$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft File: C9C56B3341FC31139F57F78A815CF9851E91375E.mft (raw, json) Hash identifier: 9jCGdMgZKK8wfwwxbdPHjYibYpJQ/JlQJHNfbXyvOMc= Subject key identifier: 44:77:33:4C:00:A4:17:2C:B8:75:6E:07:62:DF:13:73:C6:24:A0:93 Authority key identifier: C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E Certificate issuer: /CN=C9C56B3341FC31139F57F78A815CF9851E91375E Certificate serial: 7B039C80919FD5BCE5AA47010BA807E814DF8E12 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft Manifest number: C1 Signing time: Fri 25 Sep 2026 19:19:26 +0000 Manifest this update: Fri 25 Sep 2026 19:14:26 +0000 Manifest next update: Sat 26 Sep 2026 20:20:26 +0000 Files and hashes: 1: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: ++K50lF9/3pIjVc4GT4lTLKYd8Uj+kdHUPhBXnfZ3JA=) 2: C9C56B3341FC31139F57F78A815CF9851E91375E.crl (hash: +I6Yv4QxOlb0qwnh5XpIXECeLywdMhSB8wtzxBPYzjg=) 3: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: UvvLQHaYsHEf6H/EOqibK//gY5katYyU5vu1/kohXeI=) 4: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: YDyhEGDnWg4aoTzQ4Kj70ioCxeiG+fWs6BKdMJUBP40=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:03:9c:80:91:9f:d5:bc:e5:aa:47:01:0b:a8:07:e8:14:df:8e:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9C56B3341FC31139F57F78A815CF9851E91375E Validity Not Before: Sep 25 19:14:26 2026 GMT Not After : Sep 26 20:20:26 2026 GMT Subject: CN=4477334C00A4172CB8756E0762DF1373C624A093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b4:dc:9d:0a:8d:e1:fb:67:e5:b9:4e:0c:6a: 91:e7:e3:e4:a7:dd:89:08:6a:d2:57:97:28:3c:d5: 55:ed:d7:d4:c8:24:a5:cc:94:80:56:b7:ec:ef:a9: 54:25:f4:c2:ea:5c:bd:a7:c4:1b:e3:48:e7:36:30: 6b:91:a5:1e:a4:c9:50:29:c5:a9:f9:db:28:6e:9b: fe:00:67:25:e9:c6:50:ae:4c:96:a1:17:85:ee:c3: e6:5f:97:cb:27:3b:48:74:f8:d1:f7:b6:2f:a2:0a: 7b:03:73:dc:18:49:9c:37:98:e1:19:aa:0a:32:9f: 8c:35:00:45:e7:2d:be:cc:21:b8:b4:21:6b:3c:d4: 12:d0:d3:c8:44:87:f2:2f:91:39:26:ca:d8:8b:6f: fb:e1:58:fc:29:a4:a6:c7:06:e0:57:ae:29:ff:03: ff:f1:b2:a5:e6:78:14:bd:0b:24:2a:05:a4:d9:5b: 07:b4:6a:c5:10:7a:d2:1d:f2:29:31:c1:45:41:6d: 45:60:bf:0a:f1:52:33:70:2f:35:3e:75:19:8d:44: 6b:31:e0:7e:12:f9:df:7f:79:9f:84:65:04:b7:62: a2:3c:b1:e8:40:f8:d0:89:f9:25:3d:f6:42:b3:10: 06:70:79:89:c2:a1:d3:b3:87:56:da:32:a0:44:c8: b7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:77:33:4C:00:A4:17:2C:B8:75:6E:07:62:DF:13:73:C6:24:A0:93 X509v3 Authority Key Identifier: