$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft File: C09B0826A8950269AAA9592F3B0B65A3232333C5.mft (raw, json) Hash identifier: jKEyP+ZYyL6oimYjsARW/a60G9PlkKTF06YxFIeTuyQ= Subject key identifier: E4:1E:3F:23:14:56:F8:B2:C5:F2:0D:83:84:30:C4:C4:1E:D3:F5:2F Authority key identifier: C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 Certificate issuer: /CN=C09B0826A8950269AAA9592F3B0B65A3232333C5 Certificate serial: 09B2F815322DF841619DB794A6C50B39B7DAFFD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 17:22:28 +0000 Manifest this update: Wed 23 Sep 2026 17:17:28 +0000 Manifest next update: Thu 24 Sep 2026 20:41:28 +0000 Files and hashes: 1: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: qD0/6TXIm8wKpNkYb5k3M2VEq1Hkh2ZvC2u1LPq71Ck=) 2: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: u7ID+/zmEfkiBk9A2DOk1aoUvKs6xhyBLUvlSwziv+4=) 3: C09B0826A8950269AAA9592F3B0B65A3232333C5.crl (hash: tccoelyXv1Dkhgyqazy/3PpdqwSnsvIuLyKH35VRiVY=) 4: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: /OlYgkp/JUv7mWTKG1jRIEEEMwF4cVrVtCICjMapFuQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b2:f8:15:32:2d:f8:41:61:9d:b7:94:a6:c5:0b:39:b7:da:ff:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C09B0826A8950269AAA9592F3B0B65A3232333C5 Validity Not Before: Sep 23 17:17:28 2026 GMT Not After : Sep 24 20:41:28 2026 GMT Subject: CN=E41E3F231456F8B2C5F20D838430C4C41ED3F52F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:18:ee:fc:1d:e0:85:3c:f2:fd:74:89:f0:48: a8:00:84:ba:06:66:0a:6c:e6:02:43:31:0d:4a:e5: ff:0c:ac:aa:03:60:9f:2d:7d:38:64:58:67:59:1b: 45:bd:8e:d6:0c:00:f4:ac:4f:95:b4:6f:6d:de:d8: be:12:79:de:cb:7e:6a:dd:c4:17:7e:c3:a5:20:03: 54:80:f4:70:56:60:f4:54:dd:76:43:bf:c2:23:c5: a6:01:9b:ab:b2:f6:5c:15:0c:38:4a:b6:ef:ce:76: 18:68:90:fb:69:d6:4a:54:c3:4c:9c:9f:bf:95:9e: b2:92:d1:fc:04:04:82:35:f2:4d:af:e8:9e:c1:15: 84:74:2f:d7:f3:b2:d5:0d:54:9d:a6:93:22:ed:fa: be:a7:59:d9:cf:7c:ac:5c:62:0c:5b:2d:a7:16:73: f7:0e:da:d2:d6:0c:21:be:11:3e:e1:70:71:47:b7: 5a:d4:32:03:db:09:04:ff:34:8a:51:5b:45:ec:55: 28:30:7a:c0:b3:bd:9a:2f:55:92:42:8e:09:81:59: 66:a7:66:d3:59:af:78:3c:4b:9e:f3:7e:8e:84:ed: d1:b7:48:c4:1f:75:80:76:31:6a:0f:61:5c:c6:fe: 95:73:6d:95:07:af:c5:0e:25:d0:58:7f:3a:3e:04: 91:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1E:3F:23:14:56:F8:B2:C5:F2:0D:83:84:30:C4:C4:1E:D3:F5:2F X509v3 Authority Key Identifier: keyid:C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a9:1f:36:65:e7:ef:06:eb:25:52:39:f2:e8:ba:89:f7:e6: b1:c4:3d:a1:a9:f3:fd:8e:b7:2b:69:dd:47:b7:ca:76:d1:a0: d6:7e:6a:99:be:9e:52:34:f4:83:38:08:38:89:be:de:aa:42: b2:aa:14:b2:23:7e:7f:3a:07:7f:53:f7:1d:8f:b5:44:c3:b0: 39:d5:1c:0f:e9:49:fe:01:a3:28:8b:4f:7b:c0:c0:09:3c:2c: cd:85:c0:b4:44:f7:e1:6e:81:0b:0d:b6:05:ee:2f:ba:72:b0: 8c:8d:92:2e:5a:f2:18:4c:ba:87:16:c0:79:1b:a6:70:b3:a0: 22:0b:c0:d8:21:39:65:58:b0:80:ed:57:74:d0:01:61:e2:0d: 6a:db:16:9c:7e:85:34:38:34:19:60:8c:01:b4:50:65:b8:94: d9:40:a2:d4:74:fd:e4:66:62:bb:9c:da:cc:14:94:ff:39:ab: 72:1a:58:44:2a:0d:93:6a:4e:18:1a:d0:de:e8:ab:bb:47:98: 9e:72:2c:e2:43:6e:0c:53:cb:98:41:11:6a:d6:4c:48:1b:aa: 25:06:88:e9:be:fe:ac:1c:5c:53:9d:6f:ff:76:06:70:4a:30: 8a:bb:ef:b0:42:0d:51:43:5d:f4:c9:a2:9a:f4:6d:7b:d8:57: 15:ed:37:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCbL4FTIt+EFhnbeUpsULObfa/9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA5QjA4MjZBODk1MDI2OUFBQTk1OTJGM0IwQjY1QTMy MzIzMzNDNTAeFw0yNjA5MjMxNzE3MjhaFw0yNjA5MjQyMDQxMjhaMDMxMTAvBgNV BAMTKEU0MUUzRjIzMTQ1NkY4QjJDNUYyMEQ4Mzg0MzBDNEM0MUVEM0Y1MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZGO78HeCFPPL9dInwSKgAhLoG Zgps5gJDMQ1K5f8MrKoDYJ8tfThkWGdZG0W9jtYMAPSsT5W0b23e2L4Sed7Lfmrd xBd+w6UgA1SA9HBWYPRU3XZDv8IjxaYBm6uy9lwVDDhKtu/OdhhokPtp1kpUw0yc n7+VnrKS0fwEBII18k2v6J7BFYR0L9fzstUNVJ2mkyLt+r6nWdnPfKxcYgxbLacW c/cO2tLWDCG+ET7hcHFHt1rUMgPbCQT/NIpRW0XsVSgwesCzvZovVZJCjgmBWWan ZtNZr3g8S57zfo6E7dG3SMQfdYB2MWoPYVzG/pVzbZUHr8UOJdBYfzo+BJEnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5B4/IxRW+LLF8g2DhDDExB7T9S8wHwYDVR0j BBgwFoAUwJsIJqiVAmmqqVkvOwtloyMjM8UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjhkYzA4NDktODNmYi00Y2M4LThjMjEtYmU2Y2E3YTJlZDgzLzAvQzA5QjA4MjZB ODk1MDI2OUFBQTk1OTJGM0IwQjY1QTMyMzIzMzNDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMDlCMDgyNkE4OTUwMjY5QUFBOTU5MkYzQjBCNjVBMzIzMjMz M0M1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvQzA5QjA4MjZBODk1MDI2OUFBQTk1OTJGM0IwQjY1 QTMyMzIzMzNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6pHzZl5+8G6yVSOfLouon35rHEPaGp8/2O tytp3Ue3ynbRoNZ+apm+nlI09IM4CDiJvt6qQrKqFLIjfn86B39T9x2PtUTDsDnV HA/pSf4BoyiLT3vAwAk8LM2FwLRE9+FugQsNtgXuL7pysIyNki5a8hhMuocWwHkb pnCzoCILwNghOWVYsIDtV3TQAWHiDWrbFpx+hTQ4NBlgjAG0UGW4lNlAotR0/eRm Yruc2swUlP85q3IaWEQqDZNqThga0N7oq7tHmJ5yLOJDbgxTy5hBEWrWTEgbqiUG iOm+/qwcXFOdb/92BnBKMIq777BCDVFDXfTJopr0bXvYVxXtN3c= -----END CERTIFICATE-----Generated at Thu Sep 24 03:10:04 2026 by rpki-client