$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft File: 9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft (raw, json) Hash identifier: buwgJXLvpZuehjBpaGmXfpe9VyD48FPUrTJadcrXdd8= Subject key identifier: 26:03:48:1C:AB:40:66:B6:08:A2:45:52:87:71:D2:DC:57:07:EE:EE Authority key identifier: 9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C Certificate issuer: /CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C Certificate serial: 3769B3EB5CFB4B84AA53610A2ECEB129F94EEAF3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 19:45:19 +0000 Manifest this update: Wed 23 Sep 2026 19:40:19 +0000 Manifest next update: Thu 24 Sep 2026 21:59:19 +0000 Files and hashes: 1: 3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (hash: /Ar9BLD37pzpWiMramvnEnpVLlVnDEgU4xEdcB/AMOA=) 2: 9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl (hash: DhTogo+xgcdkLVA1kdAxivNFEwVxjgmpB702hYrWW80=) 3: 3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (hash: w0+5fhmaBdxaqda6UhvTmcPuYEdSCtqjLZVClfvW/98=) 4: 323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa (hash: OPLg91e3QDUz0oxlHDtfye2YYgsL8tJKKqHtqB32VO0=) 5: 3130332e32332e39382e302f32332d3233203d3e20313530323435.roa (hash: 7xqE0F9v+EXRL9dCkePN1NHTFDTfqFm2QwKgbcBy4ao=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:69:b3:eb:5c:fb:4b:84:aa:53:61:0a:2e:ce:b1:29:f9:4e:ea:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C Validity Not Before: Sep 23 19:40:19 2026 GMT Not After : Sep 24 21:59:19 2026 GMT Subject: CN=2603481CAB4066B608A245528771D2DC5707EEEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:41:af:b4:88:db:3e:ff:50:91:25:3c:42:32: 2f:38:ed:d1:16:9d:be:0d:7a:c8:f8:d2:03:ef:a1: 79:12:b3:50:7d:63:33:bb:6a:f0:34:b4:34:f7:08: 8a:3e:f4:9b:cf:82:92:b5:66:22:d2:11:dd:6c:40: 11:68:6e:f7:2c:f0:53:d7:99:76:6d:86:0d:99:0a: f1:62:18:18:d7:b2:a5:96:50:96:2c:76:f1:28:db: 50:ca:65:4b:0b:9a:ff:6a:c5:d0:76:4d:a4:b3:35: 24:c5:36:ea:3d:08:c3:69:d7:a6:e4:bb:f1:e1:8c: 96:fb:c7:d2:fb:6a:6d:6a:72:75:fd:b8:ef:77:10: 67:59:bd:92:b8:80:c0:34:2c:75:1f:06:1a:a3:4d: be:a0:ca:d7:43:cf:0b:fc:80:da:db:40:34:e3:da: 8c:0c:cc:55:e8:bb:bc:39:a9:b7:91:ce:f8:da:bc: 43:b8:e0:e9:7f:cc:f3:6c:33:5a:3d:71:fc:11:40: 6d:b3:61:47:ed:db:a7:67:65:68:c1:a7:3b:c0:b7: 07:1b:41:5b:23:60:4b:95:a5:7b:61:3b:a5:92:79: 77:6b:7e:c5:21:1a:b8:fe:d3:61:9b:a4:33:dd:61: 81:e8:80:b7:4f:c1:32:ac:50:b6:e1:e8:fe:8b:23: fa:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:03:48:1C:AB:40:66:B6:08:A2:45:52:87:71:D2:DC:57:07:EE:EE X509v3 Authority Key Identifier: keyid:9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:fe:9b:9a:d9:fe:74:b0:76:68:97:20:c0:15:b8:53:a2:2e: 4d:55:de:33:33:0c:8d:82:10:26:f2:59:09:4e:ba:70:43:76: 2a:2f:06:b0:ef:11:d1:22:25:e8:0c:b2:e6:34:98:bd:2e:a8: fe:2c:30:26:fe:e2:e4:7b:2e:8e:23:7e:c3:3f:6e:e4:3a:5e: a0:36:ca:a8:de:e3:c1:96:a6:7a:ac:06:ec:fa:c7:dd:fb:e5: c0:da:af:30:27:7b:65:4c:bf:63:73:fa:e2:89:89:2f:96:7a: be:1a:9b:f0:68:3a:00:e0:0c:aa:c9:38:2b:62:6c:f1:6e:c3: 81:16:4b:51:1a:a9:40:6f:af:38:4c:80:a4:b9:12:33:00:fb: b5:be:a2:dd:62:5e:5f:44:e6:3c:d0:34:33:a3:82:be:e3:90: a8:6f:fb:32:3b:94:ce:0a:e5:e9:65:b2:c6:2e:73:1b:d8:46: 38:ad:d2:49:7f:d8:01:44:e3:90:41:38:aa:f6:dd:08:c3:1c: ce:79:b7:53:ab:50:7e:4a:1d:9f:6e:82:6e:77:ac:60:64:d2: 55:ab:95:67:c6:dd:fe:ed:5e:09:9c:4c:3f:11:07:2a:27:7f: e9:45:a8:25:c8:c9:7a:9e:bd:17:4f:b0:72:f9:17:de:9e:6b: 8d:9c:11:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN2mz61z7S4SqU2EKLs6xKflO6vMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURGQzdBNTE0OUQzRkNDMEFDRDlCQkVENTVDNENFOEVB ODJBMDM4QzAeFw0yNjA5MjMxOTQwMTlaFw0yNjA5MjQyMTU5MTlaMDMxMTAvBgNV BAMTKDI2MDM0ODFDQUI0MDY2QjYwOEEyNDU1Mjg3NzFEMkRDNTcwN0VFRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChQa+0iNs+/1CRJTxCMi847dEW nb4Nesj40gPvoXkSs1B9YzO7avA0tDT3CIo+9JvPgpK1ZiLSEd1sQBFobvcs8FPX mXZthg2ZCvFiGBjXsqWWUJYsdvEo21DKZUsLmv9qxdB2TaSzNSTFNuo9CMNp16bk u/HhjJb7x9L7am1qcnX9uO93EGdZvZK4gMA0LHUfBhqjTb6gytdDzwv8gNrbQDTj 2owMzFXou7w5qbeRzvjavEO44Ol/zPNsM1o9cfwRQG2zYUft26dnZWjBpzvAtwcb QVsjYEuVpXthO6WSeXdrfsUhGrj+02GbpDPdYYHogLdPwTKsULbh6P6LI/qdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJgNIHKtAZrYIokVSh3HS3FcH7u4wHwYDVR0j BBgwFoAUnfx6UUnT/MCs2bvtVcTOjqgqA4wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg0NmY0MjItYzMwMi00NDYyLWI1ODQtNzAwZTkzNDZjYTA5LzAvOURGQzdBNTE0 OUQzRkNDMEFDRDlCQkVENTVDNENFOEVBODJBMDM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REZDN0E1MTQ5RDNGQ0MwQUNEOUJCRUQ1NUM0Q0U4RUE4MkEw MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg0NmY0MjItYzMwMi00NDYyLWI1 ODQtNzAwZTkzNDZjYTA5LzAvOURGQzdBNTE0OUQzRkNDMEFDRDlCQkVENTVDNENF OEVBODJBMDM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIn+m5rZ/nSwdmiXIMAVuFOiLk1V3jMzDI2C ECbyWQlOunBDdiovBrDvEdEiJegMsuY0mL0uqP4sMCb+4uR7Lo4jfsM/buQ6XqA2 yqje48GWpnqsBuz6x9375cDarzAne2VMv2Nz+uKJiS+Wer4am/BoOgDgDKrJOCti bPFuw4EWS1EaqUBvrzhMgKS5EjMA+7W+ot1iXl9E5jzQNDOjgr7jkKhv+zI7lM4K 5ellssYucxvYRjit0kl/2AFE45BBOKr23QjDHM55t1OrUH5KHZ9ugm53rGBk0lWr lWfG3f7tXgmcTD8RByonf+lFqCXIyXqevRdPsHL5F96ea42cEZo= -----END CERTIFICATE-----Generated at Thu Sep 24 11:14:09 2026 by rpki-client