$ rpki-client -vvvf rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft File: 913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft (raw, json) Hash identifier: f0vGV0b8d66NuXhY3sfxlfFwFV5aWp2Jw9X6y2N+gkQ= Subject key identifier: CD:D6:89:DF:43:C3:F7:8A:1E:1A:C6:48:1E:E7:7D:29:6A:EB:04:2B Authority key identifier: 91:34:09:B0:BC:7B:7B:D8:27:0B:1D:F2:B5:C8:D5:BA:3C:A5:5D:41 Certificate issuer: /CN=913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41 Certificate serial: 2FB807D03A955C41F0C773E8AC73F0243AABD693 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 18:28:27 +0000 Manifest this update: Thu 24 Sep 2026 18:23:27 +0000 Manifest next update: Fri 25 Sep 2026 20:34:27 +0000 Files and hashes: 1: 913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.crl (hash: aehLMN7dGsM2ewfTBPHQN8QqFfiVTlkiINje37MChwk=) 2: 3130332e3138362e31302e302f32332d3234203d3e2034383030.roa (hash: KARQhCrE6x4QilAtBVcaX71G9RZ5SUbJQcCY3G68Dvc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.crl rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 20:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b8:07:d0:3a:95:5c:41:f0:c7:73:e8:ac:73:f0:24:3a:ab:d6:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41 Validity Not Before: Sep 24 18:23:27 2026 GMT Not After : Sep 25 20:34:27 2026 GMT Subject: CN=CDD689DF43C3F78A1E1AC6481EE77D296AEB042B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cc:83:26:e5:a9:a7:b4:0b:e6:f2:4e:e4:4f: 05:7f:d1:da:ae:d5:a3:86:65:37:ee:c8:dd:04:cb: 20:22:05:60:09:ab:87:f7:bb:5c:77:05:1b:e2:8f: f7:b4:35:b7:14:ed:9b:80:40:80:75:da:80:ff:05: bd:72:b4:06:0e:2b:a6:85:88:98:40:d9:87:1f:db: b6:2e:15:02:89:5c:55:e5:66:05:29:ea:4d:f8:03: 49:25:88:6b:8a:01:d6:8a:61:8f:8e:54:de:8e:d2: 9f:47:67:ff:05:a9:7f:d2:f2:3f:a1:c8:c5:4a:64: e7:59:b8:03:55:ed:ea:d9:29:80:c7:a7:90:70:c8: 80:2f:a2:87:f8:d6:06:9a:91:1e:76:3e:50:90:ed: 18:20:ce:41:86:a5:cd:c0:49:73:70:0d:d7:9b:5c: fb:e3:ed:9e:42:06:01:61:13:61:61:2f:7c:79:f7: ea:e0:9f:bb:10:0f:6c:5b:21:82:2c:34:e2:90:3d: 69:d4:7f:28:e7:7a:58:da:3a:6d:8e:1c:ed:b2:2c: 79:3e:74:39:0d:cf:30:e5:14:74:f0:2f:73:e6:a7: 06:61:f4:bc:b0:47:70:2d:f9:ed:8f:42:f4:2b:ad: 34:f1:6c:10:e5:8c:58:30:60:94:b7:6f:8e:de:e0: 8d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D6:89:DF:43:C3:F7:8A:1E:1A:C6:48:1E:E7:7D:29:6A:EB:04:2B X509v3 Authority Key Identifier: keyid:91:34:09:B0:BC:7B:7B:D8:27:0B:1D:F2:B5:C8:D5:BA:3C:A5:5D:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:70:ab:72:c9:c3:fb:e3:82:b3:5c:37:53:e1:c6:43:c6:bf: c7:1e:46:3f:60:e8:78:1c:14:2b:1b:8e:48:5f:fe:9a:77:58: 4b:71:3c:ab:11:04:ed:d7:de:69:ad:7f:5a:1b:a6:a1:88:96: aa:0e:59:6d:de:30:f5:6e:f0:17:a7:12:29:7e:df:dc:21:cb: 29:a0:12:2e:94:b5:e3:75:04:94:dc:ad:a2:0e:7f:45:be:b3: b1:a8:83:4e:51:a8:c3:7c:06:80:70:b6:25:8b:17:a0:ee:d6: e3:2f:a9:95:f4:24:88:48:22:cc:45:f2:d8:62:97:c5:5c:f0: bc:3f:a5:98:20:60:55:fa:db:2a:59:c4:05:24:e9:7b:89:2f: 7e:c8:35:28:b9:f7:1f:24:60:7d:38:d6:b9:43:0c:ef:4e:ea: d5:e3:88:5e:99:a1:15:54:94:23:04:18:ad:5c:11:47:99:00: 8e:f9:55:16:8b:9e:18:9a:4a:59:b9:92:03:85:8f:b7:90:42: d7:23:ee:03:24:a3:00:0a:5e:e2:7d:11:3c:74:a6:0b:20:5a: a8:be:57:21:f0:80:b6:87:0f:93:5e:b9:7a:94:31:63:72:18: 59:ba:57:56:2c:e5:a5:4b:bd:55:b4:76:38:a4:3a:48:ab:bd: 08:65:8d:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL7gH0DqVXEHwx3PorHPwJDqr1pMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTEzNDA5QjBCQzdCN0JEODI3MEIxREYyQjVDOEQ1QkEz Q0E1NUQ0MTAeFw0yNjA5MjQxODIzMjdaFw0yNjA5MjUyMDM0MjdaMDMxMTAvBgNV BAMTKENERDY4OURGNDNDM0Y3OEExRTFBQzY0ODFFRTc3RDI5NkFFQjA0MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgzIMm5amntAvm8k7kTwV/0dqu 1aOGZTfuyN0EyyAiBWAJq4f3u1x3BRvij/e0NbcU7ZuAQIB12oD/Bb1ytAYOK6aF iJhA2Ycf27YuFQKJXFXlZgUp6k34A0kliGuKAdaKYY+OVN6O0p9HZ/8FqX/S8j+h yMVKZOdZuANV7erZKYDHp5BwyIAvoof41gaakR52PlCQ7RggzkGGpc3ASXNwDdeb XPvj7Z5CBgFhE2FhL3x59+rgn7sQD2xbIYIsNOKQPWnUfyjneljaOm2OHO2yLHk+ dDkNzzDlFHTwL3PmpwZh9LywR3At+e2PQvQrrTTxbBDljFgwYJS3b47e4I1xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzdaJ30PD94oeGsZIHud9KWrrBCswHwYDVR0j BBgwFoAUkTQJsLx7e9gnCx3ytcjVujylXUEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODg2ZGY3OTEtMDA3OS00NWY2LWFhOTMtNGMzYTI0MzA1ZDg1LzAvOTEzNDA5QjBC QzdCN0JEODI3MEIxREYyQjVDOEQ1QkEzQ0E1NUQ0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTM0MDlCMEJDN0I3QkQ4MjcwQjFERjJCNUM4RDVCQTNDQTU1 RDQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODg2ZGY3OTEtMDA3OS00NWY2LWFh OTMtNGMzYTI0MzA1ZDg1LzAvOTEzNDA5QjBCQzdCN0JEODI3MEIxREYyQjVDOEQ1 QkEzQ0E1NUQ0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlwq3LJw/vjgrNcN1PhxkPGv8ceRj9g6Hgc FCsbjkhf/pp3WEtxPKsRBO3X3mmtf1obpqGIlqoOWW3eMPVu8BenEil+39whyymg Ei6UteN1BJTcraIOf0W+s7Gog05RqMN8BoBwtiWLF6Du1uMvqZX0JIhIIsxF8thi l8Vc8Lw/pZggYFX62ypZxAUk6XuJL37INSi59x8kYH041rlDDO9O6tXjiF6ZoRVU lCMEGK1cEUeZAI75VRaLnhiaSlm5kgOFj7eQQtcj7gMkowAKXuJ9ETx0pgsgWqi+ VyHwgLaHD5NeuXqUMWNyGFm6V1Ys5aVLvVW0djikOkirvQhljd4= -----END CERTIFICATE-----Generated at Fri Sep 25 06:53:15 2026 by rpki-client