$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft File: 9EDB723FFE084B9B87B5B0A108574335936817FB.mft (raw, json) Hash identifier: JZgqPzR6MG9LksEUwflUPgVpVgYCmNV3ttPGS5plNQY= Subject key identifier: 88:DC:20:80:D9:EF:C3:3A:DD:39:D7:B1:33:90:A7:A5:AA:CF:7F:C9 Authority key identifier: 9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB Certificate issuer: /CN=9EDB723FFE084B9B87B5B0A108574335936817FB Certificate serial: 0D1F0AC9445E7CDCA17744540321B09A09182E6E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 13:57:08 +0000 Manifest this update: Sat 26 Sep 2026 13:52:08 +0000 Manifest next update: Sun 27 Sep 2026 16:32:08 +0000 Files and hashes: 1: 9EDB723FFE084B9B87B5B0A108574335936817FB.crl (hash: +154d/sEnQ5/0cOd74cZ5pN2PbnZPnSfUbLHMsjWY18=) 2: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: i1PCAoIZ8GEBtvqZu9y6RsJ/+cUgKfG+tpL6n+2MQ0w=) 3: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: TKijjNdinkZx0yUPQ2piNtCq6wNxlLJwsDj7lMp8o1A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:1f:0a:c9:44:5e:7c:dc:a1:77:44:54:03:21:b0:9a:09:18:2e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EDB723FFE084B9B87B5B0A108574335936817FB Validity Not Before: Sep 26 13:52:08 2026 GMT Not After : Sep 27 16:32:08 2026 GMT Subject: CN=88DC2080D9EFC33ADD39D7B13390A7A5AACF7FC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:6e:30:da:cb:6e:8b:9f:63:79:55:8a:89: f9:66:8c:cf:cd:a0:af:eb:93:18:ad:da:6a:df:29: 87:c1:6c:d1:02:d3:f9:9f:b9:0c:06:24:fe:c8:2f: ef:56:d8:08:e8:fd:31:5c:43:68:6c:d3:fa:41:ba: 48:f9:60:a4:44:21:1e:05:e1:4f:91:1a:12:fe:50: a9:5f:d7:b5:26:9b:29:ba:72:bc:ed:87:e5:ac:80: ed:cd:2f:a0:6e:55:7f:01:dc:a0:3d:e1:ca:c1:0e: 3f:04:d4:d7:7d:2a:87:bb:71:63:93:08:98:7f:1c: ad:f7:cf:10:b2:d0:1d:a6:01:eb:b3:be:92:ab:cf: f0:fd:b7:97:30:80:ea:3c:63:0f:bb:3b:2a:92:dd: 49:04:2b:9a:5c:d9:66:cd:1b:52:0e:69:70:8b:f8: 40:d9:d5:78:2b:85:fa:4d:d5:be:74:c1:4a:57:81: 17:22:b2:f4:01:d4:d4:fb:29:0a:03:5e:aa:04:02: b3:a6:78:e2:14:3f:c3:37:70:a2:5c:e1:e8:4b:cf: 8d:dc:f2:09:47:a8:af:b3:04:5c:b7:ae:75:f1:35: 94:fa:a8:ea:ac:c5:48:e1:9c:d6:dd:6d:ba:e0:50: 50:9b:2c:64:e5:18:b0:24:5e:f1:01:a6:eb:5e:6d: 28:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DC:20:80:D9:EF:C3:3A:DD:39:D7:B1:33:90:A7:A5:AA:CF:7F:C9 X509v3 Authority Key Identifier: keyid:9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:81:ba:9d:8d:ef:93:a7:58:aa:4e:14:5e:eb:ab:f5:78:e2: 