$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft File: 9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft (raw, json) Hash identifier: tH7ZANq93ibGgLEZ1PI7voe6WGyf+JZmlEbhUN4+kAc= Subject key identifier: 12:A8:71:BA:2B:64:28:38:6E:51:AB:AC:C5:34:DA:C4:F9:81:5C:0F Authority key identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 Certificate issuer: /CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4 Certificate serial: 2C82C4101567791E942C574AC44BFC359F3552E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft Manifest number: C7 Signing time: Thu 24 Sep 2026 06:58:03 +0000 Manifest this update: Thu 24 Sep 2026 06:53:03 +0000 Manifest next update: Fri 25 Sep 2026 10:16:03 +0000 Files and hashes: 1: 3230322e3135322e3139392e302f32342d3234203d3e203633383539.roa (hash: Dl92bN4KroHhoU6iZvn5AO9/ktEfnB98FdoOajolvAY=) 2: 3130332e332e3231332e302f32342d3234203d3e203338313439.roa (hash: 4HkIjmLq+65ZiJXFH/gsCmpX9OJtzZO2CDLQtviREzo=) 3: 3230322e3135322e3230322e302f32342d3234203d3e203633383539.roa (hash: ZN11kMbpQEiQxZkCv4YoKpVbtM+I8QNVgn3BqfSzPFM=) 4: 3130332e332e3231322e302f32322d3232203d3e203338313439.roa (hash: L+jEfJ+TYr8U2lsRIwq0B2JrZizijZUOAoo1oHmW+1s=) 5: 3230322e3135322e3230332e302f32342d3234203d3e203633383539.roa (hash: C04D24vDTd3hbDV5iXxREwC6uGNthkwKxlbfLdfXE1E=) 6: 3230322e3135322e3230352e302f32342d3234203d3e203633383539.roa (hash: 3F7kj8HCI8p6ltHGhgDwoLn+Flb6Nk9tbs0IPGWDTJ8=) 7: 3230322e3135322e3139372e302f32342d3234203d3e203633383539.roa (hash: NlqJ6u6BebCxJ7bsse0gRH5h6BQukMf2w3tldo1PwRQ=) 8: 3230322e3135322e3230302e302f32342d3234203d3e203633383539.roa (hash: 9UdGVYlr2BpuU278InwTpLs2aULPcIQvnjKIhkcrwaU=) 9: 3230322e3135322e3139362e302f32342d3234203d3e203633383539.roa (hash: IiX5vZYV34MLgOX/GRxuakpCz+OmnJUby0rObSh/dR0=) 10: 3130332e332e3231342e302f32342d3234203d3e20313431313436.roa (hash: tuXz1WBHQLGtpa6jqBSO+zM+s1veNX1L+r9GJ7yl5zg=) 11: 3130332e332e3231352e302f32342d3234203d3e20313331373435.roa (hash: XaXM0IZAp2Bc9rsMp3qaCo1vpdeZ4S8GCWtFW/rI5A0=) 12: 3230322e3135322e3230342e302f32342d3234203d3e203633383539.roa (hash: K/9h13JeRi4nBdzHJKHwIX/OSCZT4xPejmG3KMLGGPE=) 13: 3230322e3135322e3139352e302f32342d3234203d3e203633383539.roa (hash: 85ocWH/CGllr8ECiudr/CN5VLg2ydbZ+Y4D2UVzB/yE=) 14: 3230322e3135322e3230312e302f32342d3234203d3e203633383539.roa (hash: Kr9n+dToJ4+otMGr8yT+9Vb2SsgZx8Pi5NiSfTBJmck=) 15: 3230322e3135322e3139342e302f32342d3234203d3e203633383539.roa (hash: poZZqr8m1p0SwLGi1vxWI2MfuVBlouoArnZ43zLWj7A=) 16: 3230322e3135322e3139332e302f32342d3234203d3e203633383539.roa (hash: 8xUt88GWo5Lh7HpcZIOQiiNvwVYn6c3qls4txEwd5Aw=) 17: 3230322e3135322e3139382e302f32342d3234203d3e203633383539.roa (hash: 9ukbLf5qQb1rXyNwLc+GXHdfVwvyPUN+V3xFvkC1PU8=) 18: 3230322e3135322e3230372e302f32342d3234203d3e203633383539.roa (hash: nS2kYK0reE2AsGKi7EPWuF7aJpnOGuNLNpN/XmzL+PQ=) 19: 3230322e3135322e3139322e302f32302d3230203d3e203633383539.roa (hash: OA3ZBLGnXRs5yEnHCOfQPyg4orZ7KQmbwDe09LqHOqQ=) 20: 3130332e332e3231322e302f32342d3234203d3e203338313439.roa (hash: kD6oNGgLKqH7iqk+24uVETlxN5nYgl4ztpk81F99Ka8=) 21: 3230322e3135322e3230362e302f32342d3234203d3e203633383539.roa (hash: xIMJNAAfJUu4Zk7eKaIYdIfnGIAy47WR2He8EYWfO1w=) 22: 9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl (hash: f33UCX4q8X02hupwDqXuGSkljX8MqXvW3CwnlKwCsog=) 23: 3230322e3135322e3139322e302f32342d3234203d3e203633383539.roa (hash: XTetGunxO/9Wc2TDz5SU0JnFYRa4/o3IkFSSAxHr8JI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:82:c4:10:15:67:79:1e:94:2c:57:4a:c4:4b:fc:35:9f:35:52:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4 Validity Not Before: Sep 24 06:53:03 2026 GMT Not After : Sep 25 10:16:03 2026 GMT Subject: CN=12A871BA2B6428386E51ABACC534DAC4F9815C0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6a:d2:a4:76:90:c4:b4:e7:c4:81:ff:13:5e: 1c:17:59:1d:96:2b:2a:9d:99:f5:0b:f3:8a:8c:86: 64:70:7a:61:bf:94:06:26:1e:ec:84:51:24:9b:e3: 7e:2d:ee:45:0b:35:ff:b5:a2:9e:f9:dc:0c:7e:96: 59:36:e1:b6:a1:ac:f4:2e:ce:74:c8:74:3c:96:ed: 72:df:88:4e:76:53:f1:cc:e1:83:15:ad:e6:cf:0f: 58:3e:37:89:c9:af:b0:31:32:74:65:b1:78:1d:68: 27:d9:47:2c:75:97:42:46:af:d3:a3:94:67:b3:94: c3:36:a3:42:66:7f:4c:18:9e:26:4a:93:f2:dc:a9: c5:65:9f:a5:83:cc:e3:23:fc:59:68:76:1f:59:97: 01:4e:72:4b:a4:70:a2:aa:bd:92:55:83:58:30:a4: 23:3a:93:be:1a:85:27:ae:d6:8d:0d:1b:3c:5b:9d: ec:39:07:ee:58:1a:11:3c:57:07:09:99:3b:9b:d9: 9f:82:87:bb:5b:b2:4b:70:67:6c:7a:eb:bb:da:c9: c2:c7:37:04:05:80:72:04:d9:64:4a:a0:66:40:86: 8a:21:3f:4e:e4:b5:38:21:3f:18:6d:43:dc:dc:51: 5c:22:b6:90:fd:5e:c2:51:ee:80:58:24:0f:eb:28: 6d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A8:71:BA:2B:64:28:38:6E:51:AB:AC:C5:34:DA:C4:F9:81:5C:0F X509v3 Authority Key Identifier: keyid:9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:58:e5:78:ae:ef:b6:e8:a6:91:e9:29:f8:0a:6f:d9:d4:47: 69:5b:53:86:fe:97:bc:38:71:72:39:af:14:c0:2a:37:1d:01: