$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft File: 9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft (raw, json) Hash identifier: UO6uEe4FIYJWuTi/ba4PRGe66VXyXcNuMKQQq4Hl74w= Subject key identifier: 58:7D:95:2B:57:08:76:D8:19:2C:1E:D6:BB:2F:8E:03:26:1C:27:A7 Authority key identifier: 9E:9F:59:35:C6:5B:93:B0:70:73:0D:31:DC:3B:0B:94:A4:C3:EF:00 Certificate issuer: /CN=9E9F5935C65B93B070730D31DC3B0B94A4C3EF00 Certificate serial: 16DDFD3D4FDFEBD913CD6922125E6D4BEE03C241 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 03:45:18 +0000 Manifest this update: Thu 24 Sep 2026 03:40:18 +0000 Manifest next update: Fri 25 Sep 2026 05:37:18 +0000 Files and hashes: 1: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: naWUC2Rkww5G3UJh4eCfssT9Zr/V8p7wGu4ngZht9HU=) 2: 9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.crl (hash: rJ8XR3TEpq4tIHMKg4ruGr0/v8/2lVnvmNgk1PJImIE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.crl rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:dd:fd:3d:4f:df:eb:d9:13:cd:69:22:12:5e:6d:4b:ee:03:c2:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E9F5935C65B93B070730D31DC3B0B94A4C3EF00 Validity Not Before: Sep 24 03:40:18 2026 GMT Not After : Sep 25 05:37:18 2026 GMT Subject: CN=587D952B570876D8192C1ED6BB2F8E03261C27A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:83:3b:2b:1f:c4:cc:09:93:81:ed:39:c4:0d: 8e:d4:2d:78:c9:0e:4d:ca:6b:29:7a:6b:91:f9:70: 37:da:a1:1f:69:7f:33:e5:6c:28:7f:08:13:f3:02: 3c:ab:d5:ef:97:60:0d:60:f4:ea:bf:7b:06:fa:c1: d1:1d:83:23:6e:78:cd:e3:ad:2d:f9:ac:00:0f:f0: b7:17:ba:ef:73:30:7c:08:d7:f9:f7:29:29:39:44: 62:c1:b8:72:14:f6:a6:20:c4:99:54:2a:19:3f:3c: c3:c5:75:8e:ce:1f:2e:96:56:2a:20:b0:dd:6c:66: 12:53:01:7e:6a:0d:a0:d6:29:0c:32:fb:53:58:c8: 4c:96:c0:07:b6:6f:89:f2:67:5d:fc:6e:6f:49:89: 48:6d:ee:b2:18:3d:12:ba:f2:64:26:13:17:9a:b5: b7:f1:91:d2:7c:6a:62:a3:65:93:e4:85:c0:07:14: 7e:6b:67:34:1e:7a:a3:5f:40:b1:6e:9a:a6:86:01: 89:ac:50:7f:27:16:be:38:38:a2:b6:16:e4:02:c4: 1f:c9:45:28:02:9d:76:4c:95:bc:d0:4b:03:3d:10: a1:34:d2:eb:19:e1:b3:31:e1:b0:55:b5:c3:1c:87: 1b:f6:d2:ee:83:bc:b4:78:67:ef:89:a3:61:33:55: ae:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7D:95:2B:57:08:76:D8:19:2C:1E:D6:BB:2F:8E:03:26:1C:27:A7 X509v3 Authority Key Identifier: keyid:9E:9F:59:35:C6:5B:93:B0:70:73:0D:31:DC:3B:0B:94:A4:C3:EF:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ab:a3:f3:80:cb:39:0a:05:d8:28:2e:00:8d:43:67:03:ce: