$ rpki-client -vvvf rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft File: 9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft (raw, json) Hash identifier: Oxm5BAjn2IKdPetnVVMsvdKuZUYeoG++WDVMu9P+hBg= Subject key identifier: DD:FB:92:9D:A2:D5:3D:CF:BF:93:1A:7F:03:F2:62:38:6F:7F:9C:DC Authority key identifier: 9D:8E:FC:0D:64:AA:98:41:BE:1E:38:43:21:BB:2C:12:15:3F:F1:D9 Certificate issuer: /CN=9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9 Certificate serial: 4E07EC4CEDD60800B1C6608D26CBC65AC8A41FF2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 04:02:45 +0000 Manifest this update: Thu 03 Sep 2026 03:57:45 +0000 Manifest next update: Fri 04 Sep 2026 05:02:45 +0000 Files and hashes: 1: 9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl (hash: YNOHrzT++Bz4PBtZ5drfY1SWyislhC6/qrScxM8BDZA=) 2: 3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa (hash: 1YCliMmBjyp95uqeBYgoOHcVWy+xU/Vfr+PcnyYk678=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 05:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:07:ec:4c:ed:d6:08:00:b1:c6:60:8d:26:cb:c6:5a:c8:a4:1f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9 Validity Not Before: Sep 3 03:57:45 2026 GMT Not After : Sep 4 05:02:45 2026 GMT Subject: CN=DDFB929DA2D53DCFBF931A7F03F262386F7F9CDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:04:ac:7a:be:f6:0a:fc:aa:b6:ae:d1:84:c6: 17:9b:bc:1a:7f:0a:d3:ff:81:a3:4e:16:16:9a:d8: 23:ec:33:cd:b7:43:a3:85:c5:d5:27:d3:94:e3:c1: 9b:f2:85:87:0c:71:d1:e0:c9:3c:61:35:73:96:7a: da:7d:29:80:9c:2c:d7:d9:2c:6d:30:ef:98:9f:a5: 4b:dc:65:3c:b6:31:e1:08:29:99:6f:e5:d7:77:e1: 43:9d:2f:27:83:dd:8b:86:8f:36:c6:d9:17:e0:90: f9:27:de:99:84:e6:fc:c6:db:ed:63:b2:7f:92:91: 1c:dd:41:bb:f0:d8:12:d6:89:a9:46:e6:9e:d5:1e: 62:b1:f1:d6:92:34:66:57:02:1e:b5:ee:35:34:57: 77:71:02:2a:d8:d9:82:04:49:5a:0e:f9:a7:40:05: 6e:8f:fd:e1:79:71:28:28:e9:ac:55:31:22:75:0a: 59:64:d9:14:4a:b6:0c:0e:5b:2e:c1:5a:c5:76:5d: 0c:47:a4:3e:c0:62:46:a6:14:fa:1f:c3:f3:af:11: 15:6b:5b:d3:d5:95:3c:79:30:db:7d:9a:3f:bc:f0: 81:f3:d8:20:af:af:9c:85:63:65:1b:18:ac:de:fc: 20:15:72:dd:c2:9b:5a:8e:90:c8:0d:26:0f:30:cd: 72:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FB:92:9D:A2:D5:3D:CF:BF:93:1A:7F:03:F2:62:38:6F:7F:9C:DC X509v3 Authority Key Identifier: keyid:9D:8E:FC:0D:64:AA:98:41:BE:1E:38:43:21:BB:2C:12:15:3F:F1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c5:46:92:f2:be:25:40:b1:32:84:6b:3b:66:87:70:81:5a: 