$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft File: 9EDB723FFE084B9B87B5B0A108574335936817FB.mft (raw, json) Hash identifier: CKHLATy3e3iguTHIXNpNwo06D3wnT697mfFXjX2Hrk0= Subject key identifier: 3D:1C:76:B0:07:6E:61:82:3B:72:22:BE:5E:A6:DB:AE:0F:46:F4:5C Authority key identifier: 9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB Certificate issuer: /CN=9EDB723FFE084B9B87B5B0A108574335936817FB Certificate serial: 66CBCBD1236837EE736244F583A553C4055150B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft Manifest number: C8 Signing time: Tue 29 Sep 2026 17:16:12 +0000 Manifest this update: Tue 29 Sep 2026 17:11:12 +0000 Manifest next update: Wed 30 Sep 2026 20:05:12 +0000 Files and hashes: 1: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: i1PCAoIZ8GEBtvqZu9y6RsJ/+cUgKfG+tpL6n+2MQ0w=) 2: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: TKijjNdinkZx0yUPQ2piNtCq6wNxlLJwsDj7lMp8o1A=) 3: 9EDB723FFE084B9B87B5B0A108574335936817FB.crl (hash: iFrJ8FjVUiz3vKLKYwqLeRiWaIHC9YT91gf+UNdPwqQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 20:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:cb:cb:d1:23:68:37:ee:73:62:44:f5:83:a5:53:c4:05:51:50:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EDB723FFE084B9B87B5B0A108574335936817FB Validity Not Before: Sep 29 17:11:12 2026 GMT Not After : Sep 30 20:05:12 2026 GMT Subject: CN=3D1C76B0076E61823B7222BE5EA6DBAE0F46F45C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8a:e8:af:6d:c7:bb:b3:d2:c7:88:96:cc:f5: 2c:fd:d3:f0:a5:50:27:37:90:44:2d:c8:3b:d2:b0: 87:c7:0f:77:02:8d:2e:ec:1c:fa:8a:08:68:db:47: 61:ce:8c:2b:81:bf:35:3d:d1:17:b9:2d:45:28:cd: 5b:00:49:04:25:27:e3:3a:d2:4e:37:6c:19:3c:cd: e6:5f:a0:e4:f5:ef:f4:2a:9c:20:d0:f7:83:77:18: 08:12:55:65:44:5f:ba:89:cd:e7:be:44:01:f2:11: 74:3b:f4:9e:95:c2:b0:dc:23:00:19:e1:46:eb:fa: 83:0d:c0:ff:e1:f9:af:18:4b:59:73:1b:58:a0:23: bc:da:94:c7:6a:b8:ca:00:bd:83:be:f6:02:c7:0d: 41:39:40:9f:e8:9c:4c:67:02:8a:c1:b0:29:77:03: 03:dc:db:4b:bc:75:6e:54:d5:6c:e8:03:6a:1a:27: b0:e0:49:e3:1f:cb:2b:83:3f:ff:e7:e3:aa:5e:ff: 3e:52:a0:9a:be:14:3d:fe:09:6c:3a:ad:9c:67:4d: 48:53:de:8c:60:56:5b:bf:9b:df:5b:7c:19:71:a3: 99:e2:ad:c2:39:ff:f3:ad:d0:bb:6e:23:f1:4f:ab: 56:5b:ce:63:e1:a4:4b:0f:af:fa:af:76:10:21:e2: 89:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1C:76:B0:07:6E:61:82:3B:72:22:BE:5E:A6:DB:AE:0F:46:F4:5C X509v3 Authority Key Identifier: keyid:9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b2:13:82:f8:98:1e:e3:e6:8c:77:49:0d:4d:3e:17:18:df: 