$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft File: 9FA20A14AF60219662C9668DE75D25F0C8B84220.mft (raw, json) Hash identifier: YFdQMzHj/OY0W4f4KYNDO8WwpNfifGt7gf+88gS/T30= Subject key identifier: E5:C3:E8:FF:7D:9D:FB:2B:57:4B:D6:93:44:43:2C:4E:07:84:FD:AC Authority key identifier: 9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20 Certificate issuer: /CN=9FA20A14AF60219662C9668DE75D25F0C8B84220 Certificate serial: 2F0C7C7EF3E0A92546214695DD75C05C326A62A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft Manifest number: C9 Signing time: Tue 29 Sep 2026 06:22:16 +0000 Manifest this update: Tue 29 Sep 2026 06:17:16 +0000 Manifest next update: Wed 30 Sep 2026 10:07:16 +0000 Files and hashes: 1: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: YS2T4alON/4lMEWof38ueY05KIoXFInJbn/EVbWzFdU=) 2: 9FA20A14AF60219662C9668DE75D25F0C8B84220.crl (hash: cIBNfgnEtNgOnBc0NTHuy6E9bU3aFjQSlmw1Zm5sB0c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:0c:7c:7e:f3:e0:a9:25:46:21:46:95:dd:75:c0:5c:32:6a:62:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FA20A14AF60219662C9668DE75D25F0C8B84220 Validity Not Before: Sep 29 06:17:16 2026 GMT Not After : Sep 30 10:07:16 2026 GMT Subject: CN=E5C3E8FF7D9DFB2B574BD69344432C4E0784FDAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7d:db:fe:eb:ff:ef:a5:b4:8f:54:fb:b5:89: b0:5f:17:64:69:fa:56:80:05:12:cf:5e:7b:9c:f4: dc:6f:bb:19:a2:82:5e:cf:4c:13:2b:4c:c4:d2:70: 1d:2d:c6:2b:f8:0c:f2:da:79:45:f4:73:b0:25:21: 03:02:f8:02:d1:7b:0f:b1:96:f1:e8:cb:d3:d7:71: 7b:33:b3:ac:c3:56:30:a7:bc:49:78:a5:70:50:e1: da:09:ae:26:ef:2a:11:ad:5e:03:35:b2:a7:9f:98: 3d:4c:d6:b1:4e:61:52:32:f5:0a:09:7e:2d:56:cd: ba:36:b4:a7:70:57:b4:39:16:4e:f3:37:f8:53:be: 65:db:f3:06:13:89:a3:43:ca:d3:d1:bb:55:78:1b: 0e:d8:81:31:e2:b1:08:d1:6d:95:5a:8d:b8:b3:62: 08:50:c4:ff:6a:23:63:d9:33:b7:b8:20:84:43:7b: 0d:e3:1c:53:22:62:0a:9a:3c:7d:69:c9:5b:78:a1: 66:32:3d:cf:8d:59:20:5c:13:6c:e8:bb:6d:6d:59: 31:6a:6a:f1:a1:b3:b7:9b:9a:64:56:e8:e6:e2:02: 74:3b:ed:09:e0:12:75:b7:89:73:3b:3c:5c:95:69: 37:44:dc:39:37:65:ad:c3:17:b0:2f:c5:5b:dd:9e: 54:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C3:E8:FF:7D:9D:FB:2B:57:4B:D6:93:44:43:2C:4E:07:84:FD:AC X509v3 Authority Key Identifier: keyid:9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:92:05:da:55:b2:07:9b:28:f3:69:4f:8b:6e:ab:72:28:3d: 