$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft File: 9C227785E7A190271A628E29FFB9374BECA61154.mft (raw, json) Hash identifier: Pehl8e08lV0vTda1smiKZ//oWQhwKPMylDqsEuog9mw= Subject key identifier: 51:00:44:17:A7:DF:09:CC:EB:AD:28:9E:A6:C9:A0:00:19:05:73:3A Authority key identifier: 9C:22:77:85:E7:A1:90:27:1A:62:8E:29:FF:B9:37:4B:EC:A6:11:54 Certificate issuer: /CN=9C227785E7A190271A628E29FFB9374BECA61154 Certificate serial: 7F891865732996E33645C2C95C6ADCE8D4E070BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C227785E7A190271A628E29FFB9374BECA61154.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 03:49:54 +0000 Manifest this update: Fri 25 Sep 2026 03:44:54 +0000 Manifest next update: Sat 26 Sep 2026 04:21:54 +0000 Files and hashes: 1: 9C227785E7A190271A628E29FFB9374BECA61154.crl (hash: aBgIfWs8UFkje6N1nBynJnCVhCWuCjm5faUYTjK6Kwo=) 2: 3130332e3132322e3230332e302f32342d3234203d3e20313338303733.roa (hash: OSktfcUOEhaPa/dtCu8RSESeObR9iQ/cknxFlh9rYYM=) 3: 3130332e3132322e3230322e302f32342d3234203d3e20313338303733.roa (hash: bJXWECjiuCYMun/6fgF6wLQ0iGSb4mFhCIoJYAqk5LQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.crl rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C227785E7A190271A628E29FFB9374BECA61154.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 04:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:89:18:65:73:29:96:e3:36:45:c2:c9:5c:6a:dc:e8:d4:e0:70:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C227785E7A190271A628E29FFB9374BECA61154 Validity Not Before: Sep 25 03:44:54 2026 GMT Not After : Sep 26 04:21:54 2026 GMT Subject: CN=51004417A7DF09CCEBAD289EA6C9A0001905733A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dd:ea:de:03:01:c9:f0:42:91:5b:3b:dc:6c: 07:b2:fd:f2:c0:93:97:c5:04:67:2d:4a:62:0d:96: 64:69:62:b8:1f:55:ca:65:f2:0d:24:bf:d8:57:45: 20:a0:e8:f4:a7:c1:64:58:9a:f6:8d:3b:67:34:54: b0:90:7b:18:7a:a0:5d:95:11:6e:f5:00:52:42:62: 75:e4:12:0f:88:f0:b1:f1:f7:bb:32:10:a8:7a:97: 18:32:49:0f:9d:21:03:d5:fe:76:d8:48:61:63:30: cd:0c:8f:b3:ff:8b:d9:dc:b5:51:48:f8:ae:c7:bd: 07:3d:8f:fa:53:60:80:5e:71:50:57:a2:56:b1:87: c0:fb:bc:e3:b8:f7:67:70:8f:99:02:7a:0d:56:ab: 95:0e:87:72:44:8e:31:e4:32:35:0a:f4:9f:5a:f8: f2:78:f0:bf:1f:0c:77:06:3a:3e:a2:92:3f:49:c9: be:8f:b6:5e:89:d8:db:cb:32:a2:7d:a7:dc:9c:56: 28:c8:4e:1c:20:d4:e8:80:f0:48:57:8b:1b:89:cc: 39:f2:ab:dc:ba:8c:89:eb:9b:96:8e:7c:d7:bf:aa: 4a:d3:8b:44:3f:b6:0b:1a:fe:b0:7e:ba:da:33:ce: cf:b8:c1:5f:91:c5:6e:30:a3:9e:6b:dc:bc:27:f9: c1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:00:44:17:A7:DF:09:CC:EB:AD:28:9E:A6:C9:A0:00:19:05:73:3A X509v3 Authority Key Identifier: keyid:9C:22:77:85:E7:A1:90:27:1A:62:8E:29:FF:B9:37:4B:EC:A6:11:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C227785E7A190271A628E29FFB9374BECA61154.