$ rpki-client -vvvf rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft File: 9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft (raw, json) Hash identifier: 08l7P7Z84Jqd368PT1TcpavtyhLmed7iTvTFiGgqBII= Subject key identifier: 29:05:61:88:33:E0:B5:2B:60:D4:7D:03:E8:78:E1:F3:8A:4A:B4:FB Authority key identifier: 9F:2F:D5:F0:22:2A:23:10:19:36:82:C9:DC:2C:AB:6A:7F:4C:EE:F0 Certificate issuer: /CN=9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0 Certificate serial: 28E1BC535BC06AD3FEDCCEB0F276C43F6FF137F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 09:53:22 +0000 Manifest this update: Wed 23 Sep 2026 09:48:22 +0000 Manifest next update: Thu 24 Sep 2026 10:51:22 +0000 Files and hashes: 1: 3130332e3137342e36342e302f32332d3234203d3e20313437313236.roa (hash: BwYpBlP3m28Tfj+hQxoec6R8e4UN5PECSBz/IAuPt0w=) 2: 3130332e3137342e36352e302f32342d3234203d3e20313437313236.roa (hash: wlJasn9sEpBfYIb16xYXhPNZ1TeKQ7fHYr3qJmH4nLE=) 3: 9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.crl (hash: /HYHqB2kS2ywbfvrx63AGNXrNmSgy6R3S8P33YbvGqI=) 4: 3130332e3137342e36342e302f32342d3234203d3e20313437313236.roa (hash: ZGD3gvwBGhA/oYppfcua832gpcsap+01GHOd/NYuTUc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.crl rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e1:bc:53:5b:c0:6a:d3:fe:dc:ce:b0:f2:76:c4:3f:6f:f1:37:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0 Validity Not Before: Sep 23 09:48:22 2026 GMT Not After : Sep 24 10:51:22 2026 GMT Subject: CN=2905618833E0B52B60D47D03E878E1F38A4AB4FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:60:6b:ad:df:58:43:88:9f:86:bc:ec:67: 48:22:2e:56:4b:ec:99:3c:87:c0:62:6d:8a:eb:72: da:6a:ba:f8:93:85:d6:7d:ca:a1:71:f8:c6:14:fe: a9:60:86:6c:c0:fb:9d:bc:3e:d5:27:49:d3:48:c2: c8:03:e4:73:c3:fc:38:52:e4:de:d4:50:64:cc:30: 02:7f:a7:f8:ba:c5:b1:67:e0:3a:20:d0:b8:42:f8: 40:da:77:0f:7a:ca:32:7c:19:c6:fe:d3:e9:0a:51: c9:01:6c:ef:2d:c7:2a:99:b1:fa:4d:e1:c0:b1:d4: 70:9b:81:77:9e:69:40:f5:51:c2:e2:57:7c:db:da: 80:1b:ae:77:89:9a:69:bf:da:01:3e:c0:d3:3a:41: 06:0f:dd:7e:3a:fd:e5:1b:e2:c0:27:13:1a:88:2c: 16:f1:10:40:22:e5:b6:d1:f5:8f:e7:ee:f3:c7:cd: 52:ef:0d:1f:da:78:70:15:35:cb:24:5f:17:03:d8: 06:3e:f7:62:bf:15:b0:6d:af:73:bd:10:15:b2:37: b2:48:c8:71:99:50:90:6c:fb:86:f6:27:04:87:2c: dc:15:66:f0:79:78:ad:47:f6:e3:5e:b0:0e:c6:88: 9c:99:33:43:fc:e6:a1:92:e2:ce:5e:34:9d:cd:15: e1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:05:61:88:33:E0:B5:2B:60:D4:7D:03:E8:78:E1:F3:8A:4A:B4:FB X509v3 Authority Key Identifier: