$ rpki-client -vvvf rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft File: 9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft (raw, json) Hash identifier: AfZxXrj9ZB/zSnTpjs3tJ/OHpbsaSdJb2cxEJlHJFk0= Subject key identifier: F4:13:2C:08:09:A2:FC:4F:FB:10:0D:9B:C7:02:16:39:05:E5:7A:AF Authority key identifier: 9F:D7:FF:4D:3F:B3:73:40:FA:A8:C7:EE:71:D1:CB:9E:AF:08:59:C1 Certificate issuer: /CN=9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1 Certificate serial: 0DD3CE2E37F7CE55D3B9C0FBC61D3C215DF6DBEE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft Manifest number: B1 Signing time: Fri 11 Sep 2026 13:02:08 +0000 Manifest this update: Fri 11 Sep 2026 12:57:08 +0000 Manifest next update: Sat 12 Sep 2026 13:41:08 +0000 Files and hashes: 1: 34392e302e302e302f32322d3234203d3e203535373031.roa (hash: sLZQYwwJZGFMTL7izEAM/LPP1kYOTnZL+ruwm/tAWUw=) 2: 3130332e33312e3233322e302f32322d3234203d3e203535373031.roa (hash: LXq7hGEpfDwOU/0U2QR8rTojO84R6vUdH42Dh5XJwhA=) 3: 3130332e31382e37362e302f32322d3234203d3e203535373031.roa (hash: ZIatr5akU/o2NWBe3N+oXda5TMJkC+DkwhEJDyTCXOU=) 4: 3230322e37332e32352e302f32342d3234203d3e20313431383932.roa (hash: ZdJ+uJ+H3LCclcBMDstVIbOnA5HzlWlzhGq8cMXXKag=) 5: 9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl (hash: ic//yuk/D8BswMYuFe0WYkfvqdgDH88bUUCmKY2HWbg=) 6: 3230322e37332e32362e302f32342d3234203d3e20313431383932.roa (hash: 2Omj4R13yIfbTM8O99f4AEQ3eWdecD3Qz56Vk4+EoQE=) 7: 3230322e37332e32342e302f32342d3234203d3e203535373031.roa (hash: PInvCtxVVtioPbfgKwU3owF3bAZaDoVKCpPjomKqIrc=) 8: 3230322e37332e32372e302f32342d3234203d3e203535373031.roa (hash: BAdz9q0heD7H4d5EINNzizZi9X7k9sip5rKeZrRgrbA=) 9: 34332e3235322e3233362e302f32332d3234203d3e203535373031.roa (hash: 9/aJzkpwQD5bM8J0s7lmNbtmibtAmha33amC/3lwiTs=) 10: 34332e3235322e3233382e302f32342d3234203d3e203535373031.roa (hash: jervWvS7fVPh370uN91AucyVv2pORH48B5fUUflxIjw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 13:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d3:ce:2e:37:f7:ce:55:d3:b9:c0:fb:c6:1d:3c:21:5d:f6:db:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1 Validity Not Before: Sep 11 12:57:08 2026 GMT Not After : Sep 12 13:41:08 2026 GMT Subject: CN=F4132C0809A2FC4FFB100D9BC702163905E57AAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:74:6d:0e:38:4a:db:8e:c3:79:ba:79:ec:82: 57:6b:d7:cc:5d:dc:f0:1b:cc:68:52:ae:17:d0:b0: f7:99:68:f7:62:45:0c:b3:51:2f:12:25:5b:ed:01: de:25:a4:29:6f:88:c3:bf:29:7a:11:57:c1:a7:e7: 67:1c:79:d9:04:89:0e:74:ad:08:2e:b8:33:45:63: ab:e2:c3:94:f6:48:59:fb:30:59:69:e7:20:b2:15: 54:64:b4:55:c8:a1:ec:b1:c3:ca:c4:eb:5c:7a:70: c4:cd:15:da:0e:6e:aa:a5:0a:d6:22:2f:b5:32:90: 40:9b:39:1f:5c:6e:c2:c4:42:98:58:d0:ec:bb:ad: 54:40:6a:b4:6c:44:d2:48:5d:c2:9e:5b:e4:d8:43: 0f:49:31:5b:96:58:df:eb:0e:dd:d8:82:89:74:70: 2e:47:4f:39:fb:bc:21:76:06:00:ea:aa:a3:23:f3: c2:4d:a1:93:9d:71:e5:7a:16:fb:87:6a:9a:b4:78: 