$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft File: 9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft (raw, json) Hash identifier: /GSbGq1vhOvK6l4VCEr93SwCCAxoYtx93pavho6QeVI= Subject key identifier: D4:A3:00:B5:95:E0:CA:0B:6C:C3:D0:EF:1F:46:8C:43:B0:66:56:A8 Authority key identifier: 9B:F4:E3:BF:C9:0E:2E:55:6F:B0:33:A6:F6:1D:F5:52:E1:31:51:4B Certificate issuer: /CN=9BF4E3BFC90E2E556FB033A6F61DF552E131514B Certificate serial: 2DE498AC6B1A4BB58F1DE982F69D5BD16DD3F27D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 08:01:17 +0000 Manifest this update: Wed 23 Sep 2026 07:56:17 +0000 Manifest next update: Thu 24 Sep 2026 09:38:17 +0000 Files and hashes: 1: 3130332e3132312e3130322e302f32332d3234203d3e20313335343738.roa (hash: HYL8rmsnXXXs/BoqrngiGYdSN3TKjR8GgZKUfGOUHuE=) 2: 3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa (hash: c0+q/NVTLzO/hS8+W37na92ADaS9y92HcCmUqDS60d0=) 3: 9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl (hash: jZ8REc3ZkKgkAYcmEQKV8FA0XHGXW3qRSoX6nfVlEtg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 09:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e4:98:ac:6b:1a:4b:b5:8f:1d:e9:82:f6:9d:5b:d1:6d:d3:f2:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF4E3BFC90E2E556FB033A6F61DF552E131514B Validity Not Before: Sep 23 07:56:17 2026 GMT Not After : Sep 24 09:38:17 2026 GMT Subject: CN=D4A300B595E0CA0B6CC3D0EF1F468C43B06656A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f6:02:d0:83:15:97:ab:34:bc:95:d3:4c:64: b8:cf:c1:4b:b8:ad:ab:1b:3d:9e:4d:76:29:31:0a: f1:09:ea:14:32:0d:95:ba:41:78:5e:b6:12:9a:3c: af:c8:97:08:50:13:d9:65:ac:04:2c:3f:27:77:98: b4:85:67:7e:a4:a9:df:e9:3b:77:6b:5a:96:27:80: 4c:be:fe:a8:38:cd:e2:22:38:d8:3b:66:2c:e2:68: 55:99:f9:b9:eb:60:f4:2b:c6:4f:e5:8f:33:e6:18: 30:b8:6d:13:ec:b5:c1:1e:96:b4:f0:b2:c2:0b:70: e1:e5:86:3e:32:26:14:08:74:13:8f:38:16:0e:2f: 1c:36:89:27:76:91:10:14:22:3b:f0:d3:57:0e:a8: 0d:ae:3f:99:2d:dc:14:2e:75:ee:8a:8d:8c:4d:46: c8:c0:28:72:5a:87:c0:ff:07:a5:10:f7:67:b5:34: c0:17:70:49:7d:0c:f4:25:21:ec:6d:30:ce:b8:1b: c8:80:57:39:42:96:b8:70:1b:c0:db:24:a2:98:ef: d1:ad:16:02:9c:a0:92:0d:ac:b1:ce:ea:ad:95:84: a1:11:52:d7:d1:2d:dc:e0:d8:54:67:b0:70:26:26: 3e:d3:72:8e:11:5e:da:fb:eb:d5:cc:9c:dc:76:39: 8c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A3:00:B5:95:E0:CA:0B:6C:C3:D0:EF:1F:46:8C:43:B0:66:56:A8 X509v3 Authority Key Identifier: keyid:9B:F4:E3:BF:C9:0E:2E:55:6F:B0:33:A6:F6:1D:F5:52:E1:31:51:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:aa:b0:83:2c:0a:03:18:f0:9d:37:4a:5e:8f:83:ae:bf:cb: bd:dd:e6:73:35:4e:34:24:23:8c:c8:a1:d3:69:fd:26:19:13: b9:fd:ae:70:3f:62:d8:84:e2:d9:61:c0:bb:58:f1:bc:46:52: 25:84:e1:19:36:d5:d6:30:4b:d1:0e:bd:8f:ae:e6:11:a0:55: 53:7b:c6:85:a0:97:e8:d2:27:64:34:07:6a:b0:d1:de:ff:d6: 55:6d:99:99:b9:31:40:04:28:ef:aa:50:3c:a6:9c:61:40:a4: 54:24:fe:24:2c:f2:2d:78:47:94:4b:93:0e:c8:7a:67:b0:47: 63:7c:9f:b7:66:27:f0:49:50:e1:fa:89:ed:65:13:12:8f:51: 88:24:f5:8d:fc:08:43:ba:32:0b:91:79:b0:36:c1:c0:75:b5: 45:c7:05:de:d3:a1:1a:23:6e:08:6c:be:38:81:5d:94:0f:06: 94:41:8d:c1:cc:30:e9:44:3a:86:0b:36:b3:2e:f5:5f:0e:93: ba:aa:32:c0:91:f8:6f:13:11:3e:69:d0:20:54:04:6d:b1:0e: a6:d8:d9:14:82:9f:1e:fc:c9:0a:bb:d2:da:61:b6:c3:dd:eb: b1:52:37:0f:4c:5b:0e:6c:2a:7c:d7:1f:04:29:ce:d7:7c:0c: d1:dd:39:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULeSYrGsaS7WPHemC9p1b0W3T8n0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGNEUzQkZDOTBFMkU1NTZGQjAzM0E2RjYxREY1NTJF MTMxNTE0QjAeFw0yNjA5MjMwNzU2MTdaFw0yNjA5MjQwOTM4MTdaMDMxMTAvBgNV BAMTKEQ0QTMwMEI1OTVFMENBMEI2Q0MzRDBFRjFGNDY4QzQzQjA2NjU2QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC09gLQgxWXqzS8ldNMZLjPwUu4 rasbPZ5NdikxCvEJ6hQyDZW6QXhethKaPK/IlwhQE9llrAQsPyd3mLSFZ36kqd/p O3drWpYngEy+/qg4zeIiONg7ZiziaFWZ+bnrYPQrxk/ljzPmGDC4bRPstcEelrTw ssILcOHlhj4yJhQIdBOPOBYOLxw2iSd2kRAUIjvw01cOqA2uP5kt3BQude6KjYxN RsjAKHJah8D/B6UQ92e1NMAXcEl9DPQlIextMM64G8iAVzlClrhwG8DbJKKY79Gt FgKcoJINrLHO6q2VhKERUtfRLdzg2FRnsHAmJj7Tco4RXtr769XMnNx2OYwZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1KMAtZXgygtsw9DvH0aMQ7BmVqgwHwYDVR0j BBgwFoAUm/Tjv8kOLlVvsDOm9h31UuExUUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTExMzI0OTctNTk2My00N2FhLTlkZTEtNmM4NDk2YTM2ZWI2LzAvOUJGNEUzQkZD OTBFMkU1NTZGQjAzM0E2RjYxREY1NTJFMTMxNTE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkY0RTNCRkM5MEUyRTU1NkZCMDMzQTZGNjFERjU1MkUxMzE1 MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTExMzI0OTctNTk2My00N2FhLTlk ZTEtNmM4NDk2YTM2ZWI2LzAvOUJGNEUzQkZDOTBFMkU1NTZGQjAzM0E2RjYxREY1 NTJFMTMxNTE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2qsIMsCgMY8J03Sl6Pg66/y73d5nM1TjQk I4zIodNp/SYZE7n9rnA/YtiE4tlhwLtY8bxGUiWE4Rk21dYwS9EOvY+u5hGgVVN7 xoWgl+jSJ2Q0B2qw0d7/1lVtmZm5MUAEKO+qUDymnGFApFQk/iQs8i14R5RLkw7I emewR2N8n7dmJ/BJUOH6ie1lExKPUYgk9Y38CEO6MguRebA2wcB1tUXHBd7ToRoj bghsvjiBXZQPBpRBjcHMMOlEOoYLNrMu9V8Ok7qqMsCR+G8TET5p0CBUBG2xDqbY 2RSCnx78yQq70tphtsPd67FSNw9MWw5sKnzXHwQpztd8DNHdOec= -----END CERTIFICATE-----Generated at Thu Sep 24 00:07:25 2026 by rpki-client