$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft File: B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft (raw, json) Hash identifier: VCPrl45i6swCqD9sfMw7ZXfzBPGMquf6J/rBGsCHUe8= Subject key identifier: 1F:D9:81:81:27:AC:8D:6E:FD:68:29:A1:9C:FC:65:19:D9:E7:F0:8D Authority key identifier: B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC Certificate issuer: /CN=B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC Certificate serial: 31B718AD63214D32EDE62A854B3CD4756B9E7D87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft Manifest number: C9 Signing time: Mon 28 Sep 2026 05:26:53 +0000 Manifest this update: Mon 28 Sep 2026 05:21:53 +0000 Manifest next update: Tue 29 Sep 2026 09:04:53 +0000 Files and hashes: 1: B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl (hash: Vz7hPG4LCJKp+8NMkRCT+bl7JN0l5GpLW+N99BOvJPo=) 2: 3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (hash: DOdXqvIf8YC77FzkFbP1ZhH9lDDTTUCUrQuHHws44kQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 09:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b7:18:ad:63:21:4d:32:ed:e6:2a:85:4b:3c:d4:75:6b:9e:7d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC Validity Not Before: Sep 28 05:21:53 2026 GMT Not After : Sep 29 09:04:53 2026 GMT Subject: CN=1FD9818127AC8D6EFD6829A19CFC6519D9E7F08D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4d:70:5a:d0:bd:0b:84:69:82:c7:a0:3e:54: 3b:01:00:01:a7:84:b6:ba:b6:fd:dc:87:5f:50:39: cd:4a:b5:ca:e8:a9:8c:3f:c3:db:a8:28:e1:2d:0f: 54:6f:30:1a:21:09:c4:3d:01:0b:9d:73:07:1b:99: 87:8f:80:09:24:54:01:23:29:de:3d:bb:3a:64:82: 17:b6:1f:67:4d:01:5f:89:6c:12:07:28:93:4c:17: 63:15:57:27:20:2e:b3:0c:6d:d5:f4:50:c2:6c:22: 10:f2:a1:1d:6e:72:04:95:8f:ed:d5:1c:83:23:5d: 03:19:4c:e3:dc:60:3b:af:b0:f3:c1:47:47:4d:97: 53:18:3a:d7:f7:b2:ac:42:44:ec:c9:bb:96:46:40: ea:d1:7b:24:9d:2c:04:6a:5d:f3:43:5d:d6:eb:72: df:5c:39:4b:74:e8:2c:ae:74:45:0b:ae:0d:a0:8d: a8:93:ce:6c:5c:62:90:45:e7:16:0c:c1:fc:19:f6: 17:95:66:90:f5:9a:2f:ff:33:a7:de:bf:8c:ec:81: 4b:09:0b:52:05:24:d8:ee:b5:32:c7:03:c8:ae:77: 1e:9b:16:bf:76:18:53:ea:9d:27:57:aa:7e:5a:7f: a6:c7:60:37:bb:c2:e4:dc:67:c4:70:4f:99:a4:44: c2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D9:81:81:27:AC:8D:6E:FD:68:29:A1:9C:FC:65:19:D9:E7:F0:8D X509v3 Authority Key Identifier: keyid:B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:76:aa:92:17:5f:4b:a0:04:fd:e7:13:e0:a4:0b:01:9e:2e: 