2e:d3:f5:8e:c1:da:c4:88:c6:f4:54:fe:98:aa:13:5e:ff:de: 8f:2a:67:ec:34:14:f5:92:b9:31:b6:65:a5:00:96:c9:62:e8: 8f:f4:18:73:e4:6e:ea:15:fd:fb:e6:dd:c7:91:da:4f:6d:21: 44:16:16:fc:3c:29:0a:6a:0a:ea:31:06:4e:60:67:00:71:ec: 9d:a1:64:e6:94:18:43:04:a8:9f:13:65:5e:30:c4:b0:ca:bd: 3d:aa:53:9a:bd:69:4a:b0:81:c2:21:d3:cc:24:20:21:0e:dc: ea:ab:8d:dd:a8:3b:c3:d8:dc:9d:8b:0b:1d:6c:0d:61:e7:f3: 89:b5:5d:2c:12:cf:62:1d:b2:14:6a:7d:eb:76:b9:f9:3c:cb: 64:56:82:e2:91:ae:0c:43:ef:45:e5:90:17:b9:51:b4:07:7c: 90:a5:c1:08:1e:bc:4c:b3:6b:d3:d8:f4:49:f2:cc:ab:9a:1c: 5e:25:e4:af:e3:a8:4d:6b:c5:a8:88:88:79:c4:fa:f6:c3:e8: 28:3b:fa:f9:da:0d:3f:e3:31:78:cf:a2:30:d2:1e:b3:6a:6f: 83:09:86:ca:07:e8:10:d2:71:71:6e:ad:c6:f3:f1:88:6d:81: 91:e8:8c:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTgfsTO3WCACxxmCNJsvGWsikH/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ4RUZDMEQ2NEFBOTg0MUJFMUUzODQzMjFCQjJDMTIx NTNGRjFEOTAeFw0yNjA5MDMwMzU3NDVaFw0yNjA5MDQwNTAyNDVaMDMxMTAvBgNV BAMTKERERkI5MjlEQTJENTNEQ0ZCRjkzMUE3RjAzRjI2MjM4NkY3RjlDREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRBKx6vvYK/Kq2rtGExhebvBp/ CtP/gaNOFhaa2CPsM823Q6OFxdUn05TjwZvyhYcMcdHgyTxhNXOWetp9KYCcLNfZ LG0w75ifpUvcZTy2MeEIKZlv5dd34UOdLyeD3YuGjzbG2RfgkPkn3pmE5vzG2+1j sn+SkRzdQbvw2BLWialG5p7VHmKx8daSNGZXAh617jU0V3dxAirY2YIESVoO+adA BW6P/eF5cSgo6axVMSJ1Cllk2RRKtgwOWy7BWsV2XQxHpD7AYkamFPofw/OvERVr W9PVlTx5MNt9mj+88IHz2CCvr5yFY2UbGKze/CAVct3Cm1qOkMgNJg8wzXJLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3fuSnaLVPc+/kxp/A/JiOG9/nNwwHwYDVR0j BBgwFoAUnY78DWSqmEG+HjhDIbssEhU/8dkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDFkNTFkNDEtYjZjYy00MjBhLWI1YTgtNjdjOGJkNmIwMmFmLzAvOUQ4RUZDMEQ2 NEFBOTg0MUJFMUUzODQzMjFCQjJDMTIxNTNGRjFEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDhFRkMwRDY0QUE5ODQxQkUxRTM4NDMyMUJCMkMxMjE1M0ZG MUQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDFkNTFkNDEtYjZjYy00MjBhLWI1 YTgtNjdjOGJkNmIwMmFmLzAvOUQ4RUZDMEQ2NEFBOTg0MUJFMUUzODQzMjFCQjJD MTIxNTNGRjFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3FRpLyviVAsTKEaztmh3CBWi7T9Y7B2sSI xvRU/piqE17/3o8qZ+w0FPWSuTG2ZaUAlsli6I/0GHPkbuoV/fvm3ceR2k9tIUQW Fvw8KQpqCuoxBk5gZwBx7J2hZOaUGEMEqJ8TZV4wxLDKvT2qU5q9aUqwgcIh08wk ICEO3Oqrjd2oO8PY3J2LCx1sDWHn84m1XSwSz2IdshRqfet2ufk8y2RWguKRrgxD 70XlkBe5UbQHfJClwQgevEyza9PY9EnyzKuaHF4l5K/jqE1rxaiIiHnE+vbD6Cg7 +vnaDT/jMXjPojDSHrNqb4MJhsoH6BDScXFurcbz8YhtgZHojNY= -----END CERTIFICATE-----Generated at Thu Sep 3 12:39:44 2026 by rpki-client