1vMZZOKD+K2A3Xc= Subject key identifier: 69:6C:1D:6E:B8:E3:42:22:73:17:B9:43:4C:77:06:56:32:40:07:CC Authority key identifier: C9:BA:0F:8C:78:B3:A4:E5:D2:8E:CD:1C:51:7D:C9:84:38:50:87:CA Certificate issuer: /CN=C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA Certificate serial: 4A56E720294A3FBFBEBEE8AAD2B379BFFB648B95 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 07:09:32 +0000 Manifest this update: Thu 24 Sep 2026 07:04:32 +0000 Manifest next update: Fri 25 Sep 2026 11:04:32 +0000 Files and hashes: 1: 3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa (hash: 45s4cJ7R43K0N6OFbVA9LlP5PkcF712Aofyn3c/ko+0=) 2: 3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa (hash: qWv000ASHZPLikMYj8Wss1d2EPIqC0119NVLho36do8=) 3: 3130332e3136372e3136372e302f32342d3234203d3e20313431393834.roa (hash: Ivj60OCLGb1xn+8XUcVw7dceegfwRxZ/Fq0NrXLwLn4=) 4: C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl (hash: i2rCo78RUOhw5/2o00eHX+WB2wCpVW6waG76k/GXX48=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:56:e7:20:29:4a:3f:bf:be:be:e8:aa:d2:b3:79:bf:fb:64:8b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA Validity Not Before: Sep 24 07:04:32 2026 GMT Not After : Sep 25 11:04:32 2026 GMT Subject: CN=696C1D6EB8E342227317B9434C770656324007CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dd:37:93:52:2a:b1:77:68:eb:92:47:8c:13: 05:9d:9a:21:cc:5a:22:ed:b7:81:fc:12:3b:0c:83: 04:ef:36:d4:cc:de:fb:e5:d2:4b:6e:f1:fc:11:e3: 84:72:f1:e2:a1:77:08:83:bb:7a:b7:0a:6e:7f:7e: 20:df:58:37:43:7a:68:ed:78:98:ec:d8:33:33:ad: 16:d0:23:c3:a5:8f:6a:30:d3:c8:b2:e4:ce:5b:1b: fc:4f:bf:07:23:1c:6f:66:16:77:a4:11:10:dd:6d: e6:46:1a:49:00:0a:40:36:38:e7:b4:34:26:1e:bd: ac:c8:d5:aa:e8:67:72:97:8b:b8:1a:f2:42:65:5c: b8:fe:63:43:c5:7a:98:8f:b8:b3:52:ae:50:17:31: fe:b2:55:2d:92:a7:7b:c6:b2:70:46:7a:0c:9b:3a: 44:5d:19:02:4d:c3:13:43:bf:a9:d9:46:56:0c:ba: ee:8a:0d:2c:3a:8c:fa:2e:76:32:05:a5:2b:dc:ce: c7:b8:83:b2:bd:24:e6:75:55:ba:b6:e1:31:e9:25: de:5c:cd:69:67:2c:ae:3f:ff:9d:16:7f:7c:5f:40: 19:67:c1:41:a3:3e:52:57:1e:77:c6:8a:15:b5:04: c9:a3:6b:1a:a7:8b:71:f2:8b:61:3f:b7:4c:1f:2e: ab:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6C:1D:6E:B8:E3:42:22:73:17:B9:43:4C:77:06:56:32:40:07:CC X509v3 Authority Key Identifier: keyid:C9:BA:0F:8C:78:B3:A4:E5:D2:8E:CD:1C:51:7D:C9:84:38:50:87:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:90:e1:21:cd:41:f8:1b:b6:88:2a:9d:29:26:c3:a9:b5:74: 