$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/93D5F733B129227DEDF25AC1218D70CEB9366645.mft File: 93D5F733B129227DEDF25AC1218D70CEB9366645.mft (raw, json) Hash identifier: UrnQ0FXXbnpkiNe6wAwa0O3bp29IBqehYJ4RefEZkdU= Subject key identifier: A2:A4:EB:8B:B8:64:9E:41:74:55:E7:97:2C:26:0A:AF:66:12:B8:1D Authority key identifier: 93:D5:F7:33:B1:29:22:7D:ED:F2:5A:C1:21:8D:70:CE:B9:36:66:45 Certificate issuer: /CN=93D5F733B129227DEDF25AC1218D70CEB9366645 Certificate serial: 1C883B9D93B6AB2F85697D2402DD7D3E256E42B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/93D5F733B129227DEDF25AC1218D70CEB9366645.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/93D5F733B129227DEDF25AC1218D70CEB9366645.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 12:06:03 +0000 Manifest this update: Wed 23 Sep 2026 12:01:03 +0000 Manifest next update: Thu 24 Sep 2026 15:53:03 +0000 Files and hashes: 1: 3131352e3138372e33302e302f32332d3233203d3e203538333639.roa (hash: 2r/DHoZQcARca/HdvnPXzAwXVYdOhWG0QN9UGO2QPik=) 2: 3131352e3138372e33312e302f32342d3234203d3e203538333639.roa (hash: UQmYBsNtM1m+x3eKuJQrDlYChCuWAKPJpdpYIjOVVGo=) 3: 3131352e3138372e33302e302f32342d3234203d3e203538333639.roa (hash: WyzY/OKpQz+OszoUW9tiE0D45FrPQkYlLFlFkX8+2y0=) 4: 93D5F733B129227DEDF25AC1218D70CEB9366645.crl (hash: xnIU0CHIacPRS/dVyZg+aMx3a2gNnPnjCuUquHs7tr0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/93D5F733B129227DEDF25AC1218D70CEB9366645.crl rsync://rpki-rsync.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/93D5F733B129227DEDF25AC1218D70CEB9366645.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/93D5F733B129227DEDF25AC1218D70CEB9366645.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:88:3b:9d:93:b6:ab:2f:85:69:7d:24:02:dd:7d:3e:25:6e:42:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93D5F733B129227DEDF25AC1218D70CEB9366645 Validity Not Before: Sep 23 12:01:03 2026 GMT Not After : Sep 24 15:53:03 2026 GMT Subject: CN=A2A4EB8BB8649E417455E7972C260AAF6612B81D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9a:81:9b:d4:7e:c6:e9:a5:d2:1f:0d:7c:f2: 0d:72:aa:63:ac:eb:cc:ba:8e:54:51:fd:cf:0f:47: e1:0a:77:a7:8c:79:84:2e:f8:b0:6e:50:c6:36:33: af:f4:ba:cb:23:db:b1:ee:e7:ca:da:ed:a3:fa:c7: 4a:02:8e:4c:29:af:ee:f5:56:6d:fd:22:d0:fb:c3: 4d:15:00:09:7c:a5:9e:87:7f:f5:13:ea:28:81:cc: 4b:6d:05:cc:36:38:f0:ad:29:69:54:18:eb:21:ee: 5a:71:23:99:cd:43:05:65:2f:cd:13:0b:91:65:e6: 3f:c5:ec:8e:72:fd:1e:31:12:7b:48:9f:fe:af:c6: ee:ba:d1:e2:dc:3f:c9:0b:23:1c:2a:f4:44:5e:f3: 1b:7a:bc:66:45:6a:33:b1:ed:73:fb:68:1b:ec:7f: f1:e5:b7:cb:19:dd:ba:15:25:1f:fb:3a:70:06:55: 91:40:a2:bf:0e:6b:9e:63:b8:4b:f7:08:89:d6:43: 85:a6:f2:b4:5f:26:ae:f8:6d:93:39:04:4c:3a:33: 05:68:36:aa:6a:45:16:83:cc:17:38:a1:68:70:bd: ce:84:3e:16:0a:a1:f8:11:b1:38:c8:33:e4:03:59: ba:25:fa:57:00:09:7b:36:64:5e:1d:d6:f8:a3:86: dc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A4:EB:8B:B8:64:9E:41:74:55:E7:97:2C:26:0A:AF:66:12:B8:1D X509v3 Authority Key Identifier: keyid:93:D5:F7:33:B1:29:22:7D:ED:F2:5A:C1:21:8D:70:CE:B9:36:66:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/93D5F733B129227DEDF25AC1218D70CEB9366645.