$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft File: 9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft (raw, json) Hash identifier: nUaRDRcX7KjVRo8jUbBnG+gVA652XScR6pa5H/5evFQ= Subject key identifier: 5D:49:16:CA:B5:66:39:D2:B6:2F:E1:A4:5E:2B:A7:3F:18:1A:F3:34 Authority key identifier: 9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF Certificate issuer: /CN=9B995ECA9CF77E66AB04370A6C3562ADCD7413EF Certificate serial: 4A0F32004EE08E7FEA838FC454138C090590744E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 03:47:31 +0000 Manifest this update: Thu 03 Sep 2026 03:42:31 +0000 Manifest next update: Fri 04 Sep 2026 06:14:31 +0000 Files and hashes: 1: 3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa (hash: 0GXiVqHET4FIeA3plxHWjQU7xk7vNPKZIk6ziqpvvGY=) 2: 3130332e3133302e38332e302f32342d3234203d3e20313530393636.roa (hash: +yASWV2qPXNVH0dMs+ql82F9yTnpzpBrn8UO30QUNqI=) 3: 9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl (hash: zgtyeO6/2hLM/6zFI8GQ61TQtHkAZPHNwMiilGezaFw=) 4: 3130332e3133302e38322e302f32332d3233203d3e20313530393636.roa (hash: oYvVYAWqY5/XajF618G7pKQtRtEqOMlHPhGTTZeide8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:0f:32:00:4e:e0:8e:7f:ea:83:8f:c4:54:13:8c:09:05:90:74:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B995ECA9CF77E66AB04370A6C3562ADCD7413EF Validity Not Before: Sep 3 03:42:31 2026 GMT Not After : Sep 4 06:14:31 2026 GMT Subject: CN=5D4916CAB56639D2B62FE1A45E2BA73F181AF334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:02:e0:5a:36:4c:b9:c8:64:a2:8c:29:ed:ff: 31:f0:68:09:34:72:5a:2b:93:43:3a:d5:66:16:38: ff:c9:cf:9f:5f:41:7b:df:4b:bf:08:4a:9a:fc:80: 01:f4:25:bc:8c:fe:f1:08:99:01:25:a9:2c:f5:65: 12:65:cd:f3:6f:1c:ec:b7:98:b4:b3:aa:66:63:8c: 1b:2e:aa:31:38:0d:3d:33:eb:44:4f:d1:5f:5f:df: d2:8d:b9:11:90:25:37:b2:ff:98:32:0f:24:22:00: bd:9c:3b:09:76:6e:46:a6:48:cc:d5:2e:23:f2:b7: 9d:24:81:70:5e:52:be:08:8c:f7:7b:ed:36:4e:d5: f5:b2:1c:ca:22:c1:e0:04:b5:40:e1:cc:24:86:74: 08:8b:20:da:ec:21:19:0f:03:84:85:d2:05:a2:2d: 87:44:f9:d1:08:b9:36:89:c1:13:52:60:04:2a:53: 5d:79:f5:f1:2a:9d:75:c5:15:d2:cd:21:1d:63:e7: 60:1b:56:75:5f:17:4a:0b:fc:84:b7:5f:32:9a:fa: f1:d1:92:6e:99:a5:1c:5f:6a:24:ff:fa:53:c1:2a: 08:5f:ab:bb:80:49:da:10:97:22:5f:cb:d1:74:7e: 6e:73:10:19:6b:09:42:b7:df:64:a5:22:d7:74:6a: ce:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:49:16:CA:B5:66:39:D2:B6:2F:E1:A4:5E:2B:A7:3F:18:1A:F3:34 X509v3 Authority Key Identifier: keyid:9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:e3:7a:c8:cd:6e:65:7c:32:36:ab:2a:43:87:c9:ad:9d:21: cb:93:e4:d5:d4:c6:6c:5b:c7:2f:b0:0f:e1:7f:82:61:1e:78: 16:48:67:42:aa:99:d2:d7:07:46:0d:02:63:7b:a1:dc:91:92: ab:53:0c:1f:26:1f:cb:21:95:14:12:e4:63:dd:17:28:e7:ff: 31:78:ca:3d:04:88:91:d5:8f:46:6e:d3:8c:49:94:65:eb:22: 7e:6f:91:a4:45:96:7a:68:4e:28:66:7a:b1:bd:09:d3:c0:af: cf:89:36:ed:e3:ec:c6:10:13:69:d3:86:b4:f4:3c:a1:e3:29: ea:f2:76:86:6a:50:32:d2:6e:44:e0:80:75:61:9b:68:6c:19: 24:8c:68:44:1f:92:75:fa:84:fd:0b:b4:70:32:d6:1b:93:37: 51:b2:f0:29:82:0c:df:6f:c3:85:5d:b4:ca:94:30:49:b9:60: 04:f8:65:23:43:ec:c0:e5:22:2c:48:41:f1:62:b5:20:7e:ee: 89:4c:87:94:5d:a3:2a:bf:cf:41:ce:12:ff:37:d6:24:9b:7c: 61:d4:cd:13:42:55:92:a8:bf:44:ad:1b:7a:71:51:a7:90:ef: fa:ec:1f:8b:33:fa:03:ae:d6:34:32:12:4c:ad:6e:01:ac:5a: e1:3f:8b:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSg8yAE7gjn/qg4/EVBOMCQWQdE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI5OTVFQ0E5Q0Y3N0U2NkFCMDQzNzBBNkMzNTYyQURD RDc0MTNFRjAeFw0yNjA5MDMwMzQyMzFaFw0yNjA5MDQwNjE0MzFaMDMxMTAvBgNV BAMTKDVENDkxNkNBQjU2NjM5RDJCNjJGRTFBNDVFMkJBNzNGMTgxQUYzMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjAuBaNky5yGSijCnt/zHwaAk0 clork0M61WYWOP/Jz59fQXvfS78ISpr8gAH0JbyM/vEImQElqSz1ZRJlzfNvHOy3 mLSzqmZjjBsuqjE4DT0z60RP0V9f39KNuRGQJTey/5gyDyQiAL2cOwl2bkamSMzV LiPyt50kgXBeUr4IjPd77TZO1fWyHMoiweAEtUDhzCSGdAiLINrsIRkPA4SF0gWi LYdE+dEIuTaJwRNSYAQqU1159fEqnXXFFdLNIR1j52AbVnVfF0oL/IS3XzKa+vHR km6ZpRxfaiT/+lPBKghfq7uASdoQlyJfy9F0fm5zEBlrCUK332SlItd0as4XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXUkWyrVmOdK2L+GkXiunPxga8zQwHwYDVR0j BBgwFoAUm5leypz3fmarBDcKbDVirc10E+8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE4NzA2NGItNWYyNy00MjcwLTkwZTQtOTlmNDNhZTg0ZGI3LzAvOUI5OTVFQ0E5 Q0Y3N0U2NkFCMDQzNzBBNkMzNTYyQURDRDc0MTNFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85Qjk5NUVDQTlDRjc3RTY2QUIwNDM3MEE2QzM1NjJBRENENzQx M0VGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE4NzA2NGItNWYyNy00MjcwLTkw ZTQtOTlmNDNhZTg0ZGI3LzAvOUI5OTVFQ0E5Q0Y3N0U2NkFCMDQzNzBBNkMzNTYy QURDRDc0MTNFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALnjesjNbmV8MjarKkOHya2dIcuT5NXUxmxb xy+wD+F/gmEeeBZIZ0KqmdLXB0YNAmN7odyRkqtTDB8mH8shlRQS5GPdFyjn/zF4 yj0EiJHVj0Zu04xJlGXrIn5vkaRFlnpoTihmerG9CdPAr8+JNu3j7MYQE2nThrT0 PKHjKerydoZqUDLSbkTggHVhm2hsGSSMaEQfknX6hP0LtHAy1huTN1Gy8CmCDN9v w4VdtMqUMEm5YAT4ZSND7MDlIixIQfFitSB+7olMh5Rdoyq/z0HOEv831iSbfGHU zRNCVZKov0StG3pxUaeQ7/rsH4sz+gOu1jQyEkytbgGsWuE/i2Q= -----END CERTIFICATE-----Generated at Thu Sep 3 05:58:58 2026 by rpki-client