0b:d1:a0:a4:fa:9b:5b:19:4c:b4:9d:28:af:f6:74:50:ed:28: 56:58:c6:0a:1f:e1:0e:7b:3e:a7:d8:39:bb:68:e0:4a:bf:0b: 39:4b:27:96:31:4c:fc:77:43:6b:5f:5a:84:d6:5a:f1:98:f5: c4:3c:9d:27:c9:80:03:c1:e2:e7:db:7d:86:93:21:b4:03:f2: 3d:77:db:e7:66:7f:7b:df:83:06:cf:37:a2:a8:83:e4:3c:ed: b8:07:70:b1:5f:19:67:87:68:75:71:92:ef:d0:bc:51:a4:b0: dd:bb:4b:68:39:3e:04:cf:9a:af:a4:77:62:29:14:0c:69:2c: bb:65:2d:3f:08:d1:e7:05:ab:5c:f9:90:cf:1d:8e:3e:2c:e2: 1a:0d:31:3d:c3:9f:73:2e:2e:4d:17:a4:df:15:dc:dd:3a:61: 8f:87:21:c7:23:fd:93:91:ed:b6:79:52:73:f1:ee:3c:dc:04: e4:5e:9e:c6:46:05:a3:23:d5:37:b4:6e:b5:0b:45:bc:ec:70: 23:7c:f4:f1:4a:35:17:3d:be:4c:88:f4:7b:f1:7a:ed:d1:27: 67:bb:50:41:26:eb:44:64:24:70:f1:42:f7:49:47:99:e2:c7: 6c:c7:f0:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZsvL0SNoN+5zYkT1g6VTxAVRULMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVEQjcyM0ZGRTA4NEI5Qjg3QjVCMEExMDg1NzQzMzU5 MzY4MTdGQjAeFw0yNjA5MjkxNzExMTJaFw0yNjA5MzAyMDA1MTJaMDMxMTAvBgNV BAMTKDNEMUM3NkIwMDc2RTYxODIzQjcyMjJCRTVFQTZEQkFFMEY0NkY0NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiiuivbce7s9LHiJbM9Sz90/Cl UCc3kEQtyDvSsIfHD3cCjS7sHPqKCGjbR2HOjCuBvzU90Re5LUUozVsASQQlJ+M6 0k43bBk8zeZfoOT17/QqnCDQ94N3GAgSVWVEX7qJzee+RAHyEXQ79J6VwrDcIwAZ 4Ubr+oMNwP/h+a8YS1lzG1igI7zalMdquMoAvYO+9gLHDUE5QJ/onExnAorBsCl3 AwPc20u8dW5U1WzoA2oaJ7DgSeMfyyuDP//n46pe/z5SoJq+FD3+CWw6rZxnTUhT 3oxgVlu/m99bfBlxo5nircI5//Ot0LtuI/FPq1ZbzmPhpEsPr/qvdhAh4ol7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPRx2sAduYYI7ciK+Xqbbrg9G9FwwHwYDVR0j BBgwFoAUnttyP/4IS5uHtbChCFdDNZNoF/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTBiYTk3ZWYtN2JjOC00NWI4LTgyYWItZjg1NTMzY2FlZGY0LzAvOUVEQjcyM0ZG RTA4NEI5Qjg3QjVCMEExMDg1NzQzMzU5MzY4MTdGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RURCNzIzRkZFMDg0QjlCODdCNUIwQTEwODU3NDMzNTkzNjgx N0ZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTBiYTk3ZWYtN2JjOC00NWI4LTgy YWItZjg1NTMzY2FlZGY0LzAvOUVEQjcyM0ZGRTA4NEI5Qjg3QjVCMEExMDg1NzQz MzU5MzY4MTdGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6yE4L4mB7j5ox3SQ1NPhcY3wvRoKT6m1sZ TLSdKK/2dFDtKFZYxgof4Q57PqfYObto4Eq/CzlLJ5YxTPx3Q2tfWoTWWvGY9cQ8 nSfJgAPB4ufbfYaTIbQD8j132+dmf3vfgwbPN6Kog+Q87bgHcLFfGWeHaHVxku/Q vFGksN27S2g5PgTPmq+kd2IpFAxpLLtlLT8I0ecFq1z5kM8djj4s4hoNMT3Dn3Mu Lk0XpN8V3N06YY+HIccj/ZOR7bZ5UnPx7jzcBORensZGBaMj1Te0brULRbzscCN8 9PFKNRc9vkyI9Hvxeu3RJ2e7UEEm60RkJHDxQvdJR5nix2zH8D4= -----END CERTIFICATE-----Generated at Wed Sep 30 14:28:21 2026 by rpki-client