keyid:C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:14:43:25:fd:7f:2f:1b:5b:52:89:ce:86:ce:7d:ed:77:c9: bf:43:e7:8f:4f:06:7f:39:da:91:24:c9:37:25:28:13:a3:85: 2f:67:86:31:d6:6d:a2:ee:ed:17:b7:4f:44:e1:57:9e:d2:77: 79:ec:53:44:70:57:86:ec:72:54:33:f8:86:7b:a1:7f:bc:1b: 5d:8c:86:32:0f:a3:fa:b9:6b:a3:fe:10:b9:0c:e9:ed:dc:53: 58:7d:12:3f:00:d2:38:a4:14:c0:2e:4c:9b:82:de:b4:c1:8a: 69:a9:8d:aa:2f:42:f6:a8:7b:19:92:59:6a:45:bd:0c:30:2f: d4:7b:ad:0a:07:56:c6:8d:3c:c4:63:7a:34:31:39:f3:43:80: d6:68:36:f5:70:8c:0b:75:43:ff:30:6f:4d:69:bf:9a:63:87: 1b:27:62:fc:7c:86:1a:4c:0a:93:17:9f:57:49:2e:cd:6b:70: e7:cd:2b:4d:8d:56:16:00:ad:19:61:34:3c:db:43:14:f8:b0: fb:47:e5:c2:65:d7:32:8a:a4:f8:db:e8:e4:de:6c:09:1c:7e: bd:7b:03:e6:36:9e:de:49:6b:9e:40:82:1a:cf:71:34:70:62: 90:4f:6d:49:24:bd:05:f1:6c:97:01:72:1b:42:c1:0c:ba:59: db:c4:aa:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUewOcgJGf1bzlqkcBC6gH6BTfjhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlDNTZCMzM0MUZDMzExMzlGNTdGNzhBODE1Q0Y5ODUx RTkxMzc1RTAeFw0yNjA5MjUxOTE0MjZaFw0yNjA5MjYyMDIwMjZaMDMxMTAvBgNV BAMTKDQ0NzczMzRDMDBBNDE3MkNCODc1NkUwNzYyREYxMzczQzYyNEEwOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDatNydCo3h+2fluU4MapHn4+Sn 3YkIatJXlyg81VXt19TIJKXMlIBWt+zvqVQl9MLqXL2nxBvjSOc2MGuRpR6kyVAp xan52yhum/4AZyXpxlCuTJahF4Xuw+Zfl8snO0h0+NH3ti+iCnsDc9wYSZw3mOEZ qgoyn4w1AEXnLb7MIbi0IWs81BLQ08hEh/IvkTkmytiLb/vhWPwppKbHBuBXrin/ A//xsqXmeBS9CyQqBaTZWwe0asUQetId8ikxwUVBbUVgvwrxUjNwLzU+dRmNRGsx 4H4S+d9/eZ+EZQS3YqI8sehA+NCJ+SU99kKzEAZweYnCodOzh1baMqBEyLelAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURHczTACkFyy4dW4HYt8Tc8YkoJMwHwYDVR0j BBgwFoAUycVrM0H8MROfV/eKgVz5hR6RN14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI4YTdmYTUtZmRhMy00YTNlLTkyZjctZmFiZmVkMDVhOTVjLzAvQzlDNTZCMzM0 MUZDMzExMzlGNTdGNzhBODE1Q0Y5ODUxRTkxMzc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUM1NkIzMzQxRkMzMTEzOUY1N0Y3OEE4MTVDRjk4NTFFOTEz NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvQzlDNTZCMzM0MUZDMzExMzlGNTdGNzhBODE1Q0Y5 ODUxRTkxMzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsUQyX9fy8bW1KJzobOfe13yb9D549PBn85 2pEkyTclKBOjhS9nhjHWbaLu7Re3T0ThV57Sd3nsU0RwV4bsclQz+IZ7oX+8G12M hjIPo/q5a6P+ELkM6e3cU1h9Ej8A0jikFMAuTJuC3rTBimmpjaovQvaoexmSWWpF vQwwL9R7rQoHVsaNPMRjejQxOfNDgNZoNvVwjAt1Q/8wb01pv5pjhxsnYvx8hhpM CpMXn1dJLs1rcOfNK02NVhYArRlhNDzbQxT4sPtH5cJl1zKKpPjb6OTebAkcfr17 A+Y2nt5Ja55AghrPcTRwYpBPbUkkvQXxbJcBchtCwQy6WdvEqkI= -----END CERTIFICATE-----Generated at Sat Sep 26 10:56:56 2026 by rpki-client