c7:a0:3c:7b:b6:de:fa:a4:39:96:df:9a:69:20:c5:32:24:0f: 29:d4:8c:51:5b:a6:6b:24:7e:02:ac:01:68:84:0a:70:2a:a9: 91:db:4e:32:68:30:a9:38:27:ed:15:9c:63:e9:44:b5:2e:3a: 2d:c8:02:b2:ee:0d:60:24:f4:9b:90:68:24:12:b8:36:ea:77: e7:55:a3:19:7c:10:85:0a:0b:18:2a:76:30:fb:26:09:35:4a: 05:6e:0d:b6:e3:50:63:d2:87:91:a8:50:7f:f8:7c:00:e0:40: 81:b8:04:bb:84:bb:7a:ff:50:44:1b:02:d2:86:df:ef:67:92: 7f:e5:01:01:34:8c:5d:5c:cc:a1:49:86:b7:ec:1d:e6:b8:80: 02:f8:ba:4c:4a:3d:e2:f5:61:eb:3a:72:9f:36:5f:8c:29:f0: 2e:33:b5:6b:76:c9:9c:68:b4:d8:d9:34:e8:eb:db:9a:dd:f9: b8:ec:ae:17:10:d7:46:61:b6:e9:e7:6a:ba:1b:06:8b:1d:25: d4:b2:ed:22:43:0d:1c:e0:4e:0d:e4:f9:98:1e:ed:25:18:6e: 49:71:39:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULILEEBVneR6ULFdKxEv8NZ81UuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFMUYxQkE4MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3 NEY0QUFDNDAeFw0yNjA5MjQwNjUzMDNaFw0yNjA5MjUxMDE2MDNaMDMxMTAvBgNV BAMTKDEyQTg3MUJBMkI2NDI4Mzg2RTUxQUJBQ0M1MzREQUM0Rjk4MTVDMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjatKkdpDEtOfEgf8TXhwXWR2W KyqdmfUL84qMhmRwemG/lAYmHuyEUSSb434t7kULNf+1op753Ax+llk24bahrPQu znTIdDyW7XLfiE52U/HM4YMVrebPD1g+N4nJr7AxMnRlsXgdaCfZRyx1l0JGr9Oj lGezlMM2o0Jmf0wYniZKk/LcqcVln6WDzOMj/Flodh9ZlwFOckukcKKqvZJVg1gw pCM6k74ahSeu1o0NGzxbnew5B+5YGhE8VwcJmTub2Z+Ch7tbsktwZ2x667vaycLH NwQFgHIE2WRKoGZAhoohP07ktTghPxhtQ9zcUVwitpD9XsJR7oBYJA/rKG1nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEqhxuitkKDhuUausxTTaxPmBXA8wHwYDVR0j BBgwFoAUm+HxuoCRYxpAm+k5vbBzMnT0qsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhlM2IzOWMtZGExMS00NWVlLWFhYjMtNWNiMTRlYzQ0NzBjLzAvOUJFMUYxQkE4 MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3NEY0QUFDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkUxRjFCQTgwOTE2MzFBNDA5QkU5MzlCREIwNzMzMjc0RjRB QUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDhlM2IzOWMtZGExMS00NWVlLWFh YjMtNWNiMTRlYzQ0NzBjLzAvOUJFMUYxQkE4MDkxNjMxQTQwOUJFOTM5QkRCMDcz MzI3NEY0QUFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClY5Xiu77boppHpKfgKb9nUR2lbU4b+l7w4 cXI5rxTAKjcdAcegPHu23vqkOZbfmmkgxTIkDynUjFFbpmskfgKsAWiECnAqqZHb TjJoMKk4J+0VnGPpRLUuOi3IArLuDWAk9JuQaCQSuDbqd+dVoxl8EIUKCxgqdjD7 Jgk1SgVuDbbjUGPSh5GoUH/4fADgQIG4BLuEu3r/UEQbAtKG3+9nkn/lAQE0jF1c zKFJhrfsHea4gAL4ukxKPeL1Yes6cp82X4wp8C4ztWt2yZxotNjZNOjr25rd+bjs rhcQ10ZhtunnarobBosdJdSy7SJDDRzgTg3k+Zge7SUYbklxOYw= -----END CERTIFICATE-----Generated at Thu Sep 24 10:06:23 2026 by rpki-client