$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft File: 9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft (raw, json) Hash identifier: 3drqsavDUxkjm+JOk/9wtoWb6ZVXO6ylPCIEQlB3GyI= Subject key identifier: 0E:7F:B7:71:49:F1:80:72:E6:AF:65:87:1E:3C:41:4B:73:0C:EE:16 Authority key identifier: 91:76:CB:6B:BE:53:90:8A:B2:1A:EF:FC:4F:8F:15:1D:9A:74:7E:75 Certificate issuer: /CN=9176CB6BBE53908AB21AEFFC4F8F151D9A747E75 Certificate serial: 326436F8DEA8CCF9017A9C37F967DBED1D276334 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 09:58:35 +0000 Manifest this update: Wed 23 Sep 2026 09:53:35 +0000 Manifest next update: Thu 24 Sep 2026 13:52:35 +0000 Files and hashes: 1: 9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.crl (hash: 5ZXdeoG0bD+ctrqLPAjwzLDDebrPjDr6z62Nop5yXaA=) 2: 3131362e302e302e302f32312d3234203d3e203539313339.roa (hash: sLtYSAekx4+fWo5lqk7vJ2/nnu8bKXpxqT5BWuDEsBY=) 3: 3130332e3235332e302e302f32322d3234203d3e203539313339.roa (hash: 7wsmv0kZBtWJ620fNkkrSVx5J21lFglGMK7gAbjRHjo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.crl rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:64:36:f8:de:a8:cc:f9:01:7a:9c:37:f9:67:db:ed:1d:27:63:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9176CB6BBE53908AB21AEFFC4F8F151D9A747E75 Validity Not Before: Sep 23 09:53:35 2026 GMT Not After : Sep 24 13:52:35 2026 GMT Subject: CN=0E7FB77149F18072E6AF65871E3C414B730CEE16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7a:f3:29:40:11:d4:64:28:62:08:5d:6b:12: 90:73:d6:e4:f6:da:ac:46:3f:85:46:63:3a:a7:f6: 20:fe:ad:af:25:d3:2f:11:c3:5b:88:c4:5b:a8:76: a6:81:01:4d:91:fe:6e:e6:88:9b:71:f3:ea:54:5d: dd:5f:22:12:15:c1:70:df:34:96:d1:ef:8b:00:ae: b6:3d:09:01:d9:97:b5:b8:92:4e:78:bb:01:1e:a8: 9b:af:46:85:09:8e:7a:6f:73:dd:35:13:13:5e:72: a7:b5:0b:c4:80:7a:35:cf:da:48:a2:70:55:6b:c8: 8c:61:a0:11:c0:74:2d:49:78:36:ae:58:05:a2:ff: da:60:9f:8f:0c:d6:93:0b:83:48:b2:5b:dc:53:17: 4a:58:1a:96:7c:02:5e:e6:39:ae:30:3b:97:aa:79: 70:fc:a0:28:ab:7c:84:88:13:7c:fa:87:e9:a7:17: 69:1a:84:9e:32:a8:12:b6:7d:5b:0b:da:a2:ff:a0: cb:3d:e5:39:6a:db:93:1e:02:15:08:ae:21:78:5b: f8:2f:c8:94:20:81:19:57:c1:8d:b8:de:65:05:e1: 57:8e:0a:2a:d0:ac:b4:71:7c:9a:d2:60:98:a5:92: d9:b9:6e:43:5e:e6:15:b7:b7:1f:d7:8f:3f:ce:bc: 0e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7F:B7:71:49:F1:80:72:E6:AF:65:87:1E:3C:41:4B:73:0C:EE:16 X509v3 Authority Key Identifier: keyid:91:76:CB:6B:BE:53:90:8A:B2:1A:EF:FC:4F:8F:15:1D:9A:74:7E:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:35:c5:b6:b9:03:a8:1c:b3:ad:03:1d:c9:ac:9e:8c:7f:1d: 