$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft File: D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft (raw, json) Hash identifier: ZpH7oODZ6huAsTL+DQzq6o8Mj8xvGEYRcPdeeqmEd90= Subject key identifier: FD:78:02:83:3C:4D:18:7D:AD:60:28:72:B7:38:5C:1C:79:EF:B4:D8 Authority key identifier: D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6 Certificate issuer: /CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6 Certificate serial: 03D703E1A2A07E99DCC7CAB82537F40B85A63613 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 06:08:37 +0000 Manifest this update: Wed 23 Sep 2026 06:03:37 +0000 Manifest next update: Thu 24 Sep 2026 08:52:37 +0000 Files and hashes: 1: 3136302e32322e3133372e302f32342d3234203d3e20313532383131.roa (hash: UJBNMpcsHaasyvcJ4Sq3J89ZHMIFKcGiQvcCBcd8DHY=) 2: 3136302e32322e3133362e302f32342d3234203d3e20313532383131.roa (hash: mzkKba2j66n6wraFNQYRS+UC4ztp7C2s0dllCrbur4g=) 3: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: e4bsRLScbecV3EUW42ypNee+dC4atMUS4ULfB5R1TMs=) 4: D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl (hash: QX/CcCkW3yLuo4/cRaaCbzgpeYTsivXn4Ogj+EH6RDY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d7:03:e1:a2:a0:7e:99:dc:c7:ca:b8:25:37:f4:0b:85:a6:36:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6 Validity Not Before: Sep 23 06:03:37 2026 GMT Not After : Sep 24 08:52:37 2026 GMT Subject: CN=FD7802833C4D187DAD602872B7385C1C79EFB4D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0a:45:da:e5:fe:b3:7d:31:48:5a:eb:cf:cd: 6e:2a:e0:3a:a0:d1:49:c8:24:ce:e2:4f:ad:4b:e4: 51:a3:64:34:32:c4:93:36:a9:e7:42:fe:36:fd:9f: 79:72:f9:a2:a7:e9:e8:98:d2:9d:8f:1d:2c:19:4c: 1b:8c:c1:01:1d:65:5b:f6:b9:47:ec:31:3d:2f:9c: 63:db:61:5b:5d:7c:3d:e8:cd:3a:e7:a4:3b:27:c5: dd:55:67:fb:89:8f:3a:b0:a9:eb:06:70:9d:4a:31: 37:40:2e:bd:9b:f1:3e:a1:11:0b:f0:4c:cc:08:0f: 19:4b:44:85:d7:78:e3:14:1c:0c:d3:11:70:2e:49: 63:08:f1:0e:03:38:df:7f:b3:bb:eb:86:70:dd:e6: 58:1a:4a:2b:3b:e2:80:a9:64:46:83:d6:56:76:db: e5:16:cd:74:a2:dd:7b:e9:e4:9c:8a:aa:e0:ab:56: a7:df:04:4e:e6:5f:88:f4:46:88:c3:4c:3a:0d:4e: 7d:15:17:49:79:53:be:3b:3d:7f:b0:f5:38:ae:93: 33:3b:f6:99:78:73:d7:21:e1:8b:7f:02:56:17:fe: 7e:f8:c3:fe:48:e1:3b:38:5c:e9:0d:e3:f6:52:b8: 70:fd:42:73:a3:f8:6d:6c:f5:36:63:ab:cb:a1:53: 45:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:78:02:83:3C:4D:18:7D:AD:60:28:72:B7:38:5C:1C:79:EF:B4:D8 X509v3 Authority Key Identifier: keyid:D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:2f:43:9b:9e:5e:d5:7a:7b:0c:d8:b5:0c:f9:4b:54:66:1a: bd:5b:95:1c:ed:f5:26:f4:fd:82:b1:59:d0:13:60:77:bc:6c: c7:f4:3e:8f:87:c6:05:a2:cc:8d:65:9e:6d:c7:43:03:9b:0d: 2b:32:3d:ea:ca:27:b3:4b:10:30:d4:1a:53:23:17:16:43:bb: 57:8e:ea:38:1d:6a:c9:a3:64:8c:80:3b:4e:be:d1:68:40:25: 46:dc:56:54:c1:f7:50:7a:f7:f1:82:22:eb:0e:07:fb:61:56: e7:19:24:26:c9:7a:b0:7a:a5:bd:0d:c4:72:9f:30:4d:b8:4c: 4f:7a:03:ca:7f:c7:2d:82:4c:26:1a:e9:54:13:69:7a:ad:39: 8b:53:67:68:28:15:1b:0b:ac:1f:5c:ba:16:57:17:e5:e6:3d: 8b:b1:57:78:41:7b:d6:7a:5d:21:11:78:f8:0f:18:6c:75:d9: 62:71:b5:20:47:18:a7:e2:b9:0a:ee:01:ba:c8:c2:68:0a:b5: 26:c8:5c:30:1c:af:68:87:f3:60:f9:45:fd:6d:77:94:e1:a2: 7d:0b:0d:da:8b:c0:c8:eb:14:26:be:d9:87:f2:a7:b1:30:e0: 00:11:60:b8:a4:e6:65:39:86:00:86:bd:b4:67:9c:66:6d:ce: 92:33:e3:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA9cD4aKgfpncx8q4JTf0C4WmNhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDNEI2QkU4NEM5MEJDNDA2QUI2NzFFNUY3NUE4Qzg2 NTYyOTRGNjAeFw0yNjA5MjMwNjAzMzdaFw0yNjA5MjQwODUyMzdaMDMxMTAvBgNV BAMTKEZENzgwMjgzM0M0RDE4N0RBRDYwMjg3MkI3Mzg1QzFDNzlFRkI0RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBCkXa5f6zfTFIWuvPzW4q4Dqg 0UnIJM7iT61L5FGjZDQyxJM2qedC/jb9n3ly+aKn6eiY0p2PHSwZTBuMwQEdZVv2 uUfsMT0vnGPbYVtdfD3ozTrnpDsnxd1VZ/uJjzqwqesGcJ1KMTdALr2b8T6hEQvw TMwIDxlLRIXXeOMUHAzTEXAuSWMI8Q4DON9/s7vrhnDd5lgaSis74oCpZEaD1lZ2 2+UWzXSi3Xvp5JyKquCrVqffBE7mX4j0RojDTDoNTn0VF0l5U747PX+w9TiukzM7 9pl4c9ch4Yt/AlYX/n74w/5I4Ts4XOkN4/ZSuHD9QnOj+G1s9TZjq8uhU0V5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/XgCgzxNGH2tYChytzhcHHnvtNgwHwYDVR0j BBgwFoAU2cS2voTJC8QGq2ceX3WoyGVilPYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE5NWI0YjQtYmM4YS00Y2U1LWI1NTAtOWFhN2IzNmVlMWZhLzAvRDlDNEI2QkU4 NEM5MEJDNDA2QUI2NzFFNUY3NUE4Qzg2NTYyOTRGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EOUM0QjZCRTg0QzkwQkM0MDZBQjY3MUU1Rjc1QThDODY1NjI5 NEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvRDlDNEI2QkU4NEM5MEJDNDA2QUI2NzFFNUY3NUE4 Qzg2NTYyOTRGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsvQ5ueXtV6ewzYtQz5S1RmGr1blRzt9Sb0 /YKxWdATYHe8bMf0Po+HxgWizI1lnm3HQwObDSsyPerKJ7NLEDDUGlMjFxZDu1eO 6jgdasmjZIyAO06+0WhAJUbcVlTB91B69/GCIusOB/thVucZJCbJerB6pb0NxHKf ME24TE96A8p/xy2CTCYa6VQTaXqtOYtTZ2goFRsLrB9cuhZXF+XmPYuxV3hBe9Z6 XSERePgPGGx12WJxtSBHGKfiuQruAbrIwmgKtSbIXDAcr2iH82D5Rf1td5Thon0L DdqLwMjrFCa+2Yfyp7Ew4AARYLik5mU5hgCGvbRnnGZtzpIz47c= -----END CERTIFICATE-----Generated at Wed Sep 23 19:41:15 2026 by rpki-client