$ rpki-client -vvvf rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft File: 9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft (raw, json) Hash identifier: LQpGcQhgTESjA/2XQijISyJfhNUZD3pz88mbBzUGa1c= Subject key identifier: E5:09:55:8D:F6:AC:8D:EB:D4:A1:15:BD:E4:6C:03:64:9A:11:7D:E7 Authority key identifier: 9A:42:83:F9:6B:70:1E:C6:0E:A4:5F:12:4F:88:81:9D:76:D7:E8:FC Certificate issuer: /CN=9A4283F96B701EC60EA45F124F88819D76D7E8FC Certificate serial: 32DAECFFD75BC6654BBB4366B81AEF1B49D075CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 03:34:40 +0000 Manifest this update: Fri 25 Sep 2026 03:29:40 +0000 Manifest next update: Sat 26 Sep 2026 04:40:40 +0000 Files and hashes: 1: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 8HBG0p89815vWKkauI6Wn4NeMLGP4fCVAgDc4tDqrGk=) 2: 9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl (hash: 51yFhEaZJnYIJlWs29ZxKgYsT9K1FEev6tp2PS52+Mk=) 3: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: lqSxCFv5WmyrxicOkawzjV/AVzQFgoIxemd6g7X5MqQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 04:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:da:ec:ff:d7:5b:c6:65:4b:bb:43:66:b8:1a:ef:1b:49:d0:75:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A4283F96B701EC60EA45F124F88819D76D7E8FC Validity Not Before: Sep 25 03:29:40 2026 GMT Not After : Sep 26 04:40:40 2026 GMT Subject: CN=E509558DF6AC8DEBD4A115BDE46C03649A117DE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:05:ff:33:6f:e6:06:63:5e:d2:18:eb:48:8a: eb:50:33:7f:4e:8b:f0:8a:f3:65:8d:15:56:62:7d: 7f:16:d3:c2:6c:87:98:df:c3:13:18:fd:f9:7d:6c: 7d:70:e2:5c:2e:a6:5a:5e:cc:37:93:24:73:e4:3f: e6:7a:4b:59:63:ac:e2:cf:ca:86:54:d5:66:07:34: 89:7f:f2:d1:77:2c:34:47:d4:21:e7:f5:4c:4b:fc: 1a:9a:9f:0d:9b:1f:05:5d:76:d1:56:94:4f:da:dd: ff:1b:07:cd:c8:62:ba:4f:3b:d7:de:66:d8:2c:3e: d9:56:0f:51:e1:74:f9:49:75:b1:cf:a4:e0:4f:1a: d8:ee:2d:87:d3:b4:14:08:85:4d:d9:02:f7:b6:d0: e2:36:44:0f:ba:02:d9:28:1c:5a:b1:4d:df:50:d7: b3:9f:18:8b:65:32:b8:af:fe:af:aa:9a:ed:57:7c: fe:7c:89:58:82:87:ee:5d:1e:f9:25:4d:d1:5d:00: 98:3d:40:af:87:04:27:65:b2:48:ec:7b:37:be:1c: 03:2b:ad:f0:69:03:5b:07:92:07:e1:17:7e:e9:36: ae:15:5d:c5:f0:5d:cd:72:87:72:85:80:cb:22:0d: f0:47:ec:10:33:b3:85:0e:4d:1f:21:8d:8d:27:14: c1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:09:55:8D:F6:AC:8D:EB:D4:A1:15:BD:E4:6C:03:64:9A:11:7D:E7 X509v3 Authority Key Identifier: keyid:9A:42:83:F9:6B:70:1E:C6:0E:A4:5F:12:4F:88:81:9D:76:D7:E8:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5a:e8:47:d0:88:b8:07:cd:31:65:d6:de:32:9c:d6:09:f1: a5:f8:d2:1e:99:db:f4:7d:03:98:d5:b6:b6:32:7a:1f:a1:a3: 4d:67:14:41:40:82:ae:a2:03:b0:35:91:c1:d5:43:60:c2:a5: 80:0e:54:42:85:99:5b:b8:08:10:01:02:2f:0d:a5:27:42:b8: 62:a0:94:af:15:3f:21:29:cd:79:e6:5d:21:ba:10:d5:b5:1e: 48:71:26:bb:00:20:83:cb:5a:9a:6d:76:65:6c:c0:66:d2:84: f4:0a:f6:7a:e9:74:5e:d3:19:f0:d7:47:24:d2:63:98:56:0b: b2:4e:52:d3:2b:75:c6:9b:a7:90:5f:a8:e9:f1:4e:11:20:53: b3:b3:29:81:a8:95:49:59:0d:9b:e3:84:33:8d:f9:d4:74:89: 9d:0d:b2:fe:d5:45:2c:27:e1:7e:35:62:91:45:8d:c4:d3:88: ac:ab:c1:59:bd:55:cf:16:41:c6:86:a2:7a:0a:d0:c7:f1:73: fe:34:a9:b4:c2:16:9f:ba:82:0a:9b:ee:b3:d2:76:24:55:fe: c9:09:a0:db:a7:cb:b8:3f:4b:a7:e4:57:b0:3e:f1:ed:9a:6a: 52:37:ba:8e:d1:e2:81:e5:a4:0f:0e:34:35:7a:b0:fa:a8:ab: 78:af:41:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMtrs/9dbxmVLu0NmuBrvG0nQdcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0MjgzRjk2QjcwMUVDNjBFQTQ1RjEyNEY4ODgxOUQ3 NkQ3RThGQzAeFw0yNjA5MjUwMzI5NDBaFw0yNjA5MjYwNDQwNDBaMDMxMTAvBgNV BAMTKEU1MDk1NThERjZBQzhERUJENEExMTVCREU0NkMwMzY0OUExMTdERTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPBf8zb+YGY17SGOtIiutQM39O i/CK82WNFVZifX8W08Jsh5jfwxMY/fl9bH1w4lwuplpezDeTJHPkP+Z6S1ljrOLP yoZU1WYHNIl/8tF3LDRH1CHn9UxL/Bqanw2bHwVddtFWlE/a3f8bB83IYrpPO9fe ZtgsPtlWD1HhdPlJdbHPpOBPGtjuLYfTtBQIhU3ZAve20OI2RA+6AtkoHFqxTd9Q 17OfGItlMriv/q+qmu1XfP58iViCh+5dHvklTdFdAJg9QK+HBCdlskjseze+HAMr rfBpA1sHkgfhF37pNq4VXcXwXc1yh3KFgMsiDfBH7BAzs4UOTR8hjY0nFMHxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5QlVjfasjevUoRW95GwDZJoRfecwHwYDVR0j BBgwFoAUmkKD+WtwHsYOpF8ST4iBnXbX6PwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODMyYzgyM2QtYTRiNy00MDA1LTlhYjgtZDNiMmM4YmJmNzYzLzAvOUE0MjgzRjk2 QjcwMUVDNjBFQTQ1RjEyNEY4ODgxOUQ3NkQ3RThGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTQyODNGOTZCNzAxRUM2MEVBNDVGMTI0Rjg4ODE5RDc2RDdF OEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh YjgtZDNiMmM4YmJmNzYzLzAvOUE0MjgzRjk2QjcwMUVDNjBFQTQ1RjEyNEY4ODgx OUQ3NkQ3RThGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxa6EfQiLgHzTFl1t4ynNYJ8aX40h6Z2/R9 A5jVtrYyeh+ho01nFEFAgq6iA7A1kcHVQ2DCpYAOVEKFmVu4CBABAi8NpSdCuGKg lK8VPyEpzXnmXSG6ENW1HkhxJrsAIIPLWpptdmVswGbShPQK9nrpdF7TGfDXRyTS Y5hWC7JOUtMrdcabp5BfqOnxThEgU7OzKYGolUlZDZvjhDON+dR0iZ0Nsv7VRSwn 4X41YpFFjcTTiKyrwVm9Vc8WQcaGonoK0Mfxc/40qbTCFp+6ggqb7rPSdiRV/skJ oNuny7g/S6fkV7A+8e2aalI3uo7R4oHlpA8ONDV6sPqoq3ivQYA= -----END CERTIFICATE-----Generated at Fri Sep 25 09:21:08 2026 by rpki-client