$ rpki-client -vvvf rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft File: 9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft (raw, json) Hash identifier: GODRZ6yNPixxgalnxsuOY1zaakDriZVdqMgB36pCyqc= Subject key identifier: A9:A5:6E:B2:F2:C9:CE:66:76:F1:CE:95:E7:BF:F1:E1:93:52:AC:FE Authority key identifier: 9D:92:E9:3E:B1:58:0E:3C:D4:0F:F3:4C:FA:B3:04:AD:DB:06:81:87 Certificate issuer: /CN=9D92E93EB1580E3CD40FF34CFAB304ADDB068187 Certificate serial: 76D831DA04B0924263B7A779AF42E0744661CB1F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 05:34:42 +0000 Manifest this update: Thu 03 Sep 2026 05:29:42 +0000 Manifest next update: Fri 04 Sep 2026 06:45:42 +0000 Files and hashes: 1: 323430343a643863303a3a2f33322d3438203d3e20313338383630.roa (hash: OBT9V34k6UtzzKNYWF9awZ7+etL3ZsNE8k4xpnFdPg0=) 2: 9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl (hash: wQK8tFGLqs65bRNqYiqo3lXQWAQX92d2cx48dqF02Ds=) 3: 3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa (hash: LO0XYAcYP+wJFsgGl9xbalFh8oG/l3nUuL82q6wx3FE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 06:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:d8:31:da:04:b0:92:42:63:b7:a7:79:af:42:e0:74:46:61:cb:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D92E93EB1580E3CD40FF34CFAB304ADDB068187 Validity Not Before: Sep 3 05:29:42 2026 GMT Not After : Sep 4 06:45:42 2026 GMT Subject: CN=A9A56EB2F2C9CE6676F1CE95E7BFF1E19352ACFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:89:71:73:df:1b:e4:a2:ce:55:ab:ba:f3:1d: 18:d1:e1:3f:07:3e:8a:68:d7:89:55:06:e4:8f:6a: 9b:29:35:78:1b:89:2a:af:3c:1d:35:25:d6:d6:ad: 4f:89:8d:87:95:0e:34:92:76:ba:97:19:3f:7f:89: 34:d1:ac:25:7a:d8:ec:f1:b6:01:0b:1d:ea:21:a6: 5a:7e:7f:17:8e:99:ec:1b:03:59:98:f6:c7:de:22: 15:10:b3:df:b3:00:85:4b:b7:8b:3c:ae:ec:b5:66: d1:bb:d0:29:da:ce:07:e3:7a:19:84:20:01:33:2d: 83:a4:d5:a5:c3:d5:6d:48:ac:fd:c0:94:10:0a:dd: 7b:c1:6f:a9:82:1a:cc:70:6f:a7:0d:09:2a:cc:dd: 2d:78:ac:3b:9c:6d:45:65:0e:7f:a3:60:da:dc:66: 7a:8e:6a:fa:77:57:d0:43:d4:ae:7c:0e:70:6b:4b: 31:5e:69:c6:a1:e5:34:27:a7:f9:01:34:d3:ac:d8: 6b:3a:e3:fd:7e:f0:6c:90:9c:a5:a9:6b:18:25:7e: ac:e7:1b:d4:6f:85:a7:e8:0e:7b:2c:8c:02:b4:81: c4:90:30:48:b7:1a:ac:5b:1d:69:50:2c:f4:92:15: 52:ef:cf:44:51:af:75:c5:8b:37:d5:01:7f:c3:75: 83:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A5:6E:B2:F2:C9:CE:66:76:F1:CE:95:E7:BF:F1:E1:93:52:AC:FE X509v3 Authority Key Identifier: keyid:9D:92:E9:3E:B1:58:0E:3C:D4:0F:F3:4C:FA:B3:04:AD:DB:06:81:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:26:73:7c:45:4d:ec:b4:7b:bd:a5:05:c4:73:1b:42:56:d1: 