60:e0:20:da:90:f9:0a:10:f6:59:7c:74:c9:4e:ec:fb:61:9a: 8b:f2:65:91:75:bd:58:89:63:96:ba:24:c8:99:09:a9:5d:79: 03:90:62:7a:83:3b:3f:7f:0e:c3:f7:73:c0:4a:50:72:57:07: 52:f6:2c:60:60:50:a2:1c:12:a9:bb:34:7f:21:c8:14:39:55: bb:5a:f6:c3:f0:e1:9b:56:73:e8:a3:f4:3b:ea:46:14:38:07: 80:c3:88:9f:f5:f5:eb:e7:99:ce:94:d8:89:51:ae:51:c5:d0: 57:16:ed:3b:d6:c5:32:5e:e7:2c:74:fd:04:e1:12:c0:7d:7c: 54:06:63:6c:5a:94:c9:04:73:43:8d:5a:8f:c5:95:21:4e:e6: d1:55:af:a5:5a:de:0f:ea:67:a9:48:a5:ec:45:2c:bc:b2:74: 18:ef:93:65:60:f6:42:1a:b5:1c:e7:1e:3f:17:89:7b:59:db: ee:e7:a9:ff:8c:76:8d:30:65:20:80:e5:c5:01:90:3e:a9:ac: 37:26:fb:62:ed:35:f0:d0:f9:fc:3f:26:26:38:97:3f:7e:00: 04:0c:70:f7:7a:39:8d:5a:80:13:da:37:06:2f:ce:3c:93:b5: 4f:1d:dc:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMbcYrWMhTTLt5iqFSzzUdWuefYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk5MDhGNTk0RTYzMEJFQTFFRUEwRERCRjRBMzBEQzhD RjEyN0NBQzAeFw0yNjA5MjgwNTIxNTNaFw0yNjA5MjkwOTA0NTNaMDMxMTAvBgNV BAMTKDFGRDk4MTgxMjdBQzhENkVGRDY4MjlBMTlDRkM2NTE5RDlFN0YwOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgTXBa0L0LhGmCx6A+VDsBAAGn hLa6tv3ch19QOc1KtcroqYw/w9uoKOEtD1RvMBohCcQ9AQudcwcbmYePgAkkVAEj Kd49uzpkghe2H2dNAV+JbBIHKJNMF2MVVycgLrMMbdX0UMJsIhDyoR1ucgSVj+3V HIMjXQMZTOPcYDuvsPPBR0dNl1MYOtf3sqxCROzJu5ZGQOrReySdLARqXfNDXdbr ct9cOUt06CyudEULrg2gjaiTzmxcYpBF5xYMwfwZ9heVZpD1mi//M6fev4zsgUsJ C1IFJNjutTLHA8iudx6bFr92GFPqnSdXqn5af6bHYDe7wuTcZ8RwT5mkRMIXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH9mBgSesjW79aCmhnPxlGdnn8I0wHwYDVR0j BBgwFoAUuZCPWU5jC+oe6g3b9KMNyM8SfKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZlY2M3MmEtZTk1NC00MzAyLTkyYzQtZjRmMjMwNzBiOTk3LzAvQjk5MDhGNTk0 RTYzMEJFQTFFRUEwRERCRjRBMzBEQzhDRjEyN0NBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTkwOEY1OTRFNjMwQkVBMUVFQTBEREJGNEEzMERDOENGMTI3 Q0FDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZlY2M3MmEtZTk1NC00MzAyLTky YzQtZjRmMjMwNzBiOTk3LzAvQjk5MDhGNTk0RTYzMEJFQTFFRUEwRERCRjRBMzBE QzhDRjEyN0NBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHN2qpIXX0ugBP3nE+CkCwGeLmDgINqQ+QoQ 9ll8dMlO7PthmovyZZF1vViJY5a6JMiZCaldeQOQYnqDOz9/DsP3c8BKUHJXB1L2 LGBgUKIcEqm7NH8hyBQ5Vbta9sPw4ZtWc+ij9DvqRhQ4B4DDiJ/19evnmc6U2IlR rlHF0FcW7TvWxTJe5yx0/QThEsB9fFQGY2xalMkEc0ONWo/FlSFO5tFVr6Va3g/q Z6lIpexFLLyydBjvk2Vg9kIatRznHj8XiXtZ2+7nqf+Mdo0wZSCA5cUBkD6prDcm +2LtNfDQ+fw/JiY4lz9+AAQMcPd6OY1agBPaNwYvzjyTtU8d3DI= -----END CERTIFICATE-----Generated at Mon Sep 28 16:17:10 2026 by rpki-client