$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft File: 09F1FCE71540608DD361D20037B585CA6313B714.mft (raw, json) Hash identifier: H8lK9M1xQNUwmttVGGM7RAefdkbb1yN676bH1ZhT514= Subject key identifier: 1A:7C:8B:28:AC:28:2F:CF:1C:D5:63:07:C1:D3:E7:CC:2D:BA:02:DF Authority key identifier: 09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14 Certificate issuer: /CN=09F1FCE71540608DD361D20037B585CA6313B714 Certificate serial: 0CB358320688CF6006E20F396429E77C2652EDBF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 17:11:58 +0000 Manifest this update: Thu 24 Sep 2026 17:06:58 +0000 Manifest next update: Fri 25 Sep 2026 17:43:58 +0000 Files and hashes: 1: 323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (hash: lNRKhcmiZUAq3a5jFdaJmEqXMHj1lj+pscOEkjDxix0=) 2: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (hash: Tdrs/9MxQFRJ04JmOuNBrPQeJZxfkO1jdYAYtxuEviE=) 3: 09F1FCE71540608DD361D20037B585CA6313B714.crl (hash: 5w+vLFOprnxPDRhVSPED+B/U5uBBwISFAG/k2ZcAX5Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b3:58:32:06:88:cf:60:06:e2:0f:39:64:29:e7:7c:26:52:ed:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F1FCE71540608DD361D20037B585CA6313B714 Validity Not Before: Sep 24 17:06:58 2026 GMT Not After : Sep 25 17:43:58 2026 GMT Subject: CN=1A7C8B28AC282FCF1CD56307C1D3E7CC2DBA02DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ad:09:3d:72:7e:a7:48:3a:c2:b6:fe:2d:8e: 41:c5:8e:b2:53:83:ec:ac:6b:71:ad:8f:e9:cc:04: 3f:aa:13:d7:04:ac:c9:fc:67:6d:14:2f:b2:be:6e: 69:36:08:63:2d:7a:9c:fd:e9:00:b4:38:1b:ef:83: 4b:87:8f:55:18:ee:f3:ce:b3:d3:be:c7:a0:bd:de: 35:79:f2:12:34:97:23:cf:bd:8d:1e:74:65:f5:04: 78:ef:a7:2a:96:0f:9f:e4:8b:83:5a:b1:36:5d:a9: f8:1c:74:e3:29:3e:b6:4f:40:b7:16:fc:a8:ed:6f: 65:33:28:4a:e6:78:cb:cc:22:0c:d0:91:e3:8e:2f: 78:de:b9:a5:99:48:5a:3c:e7:4e:92:1e:d4:14:57: 97:64:d6:01:2d:e5:64:41:ec:c0:69:f3:ea:a2:b9: bf:6d:db:02:5c:1a:08:3e:91:e4:72:70:7b:09:b8: 58:db:b1:b2:fc:b2:d3:8c:27:3a:49:fd:46:21:b9: 39:60:fe:05:c5:86:ea:18:48:c3:35:ea:56:96:3c: a3:7e:3a:40:29:95:36:c0:4d:b6:e9:ea:67:8f:c0: 94:b2:11:51:fb:81:62:6d:1a:c7:58:57:74:0e:af: e5:43:5e:af:b3:a0:ef:06:d4:09:4a:cd:1d:d2:78: 18:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7C:8B:28:AC:28:2F:CF:1C:D5:63:07:C1:D3:E7:CC:2D:BA:02:DF X509v3 Authority Key Identifier: keyid:09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:9d:7c:24:91:db:22:aa:50:67:64:da:9a:b1:ba:9f:1d:19: ed:e2:e0:57:d9:8a:6a:27:5e:1a:1f:e0:94:a3:dc:84:bd:1d: ee:f0:76:a5:b3:7c:3c:ba:4f:90:48:3e:e8:a4:8b:b1:90:e1: fa:62:19:40:0c:8b:78:6e:11:68:76:26:1c:47:fe:d2:ec:3f: 67:bf:23:5b:6b:20:74:96:cd:49:4e:85:92:a2:93:c9:d9:ff: a6:f8:78:ce:69:ce:0a:77:e9:39:cb:98:35:44:c9:c3:87:a5: aa:00:58:89:a0:53:37:85:b5:f9:9d:f2:fb:9d:22:79:b6:0e: b5:97:14:ad:dc:ae:55:f8:54:39:ed:15:90:49:01:d8:fa:36: f1:1a:46:98:61:12:35:7c:b5:72:1e:de:b3:cb:4b:9e:a0:af: 14:86:2e:36:f9:b2:3d:6a:f7:d6:a6:2f:df:60:07:c3:b6:fd: cb:21:0c:98:94:8b:bc:e4:72:d0:0a:02:71:62:6f:fd:2b:89: f9:97:73:d0:e3:60:df:4e:c7:f5:c9:10:69:08:aa:5b:e6:f3: 85:8e:8b:f1:fe:fa:5e:e8:fd:34:4f:59:f0:61:49:1a:8d:c3: c5:c7:66:5b:43:48:cb:54:e5:62:55:03:78:a6:b0:1c:90:bd: 4e:ce:fc:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDLNYMgaIz2AG4g85ZCnnfCZS7b8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMUZDRTcxNTQwNjA4REQzNjFEMjAwMzdCNTg1Q0E2 MzEzQjcxNDAeFw0yNjA5MjQxNzA2NThaFw0yNjA5MjUxNzQzNThaMDMxMTAvBgNV BAMTKDFBN0M4QjI4QUMyODJGQ0YxQ0Q1NjMwN0MxRDNFN0NDMkRCQTAyREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjrQk9cn6nSDrCtv4tjkHFjrJT g+ysa3Gtj+nMBD+qE9cErMn8Z20UL7K+bmk2CGMtepz96QC0OBvvg0uHj1UY7vPO s9O+x6C93jV58hI0lyPPvY0edGX1BHjvpyqWD5/ki4NasTZdqfgcdOMpPrZPQLcW /Kjtb2UzKErmeMvMIgzQkeOOL3jeuaWZSFo8506SHtQUV5dk1gEt5WRB7MBp8+qi ub9t2wJcGgg+keRycHsJuFjbsbL8stOMJzpJ/UYhuTlg/gXFhuoYSMM16laWPKN+ OkAplTbATbbp6mePwJSyEVH7gWJtGsdYV3QOr+VDXq+zoO8G1AlKzR3SeBilAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGnyLKKwoL88c1WMHwdPnzC26At8wHwYDVR0j BBgwFoAUCfH85xVAYI3TYdIAN7WFymMTtxQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU1YWE5M2QtNzg3Yi00YTE3LTg3ZDAtN2VmNDFiMGYyZGVmLzAvMDlGMUZDRTcx NTQwNjA4REQzNjFEMjAwMzdCNTg1Q0E2MzEzQjcxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOUYxRkNFNzE1NDA2MDhERDM2MUQyMDAzN0I1ODVDQTYzMTNC NzE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU1YWE5M2QtNzg3Yi00YTE3LTg3 ZDAtN2VmNDFiMGYyZGVmLzAvMDlGMUZDRTcxNTQwNjA4REQzNjFEMjAwMzdCNTg1 Q0E2MzEzQjcxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKdfCSR2yKqUGdk2pqxup8dGe3i4FfZimon Xhof4JSj3IS9He7wdqWzfDy6T5BIPuiki7GQ4fpiGUAMi3huEWh2JhxH/tLsP2e/ I1trIHSWzUlOhZKik8nZ/6b4eM5pzgp36TnLmDVEycOHpaoAWImgUzeFtfmd8vud Inm2DrWXFK3crlX4VDntFZBJAdj6NvEaRphhEjV8tXIe3rPLS56grxSGLjb5sj1q 99amL99gB8O2/cshDJiUi7zkctAKAnFib/0rifmXc9DjYN9Ox/XJEGkIqlvm84WO i/H++l7o/TRPWfBhSRqNw8XHZltDSMtU5WJVA3imsByQvU7O/Fc= -----END CERTIFICATE-----Generated at Thu Sep 24 20:53:24 2026 by rpki-client