53:fa:1c:94:e3:aa:75:29:1f:28:e9:d2:0f:2a:a2:55:1c:79: d7:e4:bb:f8:34:c6:44:6c:3e:18:8d:4c:48:85:59:e1:0d:6f: 50:94:d7:e2:0b:c8:bb:7a:8e:68:8e:d7:75:34:cf:46:ee:1c: 7b:d4:11:02:eb:4f:34:11:70:54:fa:da:c0:1b:45:67:c4:79: 45:c4:9b:15:96:be:4c:a8:cc:56:ee:dc:57:3d:b8:30:d5:0b: 63:d5:39:c5:e0:13:f2:5e:1d:d0:c6:e6:74:df:88:fa:a6:4c: 4a:41:91:8b:a6:c9:ce:1e:49:c2:72:f7:63:73:60:09:4d:63: 3c:31:a4:31:9f:06:db:9d:02:ed:d9:7e:8e:c5:26:d7:fa:92: 70:c1:d3:d3:62:29:c3:72:d2:5c:3f:31:f1:fd:5d:f0:1f:be: 02:20:e4:d6:23:62:5a:9e:3f:df:92:41:ba:67:9b:28:ca:b1: 0b:5f:d2:4d:4d:fd:f7:c3:91:20:b8:43:2b:ad:aa:29:a6:ec: 23:39:23:11:86:51:37:26:32:db:7d:23:21:b2:b0:a0:29:23: ff:ed:82:88:c0:cd:3f:e6:5c:82:15:d1:92:17:4d:7d:fe:05: f4:74:50:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSlbnIClKP7++vuiq0rN5v/tki5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTBGOEM3OEIzQTRFNUQyOEVDRDFDNTE3REM5ODQz ODUwODdDQTAeFw0yNjA5MjQwNzA0MzJaFw0yNjA5MjUxMTA0MzJaMDMxMTAvBgNV BAMTKDY5NkMxRDZFQjhFMzQyMjI3MzE3Qjk0MzRDNzcwNjU2MzI0MDA3Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo3TeTUiqxd2jrkkeMEwWdmiHM WiLtt4H8EjsMgwTvNtTM3vvl0ktu8fwR44Ry8eKhdwiDu3q3Cm5/fiDfWDdDemjt eJjs2DMzrRbQI8Olj2ow08iy5M5bG/xPvwcjHG9mFnekERDdbeZGGkkACkA2OOe0 NCYevazI1aroZ3KXi7ga8kJlXLj+Y0PFepiPuLNSrlAXMf6yVS2Sp3vGsnBGegyb OkRdGQJNwxNDv6nZRlYMuu6KDSw6jPoudjIFpSvczse4g7K9JOZ1Vbq24THpJd5c zWlnLK4//50Wf3xfQBlnwUGjPlJXHnfGihW1BMmjaxqni3Hyi2E/t0wfLquXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaWwdbrjjQiJzF7lDTHcGVjJAB8wwHwYDVR0j BBgwFoAUyboPjHizpOXSjs0cUX3JhDhQh8owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU0MGNmODAtOTMxNS00MmMxLTg0NGUtYmIwMzYyMmEwNWMxLzAvQzlCQTBGOEM3 OEIzQTRFNUQyOEVDRDFDNTE3REM5ODQzODUwODdDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUJBMEY4Qzc4QjNBNEU1RDI4RUNEMUM1MTdEQzk4NDM4NTA4 N0NBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU0MGNmODAtOTMxNS00MmMxLTg0 NGUtYmIwMzYyMmEwNWMxLzAvQzlCQTBGOEM3OEIzQTRFNUQyOEVDRDFDNTE3REM5 ODQzODUwODdDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaQ4SHNQfgbtogqnSkmw6m1dFP6HJTjqnUp Hyjp0g8qolUcedfku/g0xkRsPhiNTEiFWeENb1CU1+ILyLt6jmiO13U0z0buHHvU EQLrTzQRcFT62sAbRWfEeUXEmxWWvkyozFbu3Fc9uDDVC2PVOcXgE/JeHdDG5nTf iPqmTEpBkYumyc4eScJy92NzYAlNYzwxpDGfBtudAu3Zfo7FJtf6knDB09NiKcNy 0lw/MfH9XfAfvgIg5NYjYlqeP9+SQbpnmyjKsQtf0k1N/ffDkSC4Qyutqimm7CM5 IxGGUTcmMtt9IyGysKApI//tgojAzT/mXIIV0ZIXTX3+BfR0UMM= -----END CERTIFICATE-----Generated at Thu Sep 24 14:01:14 2026 by rpki-client