$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft File: 9796934CE983E32FE16AC8EC0968FB6FF0339712.mft (raw, json) Hash identifier: 4gUfPJWcAOBDkkTkHbi6w40HwYr6bdjGBk8I5SQQ9lk= Subject key identifier: B8:7C:BF:10:C1:74:DA:96:BE:13:4E:ED:6A:76:B8:BB:8D:99:B7:9F Authority key identifier: 97:96:93:4C:E9:83:E3:2F:E1:6A:C8:EC:09:68:FB:6F:F0:33:97:12 Certificate issuer: /CN=9796934CE983E32FE16AC8EC0968FB6FF0339712 Certificate serial: 2848372532D8C8C70876D197F5D5D2407369F119 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 14:44:19 +0000 Manifest this update: Wed 23 Sep 2026 14:39:19 +0000 Manifest next update: Thu 24 Sep 2026 18:34:19 +0000 Files and hashes: 1: 3130332e3233322e3234322e302f32342d3234203d3e203633343937.roa (hash: CyXCnh6Eu/KCDGsGPBvecfzZa94iTRYuLOf5EOeQnK4=) 2: 3130332e39302e32372e302f32342d3234203d3e20313332363733.roa (hash: gEjgmPi52YAqYyRKLzVAHY/tcddAmwneB2Joo9b5lCU=) 3: 3130332e3233322e3234332e302f32342d3234203d3e203633343937.roa (hash: dKhNn6GJjJO6VU2o0VhUMT3uGr0zEWCIpRqbnuOjsu4=) 4: 3130332e39302e32362e302f32342d3234203d3e203633343937.roa (hash: yEBegNseO4WhgSgnMf0UD1P9unzjG8GGfBUDaVupNxw=) 5: 3130332e3233322e3234302e302f32342d3234203d3e203633343937.roa (hash: TDOsoHO/HMJ3+M/IDdZkOYM5yQ6eYeDxjPpemNYDfKc=) 6: 3130332e3235302e3139392e302f32342d3234203d3e203633343937.roa (hash: 90gI7sKaQLOikXOS30SwmXL0rMP42rJQ2sx3CKH87jQ=) 7: 9796934CE983E32FE16AC8EC0968FB6FF0339712.crl (hash: rqApDD8+TTWz9aQ2yF5vK/dWeIHN0UZ0hEjCvHPI8HY=) 8: 3130332e3233322e3234322e302f32332d3233203d3e203633343937.roa (hash: UWBZ8HDVUh8vSiS9fwmZD70vxv5kj8iLpVqFbVQF6Ag=) 9: 3130332e39302e32342e302f32342d3234203d3e20313332363733.roa (hash: rNgJ1hrCOEzVkRLQiZgbFHzGeuIdRSxk2VHfwHrqS1k=) 10: 3130332e39302e32352e302f32342d3234203d3e203633343937.roa (hash: y59gW5BEgEi3F+rl6LRjNXAc9apuX+ON4CV36/Ae45k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.crl rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:48:37:25:32:d8:c8:c7:08:76:d1:97:f5:d5:d2:40:73:69:f1:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9796934CE983E32FE16AC8EC0968FB6FF0339712 Validity Not Before: Sep 23 14:39:19 2026 GMT Not After : Sep 24 18:34:19 2026 GMT Subject: CN=B87CBF10C174DA96BE134EED6A76B8BB8D99B79F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a1:02:23:d1:fa:93:4f:65:61:8a:1c:66:82: b6:03:38:08:84:47:85:44:e9:65:63:b6:3f:01:ff: dd:77:38:ee:95:91:a4:62:ab:42:61:19:a5:05:f4: 40:60:28:fb:bd:a5:a7:2e:f0:6c:f5:bb:61:12:51: 6a:82:69:a1:01:58:75:66:e9:c0:12:93:02:ee:e7: 5f:f4:8c:c6:26:41:9e:8c:07:26:eb:50:bd:9a:a0: b2:c4:d4:9a:47:b4:61:63:a9:ef:7b:54:92:91:d6: cd:d0:a9:02:92:e4:44:73:53:ed:dc:e3:3d:2d:8f: de:39:e3:d4:3e:82:44:8e:69:12:c9:14:3e:eb:3d: 8c:33:d2:ec:55:91:f2:3c:a3:a3:73:6b:b3:8b:2d: 54:dd:07:19:cc:7f:e3:01:2b:f2:2e:51:22:be:e7: da:6f:1f:05:e3:ad:e8:f4:75:fd:17:32:1c:87:06: d9:70:33:23:43:65:23:c6:c1:6d:77:40:b3:35:87: e2:be:9c:e4:e1:89:92:be:7f:9f:1f:3f:9b:8c:24: