$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft File: 9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft (raw, json) Hash identifier: 6Esz2kTCsBsogYx7fzW8YemRdBLS6q3oQX9PpYBfcJg= Subject key identifier: 57:B9:82:C8:EC:A2:56:F0:2E:0D:8C:CB:21:4A:1C:D7:94:90:E1:3F Authority key identifier: 9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00 Certificate issuer: /CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800 Certificate serial: 77FF17601CD8C010F42179896BD48613295A7B7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 18:40:36 +0000 Manifest this update: Wed 02 Sep 2026 18:35:36 +0000 Manifest next update: Thu 03 Sep 2026 21:45:36 +0000 Files and hashes: 1: 3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (hash: WkzU0ifpIbp5OQ/6TDxMH+vwFG2tqv2mqNzHskMqmF0=) 2: 3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (hash: 2N+TEQ769mQU4C1i4Rld3w1DT7X5Tq5lgzhroXjz5Hg=) 3: 9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl (hash: 8BwCbTxSA4ZwmYP7kO7e8dzPiv9QsXc1INGkBtZq3LE=) 4: 3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (hash: J9RbUPOqUx6qGs/3TSnBbVnRso5umnmyOklAgJwt1Js=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ff:17:60:1c:d8:c0:10:f4:21:79:89:6b:d4:86:13:29:5a:7b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800 Validity Not Before: Sep 2 18:35:36 2026 GMT Not After : Sep 3 21:45:36 2026 GMT Subject: CN=57B982C8ECA256F02E0D8CCB214A1CD79490E13F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a3:16:33:47:5f:d9:b8:0a:03:e4:e1:d1:2b: 8d:34:9d:c8:26:ec:f1:48:7b:da:68:c5:ba:86:b3: 6d:58:f9:ad:77:ee:12:d3:fd:e2:de:75:17:fe:fc: 46:99:7e:5c:35:6d:9e:df:ce:16:b5:37:15:32:5b: e0:07:87:b9:e0:a4:5a:74:f0:e2:b2:39:25:8c:ca: 0d:7e:d1:f1:0e:28:76:24:4d:20:53:d0:46:50:de: 2a:f5:ee:a2:b5:6e:52:f7:22:cb:ce:57:13:78:bc: a3:6b:e0:06:af:c4:e0:61:57:f8:7f:38:e8:69:85: 10:03:4e:f4:ab:3f:27:dc:89:92:e0:ef:f1:a9:97: 5b:41:99:6a:2b:0a:cc:d8:f9:20:82:e2:0c:c4:54: 89:07:d3:97:70:e6:12:ec:99:14:cb:30:4d:74:2e: 53:53:d8:4a:b8:5a:fa:e0:71:5a:fb:5b:34:67:a3: af:86:83:3b:a5:b5:a9:80:85:54:ea:9a:5e:20:79: c5:f5:a1:87:98:4b:24:84:eb:f1:44:47:9e:04:17: 99:58:63:17:80:30:ae:58:97:1a:29:a8:f9:e6:d5: 2c:74:c5:a3:74:ac:d2:de:ff:6f:45:6f:5d:e4:49: 2d:0a:3c:4c:c0:e4:39:42:f0:f3:c0:94:8d:44:e8: 55:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B9:82:C8:EC:A2:56:F0:2E:0D:8C:CB:21:4A:1C:D7:94:90:E1:3F X509v3 Authority Key Identifier: keyid:9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:05:ef:ef:99:da:ad:c7:d9:c8:cc:ae:77:d3:24:cd:8e:5a: 