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:6c:d0:fe:e2:f0:ab:7e:90:19:0c:91:61:e7:a5:9b:27:c0: 2c:a1:59:74:66:04:4e:f5:8a:f1:85:2e:ca:ee:3b:d0:dc:3f: 99:0d:c8:68:7c:c5:63:a8:c0:6d:32:f3:27:e6:5f:1a:45:98: 26:08:04:57:52:94:0d:d3:b1:df:8d:c4:50:af:7b:81:a5:f2: 42:b9:56:b0:76:30:61:d1:4e:66:b0:84:99:a1:dc:80:e8:63: f6:5e:ec:8c:de:45:2d:07:d9:67:4d:10:8f:7d:e8:a2:39:35: 04:57:87:7b:f9:28:a6:63:1f:7b:76:a1:72:5a:8d:e0:52:2f: a2:3c:b3:bd:25:ec:ae:c3:5d:d2:58:8f:fa:2d:4c:bf:c6:64: 5a:53:6c:1a:9a:dd:c9:ab:14:e5:ed:57:99:a3:9c:76:54:8d: d0:f2:84:13:22:13:90:48:df:0b:b5:89:9e:13:00:05:45:27: eb:b9:4c:d6:47:8e:a1:ff:e8:30:6c:3d:00:7c:d2:cc:ac:6d: 38:94:9c:71:22:4d:e4:4d:2f:89:8f:28:02:4b:da:ec:50:3f: 72:9f:92:6f:87:aa:aa:4c:c0:bf:c6:23:3a:e3:19:17:91:1c: aa:29:26:e2:33:5d:01:6f:8f:f4:db:0d:fc:75:67:eb:0a:5f: 63:5c:be:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf4kYZXMpluM2RcLJXGrc6NTgcL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMyMjc3ODVFN0ExOTAyNzFBNjI4RTI5RkZCOTM3NEJF Q0E2MTE1NDAeFw0yNjA5MjUwMzQ0NTRaFw0yNjA5MjYwNDIxNTRaMDMxMTAvBgNV BAMTKDUxMDA0NDE3QTdERjA5Q0NFQkFEMjg5RUE2QzlBMDAwMTkwNTczM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC93ereAwHJ8EKRWzvcbAey/fLA k5fFBGctSmINlmRpYrgfVcpl8g0kv9hXRSCg6PSnwWRYmvaNO2c0VLCQexh6oF2V EW71AFJCYnXkEg+I8LHx97syEKh6lxgySQ+dIQPV/nbYSGFjMM0Mj7P/i9nctVFI +K7HvQc9j/pTYIBecVBXolaxh8D7vOO492dwj5kCeg1Wq5UOh3JEjjHkMjUK9J9a +PJ48L8fDHcGOj6ikj9Jyb6Ptl6J2NvLMqJ9p9ycVijIThwg1OiA8EhXixuJzDny q9y6jInrm5aOfNe/qkrTi0Q/tgsa/rB+utozzs+4wV+RxW4wo55r3Lwn+cH5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUQBEF6ffCczrrSiepsmgABkFczowHwYDVR0j BBgwFoAUnCJ3heehkCcaYo4p/7k3S+ymEVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWQ0ZjYzZTQtNmZiMy00YjAzLWIyMTAtYjU2ODZjZDViMzk3LzAvOUMyMjc3ODVF N0ExOTAyNzFBNjI4RTI5RkZCOTM3NEJFQ0E2MTE1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QzIyNzc4NUU3QTE5MDI3MUE2MjhFMjlGRkI5Mzc0QkVDQTYx MTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWQ0ZjYzZTQtNmZiMy00YjAzLWIy MTAtYjU2ODZjZDViMzk3LzAvOUMyMjc3ODVFN0ExOTAyNzFBNjI4RTI5RkZCOTM3 NEJFQ0E2MTE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9s0P7i8Kt+kBkMkWHnpZsnwCyhWXRmBE71 ivGFLsruO9DcP5kNyGh8xWOowG0y8yfmXxpFmCYIBFdSlA3Tsd+NxFCve4Gl8kK5 VrB2MGHRTmawhJmh3IDoY/Ze7IzeRS0H2WdNEI996KI5NQRXh3v5KKZjH3t2oXJa jeBSL6I8s70l7K7DXdJYj/otTL/GZFpTbBqa3cmrFOXtV5mjnHZUjdDyhBMiE5BI 3wu1iZ4TAAVFJ+u5TNZHjqH/6DBsPQB80sysbTiUnHEiTeRNL4mPKAJL2uxQP3Kf km+HqqpMwL/GIzrjGReRHKopJuIzXQFvj/TbDfx1Z+sKX2Ncvqg= -----END CERTIFICATE-----Generated at Fri Sep 25 14:20:25 2026 by rpki-client