$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft File: 9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft (raw, json) Hash identifier: JsEPN3G2XZ3ASpuLqDiEdjs50X2sziJqXvw8GW5K5q4= Subject key identifier: 48:48:E2:6A:75:F4:9F:A1:A2:DD:08:AB:46:30:DB:A0:3C:3D:AA:C9 Authority key identifier: 9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6 Certificate issuer: /CN=9CD069361DE1E2B7F987CB377D2065CD073D2BD6 Certificate serial: 5355368FDC50FD7B79A40C504B55E981AB728698 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 16:26:06 +0000 Manifest this update: Thu 24 Sep 2026 16:21:06 +0000 Manifest next update: Fri 25 Sep 2026 18:10:06 +0000 Files and hashes: 1: 3130332e3137342e37392e302f32342d3234203d3e20313331363939.roa (hash: 0YvIC8wCtWvDa2HWmo5ajWyQO0v7nGfkKloFn4oUr5Y=) 2: 3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa (hash: TbeMR6DCS8oQZoWLlauGHIZkAoCLHj7Jp79qNO5aAvk=) 3: 9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl (hash: Uet+mQujK3Ep2uVO8KDCCU+NZPQIvZ8I8ETlJJRJOOE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 18:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:55:36:8f:dc:50:fd:7b:79:a4:0c:50:4b:55:e9:81:ab:72:86:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CD069361DE1E2B7F987CB377D2065CD073D2BD6 Validity Not Before: Sep 24 16:21:06 2026 GMT Not After : Sep 25 18:10:06 2026 GMT Subject: CN=4848E26A75F49FA1A2DD08AB4630DBA03C3DAAC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0b:db:bc:e0:8d:d4:54:ae:61:77:b2:b1:d3: 44:a3:76:bb:fd:90:6b:04:6a:05:4f:28:1e:55:ce: a4:5e:57:fe:b9:1c:58:26:e7:f5:8f:25:d3:83:fa: 62:72:6d:31:e9:a3:ee:b4:d0:70:1f:0a:83:6f:fe: 8c:d8:e4:63:12:b4:9b:2f:4b:64:3f:83:4a:37:70: 28:07:be:f8:2d:64:ca:6d:76:1e:47:3f:13:f0:91: a9:db:f6:01:1d:2d:87:c6:b3:66:98:97:da:2c:ba: e2:e5:fc:ba:14:8e:68:e4:1c:8e:dc:a4:a9:36:19: ea:29:02:d4:fe:96:03:1e:2f:c2:d2:cd:e9:ef:0c: cc:9d:ac:bf:5b:67:cb:89:46:5e:ae:cc:83:e9:67: f9:c6:c5:23:08:90:fa:f6:57:15:ef:51:e5:59:7f: 58:15:e9:57:39:e9:95:88:f5:4f:23:9a:81:3f:d3: c6:49:1d:c6:18:b8:1d:01:53:f4:c0:fe:09:d7:a9: c4:70:51:c1:54:c7:3e:0b:a8:77:d7:20:c1:98:7d: db:9c:17:c7:9c:07:cb:fe:c7:cb:fa:55:74:23:71: d7:05:36:2b:57:06:c4:12:46:0a:6a:7d:0b:a0:5d: cd:38:78:07:26:ca:6b:4f:0f:97:e6:8e:3a:4e:54: 40:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:48:E2:6A:75:F4:9F:A1:A2:DD:08:AB:46:30:DB:A0:3C:3D:AA:C9 X509v3 Authority Key Identifier: keyid:9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e2:24:52:aa:ea:31:3a:e7:5f:f3:24:5c:42:8f:ce:d0:ce: de:de:14:bf:5b:e7:db:43:33:3a:0a:21:9e:0e:38:04:80:36: 1d:79:ad:b5:91:f2:a0:1d:bb:3c:95:cc:ac:1a:6e:f3:0a:f3: 19:34:ae:38:99:29:e3:ed:7f:ed:66:f7:3d:44:ee:07:62:c8: 9a:e3:3b:76:46:06:39:47:8e:a6:69:8a:1e:18:f1:c6:2c:c2: 3a:bf:a5:fd:d0:b6:46:82:f4:13:3e:85:8b:c7:b3:07:79:7b: 76:73:5e:53:8e:8e:66:cd:ab:64:93:bd:52:f3:a3:29:54:e8: 6b:53:76:32:56:c4:5f:0d:98:4a:37:76:16:65:2d:7a:08:6d: 2d:78:4a:33:17:81:75:0e:fe:d7:0b:a4:44:f7:c8:3b:18:0f: f2:09:67:6e:2f:46:23:93:a2:5d:27:62:a7:e4:dd:39:59:f9: cf:37:f3:0f:ed:8a:0e:ed:65:ac:69:c8:38:ac:30:22:90:da: 2b:7a:ed:f8:05:24:3d:22:56:2f:83:04:db:89:9b:86:41:79: 0a:fe:90:77:97:3f:64:79:bd:4a:ab:4b:ad:c1:82:85:28:e6: 13:fd:70:9c:bc:18:16:0e:6c:df:01:21:9d:7a:98:a8:f6:a3: 9f:27:ba:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU1U2j9xQ/Xt5pAxQS1XpgatyhpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNEMDY5MzYxREUxRTJCN0Y5ODdDQjM3N0QyMDY1Q0Qw NzNEMkJENjAeFw0yNjA5MjQxNjIxMDZaFw0yNjA5MjUxODEwMDZaMDMxMTAvBgNV BAMTKDQ4NDhFMjZBNzVGNDlGQTFBMkREMDhBQjQ2MzBEQkEwM0MzREFBQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3C9u84I3UVK5hd7Kx00Sjdrv9 kGsEagVPKB5VzqReV/65HFgm5/WPJdOD+mJybTHpo+600HAfCoNv/ozY5GMStJsv S2Q/g0o3cCgHvvgtZMptdh5HPxPwkanb9gEdLYfGs2aYl9osuuLl/LoUjmjkHI7c pKk2GeopAtT+lgMeL8LSzenvDMydrL9bZ8uJRl6uzIPpZ/nGxSMIkPr2VxXvUeVZ f1gV6Vc56ZWI9U8jmoE/08ZJHcYYuB0BU/TA/gnXqcRwUcFUxz4LqHfXIMGYfduc F8ecB8v+x8v6VXQjcdcFNitXBsQSRgpqfQugXc04eAcmymtPD5fmjjpOVECVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSEjianX0n6Gi3QirRjDboDw9qskwHwYDVR0j BBgwFoAUnNBpNh3h4rf5h8s3fSBlzQc9K9YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJjNmRhMTktODRiZS00YTUwLWI0NjYtMWU4NmRkYmNjMzVmLzAvOUNEMDY5MzYx REUxRTJCN0Y5ODdDQjM3N0QyMDY1Q0QwNzNEMkJENi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85Q0QwNjkzNjFERTFFMkI3Rjk4N0NCMzc3RDIwNjVDRDA3M0Qy QkQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJjNmRhMTktODRiZS00YTUwLWI0 NjYtMWU4NmRkYmNjMzVmLzAvOUNEMDY5MzYxREUxRTJCN0Y5ODdDQjM3N0QyMDY1 Q0QwNzNEMkJENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfiJFKq6jE651/zJFxCj87Qzt7eFL9b59tD MzoKIZ4OOASANh15rbWR8qAduzyVzKwabvMK8xk0rjiZKePtf+1m9z1E7gdiyJrj O3ZGBjlHjqZpih4Y8cYswjq/pf3QtkaC9BM+hYvHswd5e3ZzXlOOjmbNq2STvVLz oylU6GtTdjJWxF8NmEo3dhZlLXoIbS14SjMXgXUO/tcLpET3yDsYD/IJZ24vRiOT ol0nYqfk3TlZ+c838w/tig7tZaxpyDisMCKQ2it67fgFJD0iVi+DBNuJm4ZBeQr+ kHeXP2R5vUqrS63BgoUo5hP9cJy8GBYObN8BIZ16mKj2o58nutk= -----END CERTIFICATE-----Generated at Fri Sep 25 07:07:11 2026 by rpki-client