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/93D5F733B129227DEDF25AC1218D70CEB9366645.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/93D5F733B129227DEDF25AC1218D70CEB9366645.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:2a:f3:a4:ff:97:8c:32:e7:25:3e:b7:09:a1:3b:96:3f:34: 67:03:45:e8:8a:ba:66:3e:b1:67:d0:6f:84:5a:56:8d:8c:6e: a0:20:05:36:ff:b9:54:e1:c4:f7:6d:cc:c1:f5:bd:97:ca:06: 6a:ea:38:98:04:9c:79:e4:4b:cd:fa:bb:cf:ed:80:7d:af:87: b7:dc:23:38:30:15:8a:c3:5d:f2:b4:d7:ea:57:86:28:8f:00: f7:f1:34:ad:39:99:40:32:e9:e2:b3:ca:90:8b:42:7e:0d:64: 61:f9:a3:44:28:c5:ed:4f:0b:8a:8e:2c:12:22:a2:89:dc:9e: 66:ee:9f:00:00:c5:d0:e8:60:88:f0:96:32:22:d0:94:5a:7f: 73:ba:c8:1c:e2:14:99:d0:0c:52:50:65:a4:84:5d:4e:4d:32: ff:d1:8b:77:ea:29:48:b6:b7:d0:e5:bc:99:71:c0:9f:19:de: 2a:ec:ff:b7:1d:7a:27:00:11:ba:63:ca:ae:a1:0f:90:0b:44: 6e:d0:19:1b:30:6f:ec:62:e7:a4:e0:e9:7f:35:d9:11:c0:af: bf:45:09:d5:06:c4:c1:c8:d7:a5:62:8f:4e:9f:f3:f0:bf:e0: 7e:62:e0:ef:ea:85:8e:c3:f2:05:96:67:8b:84:4a:f3:af:95: ca:a8:b2:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHIg7nZO2qy+FaX0kAt19PiVuQrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTNENUY3MzNCMTI5MjI3REVERjI1QUMxMjE4RDcwQ0VC OTM2NjY0NTAeFw0yNjA5MjMxMjAxMDNaFw0yNjA5MjQxNTUzMDNaMDMxMTAvBgNV BAMTKEEyQTRFQjhCQjg2NDlFNDE3NDU1RTc5NzJDMjYwQUFGNjYxMkI4MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGmoGb1H7G6aXSHw188g1yqmOs 68y6jlRR/c8PR+EKd6eMeYQu+LBuUMY2M6/0ussj27Hu58ra7aP6x0oCjkwpr+71 Vm39ItD7w00VAAl8pZ6Hf/UT6iiBzEttBcw2OPCtKWlUGOsh7lpxI5nNQwVlL80T C5Fl5j/F7I5y/R4xEntIn/6vxu660eLcP8kLIxwq9ERe8xt6vGZFajOx7XP7aBvs f/Hlt8sZ3boVJR/7OnAGVZFAor8Oa55juEv3CInWQ4Wm8rRfJq74bZM5BEw6MwVo NqpqRRaDzBc4oWhwvc6EPhYKofgRsTjIM+QDWbol+lcACXs2ZF4d1vijhtz9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoqTri7hknkF0VeeXLCYKr2YSuB0wHwYDVR0j BBgwFoAUk9X3M7EpIn3t8lrBIY1wzrk2ZkUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA1NDA5ZWQtOWY0MC00ZjVhLWI1ZWUtYTA4OGRhMmY1OTc4LzAvOTNENUY3MzNC MTI5MjI3REVERjI1QUMxMjE4RDcwQ0VCOTM2NjY0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85M0Q1RjczM0IxMjkyMjdERURGMjVBQzEyMThENzBDRUI5MzY2 NjQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA1NDA5ZWQtOWY0MC00ZjVhLWI1 ZWUtYTA4OGRhMmY1OTc4LzAvOTNENUY3MzNCMTI5MjI3REVERjI1QUMxMjE4RDcw Q0VCOTM2NjY0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgq86T/l4wy5yU+twmhO5Y/NGcDReiKumY+ sWfQb4RaVo2MbqAgBTb/uVThxPdtzMH1vZfKBmrqOJgEnHnkS836u8/tgH2vh7fc IzgwFYrDXfK01+pXhiiPAPfxNK05mUAy6eKzypCLQn4NZGH5o0Qoxe1PC4qOLBIi ooncnmbunwAAxdDoYIjwljIi0JRaf3O6yBziFJnQDFJQZaSEXU5NMv/Ri3fqKUi2 t9DlvJlxwJ8Z3irs/7cdeicAEbpjyq6hD5ALRG7QGRswb+xi56Tg6X812RHAr79F CdUGxMHI16Vij06f8/C/4H5i4O/qhY7D8gWWZ4uESvOvlcqosqI= -----END CERTIFICATE-----Generated at Thu Sep 24 02:13:48 2026 by rpki-client