$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft File: C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft (raw, json) Hash identifier: pOuZeulX+gHh2trDmSP70xqg1dNWdYSc06sPySWS2jg= Subject key identifier: 06:9A:60:5B:65:63:77:AE:FD:4D:2C:3D:59:7C:C5:94:B4:3D:26:FD Authority key identifier: C9:A0:E9:83:26:93:84:F0:0C:CE:85:7E:3A:8E:88:87:BE:9B:7F:C8 Certificate issuer: /CN=C9A0E983269384F00CCE857E3A8E8887BE9B7FC8 Certificate serial: 27422E176365BC11BB72B87D91DD261B722E029E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 17:59:31 +0000 Manifest this update: Thu 03 Sep 2026 17:54:31 +0000 Manifest next update: Fri 04 Sep 2026 18:18:31 +0000 Files and hashes: 1: 323030313a6466323a623263303a3a2f34382d3438203d3e20313530393538.roa (hash: DNfu6S0MfyEIbWVxydJYNYlQdSHELvJkaaSCCqoydj0=) 2: 3130332e38312e3131302e302f32332d3234203d3e20313530393538.roa (hash: PAwVQ07BR901R53ceqUz7lmumWNjRRTL4GW80ND0yx0=) 3: 3130332e38312e3131312e302f32342d3234203d3e20313530393538.roa (hash: l+i6wCpyx98LrkN6bI1lbQddhWqft7YLNRfJYsyxYlA=) 4: C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl (hash: o+O3oV1g9wIB7DcNBwvDb1t6wf7NLRGj2D4IwUmfjkk=) 5: 3130332e38312e3131302e302f32342d3234203d3e20313530393538.roa (hash: 1X7ytOOeZ7baYbrptPG956jTOlJu9VRB/BLTjRkOU00=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:42:2e:17:63:65:bc:11:bb:72:b8:7d:91:dd:26:1b:72:2e:02:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9A0E983269384F00CCE857E3A8E8887BE9B7FC8 Validity Not Before: Sep 3 17:54:31 2026 GMT Not After : Sep 4 18:18:31 2026 GMT Subject: CN=069A605B656377AEFD4D2C3D597CC594B43D26FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fe:c3:ed:ec:6b:79:aa:92:07:82:5f:10:2a: fe:82:1a:86:bd:e7:2e:36:53:42:49:1c:1f:8c:19: 4c:c3:e6:2f:ed:9d:a8:65:f2:b2:5f:bb:e1:db:ed: d3:ec:2a:97:90:35:72:3c:b9:55:78:7d:fb:be:f4: 95:b6:a1:17:e6:05:85:34:41:9f:65:e7:90:7c:a5: e5:b0:82:6a:65:1a:2d:25:1f:16:c9:89:92:82:35: 03:d0:52:ad:05:d0:ec:28:15:d3:2a:35:38:4d:cb: 8f:48:f4:c5:f6:ae:c8:d9:50:00:7d:c1:b5:ee:0c: cc:eb:2e:4c:c8:84:58:18:af:b8:fd:ae:88:aa:a1: e7:a4:52:4b:59:11:d9:b2:5d:07:00:89:0a:3f:4d: 10:49:74:03:c6:b4:e3:ee:e0:92:1d:ab:83:eb:6b: 4c:2d:d4:ad:e1:1a:e6:e0:30:3a:ed:62:57:83:a7: cc:ad:c3:9f:56:43:67:8a:94:a6:d0:52:ab:c8:98: df:74:2f:75:70:ed:79:c0:ab:f9:c3:c4:ee:82:23: 73:73:87:25:d7:06:75:ee:24:05:28:8f:d2:6b:2f: f5:df:c7:2d:7b:a5:f0:f4:d7:38:ca:09:80:ff:83: d8:b3:89:e8:a2:d4:90:03:cf:01:a5:75:85:06:03: 9d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9A:60:5B:65:63:77:AE:FD:4D:2C:3D:59:7C:C5:94:B4:3D:26:FD X509v3 Authority Key Identifier: keyid:C9:A0:E9:83:26:93:84:F0:0C:CE:85:7E:3A:8E:88:87:BE:9B:7F:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:b9:18:6d:6b:2b:cf:9a:17:f6:ae:b3:3c:57:22:35:77:50: 5a:33:09:a1:b5:ad:8c:ae:10:61:74:4a:b6:d9:99:29:17:58: 36:4a:9b:9e:49:f8:5b:15:02:6b:c7:1e:07:39:a2:14:a5:23: fe:0d:fc:14:da:c4:c9:39:f1:51:b7:5e:d6:22:6a:76:fc:68: 6b:41:05:fd:1b:11:6a:65:b2:5c:cf:ce:ad:b8:74:d8:e6:f0: 82:2e:6d:5a:a9:9b:0e:d4:f0:2f:35:80:ad:0c:95:ac:4e:11: 65:fc:a4:59:c2:74:2d:54:2e:74:c7:99:85:0c:75:c9:8b:12: a5:a7:74:d6:ac:64:ba:7c:9d:16:fe:5c:7a:92:3b:54:f9:07: 66:24:70:24:a3:86:43:29:05:1a:02:9a:5b:d2:a5:4e:4d:e7: ff:9c:94:02:1f:71:e8:80:d2:5e:53:29:3f:95:7e:5b:e1:e1: 8a:24:6b:84:0e:0b:dd:0f:7d:4b:0a:6d:04:e1:a4:cf:e7:9b: 94:0b:5b:e5:0e:db:8f:ef:aa:fc:3c:ad:8f:a8:48:b8:88:cb: 93:f9:81:b1:c0:2a:70:bc:e7:d0:78:87:f5:0b:14:2d:d5:98: 8d:8b:74:c5:92:03:09:d4:37:f6:4c:24:5b:27:b3:d2:8e:aa: fd:3e:ae:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ0IuF2NlvBG7crh9kd0mG3IuAp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlBMEU5ODMyNjkzODRGMDBDQ0U4NTdFM0E4RTg4ODdC RTlCN0ZDODAeFw0yNjA5MDMxNzU0MzFaFw0yNjA5MDQxODE4MzFaMDMxMTAvBgNV BAMTKDA2OUE2MDVCNjU2Mzc3QUVGRDREMkMzRDU5N0NDNTk0QjQzRDI2RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/sPt7Gt5qpIHgl8QKv6CGoa9 5y42U0JJHB+MGUzD5i/tnahl8rJfu+Hb7dPsKpeQNXI8uVV4ffu+9JW2oRfmBYU0 QZ9l55B8peWwgmplGi0lHxbJiZKCNQPQUq0F0OwoFdMqNThNy49I9MX2rsjZUAB9 wbXuDMzrLkzIhFgYr7j9roiqoeekUktZEdmyXQcAiQo/TRBJdAPGtOPu4JIdq4Pr a0wt1K3hGubgMDrtYleDp8ytw59WQ2eKlKbQUqvImN90L3Vw7XnAq/nDxO6CI3Nz hyXXBnXuJAUoj9JrL/Xfxy17pfD01zjKCYD/g9izieii1JADzwGldYUGA501AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBppgW2Vjd679TSw9WXzFlLQ9Jv0wHwYDVR0j BBgwFoAUyaDpgyaThPAMzoV+Oo6Ih76bf8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGYwYmNkYzMtMGZlYS00NzQ3LTk5MDctNjU2NDg2YmFlOGRhLzAvQzlBMEU5ODMy NjkzODRGMDBDQ0U4NTdFM0E4RTg4ODdCRTlCN0ZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUEwRTk4MzI2OTM4NEYwMENDRTg1N0UzQThFODg4N0JFOUI3 RkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGYwYmNkYzMtMGZlYS00NzQ3LTk5 MDctNjU2NDg2YmFlOGRhLzAvQzlBMEU5ODMyNjkzODRGMDBDQ0U4NTdFM0E4RTg4 ODdCRTlCN0ZDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEa5GG1rK8+aF/auszxXIjV3UFozCaG1rYyu EGF0SrbZmSkXWDZKm55J+FsVAmvHHgc5ohSlI/4N/BTaxMk58VG3XtYianb8aGtB Bf0bEWplslzPzq24dNjm8IIubVqpmw7U8C81gK0MlaxOEWX8pFnCdC1ULnTHmYUM dcmLEqWndNasZLp8nRb+XHqSO1T5B2YkcCSjhkMpBRoCmlvSpU5N5/+clAIfceiA 0l5TKT+Vflvh4Yoka4QOC90PfUsKbQThpM/nm5QLW+UO24/vqvw8rY+oSLiIy5P5 gbHAKnC859B4h/ULFC3VmI2LdMWSAwnUN/ZMJFsns9KOqv0+rlk= -----END CERTIFICATE-----Generated at Thu Sep 3 22:37:29 2026 by rpki-client