$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft File: 1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft (raw, json) Hash identifier: Z9K++cebNba68trB9HbAJ8sryRM0MZCgiS8RNc/+Kj4= Subject key identifier: 0B:1E:3A:A5:0D:49:99:C5:60:56:C0:0C:CB:1B:4B:79:F7:27:8B:09 Authority key identifier: 1D:91:17:06:C9:A5:E8:A4:99:3B:1A:D5:19:49:8D:E9:F6:09:FD:97 Certificate issuer: /CN=1D911706C9A5E8A4993B1AD519498DE9F609FD97 Certificate serial: 3ECB952BD322BC2C121C687A461CE0D2B15BE4EA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 20:00:44 +0000 Manifest this update: Wed 23 Sep 2026 19:55:44 +0000 Manifest next update: Thu 24 Sep 2026 21:22:44 +0000 Files and hashes: 1: 1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl (hash: J9QoY4ERYrrOffgfPyL5lGJxV8nyR5HKPL972/ftLUE=) 2: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: F4rX5kdBMIK+q1JAnOl0J4l31YWcV9qdCJ59RuEth5I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:cb:95:2b:d3:22:bc:2c:12:1c:68:7a:46:1c:e0:d2:b1:5b:e4:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D911706C9A5E8A4993B1AD519498DE9F609FD97 Validity Not Before: Sep 23 19:55:44 2026 GMT Not After : Sep 24 21:22:44 2026 GMT Subject: CN=0B1E3AA50D4999C56056C00CCB1B4B79F7278B09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b4:28:32:3b:e2:e2:48:03:72:cc:b5:d7:99: 67:12:c7:db:3a:a6:a0:67:e6:17:1f:1f:ad:93:4f: cb:29:6d:06:c7:40:b7:95:d0:25:cb:46:cf:1b:8d: 7d:d9:db:54:79:77:8a:b7:83:18:96:01:0d:98:a4: af:fa:4b:04:4d:9b:80:e2:e5:cd:a1:12:39:00:45: 03:48:06:8b:ff:46:66:80:a0:9c:92:11:46:dc:06: ea:50:52:ac:4e:d7:b1:bf:fa:cd:b9:97:99:07:16: eb:29:e2:52:df:2e:14:4d:f5:34:9c:95:1d:67:e9: 20:44:43:13:53:65:23:3b:d9:31:17:6f:0b:bd:d4: 4a:91:82:7d:04:b7:0e:67:8f:e6:30:87:18:f7:d2: d6:f8:22:34:59:a3:f1:2e:65:61:e1:38:97:6b:0e: 3e:85:6b:83:b4:85:c5:4e:09:d7:0a:3e:ba:09:b1: 5a:dd:fd:1a:08:d4:93:60:4f:40:19:87:48:56:db: a7:d9:26:87:81:c9:85:32:b2:62:71:d0:ec:7a:43: 1f:ce:d5:3b:f3:a0:fa:30:33:48:e8:e2:49:9c:5e: f7:27:e9:c2:b5:0e:56:b4:e3:88:91:99:7d:86:91: 10:a1:bd:cd:7e:7c:41:72:ab:85:19:cc:8d:7f:65: 06:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1E:3A:A5:0D:49:99:C5:60:56:C0:0C:CB:1B:4B:79:F7:27:8B:09 X509v3 Authority Key Identifier: keyid:1D:91:17:06:C9:A5:E8:A4:99:3B:1A:D5:19:49:8D:E9:F6:09:FD:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:26:22:d6:6c:f7:99:59:95:ea:d8:8b:73:c1:b9:5d:bf:b4: c9:15:48:ea:a7:6b:83:74:e7:cc:b5:1c:d3:36:d3:7f:73:ab: 63:c9:0e:03:d8:9f:e3:af:45:82:f8:6e:79:2e:c6:c1:a7:40: 2e:ba:0b:b9:68:42:9f:1a:53:51:a0:e2:1c:27:77:de:1c:27: 9d:3e:da:c2:f2:7c:a3:f9:23:4b:55:14:88:82:44:2e:2d:51: 94:3c:f3:e1:58:b1:00:c2:cf:e7:c7:a1:19:14:49:2a:7f:a6: 6d:82:28:4d:80:e7:25:41:b7:b1:eb:7e:49:0e:a9:e4:ad:46: d4:87:6b:16:3f:a0:08:79:55:56:e3:43:42:a5:80:4a:52:09: cf:37:f7:43:22:3d:ba:cc:9e:73:00:48:b4:ba:da:f4:27:c3: 35:c7:86:36:47:76:7f:dc:7f:6a:90:bb:30:22:21:45:a5:d8: a0:94:cc:41:dc:c6:75:7b:20:e8:1d:c8:a7:4f:65:64:3d:66: cc:dd:f0:cd:18:15:22:c3:dc:2e:00:6a:16:d7:92:b8:ba:60: 38:7e:21:d9:bb:fb:14:da:12:7b:5c:0a:ea:61:38:a8:77:e3: 2f:f7:6a:ce:58:c2:cd:e4:e9:3c:60:60:b5:01:9b:75:48:69: b3:2d:06:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPsuVK9MivCwSHGh6Rhzg0rFb5OowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ5MTE3MDZDOUE1RThBNDk5M0IxQUQ1MTk0OThERTlG NjA5RkQ5NzAeFw0yNjA5MjMxOTU1NDRaFw0yNjA5MjQyMTIyNDRaMDMxMTAvBgNV BAMTKDBCMUUzQUE1MEQ0OTk5QzU2MDU2QzAwQ0NCMUI0Qjc5RjcyNzhCMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6tCgyO+LiSANyzLXXmWcSx9s6 pqBn5hcfH62TT8spbQbHQLeV0CXLRs8bjX3Z21R5d4q3gxiWAQ2YpK/6SwRNm4Di 5c2hEjkARQNIBov/RmaAoJySEUbcBupQUqxO17G/+s25l5kHFusp4lLfLhRN9TSc lR1n6SBEQxNTZSM72TEXbwu91EqRgn0Etw5nj+Ywhxj30tb4IjRZo/EuZWHhOJdr Dj6Fa4O0hcVOCdcKProJsVrd/RoI1JNgT0AZh0hW26fZJoeByYUysmJx0Ox6Qx/O 1TvzoPowM0jo4kmcXvcn6cK1Dla044iRmX2GkRChvc1+fEFyq4UZzI1/ZQZVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCx46pQ1JmcVgVsAMyxtLefcniwkwHwYDVR0j BBgwFoAUHZEXBsml6KSZOxrVGUmN6fYJ/ZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTMyOTc5M2UtOGYxOC00MTE2LTkyNjgtYTEzM2RhZjExY2VmLzAvMUQ5MTE3MDZD OUE1RThBNDk5M0IxQUQ1MTk0OThERTlGNjA5RkQ5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRDkxMTcwNkM5QTVFOEE0OTkzQjFBRDUxOTQ5OERFOUY2MDlG RDk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky NjgtYTEzM2RhZjExY2VmLzAvMUQ5MTE3MDZDOUE1RThBNDk5M0IxQUQ1MTk0OThE RTlGNjA5RkQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMmItZs95lZlerYi3PBuV2/tMkVSOqna4N0 58y1HNM2039zq2PJDgPYn+OvRYL4bnkuxsGnQC66C7loQp8aU1Gg4hwnd94cJ50+ 2sLyfKP5I0tVFIiCRC4tUZQ88+FYsQDCz+fHoRkUSSp/pm2CKE2A5yVBt7HrfkkO qeStRtSHaxY/oAh5VVbjQ0KlgEpSCc8390MiPbrMnnMASLS62vQnwzXHhjZHdn/c f2qQuzAiIUWl2KCUzEHcxnV7IOgdyKdPZWQ9Zszd8M0YFSLD3C4AahbXkri6YDh+ Idm7+xTaEntcCuphOKh34y/3as5Yws3k6TxgYLUBm3VIabMtBhw= -----END CERTIFICATE-----Generated at Thu Sep 24 10:10:27 2026 by rpki-client