$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft File: 9A9D4BDD4311519F6A96141040EA1E98B3363388.mft (raw, json) Hash identifier: snSdg6yEEafT8LxMzJA29xs/M06AUJTcbMTSwmiMgF0= Subject key identifier: 07:22:77:65:6C:5F:EA:16:6C:79:D6:53:14:35:46:6D:9F:93:F6:24 Authority key identifier: 9A:9D:4B:DD:43:11:51:9F:6A:96:14:10:40:EA:1E:98:B3:36:33:88 Certificate issuer: /CN=9A9D4BDD4311519F6A96141040EA1E98B3363388 Certificate serial: 565587F9C1ADAE8927353007191DCA4123DF0719 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 21:16:20 +0000 Manifest this update: Sat 26 Sep 2026 21:11:20 +0000 Manifest next update: Sun 27 Sep 2026 23:28:20 +0000 Files and hashes: 1: 3130332e3133342e36362e302f32342d3234203d3e203435333132.roa (hash: DKDIZFIIa7OPxQWCaUBiuhGDeGm6kz/UIChkAD3FgzA=) 2: 9A9D4BDD4311519F6A96141040EA1E98B3363388.crl (hash: 9zzSPY4OivV1yAkmvPOkPXVCx/jAUe/O+Vmg/46CgxI=) 3: 3130332e3133342e36362e302f32332d3234203d3e203435333132.roa (hash: jEIwfeqUw3Ty0aBUNoGyFFLgparqhCueZmPPzJmpnn8=) 4: 3130332e3133342e36372e302f32342d3234203d3e203435333132.roa (hash: Rjd2vE2zGKftmY05BM4C0TjHIPA+ii1Rf27f+odCFqc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.crl rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:55:87:f9:c1:ad:ae:89:27:35:30:07:19:1d:ca:41:23:df:07:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A9D4BDD4311519F6A96141040EA1E98B3363388 Validity Not Before: Sep 26 21:11:20 2026 GMT Not After : Sep 27 23:28:20 2026 GMT Subject: CN=072277656C5FEA166C79D6531435466D9F93F624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:62:b3:84:a1:e9:b6:df:45:7c:83:fa:5a: 8b:84:f1:1c:b0:0d:10:d1:5b:fd:9f:13:15:26:cf: 6e:a3:32:98:4a:d7:dd:58:50:d2:5b:4d:64:54:5a: f9:84:a7:80:3e:3e:06:3d:d1:99:0e:44:b6:ae:d7: 74:2c:bb:5d:9b:a1:ad:12:a2:a7:0c:01:b3:49:70: 03:c6:ad:b4:93:6c:27:08:3b:99:75:cf:85:ec:5f: b8:7e:99:db:af:5b:3f:e0:49:fd:03:83:5b:d3:4f: 4f:86:38:96:39:f7:23:6b:17:4b:2f:d7:96:45:0f: cc:4d:fa:24:6d:a2:84:51:34:38:92:f2:a5:25:76: c3:f4:c5:ba:39:15:ba:20:74:34:bc:04:08:fe:f8: d7:a7:84:f5:70:ff:54:b5:d1:32:65:d0:ff:33:cf: 4d:a3:fc:00:fd:74:1d:85:ed:a1:72:38:3f:5d:9f: 89:64:a6:1b:3e:1b:17:30:89:fa:31:18:c1:66:82: 07:72:9c:1b:d7:59:d1:9a:fa:80:ab:f9:de:52:7b: d7:13:e5:1a:f9:11:2a:d6:70:49:13:68:ea:50:87: 74:3b:b4:ce:e4:39:1a:48:5f:56:1b:66:bf:5d:e3: cf:df:69:00:d0:52:70:5e:a1:58:3e:35:36:eb:58: d5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:22:77:65:6C:5F:EA:16:6C:79:D6:53:14:35:46:6D:9F:93:F6:24 X509v3 Authority Key Identifier: keyid:9A:9D:4B:DD:43:11:51:9F:6A:96:14:10:40:EA:1E:98:B3:36:33:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:0a:d2:5b:45:b8:46:bf:7c:68:da:6f:78:e8:c5:6b:5d:00: a1:b5:90:80:c3:14:33:4b:69:a5:9a:ed:20:ab:87:b5:9a:f7: 95:23:4c:61:38:cd:bf:71:12:29:b0:97:2c:f2:30:51:71:4a: d2:fb:f2:84:54:72:ca:88:c4:78:4a:d8:a4:fc:10:0f:ef:b8: 2d:d3:89:b4:1c:5e:46:64:d2:07:e7:10:da:37:9a:88:41:9b: cb:94:69:ce:d1:85:d7:e9:41:57:b8:72:e6:47:20:33:c4:3a: af:01:25:5d:fb:d7:48:cb:c4:9b:c5:14:32:19:97:ca:c9:d6: 0e:c0:65:59:2d:ee:36:0c:5c:58:8b:1a:8f:d7:93:a2:25:35: 5f:d6:ed:81:bf:5d:7f:d0:c4:19:de:64:de:5e:eb:f1:d5:48: 3d:08:32:d2:82:21:d6:6d:b8:37:8f:13:35:39:ee:a2:77:96: ed:c5:37:70:31:7b:2a:98:25:a3:eb:62:ca:e3:1c:fe:7e:5d: d8:e4:5d:a4:5d:0b:44:63:9f:bf:6e:81:66:2d:59:26:d9:59: fb:f4:65:c4:f8:82:7d:eb:dd:f3:82:97:2a:10:c2:1a:88:70: ae:a2:fd:e4:91:f4:60:64:6e:d3:9a:93:9a:ec:b6:80:c1:2d: 6d:6f:54:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVlWH+cGtroknNTAHGR3KQSPfBxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5RDRCREQ0MzExNTE5RjZBOTYxNDEwNDBFQTFFOThC MzM2MzM4ODAeFw0yNjA5MjYyMTExMjBaFw0yNjA5MjcyMzI4MjBaMDMxMTAvBgNV BAMTKDA3MjI3NzY1NkM1RkVBMTY2Qzc5RDY1MzE0MzU0NjZEOUY5M0Y2MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGjGKzhKHptt9FfIP6WouE8Ryw DRDRW/2fExUmz26jMphK191YUNJbTWRUWvmEp4A+PgY90ZkORLau13Qsu12boa0S oqcMAbNJcAPGrbSTbCcIO5l1z4XsX7h+mduvWz/gSf0Dg1vTT0+GOJY59yNrF0sv 15ZFD8xN+iRtooRRNDiS8qUldsP0xbo5FbogdDS8BAj++NenhPVw/1S10TJl0P8z z02j/AD9dB2F7aFyOD9dn4lkphs+GxcwifoxGMFmggdynBvXWdGa+oCr+d5Se9cT 5Rr5ESrWcEkTaOpQh3Q7tM7kORpIX1YbZr9d48/faQDQUnBeoVg+NTbrWNXbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUByJ3ZWxf6hZsedZTFDVGbZ+T9iQwHwYDVR0j BBgwFoAUmp1L3UMRUZ9qlhQQQOoemLM2M4gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmY2NmJmYTYtZGM0Yy00MTA4LTkzMmMtMjA0YjYyZTg2MjcyLzAvOUE5RDRCREQ0 MzExNTE5RjZBOTYxNDEwNDBFQTFFOThCMzM2MzM4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTlENEJERDQzMTE1MTlGNkE5NjE0MTA0MEVBMUU5OEIzMzYz Mzg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmY2NmJmYTYtZGM0Yy00MTA4LTkz MmMtMjA0YjYyZTg2MjcyLzAvOUE5RDRCREQ0MzExNTE5RjZBOTYxNDEwNDBFQTFF OThCMzM2MzM4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMMK0ltFuEa/fGjab3joxWtdAKG1kIDDFDNL aaWa7SCrh7Wa95UjTGE4zb9xEimwlyzyMFFxStL78oRUcsqIxHhK2KT8EA/vuC3T ibQcXkZk0gfnENo3mohBm8uUac7RhdfpQVe4cuZHIDPEOq8BJV3710jLxJvFFDIZ l8rJ1g7AZVkt7jYMXFiLGo/Xk6IlNV/W7YG/XX/QxBneZN5e6/HVSD0IMtKCIdZt uDePEzU57qJ3lu3FN3AxeyqYJaPrYsrjHP5+XdjkXaRdC0Rjn79ugWYtWSbZWfv0 ZcT4gn3r3fOClyoQwhqIcK6i/eSR9GBkbtOak5rstoDBLW1vVOM= -----END CERTIFICATE-----Generated at Sun Sep 27 06:38:23 2026 by rpki-client