$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft File: 9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft (raw, json) Hash identifier: hFnQv2XHT2lkVHGgKE1+M85Luk6fYQ5RwmIOcBEq7fg= Subject key identifier: 4D:35:78:10:0B:69:07:87:FA:B0:29:25:BD:47:34:70:3C:58:11:3D Authority key identifier: 9D:68:AC:E3:A8:F4:CD:6B:9B:D7:AB:C6:95:E6:A2:16:24:B1:C5:6C Certificate issuer: /CN=9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C Certificate serial: 2A956E7288B0428F143FBA9CDAE04798BA2A1CDB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 14:12:51 +0000 Manifest this update: Fri 25 Sep 2026 14:07:51 +0000 Manifest next update: Sat 26 Sep 2026 17:15:51 +0000 Files and hashes: 1: 9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.crl (hash: SY+WRBeiFB6L8eP7xSnfnIXR4YlkH7/Uvo9MDKwO9KA=) 2: 3130332e3136302e3133362e302f32342d3234203d3e20313431353838.roa (hash: xiHN/v3vXzzSYuBqvcK2Zxp9gL/Vai3nTROredoBVU8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.crl rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:95:6e:72:88:b0:42:8f:14:3f:ba:9c:da:e0:47:98:ba:2a:1c:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C Validity Not Before: Sep 25 14:07:51 2026 GMT Not After : Sep 26 17:15:51 2026 GMT Subject: CN=4D3578100B690787FAB02925BD4734703C58113D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5c:36:d8:82:9e:33:76:7c:b4:77:a3:20:f0: db:68:45:b1:9a:bd:68:2e:77:a2:6f:b2:0f:bc:a4: 29:0a:ac:e6:ca:f1:9f:10:0c:b7:28:1b:ba:67:bf: 74:f4:42:8b:a4:d1:d4:ee:21:f2:0f:74:0c:57:27: 67:89:6f:0e:6c:80:9e:a9:35:aa:f6:b6:11:06:01: 2c:56:30:17:94:46:01:ff:71:c5:af:6d:02:51:85: bd:4d:53:00:31:6e:57:29:d2:fc:92:3b:00:a7:b5: 2f:67:7b:40:ec:a3:41:d4:31:9d:5e:9a:05:7e:33: 54:dc:78:9e:bc:01:39:2d:84:a3:40:e3:db:68:16: f3:f6:93:1a:f8:f2:f1:46:86:31:ab:aa:b3:7b:c7: 40:6c:92:7e:82:aa:40:15:14:b0:1e:5c:8f:e7:69: 3c:d0:59:13:db:e0:b0:6d:30:cc:2e:a3:bc:60:5a: 31:7f:92:84:f7:9e:87:b9:d7:8b:6a:aa:ae:cb:d0: 8d:61:10:f8:0d:bb:3f:89:17:e6:21:dd:a0:b2:8a: 98:7a:1d:32:41:2c:1c:be:27:9b:70:31:39:5e:e2: 93:25:89:7e:68:79:a7:f0:33:a6:56:95:34:e3:a2: 53:ee:a7:02:f8:14:94:80:c7:2f:04:a5:e9:d3:d6: 07:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:35:78:10:0B:69:07:87:FA:B0:29:25:BD:47:34:70:3C:58:11:3D X509v3 Authority Key Identifier: keyid:9D:68:AC:E3:A8:F4:CD:6B:9B:D7:AB:C6:95:E6:A2:16:24:B1:C5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d0:79:9d:0a:a4:bf:5f:2e:83:00:0c:4e:79:57:57:6a:11: f5:df:70:96:1d:eb:24:5a:a4:0c:a9:9e:0f:05:0c:e7:a3:f4: e5:c3:1a:c3:ed:12:0f:da:5f:b0:a4:51:21:be:62:bf:5a:c0: 73:a2:d5:4f:55:f3:1f:d1:f7:76:15:ad:59:79:d7:14:6c:5e: a5:f2:35:4c:77:dc:6f:ad:2a:3f:bd:02:a0:58:e8:dc:34:35: bd:ef:07:13:69:33:0f:f3:e7:33:55:1a:6b:0c:f7:a2:88:8e: 9a:42:10:24:57:7f:c1:c0:1f:df:97:0c:11:f8:30:b6:c4:e8: 2a:8e:33:eb:26:4c:8a:59:68:8b:9a:83:22:48:4d:8d:10:37: 41:8b:e5:0c:5f:97:67:47:92:48:56:31:0e:01:16:0c:4a:55: de:29:12:02:a3:2e:80:b2:24:e4:20:a9:e8:c3:61:7e:aa:8e: e7:2d:94:32:19:cb:c9:3a:f3:1b:a1:51:57:7d:d5:26:a2:8e: 91:d3:ce:b8:41:8d:04:73:d9:a3:d0:69:0b:b3:f8:46:e5:99: 15:44:f2:26:35:7b:f0:1d:0c:1e:59:4e:34:fe:89:eb:78:f6: a7:7b:7a:8f:6d:b5:e8:c2:2d:30:53:ea:c7:43:f4:b4:c0:c6: 79:57:6b:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKpVucoiwQo8UP7qc2uBHmLoqHNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ2OEFDRTNBOEY0Q0Q2QjlCRDdBQkM2OTVFNkEyMTYy NEIxQzU2QzAeFw0yNjA5MjUxNDA3NTFaFw0yNjA5MjYxNzE1NTFaMDMxMTAvBgNV BAMTKDREMzU3ODEwMEI2OTA3ODdGQUIwMjkyNUJENDczNDcwM0M1ODExM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXXDbYgp4zdny0d6Mg8NtoRbGa vWgud6Jvsg+8pCkKrObK8Z8QDLcoG7pnv3T0Qouk0dTuIfIPdAxXJ2eJbw5sgJ6p Nar2thEGASxWMBeURgH/ccWvbQJRhb1NUwAxblcp0vySOwCntS9ne0Dso0HUMZ1e mgV+M1TceJ68ATkthKNA49toFvP2kxr48vFGhjGrqrN7x0Bskn6CqkAVFLAeXI/n aTzQWRPb4LBtMMwuo7xgWjF/koT3noe514tqqq7L0I1hEPgNuz+JF+Yh3aCyiph6 HTJBLBy+J5twMTle4pMliX5oeafwM6ZWlTTjolPupwL4FJSAxy8EpenT1gdxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTTV4EAtpB4f6sCklvUc0cDxYET0wHwYDVR0j BBgwFoAUnWis46j0zWub16vGleaiFiSxxWwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFlZWQwOWMtNjA2OC00MDdhLWIwYTYtNTliN2QwYjg3ODU1LzAvOUQ2OEFDRTNB OEY0Q0Q2QjlCRDdBQkM2OTVFNkEyMTYyNEIxQzU2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDY4QUNFM0E4RjRDRDZCOUJEN0FCQzY5NUU2QTIxNjI0QjFD NTZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFlZWQwOWMtNjA2OC00MDdhLWIw YTYtNTliN2QwYjg3ODU1LzAvOUQ2OEFDRTNBOEY0Q0Q2QjlCRDdBQkM2OTVFNkEy MTYyNEIxQzU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPQeZ0KpL9fLoMADE55V1dqEfXfcJYd6yRa pAypng8FDOej9OXDGsPtEg/aX7CkUSG+Yr9awHOi1U9V8x/R93YVrVl51xRsXqXy NUx33G+tKj+9AqBY6Nw0Nb3vBxNpMw/z5zNVGmsM96KIjppCECRXf8HAH9+XDBH4 MLbE6CqOM+smTIpZaIuagyJITY0QN0GL5Qxfl2dHkkhWMQ4BFgxKVd4pEgKjLoCy JOQgqejDYX6qjuctlDIZy8k68xuhUVd91SaijpHTzrhBjQRz2aPQaQuz+EblmRVE 8iY1e/AdDB5ZTjT+iet49qd7eo9ttejCLTBT6sdD9LTAxnlXa1s= -----END CERTIFICATE-----Generated at Sat Sep 26 12:30:58 2026 by rpki-client