c2:23:48:aa:bd:0a:55:8b:c8:ac:4b:fd:00:6b:7e: a2:0d:71:de:22:ff:c4:3f:3e:af:f2:ba:c9:df:12: 6e:2a:9a:2b:7c:30:1d:a7:ad:63:11:7c:98:89:73: 54:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7C:BF:10:C1:74:DA:96:BE:13:4E:ED:6A:76:B8:BB:8D:99:B7:9F X509v3 Authority Key Identifier: keyid:97:96:93:4C:E9:83:E3:2F:E1:6A:C8:EC:09:68:FB:6F:F0:33:97:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:6e:f4:24:ae:d4:be:2a:2c:94:f9:4c:b8:4b:f0:50:00:51: 3d:43:6e:d6:ee:e4:bf:8e:45:47:be:cf:f9:84:ed:4c:d3:d4: cb:9b:88:f0:77:2b:b1:de:3e:b1:04:e6:da:48:85:96:06:2c: 4e:e7:1b:96:1a:bc:82:3c:af:fe:52:ac:88:f5:ad:3b:66:4a: 43:84:2d:ba:ac:67:ed:5c:32:7c:48:d8:c0:a0:60:b1:a0:a2: 16:5d:c3:58:1a:f7:7d:28:f7:d1:03:9b:2d:01:a1:6d:2c:48: 22:8b:f2:46:21:b9:58:17:4e:88:17:e0:6c:3e:e3:cd:87:df: 37:03:e5:b0:e9:a9:f9:9f:a2:33:09:2b:3b:f7:72:52:ca:22: e4:f4:ae:29:f4:a6:08:d9:b4:81:c0:02:bc:89:94:90:e4:01: 10:7c:18:b7:5e:b1:41:23:46:76:4a:bd:72:52:49:32:df:75: ac:05:a7:34:c7:2a:3a:ab:ee:04:3e:3d:a0:a6:30:63:b1:05: e4:d3:10:33:7e:1b:5b:0c:4e:96:68:97:0c:5c:69:01:de:61: 1f:8c:73:36:ee:95:96:d1:94:6e:1c:c2:70:ec:80:77:31:69: b1:02:32:6b:a3:c0:09:ce:02:d8:b1:27:01:76:2a:2c:5c:6a: c0:59:9f:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKEg3JTLYyMcIdtGX9dXSQHNp8RkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc5NjkzNENFOTgzRTMyRkUxNkFDOEVDMDk2OEZCNkZG MDMzOTcxMjAeFw0yNjA5MjMxNDM5MTlaFw0yNjA5MjQxODM0MTlaMDMxMTAvBgNV BAMTKEI4N0NCRjEwQzE3NERBOTZCRTEzNEVFRDZBNzZCOEJCOEQ5OUI3OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmoQIj0fqTT2VhihxmgrYDOAiE R4VE6WVjtj8B/913OO6VkaRiq0JhGaUF9EBgKPu9pacu8Gz1u2ESUWqCaaEBWHVm 6cASkwLu51/0jMYmQZ6MBybrUL2aoLLE1JpHtGFjqe97VJKR1s3QqQKS5ERzU+3c 4z0tj94549Q+gkSOaRLJFD7rPYwz0uxVkfI8o6Nza7OLLVTdBxnMf+MBK/IuUSK+ 59pvHwXjrej0df0XMhyHBtlwMyNDZSPGwW13QLM1h+K+nOThiZK+f58fP5uMJMIj SKq9ClWLyKxL/QBrfqINcd4i/8Q/Pq/yusnfEm4qmit8MB2nrWMRfJiJc1SfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuHy/EMF02pa+E07tana4u42Zt58wHwYDVR0j BBgwFoAUl5aTTOmD4y/hasjsCWj7b/AzlxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE2MzNiOGUtMGRmOS00NGFjLTljYWUtZDZmNjc2NWE1MmM5LzAvOTc5NjkzNENF OTgzRTMyRkUxNkFDOEVDMDk2OEZCNkZGMDMzOTcxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85Nzk2OTM0Q0U5ODNFMzJGRTE2QUM4RUMwOTY4RkI2RkYwMzM5 NzEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE2MzNiOGUtMGRmOS00NGFjLTlj YWUtZDZmNjc2NWE1MmM5LzAvOTc5NjkzNENFOTgzRTMyRkUxNkFDOEVDMDk2OEZC NkZGMDMzOTcxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBu9CSu1L4qLJT5TLhL8FAAUT1Dbtbu5L+O RUe+z/mE7UzT1MubiPB3K7HePrEE5tpIhZYGLE7nG5YavII8r/5SrIj1rTtmSkOE LbqsZ+1cMnxI2MCgYLGgohZdw1ga930o99EDmy0BoW0sSCKL8kYhuVgXTogX4Gw+ 482H3zcD5bDpqfmfojMJKzv3clLKIuT0rin0pgjZtIHAAryJlJDkARB8GLdesUEj RnZKvXJSSTLfdawFpzTHKjqr7gQ+PaCmMGOxBeTTEDN+G1sMTpZolwxcaQHeYR+M czbulZbRlG4cwnDsgHcxabECMmujwAnOAtixJwF2KixcasBZnyQ= -----END CERTIFICATE-----Generated at Thu Sep 24 10:41:57 2026 by rpki-client