$ rpki-client -vvvf rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft File: 9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft (raw, json) Hash identifier: NAAlf9zeCs4dClCLKETL91hglOkm/UW1zN99o5dwcy4= Subject key identifier: 93:D0:CE:4D:94:1B:2A:12:8D:E5:8A:D3:88:6C:67:51:05:8B:A6:4C Authority key identifier: 9F:73:03:1D:F0:49:FC:EA:B5:E8:BD:52:42:74:7E:7D:7D:C4:B4:DD Certificate issuer: /CN=9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD Certificate serial: 37103CF7A8E827711A288EB1D5E2EB0E11A6951F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 18:23:25 +0000 Manifest this update: Thu 24 Sep 2026 18:18:25 +0000 Manifest next update: Fri 25 Sep 2026 21:40:25 +0000 Files and hashes: 1: 323030313a6466353a653238303a3a2f34382d3438203d3e20313431363430.roa (hash: hxbNx1sHpQ2uA7gDNNgf9BYGTMjlNV/I+vSevN2AYMQ=) 2: 9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.crl (hash: r005q4Zm8Ll971IZfMtPZBJyCm31f1nOR4OQqHXzr1s=) 3: 3130332e3136322e31392e302f32342d3234203d3e20313431363430.roa (hash: 96iWJc2ow6yzAUODuhe0zI0zVFmk0TX0H28U4QCHRcE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.crl rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 21:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:10:3c:f7:a8:e8:27:71:1a:28:8e:b1:d5:e2:eb:0e:11:a6:95:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD Validity Not Before: Sep 24 18:18:25 2026 GMT Not After : Sep 25 21:40:25 2026 GMT Subject: CN=93D0CE4D941B2A128DE58AD3886C6751058BA64C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3d:26:bb:19:4b:cb:84:a3:00:f4:b0:19:b3: e1:79:03:11:10:94:42:f9:21:92:18:f6:ef:04:34: 1b:fe:61:0a:f1:b3:14:65:c2:10:4f:eb:6a:eb:db: 10:7d:ef:a6:87:9c:ce:ff:71:50:9c:51:29:3c:1f: be:30:4d:34:b5:6f:bb:61:82:ff:81:65:51:cf:72: 95:72:02:58:f1:13:d5:3d:66:c4:af:63:54:a0:31: bd:1f:ca:52:46:b8:0b:1e:7b:bd:89:2e:80:40:65: 84:e1:0a:2b:8e:4f:83:3b:ee:1f:54:58:a2:94:f4: 4b:9c:b0:fc:db:92:f3:74:8e:22:09:a4:36:95:11: 73:94:3c:c4:82:da:3d:b8:59:4d:dd:15:85:1e:93: ec:33:c6:1e:01:83:b4:a3:32:0b:65:7c:16:a6:2a: 33:8d:05:f1:d8:4a:6b:e3:54:67:d4:9c:b5:31:0b: b9:f1:fc:8e:82:a7:7a:0f:b5:c8:e5:af:da:07:ac: a5:a6:d2:25:34:3e:a2:ba:7b:5c:80:37:c1:01:13: 3c:8e:aa:6f:55:ef:a0:aa:38:99:af:35:f7:39:9d: 3a:a9:18:70:19:a1:35:c7:85:ed:8d:2b:4f:b0:36: c6:20:c5:c6:e7:71:6b:56:c5:ad:2e:ca:7e:f6:ba: c1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D0:CE:4D:94:1B:2A:12:8D:E5:8A:D3:88:6C:67:51:05:8B:A6:4C X509v3 Authority Key Identifier: keyid:9F:73:03:1D:F0:49:FC:EA:B5:E8:BD:52:42:74:7E:7D:7D:C4:B4:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:9f:f4:f2:e7:86:8e:bb:6d:aa:43:7c:e5:43:f3:a1:40:36: 67:df:58:6f:ce:6f:dd:e1:4e:57:bc:d4:a1:2d:b5:1f:91:51: 45:b9:e5:48:e5:c7:72:57:92:5e:9a:a3:54:da:c2:30:c0:22: a6:11:8d:1d:b8:ca:c6:1a:69:01:10:07:30:80:0b:82:5b:9e: a9:91:ba:66:b3:ca:2f:3e:51:bd:cf:b5:8a:99:64:09:02:a6: 08:63:f5:0f:43:e8:3e:47:f2:49:88:ae:40:f2:a0:e8:24:4c: be:0e:d8:26:c9:c9:e8:d6:33:48:c3:c4:d9:c1:3e:fc:44:14: 8d:ca:e0:79:f9:4c:82:ef:24:b1:8e:62:46:c0:8e:ab:4e:3d: 79:7a:87:cb:10:ed:d0:24:43:ec:e0:74:35:82:60:ee:2b:96: 16:5b:b2:1f:6c:c5:7e:b2:31:63:b8:8e:5c:1e:7b:7c:35:05: 57:6d:13:fc:7c:c1:96:23:2f:87:73:6d:dc:36:60:98:a8:fd: e9:9c:70:db:b3:28:78:a7:d5:b0:e0:a1:87:0a:f5:c7:6d:45: 5b:4c:ef:11:a2:19:43:27:67:24:c8:ed:33:b0:86:d4:41:58: 45:d4:ab:ea:84:23:bb:1a:ae:50:f0:a9:1f:e0:e3:19:07:ef: 6b:79:6b:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNxA896joJ3EaKI6x1eLrDhGmlR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY3MzAzMURGMDQ5RkNFQUI1RThCRDUyNDI3NDdFN0Q3 REM0QjRERDAeFw0yNjA5MjQxODE4MjVaFw0yNjA5MjUyMTQwMjVaMDMxMTAvBgNV BAMTKDkzRDBDRTREOTQxQjJBMTI4REU1OEFEMzg4NkM2NzUxMDU4QkE2NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPSa7GUvLhKMA9LAZs+F5AxEQ lEL5IZIY9u8ENBv+YQrxsxRlwhBP62rr2xB976aHnM7/cVCcUSk8H74wTTS1b7th gv+BZVHPcpVyAljxE9U9ZsSvY1SgMb0fylJGuAsee72JLoBAZYThCiuOT4M77h9U WKKU9EucsPzbkvN0jiIJpDaVEXOUPMSC2j24WU3dFYUek+wzxh4Bg7SjMgtlfBam KjONBfHYSmvjVGfUnLUxC7nx/I6Cp3oPtcjlr9oHrKWm0iU0PqK6e1yAN8EBEzyO qm9V76CqOJmvNfc5nTqpGHAZoTXHhe2NK0+wNsYgxcbncWtWxa0uyn72usHPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk9DOTZQbKhKN5YrTiGxnUQWLpkwwHwYDVR0j BBgwFoAUn3MDHfBJ/Oq16L1SQnR+fX3EtN0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWNjNjM3YmQtNTk3MS00MjY0LTk5N2EtNzQ5ZDgwNGE2ODU4LzAvOUY3MzAzMURG MDQ5RkNFQUI1RThCRDUyNDI3NDdFN0Q3REM0QjRERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjczMDMxREYwNDlGQ0VBQjVFOEJENTI0Mjc0N0U3RDdEQzRC NERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWNjNjM3YmQtNTk3MS00MjY0LTk5 N2EtNzQ5ZDgwNGE2ODU4LzAvOUY3MzAzMURGMDQ5RkNFQUI1RThCRDUyNDI3NDdF N0Q3REM0QjRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKef9PLnho67bapDfOVD86FANmffWG/Ob93h Tle81KEttR+RUUW55Ujlx3JXkl6ao1TawjDAIqYRjR24ysYaaQEQBzCAC4JbnqmR umazyi8+Ub3PtYqZZAkCpghj9Q9D6D5H8kmIrkDyoOgkTL4O2CbJyejWM0jDxNnB PvxEFI3K4Hn5TILvJLGOYkbAjqtOPXl6h8sQ7dAkQ+zgdDWCYO4rlhZbsh9sxX6y MWO4jlwee3w1BVdtE/x8wZYjL4dzbdw2YJio/emccNuzKHin1bDgoYcK9cdtRVtM 7xGiGUMnZyTI7TOwhtRBWEXUq+qEI7sarlDwqR/g4xkH72t5a1k= -----END CERTIFICATE-----Generated at Fri Sep 25 09:51:07 2026 by rpki-client