52:5d:db:00:10:7e:5a:ef:e9:d7:33:5b:cf:ee:79:64:c3:59: 1a:26:2b:37:12:e8:dc:e1:06:cc:d1:48:cb:d8:9f:57:3c:f6: a8:c5:98:67:b1:07:93:27:88:43:f9:d1:28:8c:19:f1:0e:84: 11:0c:71:7b:95:34:63:2e:e6:48:59:85:67:4b:9e:c8:d4:11: c2:7f:d0:51:e5:db:4a:68:3e:95:35:70:4a:45:31:d7:fb:c8: 3e:0e:11:16:85:7e:0b:26:99:3b:5d:38:67:48:21:54:cf:10: a1:06:58:1a:69:ad:f9:d1:d3:ad:4d:29:cd:c7:0f:b3:c2:1b: 44:72:6e:7a:de:50:35:09:b2:fe:e4:96:69:c4:fd:b0:07:56: c2:20:b7:e4:ba:00:e3:fb:ef:85:21:de:b6:66:d5:33:01:d1: 67:69:b0:b7:9b:bc:d8:4e:99:a2:39:9e:1c:cf:a3:07:1d:79: 47:54:1d:f9:7e:c0:1c:95:11:78:8b:84:38:8a:17:70:d0:4a: ab:72:d5:d9:bc:a1:a9:00:dc:9d:1a:6d:4f:ca:19:56:db:c1: 2d:f3:0d:a6:4f:74:9e:5b:cd:51:df:f8:75:dc:ff:28:28:12: 91:12:5d:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULwx8fvPgqSVGIUaV3XXAXDJqYqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBMjBBMTRBRjYwMjE5NjYyQzk2NjhERTc1RDI1RjBD OEI4NDIyMDAeFw0yNjA5MjkwNjE3MTZaFw0yNjA5MzAxMDA3MTZaMDMxMTAvBgNV BAMTKEU1QzNFOEZGN0Q5REZCMkI1NzRCRDY5MzQ0NDMyQzRFMDc4NEZEQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMfdv+6//vpbSPVPu1ibBfF2Rp +laABRLPXnuc9Nxvuxmigl7PTBMrTMTScB0txiv4DPLaeUX0c7AlIQMC+ALRew+x lvHoy9PXcXszs6zDVjCnvEl4pXBQ4doJribvKhGtXgM1sqefmD1M1rFOYVIy9QoJ fi1Wzbo2tKdwV7Q5Fk7zN/hTvmXb8wYTiaNDytPRu1V4Gw7YgTHisQjRbZVajbiz YghQxP9qI2PZM7e4IIRDew3jHFMiYgqaPH1pyVt4oWYyPc+NWSBcE2zou21tWTFq avGhs7ebmmRW6ObiAnQ77QngEnW3iXM7PFyVaTdE3Dk3Za3DF7AvxVvdnlRlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5cPo/32d+ytXS9aTREMsTgeE/awwHwYDVR0j BBgwFoAUn6IKFK9gIZZiyWaN510l8Mi4QiAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzVlNTQ2OGMtMGFjNy00NGE5LTg4MjEtMjgyNTdjNWE4NjA3LzAvOUZBMjBBMTRB RjYwMjE5NjYyQzk2NjhERTc1RDI1RjBDOEI4NDIyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkEyMEExNEFGNjAyMTk2NjJDOTY2OERFNzVEMjVGMEM4Qjg0 MjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvOUZBMjBBMTRBRjYwMjE5NjYyQzk2NjhERTc1RDI1 RjBDOEI4NDIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqSBdpVsgebKPNpT4tuq3IoPVJd2wAQflrv 6dczW8/ueWTDWRomKzcS6NzhBszRSMvYn1c89qjFmGexB5MniEP50SiMGfEOhBEM cXuVNGMu5khZhWdLnsjUEcJ/0FHl20poPpU1cEpFMdf7yD4OERaFfgsmmTtdOGdI IVTPEKEGWBpprfnR061NKc3HD7PCG0RybnreUDUJsv7klmnE/bAHVsIgt+S6AOP7 74Uh3rZm1TMB0WdpsLebvNhOmaI5nhzPowcdeUdUHfl+wByVEXiLhDiKF3DQSqty 1dm8oakA3J0abU/KGVbbwS3zDaZPdJ5bzVHf+HXc/ygoEpESXc4= -----END CERTIFICATE-----Generated at Wed Sep 30 01:02:22 2026 by rpki-client