$ rpki-client -vvvf rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.mft File: 9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.mft (raw, json) Hash identifier: 8BXumUuJ5q3zCTsxLGpkQaCGX2Y8diTKbKUyKQQzKlU= Subject key identifier: 2C:17:98:3A:44:EA:21:7E:0E:51:6E:55:20:02:64:D1:C2:B6:9F:5D Authority key identifier: 93:92:F9:5F:0C:33:94:DE:A7:FF:F9:85:C0:85:F4:FF:0A:26:60:FB Certificate issuer: /CN=9392F95F0C3394DEA7FFF985C085F4FF0A2660FB Certificate serial: 13AAF917A6076140499264EF98E4DF0DC94D3565 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 05:47:58 +0000 Manifest this update: Thu 24 Sep 2026 05:42:58 +0000 Manifest next update: Fri 25 Sep 2026 06:02:58 +0000 Files and hashes: 1: 9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.crl (hash: zxGM91bI43gvXlc7wvEWRFKiWa11AW4gTCQysRCgj30=) 2: 3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (hash: JNrE3YAgSKkXvk2KuY4C3xc6vFJ8aaqlGvqUWAA5DE4=) 3: 3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa (hash: jnGR7HR1o9CjSKGxVZEINbrozGV4LnkdIOURY4rwMfA=) 4: 3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa (hash: 0pZQi9p2n6aMAqASFQQ+CaUR1jCRZ1Jmg90yao5WpBA=) 5: 3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa (hash: 2tG83qDLxajsJqT+je38BN6oGx2Pb5agqntR2yY+mUw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.crl rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:aa:f9:17:a6:07:61:40:49:92:64:ef:98:e4:df:0d:c9:4d:35:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9392F95F0C3394DEA7FFF985C085F4FF0A2660FB Validity Not Before: Sep 24 05:42:58 2026 GMT Not After : Sep 25 06:02:58 2026 GMT Subject: CN=2C17983A44EA217E0E516E55200264D1C2B69F5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bf:0a:fa:74:f9:db:3b:10:4c:38:34:1d:d7: 0c:61:42:bc:cc:3d:31:50:b9:36:b2:42:0f:a7:b6: cf:34:b2:01:55:ed:9f:75:28:9c:e5:53:76:a0:9d: 0c:14:82:64:6b:c7:09:b3:2b:a7:f9:af:14:4e:79: b8:1f:99:b6:f1:02:f5:21:80:4b:19:3f:7b:5f:90: b3:71:f5:6e:4e:e7:15:9d:34:eb:87:25:01:aa:c7: d5:b2:3a:26:a0:fb:1b:0c:94:8d:81:34:8c:0a:bc: 20:e2:e0:8e:a0:6c:99:be:38:69:03:7a:29:e4:8e: 88:58:76:74:09:41:b2:e1:93:cb:e3:17:6f:b6:50: 27:cf:19:06:c7:4b:72:1d:94:cb:a3:6d:26:ec:d6: ed:50:1c:d1:ec:fa:a8:d4:70:52:46:0f:15:64:f8: 47:4b:c8:78:51:9f:4e:af:29:02:7f:7b:2d:60:7f: 43:ae:be:d6:47:ac:cb:39:ee:5f:31:00:d5:7b:33: 84:cf:6a:14:a6:5a:b6:26:1a:a9:c4:40:de:68:92: e9:7e:03:b8:50:36:88:ca:29:55:cd:d2:d5:5b:de: d6:9b:a0:04:ae:8d:87:cf:4f:64:27:0b:8a:d1:7d: f1:46:c7:00:74:55:a4:c0:eb:bd:87:21:01:11:be: 3a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:17:98:3A:44:EA:21:7E:0E:51:6E:55:20:02:64:D1:C2:B6:9F:5D X509v3 Authority Key