$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft File: 9970795F3B277481EE73EA3A16E4FA33964C92D3.mft (raw, json) Hash identifier: qKhTUgY+ZvvR5CSYLvT2yNLvFZDJwAXpISeUkQMP0W0= Subject key identifier: EE:72:7A:E9:42:57:B8:D4:13:F1:49:01:76:D1:0C:E5:F8:D2:17:76 Authority key identifier: 99:70:79:5F:3B:27:74:81:EE:73:EA:3A:16:E4:FA:33:96:4C:92:D3 Certificate issuer: /CN=9970795F3B277481EE73EA3A16E4FA33964C92D3 Certificate serial: 3EF857A0E190EA59C969FD1C678068D5554DA172 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 21:16:53 +0000 Manifest this update: Fri 25 Sep 2026 21:11:53 +0000 Manifest next update: Sun 27 Sep 2026 00:04:53 +0000 Files and hashes: 1: 3130332e3135362e3134362e302f32342d3234203d3e20313431303933.roa (hash: j3C8JrVEuDWGDYTHo2d7ibn1ngIRwCbcuK1vWB38mfI=) 2: 9970795F3B277481EE73EA3A16E4FA33964C92D3.crl (hash: gbMG19m0izyhRLO6sACNqKkRNUFO7rVhx10QoGYHFqE=) 3: 3130332e3135362e3134362e302f32332d3234203d3e20313431303933.roa (hash: 3Da0wSVO79CXcT4/2ct9HlMI+w8ZYFGpqAbvRWk65hU=) 4: 3130332e3135362e3134372e302f32342d3234203d3e20313338383130.roa (hash: 5C93GzuwPEwzfZCO761jlr9+kP+U+BLor2EmxZBdJ5Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.crl rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f8:57:a0:e1:90:ea:59:c9:69:fd:1c:67:80:68:d5:55:4d:a1:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970795F3B277481EE73EA3A16E4FA33964C92D3 Validity Not Before: Sep 25 21:11:53 2026 GMT Not After : Sep 27 00:04:53 2026 GMT Subject: CN=EE727AE94257B8D413F1490176D10CE5F8D21776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c4:35:59:ca:7b:3e:75:7a:50:78:d6:61:5d: 8a:e8:58:c0:36:2b:35:41:6e:c0:ab:e6:40:f9:34: eb:a9:8b:79:10:e3:78:b9:6b:c6:77:c6:35:2c:2f: 37:bc:56:57:ce:97:47:a8:da:d0:bd:8c:42:32:e9: 05:ce:c6:19:44:87:75:f6:6c:e2:88:8a:83:80:bc: ee:30:62:c2:76:7b:7c:75:9e:fb:2d:30:74:4d:1d: 4b:b1:33:ae:62:79:e2:59:8e:a3:33:75:e0:a5:d8: 07:1d:03:40:36:5c:16:7b:5c:7a:be:a4:38:09:28: ec:96:a2:8e:42:6b:f0:76:91:ad:eb:c9:03:6a:4c: 1d:93:b0:43:c6:de:ec:3f:d2:00:4a:00:ba:48:e1: c9:bd:00:7a:5f:6a:78:ec:fc:65:b6:28:07:d3:72: 4e:c8:6d:de:87:94:af:3d:0b:39:03:d3:7f:8c:18: 43:da:38:d6:28:86:ec:9b:82:9b:a7:17:36:2c:d3: d4:d5:d5:98:c4:03:27:c5:34:90:29:44:c7:0d:82: 97:92:00:91:42:3a:ab:e9:c0:a7:53:13:3e:4c:ec: 4b:e9:7c:f4:d4:84:29:3e:f1:5e:a5:27:06:bf:84: d2:39:10:fc:3c:0e:6e:56:df:ef:c5:f9:35:c4:53: 24:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:72:7A:E9:42:57:B8:D4:13:F1:49:01:76:D1:0C:E5:F8:D2:17:76 X509v3 Authority Key Identifier: keyid:99:70:79:5F:3B:27:74:81:EE:73:EA:3A:16:E4:FA:33:96:4C:92:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:fc:3e:6b:c7:d3:6d:c1:e8:62:b2:d2:aa:18:51:94:9f:9c: ac:25:ce:10:ba:ba:5b:ae:23:c5:49:68:c2:3f:ac:6a:29:32: db:8d:ff:c5:d5:1d:81:ad:0b:e6:40:70:d5:a8:d4:e4:d0:56: 54:27:38:e6:74:d0:e8:c3:33:af:3d:1b:9d:1e:29:68:ae:77: 83:4c:22:54:15:07:18:f6:51:53:2a:22:d0:f0:4b:7e:54:90: 4b:78:08:55:5e:f3:3f:ce:4f:51:99:b8:0a:73:1b:28:04:fb: bb:9b:b6:62:84:07:5a:85:f9:f2:3f:c4:b9:53:c4:7a:29:0f: a5:b0:08:12:09:77:e6:29:27:65:6d:d0:3c:2c:61:a7:e0:47: e0:69:f8:56:1e:2a:23:7c:4b:6c:2c:2a:3c:70:ce:20:d6:0a: 69:14:6c:0c:a3:4c:37:43:e6:86:05:88:9a:cd:5a:87:e2:bd: 0a:2e:85:6f:1c:b5:92:ec:d6:a9:91:4f:80:0f:a1:a2:4b:f0: 98:41:e5:aa:d4:bf:28:dd:aa:8d:ea:5e:69:3f:41:10:5b:be: d3:ba:76:b6:ed:fe:b3:a9:3b:2e:47:61:9b:88:91:01:5b:d0: 6f:9e:23:6c:9b:0b:f4:12:06:b8:46:da:b3:23:21:d3:13:bc: 66:1c:4d:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPvhXoOGQ6lnJaf0cZ4Bo1VVNoXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk3MDc5NUYzQjI3NzQ4MUVFNzNFQTNBMTZFNEZBMzM5 NjRDOTJEMzAeFw0yNjA5MjUyMTExNTNaFw0yNjA5MjcwMDA0NTNaMDMxMTAvBgNV BAMTKEVFNzI3QUU5NDI1N0I4RDQxM0YxNDkwMTc2RDEwQ0U1RjhEMjE3NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUxDVZyns+dXpQeNZhXYroWMA2 KzVBbsCr5kD5NOupi3kQ43i5a8Z3xjUsLze8VlfOl0eo2tC9jEIy6QXOxhlEh3X2 bOKIioOAvO4wYsJ2e3x1nvstMHRNHUuxM65ieeJZjqMzdeCl2AcdA0A2XBZ7XHq+ pDgJKOyWoo5Ca/B2ka3ryQNqTB2TsEPG3uw/0gBKALpI4cm9AHpfanjs/GW2KAfT ck7Ibd6HlK89CzkD03+MGEPaONYohuybgpunFzYs09TV1ZjEAyfFNJApRMcNgpeS AJFCOqvpwKdTEz5M7EvpfPTUhCk+8V6lJwa/hNI5EPw8Dm5W3+/F+TXEUySzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7nJ66UJXuNQT8UkBdtEM5fjSF3YwHwYDVR0j BBgwFoAUmXB5XzsndIHuc+o6FuT6M5ZMktMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg5OWExNWItZDVhZS00NWVjLTgwMTItYTZjYWFiM2RkODhiLzAvOTk3MDc5NUYz QjI3NzQ4MUVFNzNFQTNBMTZFNEZBMzM5NjRDOTJEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTcwNzk1RjNCMjc3NDgxRUU3M0VBM0ExNkU0RkEzMzk2NEM5 MkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg5OWExNWItZDVhZS00NWVjLTgw MTItYTZjYWFiM2RkODhiLzAvOTk3MDc5NUYzQjI3NzQ4MUVFNzNFQTNBMTZFNEZB MzM5NjRDOTJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADH8PmvH023B6GKy0qoYUZSfnKwlzhC6uluu I8VJaMI/rGopMtuN/8XVHYGtC+ZAcNWo1OTQVlQnOOZ00OjDM689G50eKWiud4NM IlQVBxj2UVMqItDwS35UkEt4CFVe8z/OT1GZuApzGygE+7ubtmKEB1qF+fI/xLlT xHopD6WwCBIJd+YpJ2Vt0DwsYafgR+Bp+FYeKiN8S2wsKjxwziDWCmkUbAyjTDdD 5oYFiJrNWofivQouhW8ctZLs1qmRT4APoaJL8JhB5arUvyjdqo3qXmk/QRBbvtO6 drbt/rOpOy5HYZuIkQFb0G+eI2ybC/QSBrhG2rMjIdMTvGYcTfc= -----END CERTIFICATE-----Generated at Sat Sep 26 02:17:00 2026 by rpki-client