$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.mft File: 9541F7A7495AA8918A6FE15016CB396EF2733922.mft (raw, json) Hash identifier: lXns8kKff015WyzvVFthng95vzgSo6kHYFuJJH24S2s= Subject key identifier: 3A:E0:DB:9E:C1:86:67:B5:8A:F9:94:EA:1E:67:0D:5B:C0:A4:60:70 Authority key identifier: 95:41:F7:A7:49:5A:A8:91:8A:6F:E1:50:16:CB:39:6E:F2:73:39:22 Certificate issuer: /CN=9541F7A7495AA8918A6FE15016CB396EF2733922 Certificate serial: 017ED759E84DC7E7B4979FDC92C4C96C6F716145 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9541F7A7495AA8918A6FE15016CB396EF2733922.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.mft Manifest number: C5 Signing time: Sun 27 Sep 2026 03:13:09 +0000 Manifest this update: Sun 27 Sep 2026 03:08:09 +0000 Manifest next update: Mon 28 Sep 2026 06:05:09 +0000 Files and hashes: 1: 3130332e32322e3234302e302f32322d3234203d3e203234353233.roa (hash: CaMXRMHtTH2oaHCEUbRaStzEXt0odxZTYz16ElrcZ6M=) 2: 34332e3234372e32302e302f32322d3234203d3e203234353233.roa (hash: gwZQbe4m/GrtEIxNeRbhHDA+1mqa7HkZdYu5ukYQUEc=) 3: 3230332e3137342e382e302f32312d3234203d3e203234353233.roa (hash: jRyjSLa+6p5f7abgpIfoPXK67MLqzEp1oTDyh4FJNKU=) 4: 3230332e38342e3135322e302f32312d3234203d3e203234353233.roa (hash: 6m+L6QokpRSXR82tJzEKM+5CtQ02ZMkv7Oc3TQ5fiJM=) 5: 9541F7A7495AA8918A6FE15016CB396EF2733922.crl (hash: XMiJoCkCeBYuLUPxwF+o997FK5TIWsSsQ0/5HfKXYN8=) 6: 323430323a313230303a3a2f33322d3438203d3e203234353233.roa (hash: 79pyzvq7PlzmwMv56PeM1vSxs4VK3SzdUl+NKPr2R1E=) 7: 3131302e352e39362e302f32302d3234203d3e203234353233.roa (hash: KHMBmLMNsIrlpMVwHI+S1RY6LU739ywmvYFC1cq5xl8=) 8: 3230322e36322e31322e302f32322d3234203d3e203234353233.roa (hash: XN1DjcwbwL8FbCvRk5cbd36XlAVTMcArigukWUmV4y4=) 9: 34332e3234372e32312e302f32342d3234203d3e20313331373830.roa (hash: 36nZndVPopPsPLeopECZwGolgADhQtpH4A7gMxfmAgY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.crl rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9541F7A7495AA8918A6FE15016CB396EF2733922.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:7e:d7:59:e8:4d:c7:e7:b4:97:9f:dc:92:c4:c9:6c:6f:71:61:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9541F7A7495AA8918A6FE15016CB396EF2733922 Validity Not Before: Sep 27 03:08:09 2026 GMT Not After : Sep 28 06:05:09 2026 GMT Subject: CN=3AE0DB9EC18667B58AF994EA1E670D5BC0A46070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c6:ce:87:ca:d5:35:1b:c4:b8:ed:f3:8d:87: ff:e7:35:be:57:6e:49:72:d9:f7:33:50:60:5f:a1: 73:bf:12:1d:82:8f:15:5b:ff:1e:b9:59:1c:cc:d4: b7:22:8d:d6:23:73:3d:3b:e3:44:53:f2:75:74:a0: be:43:57:03:a1:45:5f:8d:19:bf:b2:7a:8a:6f:e2: bc:4e:8f:94:17:b3:f9:77:9f:88:b0:61:c3:30:99: 6c:f5:38:dc:3b:59:4f:1e:64:27:d6:47:d1:32:17: 46:ba:d5:90:e1:14:e5:53:34:89:c7:20:be:65:61: b3:2f:2a:9b:d6:16:60:fc:51:c7:a1:47:aa:fa:8a: 94:9f:95:5a:b6:0f:ee:0b:66:c2:d9:0b:c8:0a:27: c6:c5:b6:d0:b3:92:40:d0:f7:11:2f:0d:19:11:73: f9:e1:68:4d:6d:1a:3c:07:1b:23:17:32:a1:49:48: 78:c6:14:ea:d6:71:1a:90:97:ea:ad:35:78:8b:f1: 4f:32:32:6b:8c:91:37:be:b8:a7:29:ef:e9:0d:92: ab:ea:ab:4b:08:bb:a1:57:0e:75:b3:1f:5d:1a:84: 80:8b:ee:41:4a:d8:94:62:d9:0e:82:18:c5:e4:53: 6a:17:40:7e:69:38:dc:d0:af:df:52:04:97:fe:b3: 10:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E0:DB:9E:C1:86:67:B5:8A:F9:94:EA:1E:67:0D:5B:C0:A4:60:70 X509v3 Authority Key Identifier: keyid:95:41:F7:A7:49:5A:A8:91:8A:6F:E1:50:16:CB:39:6E:F2:73:39:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9541F7A7495AA8918A6FE15016CB396EF2733922.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a1:3d:a1:07:1c:84:d9:36:6b:f3:28:37:d1:bd:14:a6:33: 1f:49:07:cb:93:b3:f7:25:ac:99:4a:05:bb:f0:50:64:6e:06: 79:6b:2e:90:f2:03:80:48:69:e2:28:07:21:a0:07:ed:70:0f: c5:64:ed:b1:aa:a2:2a:da:80:10:da:b6:0b:ea:5c:fd:d3:a7: de:05:88:4c:ce:90:60:c1:88:41:c7:d7:bb:47:8f:4d:7e:4e: 3e:9c:d9:2f:81:4b:87:ad:98:71:14:3c:99:b5:0b:98:4c:24: 2f:fe:6f:4f:ca:b4:3d:c2:09:bb:9a:f8:4c:d0:24:a0:86:50: f4:95:01:e0:2f:01:35:7e:9c:04:8a:f0:fe:4f:b8:e0:fd:ab: 6a:fb:b0:ac:fa:b1:08:ea:bd:ad:c7:a4:e5:1f:f5:ab:3a:a3: bc:52:85:72:31:9a:0a:e9:10:fb:1b:32:1c:42:fb:5e:14:bb: 19:4f:44:18:63:3f:24:2f:42:8e:81:00:ce:19:00:d4:cd:34: fe:92:fd:ef:74:d9:31:7e:31:b2:d0:9f:6b:6a:4f:9f:7b:34: f2:0e:25:c1:a3:f3:7d:eb:25:a1:07:77:c9:6d:65:9a:96:35: 20:3d:27:04:7c:26:e2:94:58:0d:f4:d1:81:77:a0:7d:d8:08: 1c:d5:a9:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAX7XWehNx+e0l5/cksTJbG9xYUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0MUY3QTc0OTVBQTg5MThBNkZFMTUwMTZDQjM5NkVG MjczMzkyMjAeFw0yNjA5MjcwMzA4MDlaFw0yNjA5MjgwNjA1MDlaMDMxMTAvBgNV BAMTKDNBRTBEQjlFQzE4NjY3QjU4QUY5OTRFQTFFNjcwRDVCQzBBNDYwNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcxs6HytU1G8S47fONh//nNb5X bkly2fczUGBfoXO/Eh2CjxVb/x65WRzM1LcijdYjcz0740RT8nV0oL5DVwOhRV+N Gb+yeopv4rxOj5QXs/l3n4iwYcMwmWz1ONw7WU8eZCfWR9EyF0a61ZDhFOVTNInH IL5lYbMvKpvWFmD8UcehR6r6ipSflVq2D+4LZsLZC8gKJ8bFttCzkkDQ9xEvDRkR c/nhaE1tGjwHGyMXMqFJSHjGFOrWcRqQl+qtNXiL8U8yMmuMkTe+uKcp7+kNkqvq q0sIu6FXDnWzH10ahICL7kFK2JRi2Q6CGMXkU2oXQH5pONzQr99SBJf+sxAbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOuDbnsGGZ7WK+ZTqHmcNW8CkYHAwHwYDVR0j BBgwFoAUlUH3p0laqJGKb+FQFss5bvJzOSIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGM2Njc3NjktODBkYy00MDkzLWI1ZjctZGZlN2M1NzIwNDg2LzAvOTU0MUY3QTc0 OTVBQTg5MThBNkZFMTUwMTZDQjM5NkVGMjczMzkyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTQxRjdBNzQ5NUFBODkxOEE2RkUxNTAxNkNCMzk2RUYyNzMz OTIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGM2Njc3NjktODBkYy00MDkzLWI1 ZjctZGZlN2M1NzIwNDg2LzAvOTU0MUY3QTc0OTVBQTg5MThBNkZFMTUwMTZDQjM5 NkVGMjczMzkyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOhPaEHHITZNmvzKDfRvRSmMx9JB8uTs/cl rJlKBbvwUGRuBnlrLpDyA4BIaeIoByGgB+1wD8Vk7bGqoiragBDatgvqXP3Tp94F iEzOkGDBiEHH17tHj01+Tj6c2S+BS4etmHEUPJm1C5hMJC/+b0/KtD3CCbua+EzQ JKCGUPSVAeAvATV+nASK8P5PuOD9q2r7sKz6sQjqva3HpOUf9as6o7xShXIxmgrp EPsbMhxC+14UuxlPRBhjPyQvQo6BAM4ZANTNNP6S/e902TF+MbLQn2tqT597NPIO JcGj833rJaEHd8ltZZqWNSA9JwR8JuKUWA300YF3oH3YCBzVqQM= -----END CERTIFICATE-----Generated at Sun Sep 27 08:41:50 2026 by rpki-client