0b:ca:67:7a:5a:5e:dc:78:92:4f:06:ca:19:43:be: 72:86:2e:a5:62:86:f2:f9:74:65:ae:16:5b:de:9b: b1:b0:4c:97:c2:0f:d3:ec:d7:49:34:4c:f1:d1:77: 93:c3:10:ff:5c:f9:20:37:8b:bf:65:88:c1:f1:7e: c1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:13:2C:08:09:A2:FC:4F:FB:10:0D:9B:C7:02:16:39:05:E5:7A:AF X509v3 Authority Key Identifier: keyid:9F:D7:FF:4D:3F:B3:73:40:FA:A8:C7:EE:71:D1:CB:9E:AF:08:59:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:70:33:3d:3c:2c:e1:74:2e:6d:40:dc:f3:a0:71:4f:42:85: 7f:91:cb:1b:8b:f4:d8:f4:27:67:40:22:b7:69:ba:44:9d:9d: 59:24:ad:85:07:04:8a:3c:bd:bb:0e:8e:c3:ea:2d:fb:e6:38: ca:8c:f7:ec:d1:44:5a:c3:8d:89:73:b7:a1:09:f1:48:69:d8: 47:05:23:38:e6:b1:55:68:eb:9a:c3:7b:8c:6e:c2:b8:21:37: ce:ee:d4:64:b6:e7:2e:bd:a9:28:45:dc:c2:c0:3c:95:66:87: 2f:bc:3b:6d:23:c9:f6:0a:a5:67:c1:bf:f5:1f:23:df:44:70: 3a:c8:36:01:b1:50:dc:0e:11:f4:d3:5e:80:31:45:bb:2f:e9: 5c:2e:85:58:6f:7c:d0:29:7f:3f:b2:22:b4:8d:e3:9e:6a:fb: ba:27:1e:a2:57:4a:c2:47:de:62:b9:85:e9:9d:d6:54:88:e4: 0d:4f:ea:ad:48:cc:45:4e:ad:c9:d4:a8:53:e5:1a:e8:0c:57: 1d:ec:52:e0:bf:f0:12:87:d5:39:d6:f8:49:bc:81:5a:09:59: 82:d3:12:aa:d2:28:8b:a1:b3:e1:4b:3e:19:f9:ca:6c:d0:40: 95:d8:9c:7b:dd:cd:74:b8:01:d0:84:ea:c6:86:7c:41:51:7e: 88:a6:bd:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDdPOLjf3zlXTucD7xh08IV322+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZEN0ZGNEQzRkIzNzM0MEZBQThDN0VFNzFEMUNCOUVB RjA4NTlDMTAeFw0yNjA5MTExMjU3MDhaFw0yNjA5MTIxMzQxMDhaMDMxMTAvBgNV BAMTKEY0MTMyQzA4MDlBMkZDNEZGQjEwMEQ5QkM3MDIxNjM5MDVFNTdBQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDydG0OOErbjsN5unnsgldr18xd 3PAbzGhSrhfQsPeZaPdiRQyzUS8SJVvtAd4lpClviMO/KXoRV8Gn52ccedkEiQ50 rQguuDNFY6viw5T2SFn7MFlp5yCyFVRktFXIoeyxw8rE61x6cMTNFdoObqqlCtYi L7UykECbOR9cbsLEQphY0Oy7rVRAarRsRNJIXcKeW+TYQw9JMVuWWN/rDt3Ygol0 cC5HTzn7vCF2BgDqqqMj88JNoZOdceV6FvuHapq0eAvKZ3paXtx4kk8GyhlDvnKG LqVihvL5dGWuFlvem7GwTJfCD9Ps10k0TPHRd5PDEP9c+SA3i79liMHxfsGZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9BMsCAmi/E/7EA2bxwIWOQXleq8wHwYDVR0j BBgwFoAUn9f/TT+zc0D6qMfucdHLnq8IWcEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjdkOWY4NTEtN2U3My00Mzg0LTk1MGUtOGJlOGUxNWZkM2VlLzAvOUZEN0ZGNEQz RkIzNzM0MEZBQThDN0VFNzFEMUNCOUVBRjA4NTlDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkQ3RkY0RDNGQjM3MzQwRkFBOEM3RUU3MUQxQ0I5RUFGMDg1 OUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjdkOWY4NTEtN2U3My00Mzg0LTk1 MGUtOGJlOGUxNWZkM2VlLzAvOUZEN0ZGNEQzRkIzNzM0MEZBQThDN0VFNzFEMUNC OUVBRjA4NTlDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdwMz08LOF0Lm1A3POgcU9ChX+RyxuL9Nj0 J2dAIrdpukSdnVkkrYUHBIo8vbsOjsPqLfvmOMqM9+zRRFrDjYlzt6EJ8Uhp2EcF IzjmsVVo65rDe4xuwrghN87u1GS25y69qShF3MLAPJVmhy+8O20jyfYKpWfBv/Uf I99EcDrINgGxUNwOEfTTXoAxRbsv6VwuhVhvfNApfz+yIrSN455q+7onHqJXSsJH 3mK5hemd1lSI5A1P6q1IzEVOrcnUqFPlGugMVx3sUuC/8BKH1TnW+Em8gVoJWYLT EqrSKIuhs+FLPhn5ymzQQJXYnHvdzXS4AdCE6saGfEFRfoimvbE= -----END CERTIFICATE-----Generated at Sat Sep 12 04:48:46 2026 by rpki-client