$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft File: C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft (raw, json) Hash identifier: pyCn/lkT6VOoZVDdzpzsnMVDq5O+AY0PvZHtPdKShR4= Subject key identifier: AB:08:5C:D9:E0:3D:9E:D9:81:33:DC:0A:1E:B1:4E:A1:E0:D2:56:0A Authority key identifier: C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94 Certificate issuer: /CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894 Certificate serial: 111B9F3288447F1850E25DD6A6EF86299953EB33 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft Manifest number: BF Signing time: Wed 23 Sep 2026 01:33:05 +0000 Manifest this update: Wed 23 Sep 2026 01:28:05 +0000 Manifest next update: Thu 24 Sep 2026 04:50:05 +0000 Files and hashes: 1: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: Pfe66TELIpbboDlTlvL4smle14adEmFMF0KS3kt6HYM=) 2: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: occ5qoM9oAkKmzdKhCiXxb0YYDDzZw7eQPlVtS1+AXA=) 3: C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl (hash: mv4mlo3EkO3uFWP7sjh+s5sXtgfZ9AGkni0OekbQngo=) 4: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: ZVZI5MXEYgq+QpFFWNL7lGXYAS9omg0P+vD6tywGpec=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 04:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1b:9f:32:88:44:7f:18:50:e2:5d:d6:a6:ef:86:29:99:53:eb:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894 Validity Not Before: Sep 23 01:28:05 2026 GMT Not After : Sep 24 04:50:05 2026 GMT Subject: CN=AB085CD9E03D9ED98133DC0A1EB14EA1E0D2560A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:86:92:85:06:36:94:c0:ad:16:bc:9a:ee:43: b9:2e:ce:17:f0:04:28:3f:0f:b1:51:13:57:dd:23: db:16:fc:37:32:56:02:f8:c0:90:fe:89:71:d4:fb: 9f:5f:e1:bb:ad:e8:18:b0:58:88:7e:fd:59:54:3c: 74:39:c1:53:30:d0:85:b3:ee:db:19:a9:8a:74:e1: 32:33:c5:22:0b:2f:ef:37:5a:6c:80:a0:74:b5:b4: 0b:0a:9d:42:e4:22:63:17:4b:08:2b:a3:86:54:bf: 77:57:62:a9:97:38:40:e5:3a:af:4a:72:0d:10:fa: 43:c9:c4:ea:02:f6:bf:cd:fb:52:9c:7f:c8:bb:2c: e7:d5:d7:5f:3c:ec:0a:56:97:03:5f:8c:4f:94:08: 1b:ca:a1:4a:e5:c8:c4:5c:fe:4e:f8:ca:1e:c9:c8: 54:49:9d:ba:93:e9:4f:b7:c4:e3:95:10:6a:e3:21: 07:e6:67:38:c6:71:5e:b9:ca:35:54:41:7b:32:fd: 7a:f5:51:9f:dd:1d:4c:18:84:2a:7b:c4:c9:20:9b: a0:77:7f:08:bf:d1:46:ba:71:c6:97:30:30:7b:54: e7:ed:07:85:42:9f:6e:33:a1:d9:66:8d:5e:13:39: 3c:0b:19:a7:2c:a7:6f:61:a3:75:38:f7:9f:5f:54: d2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:08:5C:D9:E0:3D:9E:D9:81:33:DC:0A:1E:B1:4E:A1:E0:D2:56:0A X509v3 Authority Key Identifier: keyid:C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:80:9d:98:35:57:c5:ed:a3:d1:56:59:d4:55:8e:a5:71:d6: bc:61:aa:48:02:61:9a:72:8f:c4:36:da:02:3e:0e:c0:1d:6a: b1:50:e1:ee:e9:a1:a3:0c:0c:f0:9f:2f:90:78:0e:e7:ef:08: cb:ce:a9:81:78:d5:29:38:78:ca:80:2d:35:3e:a4:f5:dc:14: e5:05:25:0c:da:c3:0b:22:1a:23:9a:93:bd:e1:62:f1:43:ae: f0:3b:37:81:af:86:fa:8c:c1:fd:1d:f8:df:ee:3b:c4:98:ff: a9:ad:63:7c:96:1b:08:bf:da:e8:db:85:f2:27:80:fc:af:a4: cc:f7:83:14:77:06:6e:ee:3c:13:57:10:d4:0e:a3:19:b0:ba: af:83:76:a2:8d:97:e8:e6:dd:20:02:c9:d9:8e:dd:84:8a:f3: 49:03:ed:ec:75:0b:e3:19:fc:de:77:f1:fe:2c:cf:4c:18:d8: ab:7b:15:a9:4a:69:63:79:19:10:5a:c4:4a:f8:7b:81:12:53: 72:0c:49:58:b1:1b:b7:74:af:5b:12:5c:2d:78:31:b3:75:82: 6f:10:e7:7c:8b:32:69:76:98:10:59:46:68:f0:f3:dc:51:6c: d1:82:67:75:9e:b9:c9:05:81:5a:ea:3c:4b:dc:11:3c:9e:39: a4:53:0e:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUERufMohEfxhQ4l3Wpu+GKZlT6zMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQkRGMEVBMTRERERGMEM1NTFERjE4NjMzMkNCODU5 RUI5RDg5NDAeFw0yNjA5MjMwMTI4MDVaFw0yNjA5MjQwNDUwMDVaMDMxMTAvBgNV BAMTKEFCMDg1Q0Q5RTAzRDlFRDk4MTMzREMwQTFFQjE0RUExRTBEMjU2MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDahpKFBjaUwK0WvJruQ7kuzhfw BCg/D7FRE1fdI9sW/DcyVgL4wJD+iXHU+59f4but6BiwWIh+/VlUPHQ5wVMw0IWz 7tsZqYp04TIzxSILL+83WmyAoHS1tAsKnULkImMXSwgro4ZUv3dXYqmXOEDlOq9K cg0Q+kPJxOoC9r/N+1Kcf8i7LOfV11887ApWlwNfjE+UCBvKoUrlyMRc/k74yh7J yFRJnbqT6U+3xOOVEGrjIQfmZzjGcV65yjVUQXsy/Xr1UZ/dHUwYhCp7xMkgm6B3 fwi/0Ua6ccaXMDB7VOftB4VCn24zodlmjV4TOTwLGacsp29ho3U4959fVNJFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqwhc2eA9ntmBM9wKHrFOoeDSVgowHwYDVR0j BBgwFoAUybvfDqFN3fDFUd8YYzLLhZ652JQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTk1OTAxY2MtMWI4ZS00ZjNmLWEzZDAtMzI2OWYwZTE2YzQxLzAvQzlCQkRGMEVB MTRERERGMEM1NTFERjE4NjMzMkNCODU5RUI5RDg5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUJCREYwRUExNEREREYwQzU1MURGMTg2MzMyQ0I4NTlFQjlE ODk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTk1OTAxY2MtMWI4ZS00ZjNmLWEz ZDAtMzI2OWYwZTE2YzQxLzAvQzlCQkRGMEVBMTRERERGMEM1NTFERjE4NjMzMkNC ODU5RUI5RDg5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKuAnZg1V8Xto9FWWdRVjqVx1rxhqkgCYZpy j8Q22gI+DsAdarFQ4e7poaMMDPCfL5B4DufvCMvOqYF41Sk4eMqALTU+pPXcFOUF JQzawwsiGiOak73hYvFDrvA7N4GvhvqMwf0d+N/uO8SY/6mtY3yWGwi/2ujbhfIn gPyvpMz3gxR3Bm7uPBNXENQOoxmwuq+DdqKNl+jm3SACydmO3YSK80kD7ex1C+MZ /N538f4sz0wY2Kt7FalKaWN5GRBaxEr4e4ESU3IMSVixG7d0r1sSXC14MbN1gm8Q 53yLMml2mBBZRmjw89xRbNGCZ3WeuckFgVrqPEvcETyeOaRTDqo= -----END CERTIFICATE-----Generated at Wed Sep 23 21:48:59 2026 by rpki-client