Identifier: keyid:93:92:F9:5F:0C:33:94:DE:A7:FF:F9:85:C0:85:F4:FF:0A:26:60:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:a5:d3:6f:cc:da:34:cc:7e:16:1d:c3:94:ee:50:dd:07:15: 88:2c:11:e8:94:8f:78:a0:69:ec:0e:40:93:d2:8b:f0:a9:67: 16:da:51:da:cd:dc:dd:59:b5:e4:a0:99:e9:ba:d8:db:ec:4f: 81:28:12:bf:99:85:97:39:28:42:13:89:b1:51:26:df:31:63: 03:f2:2e:b0:0e:61:b3:6c:b6:14:88:a4:1e:15:0f:6a:3b:22: 2a:2c:b7:7e:8c:1a:f1:af:49:25:33:4f:c3:9e:72:88:36:c4: d2:60:91:e1:22:12:00:8b:fd:b0:f9:29:0d:7f:c8:16:5e:fe: 7f:00:76:93:a8:a0:a2:65:0c:7b:08:04:3e:de:be:2a:97:84: f3:00:8d:d2:42:c0:ce:b5:de:5e:36:d1:e0:84:59:1a:c1:46: 0e:ff:73:d7:c9:78:2c:20:b4:34:e2:89:83:d4:27:1c:64:61: d9:08:27:19:4e:ac:91:da:07:7a:2e:7b:1c:9b:32:14:61:2b: 36:6f:cb:d6:cf:37:ff:fb:97:d2:e8:3a:f0:61:43:bf:40:9c: ca:f1:e5:89:b6:59:35:70:17:f2:3f:e6:d2:6e:3a:c5:f6:fb: 69:30:b5:a1:f8:2c:5d:b0:11:79:0e:4d:b0:e0:37:73:a3:d7: b5:0c:77:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE6r5F6YHYUBJkmTvmOTfDclNNWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM5MkY5NUYwQzMzOTRERUE3RkZGOTg1QzA4NUY0RkYw QTI2NjBGQjAeFw0yNjA5MjQwNTQyNThaFw0yNjA5MjUwNjAyNThaMDMxMTAvBgNV BAMTKDJDMTc5ODNBNDRFQTIxN0UwRTUxNkU1NTIwMDI2NEQxQzJCNjlGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+vwr6dPnbOxBMODQd1wxhQrzM PTFQuTayQg+nts80sgFV7Z91KJzlU3agnQwUgmRrxwmzK6f5rxROebgfmbbxAvUh gEsZP3tfkLNx9W5O5xWdNOuHJQGqx9WyOiag+xsMlI2BNIwKvCDi4I6gbJm+OGkD einkjohYdnQJQbLhk8vjF2+2UCfPGQbHS3IdlMujbSbs1u1QHNHs+qjUcFJGDxVk +EdLyHhRn06vKQJ/ey1gf0OuvtZHrMs57l8xANV7M4TPahSmWrYmGqnEQN5okul+ A7hQNojKKVXN0tVb3taboASujYfPT2QnC4rRffFGxwB0VaTA672HIQERvjrnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULBeYOkTqIX4OUW5VIAJk0cK2n10wHwYDVR0j BBgwFoAUk5L5XwwzlN6n//mFwIX0/womYPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OThmOTI0NDctYWNkMy00MjdjLWI1ZTctZGIzOTE3ZjE4NWM4LzAvOTM5MkY5NUYw QzMzOTRERUE3RkZGOTg1QzA4NUY0RkYwQTI2NjBGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzkyRjk1RjBDMzM5NERFQTdGRkY5ODVDMDg1RjRGRjBBMjY2 MEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOThmOTI0NDctYWNkMy00MjdjLWI1 ZTctZGIzOTE3ZjE4NWM4LzAvOTM5MkY5NUYwQzMzOTRERUE3RkZGOTg1QzA4NUY0 RkYwQTI2NjBGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKl02/M2jTMfhYdw5TuUN0HFYgsEeiUj3ig aewOQJPSi/CpZxbaUdrN3N1ZteSgmem62NvsT4EoEr+ZhZc5KEITibFRJt8xYwPy LrAOYbNsthSIpB4VD2o7Iiost36MGvGvSSUzT8Oecog2xNJgkeEiEgCL/bD5KQ1/ yBZe/n8AdpOooKJlDHsIBD7eviqXhPMAjdJCwM613l420eCEWRrBRg7/c9fJeCwg tDTiiYPUJxxkYdkIJxlOrJHaB3ouexybMhRhKzZvy9bPN//7l9LoOvBhQ79AnMrx 5Ym2WTVwF/I/5tJuOsX2+2kwtaH4LF2wEXkOTbDgN3Oj17UMd+s= -----END CERTIFICATE-----Generated at Thu Sep 24 11:34:11 2026 by rpki-client