13:9c:46:dc:30:fc:6e:07:8b:05:80:3a:6d:ea:c7:b0:ef:5f: bb:f1:bc:c1:e0:7f:de:a6:7a:bc:79:bb:d5:3a:0c:47:f5:a8: 6f:b9:4e:7a:a2:bd:e2:10:0f:8e:ff:cf:74:38:bc:d6:8a:90: 57:a9:87:b5:5f:07:d2:c8:19:4f:e5:56:ef:c9:9f:5a:5e:33: 05:86:20:fe:3e:eb:45:ca:63:57:56:37:17:13:6c:96:29:b4: 01:e9:a6:84:e1:95:53:6e:78:80:bb:04:3f:3d:38:a4:ec:97: 76:1a:fc:ea:05:d8:73:a6:ee:ee:1d:24:88:46:d4:9b:2b:24: 60:c3:33:a1:58:66:37:56:81:e6:2d:8f:4e:2f:d5:12:6b:62: 67:5c:19:1d:57:08:e6:5e:d6:78:c7:91:5c:60:1d:e8:6e:81: a3:32:8c:d9:96:1c:72:3a:5d:8e:7c:1b:0d:2a:4e:e3:fd:6d: 52:59:fc:61:a1:77:ee:44:be:c6:ed:0e:c7:12:01:9a:46:67: a1:d8:3f:b4:b2:01:c5:a0:44:cb:69:bb:ba:56:42:f0:e7:97: b7:4a:aa:77:2b:93:17:26:a6:6c:9e:1f:17:03:88:18:32:6c: c5:8b:1b:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDR8KyURefNyhd0RUAyGwmgkYLm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVEQjcyM0ZGRTA4NEI5Qjg3QjVCMEExMDg1NzQzMzU5 MzY4MTdGQjAeFw0yNjA5MjYxMzUyMDhaFw0yNjA5MjcxNjMyMDhaMDMxMTAvBgNV BAMTKDg4REMyMDgwRDlFRkMzM0FERDM5RDdCMTMzOTBBN0E1QUFDRjdGQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQm4w2stui59jeVWKiflmjM/N oK/rkxit2mrfKYfBbNEC0/mfuQwGJP7IL+9W2Ajo/TFcQ2hs0/pBukj5YKREIR4F 4U+RGhL+UKlf17Ummym6crzth+WsgO3NL6BuVX8B3KA94crBDj8E1Nd9Koe7cWOT CJh/HK33zxCy0B2mAeuzvpKrz/D9t5cwgOo8Yw+7OyqS3UkEK5pc2WbNG1IOaXCL +EDZ1XgrhfpN1b50wUpXgRcisvQB1NT7KQoDXqoEArOmeOIUP8M3cKJc4ehLz43c 8glHqK+zBFy3rnXxNZT6qOqsxUjhnNbdbbrgUFCbLGTlGLAkXvEBputebSjbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiNwggNnvwzrdOdexM5CnparPf8kwHwYDVR0j BBgwFoAUnttyP/4IS5uHtbChCFdDNZNoF/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTBiYTk3ZWYtN2JjOC00NWI4LTgyYWItZjg1NTMzY2FlZGY0LzAvOUVEQjcyM0ZG RTA4NEI5Qjg3QjVCMEExMDg1NzQzMzU5MzY4MTdGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RURCNzIzRkZFMDg0QjlCODdCNUIwQTEwODU3NDMzNTkzNjgx N0ZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTBiYTk3ZWYtN2JjOC00NWI4LTgy YWItZjg1NTMzY2FlZGY0LzAvOUVEQjcyM0ZGRTA4NEI5Qjg3QjVCMEExMDg1NzQz MzU5MzY4MTdGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+Bup2N75OnWKpOFF7rq/V44hOcRtww/G4H iwWAOm3qx7DvX7vxvMHgf96merx5u9U6DEf1qG+5TnqiveIQD47/z3Q4vNaKkFep h7VfB9LIGU/lVu/Jn1peMwWGIP4+60XKY1dWNxcTbJYptAHppoThlVNueIC7BD89 OKTsl3Ya/OoF2HOm7u4dJIhG1JsrJGDDM6FYZjdWgeYtj04v1RJrYmdcGR1XCOZe 1njHkVxgHehugaMyjNmWHHI6XY58Gw0qTuP9bVJZ/GGhd+5EvsbtDscSAZpGZ6HY P7SyAcWgRMtpu7pWQvDnl7dKqncrkxcmpmyeHxcDiBgybMWLG0Y= -----END CERTIFICATE-----Generated at Sat Sep 26 18:26:38 2026 by rpki-client