4c:4f:dd:60:5f:ad:b7:f6:9c:b0:d1:dc:50:60:21:8c:d9:13: f0:e1:0a:db:ba:cc:31:81:1d:59:b4:ef:b5:2d:5e:ee:a0:fa: 29:8c:c1:2b:b9:af:b0:5e:a9:2e:99:c6:8d:20:32:2d:99:a5: 20:a4:19:1f:c9:78:93:bd:14:1d:f0:32:57:96:9c:0c:9a:ba: 8c:cc:8f:f0:9b:c7:b3:4b:28:08:74:d4:54:d1:ff:9d:f2:5a: 6f:32:3f:c7:34:6f:ff:7a:fd:a0:35:9a:84:25:e0:b2:ce:0e: a6:0f:19:08:a1:40:7d:b3:64:0b:27:0f:de:9f:c6:44:cf:86: d2:99:12:5d:a0:d9:9c:f6:31:8a:99:4d:40:0c:e3:7e:6f:ae: 71:5c:8a:51:83:71:6b:70:77:92:20:25:72:07:39:87:08:87: ef:32:ed:ba:20:80:41:73:84:72:aa:90:b0:de:cb:be:39:0f: 0a:5e:0f:ed:9c:33:4b:03:c0:6c:4c:dd:cf:3e:64:ff:2b:af: bf:f7:68:ce:dc:74:46:30:38:f7:64:76:c0:fa:0d:34:cd:e2: 3f:7b:b5:c8:0c:df:ec:8d:15:13:48:c8:5e:71:aa:44:aa:65: 26:51:b3:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd/8XYBzYwBD0IXmJa9SGEylae38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJENzU5OTkyM0I4RkI4QzgzQUIzQjMwMjg3RkJDQzZB OTg3NDgwMDAeFw0yNjA5MDIxODM1MzZaFw0yNjA5MDMyMTQ1MzZaMDMxMTAvBgNV BAMTKDU3Qjk4MkM4RUNBMjU2RjAyRTBEOENDQjIxNEExQ0Q3OTQ5MEUxM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWoxYzR1/ZuAoD5OHRK400ncgm 7PFIe9poxbqGs21Y+a137hLT/eLedRf+/EaZflw1bZ7fzha1NxUyW+AHh7ngpFp0 8OKyOSWMyg1+0fEOKHYkTSBT0EZQ3ir17qK1blL3IsvOVxN4vKNr4AavxOBhV/h/ OOhphRADTvSrPyfciZLg7/Gpl1tBmWorCszY+SCC4gzEVIkH05dw5hLsmRTLME10 LlNT2Eq4WvrgcVr7WzRno6+GgzultamAhVTqml4gecX1oYeYSySE6/FER54EF5lY YxeAMK5YlxopqPnm1Sx0xaN0rNLe/29Fb13kSS0KPEzA5DlC8PPAlI1E6FX/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV7mCyOyiVvAuDYzLIUoc15SQ4T8wHwYDVR0j BBgwFoAUm9dZmSO4+4yDqzswKH+8xqmHSAAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGIzODhmNmUtOTk3NC00NDU3LWFmNGItNWM5YzgyZjUwZTk3LzAvOUJENzU5OTky M0I4RkI4QzgzQUIzQjMwMjg3RkJDQzZBOTg3NDgwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkQ3NTk5OTIzQjhGQjhDODNBQjNCMzAyODdGQkNDNkE5ODc0 ODAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGIzODhmNmUtOTk3NC00NDU3LWFm NGItNWM5YzgyZjUwZTk3LzAvOUJENzU5OTkyM0I4RkI4QzgzQUIzQjMwMjg3RkJD QzZBOTg3NDgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUF7++Z2q3H2cjMrnfTJM2OWkxP3WBfrbf2 nLDR3FBgIYzZE/DhCtu6zDGBHVm077UtXu6g+imMwSu5r7BeqS6Zxo0gMi2ZpSCk GR/JeJO9FB3wMleWnAyauozMj/Cbx7NLKAh01FTR/53yWm8yP8c0b/96/aA1moQl 4LLODqYPGQihQH2zZAsnD96fxkTPhtKZEl2g2Zz2MYqZTUAM435vrnFcilGDcWtw d5IgJXIHOYcIh+8y7boggEFzhHKqkLDey745DwpeD+2cM0sDwGxM3c8+ZP8rr7/3 aM7cdEYwOPdkdsD6DTTN4j97tcgM3+yNFRNIyF5xqkSqZSZRs/k= -----END CERTIFICATE-----Generated at Thu Sep 3 09:34:03 2026 by rpki-client