$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft File: 9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft (raw, json) Hash identifier: zLpgEXg3ElNPkgdhZ9L4DpQvUfARSRdU9iNIGOpb7xg= Subject key identifier: E9:EC:C2:37:15:55:22:FF:23:FC:F4:8E:CB:2B:8D:61:B4:34:2F:5D Authority key identifier: 9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9 Certificate issuer: /CN=9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9 Certificate serial: 30DDD889466354F0F46FF1DEE4126F684F71C680 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 01:22:27 +0000 Manifest this update: Thu 24 Sep 2026 01:17:27 +0000 Manifest next update: Fri 25 Sep 2026 01:39:27 +0000 Files and hashes: 1: 9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl (hash: MzE8sr6IsyFZhkH3leo09DTH/z6KXpwICjthuaKxdTQ=) 2: 3136302e32322e3230382e302f32332d3234203d3e20313532383239.roa (hash: geTlR2xlRfEtN72u5a2Y4lLKK2jTFc1FYHlhZP1ErB8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:dd:d8:89:46:63:54:f0:f4:6f:f1:de:e4:12:6f:68:4f:71:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9 Validity Not Before: Sep 24 01:17:27 2026 GMT Not After : Sep 25 01:39:27 2026 GMT Subject: CN=E9ECC237155522FF23FCF48ECB2B8D61B4342F5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:24:2f:dc:6c:0b:5d:53:d8:5d:5c:f7:6f:9e: a2:91:dd:28:c1:4c:ba:0f:a6:d7:a9:be:2b:0a:00: 4f:69:27:93:8b:15:00:b8:7f:f8:98:6a:d2:c2:d4: 71:7d:ba:19:46:97:5f:c9:e4:34:db:6d:f3:27:50: 0f:06:0d:3d:31:6f:92:d9:dd:ee:3f:29:d9:a7:7c: 09:8f:f2:d8:95:75:b0:5d:9c:df:29:2a:2f:b0:15: 06:b2:37:4f:cd:cf:a7:3c:18:10:0f:d8:92:02:18: 44:6a:77:f5:a0:71:d6:85:15:de:98:73:1d:a3:d0: 55:b5:46:4b:53:5a:51:57:6b:f6:5d:18:3f:e7:88: ad:a0:22:42:a9:f8:cd:62:b7:70:62:24:67:f9:1e: 32:e0:12:a0:ed:0e:be:97:73:b4:8f:58:90:3e:89: db:81:03:82:98:49:b4:3b:f9:ab:5b:ba:9b:0a:71: 8a:7e:2e:9a:74:f7:de:f6:24:0d:e1:dd:32:80:db: 2a:0b:f2:03:fc:df:ca:cb:ab:13:2b:2e:dc:1f:c5: 0c:9f:c7:fe:05:0e:58:92:2a:48:7d:06:3f:12:07: 0f:9c:c8:88:fc:d2:8c:80:de:cc:be:a9:cb:d5:e2: 7a:18:6b:da:d2:2e:76:09:1d:ba:02:ad:83:41:6a: 99:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EC:C2:37:15:55:22:FF:23:FC:F4:8E:CB:2B:8D:61:B4:34:2F:5D X509v3 Authority Key Identifier: keyid:9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:84:da:ea:1d:09:a4:3c:41:2e:38:77:1e:5e:31:29:b4:d9: 31:46:d9:fd:85:7b:5b:32:ef:44:ac:12:1a:46:15:51:aa:6d: b7:3e:7c:ad:90:30:9d:7d:7b:31:5a:75:e0:61:93:99:40:47: 91:09:f2:94:23:30:85:95:47:50:31:58:7e:36:99:76:d4:bd: 9b:ae:58:31:c7:67:58:1b:81:ff:5c:df:3b:67:82:7b:88:ea: f6:d9:40:84:b8:e0:55:f7:40:e9:9c:27:53:9a:a8:92:fb:93: 01:89:43:60:c7:01:8f:20:e1:3c:6c:b6:ff:1d:8d:7d:cb:4d: db:ed:fb:71:3d:ef:a1:b8:75:79:b0:08:09:2b:ac:f6:70:e8: a3:6b:f3:67:80:1a:9e:b3:08:a3:ad:64:66:81:74:4f:49:9f: f5:95:a3:63:61:25:09:f9:51:e9:c4:ff:0d:db:0c:00:a2:ec: 6d:68:75:01:49:26:82:87:db:4e:3b:ae:f9:c0:a1:57:ef:bc: a0:a4:53:22:f8:f8:61:ec:24:19:99:4e:f1:45:b1:63:a1:c8: 3f:46:70:10:45:f2:b5:c0:4f:31:39:eb:3b:21:c2:ca:86:78: 2e:fc:29:c2:e4:91:90:27:0d:d3:0a:99:c1:00:1f:b5:ed:b1: 9f:f7:4f:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMN3YiUZjVPD0b/He5BJvaE9xxoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMyM0ZCM0U4Qjg1OTYxRkQ0OEJDNzgwREFGNDRDRUZC NjQ3QzZFOTAeFw0yNjA5MjQwMTE3MjdaFw0yNjA5MjUwMTM5MjdaMDMxMTAvBgNV BAMTKEU5RUNDMjM3MTU1NTIyRkYyM0ZDRjQ4RUNCMkI4RDYxQjQzNDJGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbJC/cbAtdU9hdXPdvnqKR3SjB TLoPptepvisKAE9pJ5OLFQC4f/iYatLC1HF9uhlGl1/J5DTbbfMnUA8GDT0xb5LZ 3e4/KdmnfAmP8tiVdbBdnN8pKi+wFQayN0/Nz6c8GBAP2JICGERqd/WgcdaFFd6Y cx2j0FW1RktTWlFXa/ZdGD/niK2gIkKp+M1it3BiJGf5HjLgEqDtDr6Xc7SPWJA+ iduBA4KYSbQ7+atbupsKcYp+Lpp09972JA3h3TKA2yoL8gP838rLqxMrLtwfxQyf x/4FDliSKkh9Bj8SBw+cyIj80oyA3sy+qcvV4noYa9rSLnYJHboCrYNBapmXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6ezCNxVVIv8j/PSOyyuNYbQ0L10wHwYDVR0j BBgwFoAUnCP7PouFlh/Ui8eA2vRM77ZHxukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNjYjUwYjAtNDNjYy00OGQwLTkxZjQtMDViYmRlN2FjMWQwLzAvOUMyM0ZCM0U4 Qjg1OTYxRkQ0OEJDNzgwREFGNDRDRUZCNjQ3QzZFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85QzIzRkIzRThCODU5NjFGRDQ4QkM3ODBEQUY0NENFRkI2NDdD NkU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvOUMyM0ZCM0U4Qjg1OTYxRkQ0OEJDNzgwREFGNDRD RUZCNjQ3QzZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAiE2uodCaQ8QS44dx5eMSm02TFG2f2Fe1sy 70SsEhpGFVGqbbc+fK2QMJ19ezFadeBhk5lAR5EJ8pQjMIWVR1AxWH42mXbUvZuu WDHHZ1gbgf9c3ztngnuI6vbZQIS44FX3QOmcJ1OaqJL7kwGJQ2DHAY8g4Txstv8d jX3LTdvt+3E976G4dXmwCAkrrPZw6KNr82eAGp6zCKOtZGaBdE9Jn/WVo2NhJQn5 UenE/w3bDACi7G1odQFJJoKH2047rvnAoVfvvKCkUyL4+GHsJBmZTvFFsWOhyD9G cBBF8rXATzE56zshwsqGeC78KcLkkZAnDdMKmcEAH7XtsZ/3TwI= -----END CERTIFICATE-----Generated at Thu Sep 24 10:52:26 2026 by rpki-client