ab:72:63:90:2e:8f:1c:09:f3:86:00:af:78:2f:15:6b:97:cb: 1f:2d:54:53:50:6c:be:0b:ec:66:47:50:9e:16:8b:5a:32:12: dc:fb:3b:55:3a:d6:90:b7:54:7e:02:fe:5f:05:c0:6b:dd:c0: 61:33:14:5d:26:4a:21:02:88:82:74:d4:90:6f:ec:9d:00:77: f2:51:b0:cb:c8:21:b4:34:52:de:a5:bb:40:67:67:e0:51:0c: a4:31:6b:dd:0a:98:90:b5:92:50:ed:c2:67:9c:92:dd:07:4b: 8a:64:ed:2d:0a:ae:71:84:5e:08:4a:f7:fb:15:ab:07:b0:f4: d3:2a:72:5e:f5:ae:5c:16:43:af:f8:3d:d3:19:74:35:30:8b: a5:50:be:8b:31:d2:9b:42:2b:9d:0d:8d:26:6b:1b:33:f1:5d: 18:84:e7:da:87:b6:d8:79:a5:d4:15:38:ed:fd:ba:a9:8f:dd: 98:eb:00:c5:2e:9d:34:90:87:61:c3:36:38:a8:a4:ce:d2:f8: 44:39:14:48:ca:14:bf:b7:4c:fd:5e:e8:a7:2e:81:25:2a:02: 66:df:8f:87:b9:7d:e3:f7:29:aa:ea:85:47:29:bf:fc:e5:f3: f2:45:e1:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFt39PU/f69kTzWkiEl5tS+4DwkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU5RjU5MzVDNjVCOTNCMDcwNzMwRDMxREMzQjBCOTRB NEMzRUYwMDAeFw0yNjA5MjQwMzQwMThaFw0yNjA5MjUwNTM3MThaMDMxMTAvBgNV BAMTKDU4N0Q5NTJCNTcwODc2RDgxOTJDMUVENkJCMkY4RTAzMjYxQzI3QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVgzsrH8TMCZOB7TnEDY7ULXjJ Dk3Kayl6a5H5cDfaoR9pfzPlbCh/CBPzAjyr1e+XYA1g9Oq/ewb6wdEdgyNueM3j rS35rAAP8LcXuu9zMHwI1/n3KSk5RGLBuHIU9qYgxJlUKhk/PMPFdY7OHy6WViog sN1sZhJTAX5qDaDWKQwy+1NYyEyWwAe2b4nyZ138bm9JiUht7rIYPRK68mQmExea tbfxkdJ8amKjZZPkhcAHFH5rZzQeeqNfQLFumqaGAYmsUH8nFr44OKK2FuQCxB/J RSgCnXZMlbzQSwM9EKE00usZ4bMx4bBVtcMchxv20u6DvLR4Z++Jo2EzVa43AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWH2VK1cIdtgZLB7Wuy+OAyYcJ6cwHwYDVR0j BBgwFoAUnp9ZNcZbk7Bwcw0x3DsLlKTD7wAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Q3YzdhYzItNWE5Yi00OTJhLWE0YzUtMWYxMzU5MGRhZTA2LzAvOUU5RjU5MzVD NjVCOTNCMDcwNzMwRDMxREMzQjBCOTRBNEMzRUYwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RTlGNTkzNUM2NUI5M0IwNzA3MzBEMzFEQzNCMEI5NEE0QzNF RjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Q3YzdhYzItNWE5Yi00OTJhLWE0 YzUtMWYxMzU5MGRhZTA2LzAvOUU5RjU5MzVDNjVCOTNCMDcwNzMwRDMxREMzQjBC OTRBNEMzRUYwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImro/OAyzkKBdgoLgCNQ2cDzqtyY5AujxwJ 84YAr3gvFWuXyx8tVFNQbL4L7GZHUJ4Wi1oyEtz7O1U61pC3VH4C/l8FwGvdwGEz FF0mSiECiIJ01JBv7J0Ad/JRsMvIIbQ0Ut6lu0BnZ+BRDKQxa90KmJC1klDtwmec kt0HS4pk7S0KrnGEXghK9/sVqwew9NMqcl71rlwWQ6/4PdMZdDUwi6VQvosx0ptC K50NjSZrGzPxXRiE59qHtth5pdQVOO39uqmP3ZjrAMUunTSQh2HDNjiopM7S+EQ5 FEjKFL+3TP1e6KcugSUqAmbfj4e5feP3KarqhUcpv/zl8/JF4aQ= -----END CERTIFICATE-----Generated at Thu Sep 24 14:24:23 2026 by rpki-client