32:27:f6:0e:5c:31:9d:e7:dc:82:9c:bb:f4:c3:7c:1c:9f:6d: dd:0d:56:3a:ab:9a:1f:95:43:e5:2a:fc:0c:3a:16:9a:96:50: a0:46:77:3e:d7:99:4a:bf:71:8a:80:a4:27:b0:d2:ef:6e:9c: f1:6f:45:ee:e8:ce:c3:6b:3d:d4:ca:e4:99:93:67:d1:09:c6: 5a:51:64:c3:51:37:da:7b:66:52:72:b7:49:94:68:2b:05:ca: 55:0d:c1:73:3d:22:c1:8e:d2:88:74:f3:46:bf:25:e3:df:1b: 40:26:44:70:a5:b3:94:2a:1a:e6:3c:c2:e4:92:ff:e3:e2:d4: 09:8e:67:b0:71:31:e0:4d:79:7f:81:77:65:34:09:d3:8a:3a: 17:33:94:49:98:64:4d:1c:2a:ab:d4:8c:0d:59:aa:e9:a6:eb: 4f:a6:93:75:0a:61:04:29:e7:42:2e:04:f1:5f:75:f5:86:d3: 15:9f:76:41:b0:71:44:f7:d3:d2:3e:28:be:c8:6f:3f:f5:e4: 3d:0a:94:30:60:5f:48:a2:06:cd:ba:c2:45:f8:de:50:61:98: 88:c0:72:c1:69:24:21:c6:97:23:7b:10:20:e6:c7:5b:27:c8: c0:ce:ac:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdtgx2gSwkkJjt6d5r0LgdEZhyx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5MkU5M0VCMTU4MEUzQ0Q0MEZGMzRDRkFCMzA0QURE QjA2ODE4NzAeFw0yNjA5MDMwNTI5NDJaFw0yNjA5MDQwNjQ1NDJaMDMxMTAvBgNV BAMTKEE5QTU2RUIyRjJDOUNFNjY3NkYxQ0U5NUU3QkZGMUUxOTM1MkFDRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDliXFz3xvkos5Vq7rzHRjR4T8H Popo14lVBuSPapspNXgbiSqvPB01JdbWrU+JjYeVDjSSdrqXGT9/iTTRrCV62Ozx tgELHeohplp+fxeOmewbA1mY9sfeIhUQs9+zAIVLt4s8ruy1ZtG70CnazgfjehmE IAEzLYOk1aXD1W1IrP3AlBAK3XvBb6mCGsxwb6cNCSrM3S14rDucbUVlDn+jYNrc ZnqOavp3V9BD1K58DnBrSzFeacah5TQnp/kBNNOs2Gs64/1+8GyQnKWpaxglfqzn G9RvhafoDnssjAK0gcSQMEi3GqxbHWlQLPSSFVLvz0RRr3XFizfVAX/DdYP/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqaVusvLJzmZ28c6V57/x4ZNSrP4wHwYDVR0j BBgwFoAUnZLpPrFYDjzUD/NM+rMErdsGgYcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTY1ZDg4ZjEtYjljMC00ODVlLTkxNmUtNTliN2UzNjk4ZGExLzAvOUQ5MkU5M0VC MTU4MEUzQ0Q0MEZGMzRDRkFCMzA0QUREQjA2ODE4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDkyRTkzRUIxNTgwRTNDRDQwRkYzNENGQUIzMDRBRERCMDY4 MTg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTY1ZDg4ZjEtYjljMC00ODVlLTkx NmUtNTliN2UzNjk4ZGExLzAvOUQ5MkU5M0VCMTU4MEUzQ0Q0MEZGMzRDRkFCMzA0 QUREQjA2ODE4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4mc3xFTey0e72lBcRzG0JW0TIn9g5cMZ3n 3IKcu/TDfByfbd0NVjqrmh+VQ+Uq/Aw6FpqWUKBGdz7XmUq/cYqApCew0u9unPFv Re7ozsNrPdTK5JmTZ9EJxlpRZMNRN9p7ZlJyt0mUaCsFylUNwXM9IsGO0oh080a/ JePfG0AmRHCls5QqGuY8wuSS/+Pi1AmOZ7BxMeBNeX+Bd2U0CdOKOhczlEmYZE0c KqvUjA1Zqumm60+mk3UKYQQp50IuBPFfdfWG0xWfdkGwcUT309I+KL7Ibz/15D0K lDBgX0iiBs26wkX43lBhmIjAcsFpJCHGlyN7ECDmx1snyMDOrPg= -----END CERTIFICATE-----Generated at Thu Sep 3 12:09:29 2026 by rpki-client