$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft File: 9A9D4BDD4311519F6A96141040EA1E98B3363388.mft (raw, json) Hash identifier: 5xQmg0jrBlkYD35/O+OcquY8zcW5qVwCGrafHanA3II= Subject key identifier: 76:7C:45:C7:2F:CE:EE:19:75:56:6C:61:54:1F:F9:31:5C:E1:C2:9E Authority key identifier: 9A:9D:4B:DD:43:11:51:9F:6A:96:14:10:40:EA:1E:98:B3:36:33:88 Certificate issuer: /CN=9A9D4BDD4311519F6A96141040EA1E98B3363388 Certificate serial: 3F1713D18033E4949F2C73F800F9A4A90E177EEB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft Manifest number: CB Signing time: Thu 01 Oct 2026 06:39:13 +0000 Manifest this update: Thu 01 Oct 2026 06:34:13 +0000 Manifest next update: Fri 02 Oct 2026 08:09:13 +0000 Files and hashes: 1: 3130332e3133342e36362e302f32342d3234203d3e203435333132.roa (hash: DKDIZFIIa7OPxQWCaUBiuhGDeGm6kz/UIChkAD3FgzA=) 2: 3130332e3133342e36362e302f32332d3234203d3e203435333132.roa (hash: jEIwfeqUw3Ty0aBUNoGyFFLgparqhCueZmPPzJmpnn8=) 3: 3130332e3133342e36372e302f32342d3234203d3e203435333132.roa (hash: Rjd2vE2zGKftmY05BM4C0TjHIPA+ii1Rf27f+odCFqc=) 4: 9A9D4BDD4311519F6A96141040EA1E98B3363388.crl (hash: Kaeaa+SQRWKdLry7AK3k5UeU+zKDJ1yzuRJNAAiXo20=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.crl rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 07:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:17:13:d1:80:33:e4:94:9f:2c:73:f8:00:f9:a4:a9:0e:17:7e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A9D4BDD4311519F6A96141040EA1E98B3363388 Validity Not Before: Oct 1 06:34:13 2026 GMT Not After : Oct 2 08:09:13 2026 GMT Subject: CN=767C45C72FCEEE1975566C61541FF9315CE1C29E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9b:e0:a5:fc:9b:0e:ef:a8:10:c3:de:0e:f4: 8d:b6:9b:ff:fb:01:18:e0:1d:83:51:a2:79:7c:8c: b6:88:14:d5:ea:46:61:39:ee:bb:91:d3:f8:71:e9: 73:c4:db:43:6e:66:1b:b7:d2:02:a5:60:02:61:a3: db:2d:b0:cc:e8:89:b8:ec:98:ad:61:65:3f:f5:7a: e8:67:b6:94:c0:1d:43:65:f5:b4:e1:5f:02:a8:75: 18:44:62:2e:38:4a:bb:f3:00:4c:74:ef:91:0c:3e: 92:3b:17:35:84:d8:de:42:aa:b0:51:ef:16:2f:c8: ae:55:db:42:c0:5a:86:2f:03:fd:ed:29:d9:62:56: d0:84:06:73:da:0c:09:b1:6d:7f:93:45:b0:09:08: a2:95:41:8c:28:eb:93:3d:fd:15:75:dc:1e:97:74: f5:33:28:8a:df:68:71:5a:60:45:f9:27:98:83:3f: bf:0f:e3:26:6f:98:58:ba:50:a8:72:c0:ef:fd:89: ff:b1:c8:11:d6:25:a5:b3:43:f8:4f:d1:92:33:65: 0a:8f:f1:b2:37:75:91:c5:10:91:c9:41:11:59:e8: 62:64:7f:49:ac:25:7f:31:5a:2b:43:06:d5:d1:8f: a8:4f:17:75:d4:fc:38:6b:86:67:2d:84:02:8b:96: bd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7C:45:C7:2F:CE:EE:19:75:56:6C:61:54:1F:F9:31:5C:E1:C2:9E X509v3 Authority Key Identifier: keyid:9A:9D:4B:DD:43:11:51:9F:6A:96:14:10:40:EA:1E:98:B3:36:33:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:e7:a8:56:07:66:31:f2:89:64:e8:a1:b1:02:ca:79:4d:3b: 71:c9:b5:31:8a:70:11:0f:40:50:31:5c:63:7b:ac:85:d1:af: c8:24:c3:48:e4:83:de:d7:5c:e7:d3:c7:79:57:e1:bd:7c:01: 89:7f:63:00:75:f0:dd:05:6f:d4:1d:25:8b:97:fa:9d:34:b6: 74:e2:2a:8f:03:d4:a0:a0:f9:91:8e:64:d4:6a:38:a9:16:60: 17:56:f0:ad:ce:0f:ec:d2:67:a6:55:2f:02:5e:89:c1:06:aa: 7f:28:df:22:57:8b:b4:42:96:b1:82:bf:9a:5a:b6:04:73:c8: 68:aa:13:60:e2:6f:b6:5e:ea:c9:3c:07:e0:d8:f6:a3:13:fa: c7:05:5f:b3:5e:fb:04:7c:54:ec:0f:52:2c:e0:2a:70:b7:18: 2d:d3:5a:3d:d1:63:10:0b:8d:14:2d:e2:ab:2f:c4:37:98:f3: c9:f2:25:df:cb:e9:f3:8c:4e:37:d6:df:23:b7:a9:45:f7:e5: e3:ad:fa:bb:a8:f3:6f:84:24:ed:bf:a2:9b:b1:1f:1c:45:b0: 26:3f:54:8c:94:93:f2:f6:b9:33:ad:81:33:68:d2:0f:9b:83: d5:f3:1e:63:06:6b:92:95:c4:bc:1f:0f:ff:f1:35:5e:13:cd: 7b:f0:82:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPxcT0YAz5JSfLHP4APmkqQ4XfuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5RDRCREQ0MzExNTE5RjZBOTYxNDEwNDBFQTFFOThC MzM2MzM4ODAeFw0yNjEwMDEwNjM0MTNaFw0yNjEwMDIwODA5MTNaMDMxMTAvBgNV BAMTKDc2N0M0NUM3MkZDRUVFMTk3NTU2NkM2MTU0MUZGOTMxNUNFMUMyOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3m+Cl/JsO76gQw94O9I22m//7 ARjgHYNRonl8jLaIFNXqRmE57ruR0/hx6XPE20NuZhu30gKlYAJho9stsMzoibjs mK1hZT/1euhntpTAHUNl9bThXwKodRhEYi44SrvzAEx075EMPpI7FzWE2N5CqrBR 7xYvyK5V20LAWoYvA/3tKdliVtCEBnPaDAmxbX+TRbAJCKKVQYwo65M9/RV13B6X dPUzKIrfaHFaYEX5J5iDP78P4yZvmFi6UKhywO/9if+xyBHWJaWzQ/hP0ZIzZQqP 8bI3dZHFEJHJQRFZ6GJkf0msJX8xWitDBtXRj6hPF3XU/DhrhmcthAKLlr1VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdnxFxy/O7hl1VmxhVB/5MVzhwp4wHwYDVR0j BBgwFoAUmp1L3UMRUZ9qlhQQQOoemLM2M4gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmY2NmJmYTYtZGM0Yy00MTA4LTkzMmMtMjA0YjYyZTg2MjcyLzAvOUE5RDRCREQ0 MzExNTE5RjZBOTYxNDEwNDBFQTFFOThCMzM2MzM4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTlENEJERDQzMTE1MTlGNkE5NjE0MTA0MEVBMUU5OEIzMzYz Mzg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmY2NmJmYTYtZGM0Yy00MTA4LTkz MmMtMjA0YjYyZTg2MjcyLzAvOUE5RDRCREQ0MzExNTE5RjZBOTYxNDEwNDBFQTFF OThCMzM2MzM4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALznqFYHZjHyiWToobECynlNO3HJtTGKcBEP QFAxXGN7rIXRr8gkw0jkg97XXOfTx3lX4b18AYl/YwB18N0Fb9QdJYuX+p00tnTi Ko8D1KCg+ZGOZNRqOKkWYBdW8K3OD+zSZ6ZVLwJeicEGqn8o3yJXi7RClrGCv5pa tgRzyGiqE2Dib7Ze6sk8B+DY9qMT+scFX7Ne+wR8VOwPUizgKnC3GC3TWj3RYxAL jRQt4qsvxDeY88nyJd/L6fOMTjfW3yO3qUX35eOt+ruo82+EJO2/opuxHxxFsCY/ VIyUk/L2uTOtgTNo0g+bg9XzHmMGa5KVxLwfD//xNV4TzXvwgjk= -----END CERTIFICATE-----Generated at Thu Oct 1 10:44:34 2026 by rpki-client