12:9c:e0:9a:01:c4:62:3e:6d:04:ab:28:16:c9:4c:f7:f2:6b: cb:0e:98:f7:08:cf:11:f7:e3:da:45:0c:74:93:93:ef:94:99: 6e:b2:fb:70:91:62:fc:45:dd:0d:56:62:dd:0b:67:80:93:0f: ac:f6:51:18:5f:c7:09:d6:2d:3c:34:3b:64:64:58:79:8b:fc: 40:34:8f:b6:f6:3f:4d:6b:a3:94:c5:8a:93:a9:97:e0:9a:fb: e0:3c:e9:fd:f2:53:4e:b3:96:5e:64:a5:65:05:6a:e3:1d:f0: 2b:f9:5a:9e:c2:62:56:c6:ab:d8:c8:c7:fd:ab:b4:99:09:51: 4f:41:0b:07:0b:d3:ec:86:44:0a:bf:b0:86:b2:43:11:c8:82: d5:54:6f:b0:f5:ae:a8:54:17:7c:9f:92:02:3b:3f:30:3a:07: a7:c2:5d:d9:64:0d:5c:44:ad:3a:31:d9:3a:7c:6a:fc:ff:75: 5e:a2:c7:10:be:c8:18:fa:b2:a3:bf:4e:92:f6:06:32:00:09: fa:3a:e1:3d:97:25:a4:41:a7:af:0a:e3:77:92:94:86:9b:31: 0a:1b:79:35:5f:4b:fe:19:c8:b6:2c:87:e3:b8:45:08:d1:30: 58:5b:cf:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMmQ2+N6ozPkBepw3+Wfb7R0nYzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3NkNCNkJCRTUzOTA4QUIyMUFFRkZDNEY4RjE1MUQ5 QTc0N0U3NTAeFw0yNjA5MjMwOTUzMzVaFw0yNjA5MjQxMzUyMzVaMDMxMTAvBgNV BAMTKDBFN0ZCNzcxNDlGMTgwNzJFNkFGNjU4NzFFM0M0MTRCNzMwQ0VFMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuevMpQBHUZChiCF1rEpBz1uT2 2qxGP4VGYzqn9iD+ra8l0y8Rw1uIxFuodqaBAU2R/m7miJtx8+pUXd1fIhIVwXDf NJbR74sArrY9CQHZl7W4kk54uwEeqJuvRoUJjnpvc901ExNecqe1C8SAejXP2kii cFVryIxhoBHAdC1JeDauWAWi/9pgn48M1pMLg0iyW9xTF0pYGpZ8Al7mOa4wO5eq eXD8oCirfISIE3z6h+mnF2kahJ4yqBK2fVsL2qL/oMs95Tlq25MeAhUIriF4W/gv yJQggRlXwY243mUF4VeOCirQrLRxfJrSYJilktm5bkNe5hW3tx/Xjz/OvA65AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDn+3cUnxgHLmr2WHHjxBS3MM7hYwHwYDVR0j BBgwFoAUkXbLa75TkIqyGu/8T48VHZp0fnUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U4Y2Q5N2UtNTZmNS00Y2E1LWE4NWMtNTVhMzIzZjA2MDhjLzAvOTE3NkNCNkJC RTUzOTA4QUIyMUFFRkZDNEY4RjE1MUQ5QTc0N0U3NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTc2Q0I2QkJFNTM5MDhBQjIxQUVGRkM0RjhGMTUxRDlBNzQ3 RTc1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U4Y2Q5N2UtNTZmNS00Y2E1LWE4 NWMtNTVhMzIzZjA2MDhjLzAvOTE3NkNCNkJCRTUzOTA4QUIyMUFFRkZDNEY4RjE1 MUQ5QTc0N0U3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADU1xba5A6gcs60DHcmsnox/HRKc4JoBxGI+ bQSrKBbJTPfya8sOmPcIzxH349pFDHSTk++UmW6y+3CRYvxF3Q1WYt0LZ4CTD6z2 URhfxwnWLTw0O2RkWHmL/EA0j7b2P01ro5TFipOpl+Ca++A86f3yU06zll5kpWUF auMd8Cv5Wp7CYlbGq9jIx/2rtJkJUU9BCwcL0+yGRAq/sIayQxHIgtVUb7D1rqhU F3yfkgI7PzA6B6fCXdlkDVxErTox2Tp8avz/dV6ixxC+yBj6sqO/TpL2BjIACfo6 4T2XJaRBp68K43eSlIabMQobeTVfS/4ZyLYsh+O4RQjRMFhbz2M= -----END CERTIFICATE-----Generated at Wed Sep 23 23:48:30 2026 by rpki-client