keyid:9F:2F:D5:F0:22:2A:23:10:19:36:82:C9:DC:2C:AB:6A:7F:4C:EE:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:aa:39:00:b9:ad:14:ba:c9:dd:e1:f1:6f:0d:51:72:17:3d: ab:43:51:73:0f:fd:8b:83:d1:2c:88:01:96:e7:31:c1:da:84: 3a:f7:47:62:b9:af:ff:01:11:e1:cf:07:38:c2:1e:a1:cb:5a: e9:74:f6:51:82:2d:d0:a3:2e:62:b3:2f:e3:a4:bc:fc:53:98: af:80:50:b7:f6:f9:c9:3d:1f:d4:03:89:b4:6b:a7:22:0f:7e: d3:ba:c0:33:6e:56:ac:a2:41:14:a6:e9:b2:b7:db:9f:6a:b8: 1b:57:3c:e3:f9:e6:70:aa:cf:81:cf:24:02:bd:86:a4:eb:92: e9:4b:09:8c:e2:a1:ef:7e:03:9d:0e:4d:0d:57:37:d7:40:9a: 70:a4:dc:89:f2:55:02:92:fa:52:8f:d6:5e:07:48:64:da:6e: 91:b4:fc:50:a1:53:1a:7a:db:0c:67:47:c8:98:d6:69:c4:3b: 27:29:37:da:74:16:24:2a:e5:37:a7:da:14:e8:d7:db:76:e6: b8:b7:00:92:01:49:50:fd:b2:f9:22:1c:78:f9:bf:ff:f4:0b: 42:94:8f:2f:c4:24:5e:50:47:e8:19:69:d4:37:71:e6:dd:93: 3b:cf:db:4f:4d:fc:d2:29:9a:cd:70:e2:8f:51:9b:95:9e:0a: 39:65:be:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKOG8U1vAatP+3M6w8nbEP2/xN/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYyRkQ1RjAyMjJBMjMxMDE5MzY4MkM5REMyQ0FCNkE3 RjRDRUVGMDAeFw0yNjA5MjMwOTQ4MjJaFw0yNjA5MjQxMDUxMjJaMDMxMTAvBgNV BAMTKDI5MDU2MTg4MzNFMEI1MkI2MEQ0N0QwM0U4NzhFMUYzOEE0QUI0RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2WBrrd9YQ4ifhrzsZ0giLlZL 7Jk8h8BibYrrctpquviThdZ9yqFx+MYU/qlghmzA+528PtUnSdNIwsgD5HPD/DhS 5N7UUGTMMAJ/p/i6xbFn4Dog0LhC+EDadw96yjJ8Gcb+0+kKUckBbO8txyqZsfpN 4cCx1HCbgXeeaUD1UcLiV3zb2oAbrneJmmm/2gE+wNM6QQYP3X46/eUb4sAnExqI LBbxEEAi5bbR9Y/n7vPHzVLvDR/aeHAVNcskXxcD2AY+92K/FbBtr3O9EBWyN7JI yHGZUJBs+4b2JwSHLNwVZvB5eK1H9uNesA7GiJyZM0P85qGS4s5eNJ3NFeEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKQVhiDPgtStg1H0D6Hjh84pKtPswHwYDVR0j BBgwFoAUny/V8CIqIxAZNoLJ3Cyran9M7vAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFmNGFiYmUtOGI1ZC00MDJiLTkwNTMtNTBiNzg1Yzc3MzUyLzAvOUYyRkQ1RjAy MjJBMjMxMDE5MzY4MkM5REMyQ0FCNkE3RjRDRUVGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjJGRDVGMDIyMkEyMzEwMTkzNjgyQzlEQzJDQUI2QTdGNENF RUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFmNGFiYmUtOGI1ZC00MDJiLTkw NTMtNTBiNzg1Yzc3MzUyLzAvOUYyRkQ1RjAyMjJBMjMxMDE5MzY4MkM5REMyQ0FC NkE3RjRDRUVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqqOQC5rRS6yd3h8W8NUXIXPatDUXMP/YuD 0SyIAZbnMcHahDr3R2K5r/8BEeHPBzjCHqHLWul09lGCLdCjLmKzL+OkvPxTmK+A ULf2+ck9H9QDibRrpyIPftO6wDNuVqyiQRSm6bK3259quBtXPOP55nCqz4HPJAK9 hqTrkulLCYzioe9+A50OTQ1XN9dAmnCk3InyVQKS+lKP1l4HSGTabpG0/FChUxp6 2wxnR8iY1mnEOycpN9p0FiQq5Ten2hTo19t25ri3AJIBSVD9svkiHHj5v//0C0KU jy/EJF5QR+gZadQ3cebdkzvP209N/NIpms1w4o9Rm5WeCjllvog= -----END CERTIFICATE-----Generated at Wed Sep 23 21:51:54 2026 by rpki-client