$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft File: C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft (raw, json) Hash identifier: LWGX1yk18vDBNFbzuvV+smABOMu3C2gv9vf83JRko8U= Subject key identifier: 8B:D1:E3:C3:9D:D1:C7:E5:89:41:F8:12:26:FE:46:3D:F2:BB:CA:DC Authority key identifier: C9:BA:0F:8C:78:B3:A4:E5:D2:8E:CD:1C:51:7D:C9:84:38:50:87:CA Certificate issuer: /CN=C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA Certificate serial: 19E7285771BC7976B8C154D02271703E1AB3A4C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 08:54:29 +0000 Manifest this update: Wed 02 Sep 2026 08:49:29 +0000 Manifest next update: Thu 03 Sep 2026 12:15:29 +0000 Files and hashes: 1: 3130332e3136372e3136372e302f32342d3234203d3e20313431393834.roa (hash: Ivj60OCLGb1xn+8XUcVw7dceegfwRxZ/Fq0NrXLwLn4=) 2: C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl (hash: bJ7+D3zu0GeYv44aPrpS5SOUKkmL36kOY1M+XusG+1U=) 3: 3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa (hash: 45s4cJ7R43K0N6OFbVA9LlP5PkcF712Aofyn3c/ko+0=) 4: 3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa (hash: qWv000ASHZPLikMYj8Wss1d2EPIqC0119NVLho36do8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 12:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e7:28:57:71:bc:79:76:b8:c1:54:d0:22:71:70:3e:1a:b3:a4:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA Validity Not Before: Sep 2 08:49:29 2026 GMT Not After : Sep 3 12:15:29 2026 GMT Subject: CN=8BD1E3C39DD1C7E58941F81226FE463DF2BBCADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fb:53:fe:d6:88:f0:ba:0b:58:3f:d2:9d:67: 20:1d:03:c9:67:58:6b:f8:cd:09:1f:17:90:0d:f1: af:d9:b1:db:1e:34:50:49:64:dc:de:08:c6:da:20: 29:17:24:de:12:69:70:91:40:cf:a3:50:0a:ff:fd: 22:40:1b:58:5e:b8:72:fd:e5:d9:4a:35:56:aa:12: e1:fd:c7:f1:a9:3a:52:2f:66:9c:ee:45:94:29:ca: 71:ae:84:2a:b5:2b:11:bf:f6:9a:45:9a:6e:3f:f8: df:85:21:ea:82:7c:cb:19:6f:87:01:ec:de:51:ae: ff:f2:a1:61:eb:52:32:09:4a:be:65:6f:f7:07:35: 3d:6e:62:b4:51:65:bb:17:75:4e:a4:9d:dc:3f:9a: 98:53:ad:9e:20:bf:cc:25:56:bb:bb:7a:a0:bc:b0: 4e:67:df:cd:7a:57:4a:2f:66:97:25:21:3c:3c:d4: ec:09:75:06:3e:51:8d:7a:b5:8e:4c:8f:c5:10:0f: 66:9a:ba:f0:65:ce:d1:9b:d4:5c:1d:29:77:cf:3a: 3a:d7:70:ae:b7:8f:96:27:61:d5:e4:cc:6a:4b:d4: 70:37:3e:39:3d:2d:c2:90:95:47:a6:0b:40:d9:e2: 93:64:62:e4:5c:d8:ae:ac:4b:6b:6e:55:a4:6b:3a: 94:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D1:E3:C3:9D:D1:C7:E5:89:41:F8:12:26:FE:46:3D:F2:BB:CA:DC X509v3 Authority Key Identifier: keyid:C9:BA:0F:8C:78:B3:A4:E5:D2:8E:CD:1C:51:7D:C9:84:38:50:87:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:99:1a:77:66:d0:2c:3a:29:e4:17:e5:e0:53:18:f8:b3:9e: ca:7f:cc:07:cd:09:88:60:9b:73:db:44:d1:bb:01:5f:da:da: b8:d7:28:1f:7a:3d:6d:98:62:eb:42:95:15:4c:16:17:1a:70: 34:6a:94:95:ef:ba:28:dc:f7:0f:b0:c8:e5:21:e4:f8:1c:5a: cd:67:67:7f:f4:4d:1f:e3:74:a6:a6:d5:57:1d:6f:1c:be:16: 7a:1f:f7:82:81:10:2b:5b:16:41:ca:05:b1:4f:22:85:ba:22: d6:ab:a2:28:12:a6:17:33:23:db:02:d0:9e:59:dd:fc:51:88: 79:1a:9f:6d:47:62:f3:a5:0d:b5:cf:b8:c7:56:4b:2f:45:76: 8e:03:4d:29:64:5a:06:96:e7:3b:44:a8:3e:e5:36:00:19:c6: ce:c8:eb:7b:86:29:25:36:09:df:6f:29:f8:1b:45:6e:e0:a5: f4:d2:c8:92:e9:ed:94:14:5c:d7:2a:3a:22:e2:00:15:fa:45: fa:b4:97:fa:72:ac:28:1f:d5:7a:05:71:0d:1f:06:e7:5b:51: 80:99:50:04:81:e7:12:7a:28:ef:98:6c:30:8e:08:ff:1a:67: b4:94:c4:89:57:f2:ef:dd:06:8c:a3:2e:58:98:e6:78:b1:aa: a8:f8:76:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGecoV3G8eXa4wVTQInFwPhqzpMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTBGOEM3OEIzQTRFNUQyOEVDRDFDNTE3REM5ODQz ODUwODdDQTAeFw0yNjA5MDIwODQ5MjlaFw0yNjA5MDMxMjE1MjlaMDMxMTAvBgNV BAMTKDhCRDFFM0MzOUREMUM3RTU4OTQxRjgxMjI2RkU0NjNERjJCQkNBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK+1P+1ojwugtYP9KdZyAdA8ln WGv4zQkfF5AN8a/ZsdseNFBJZNzeCMbaICkXJN4SaXCRQM+jUAr//SJAG1heuHL9 5dlKNVaqEuH9x/GpOlIvZpzuRZQpynGuhCq1KxG/9ppFmm4/+N+FIeqCfMsZb4cB 7N5Rrv/yoWHrUjIJSr5lb/cHNT1uYrRRZbsXdU6kndw/mphTrZ4gv8wlVru7eqC8 sE5n3816V0ovZpclITw81OwJdQY+UY16tY5Mj8UQD2aauvBlztGb1FwdKXfPOjrX cK63j5YnYdXkzGpL1HA3Pjk9LcKQlUemC0DZ4pNkYuRc2K6sS2tuVaRrOpQDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi9Hjw53Rx+WJQfgSJv5GPfK7ytwwHwYDVR0j BBgwFoAUyboPjHizpOXSjs0cUX3JhDhQh8owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU0MGNmODAtOTMxNS00MmMxLTg0NGUtYmIwMzYyMmEwNWMxLzAvQzlCQTBGOEM3 OEIzQTRFNUQyOEVDRDFDNTE3REM5ODQzODUwODdDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUJBMEY4Qzc4QjNBNEU1RDI4RUNEMUM1MTdEQzk4NDM4NTA4 N0NBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU0MGNmODAtOTMxNS00MmMxLTg0 NGUtYmIwMzYyMmEwNWMxLzAvQzlCQTBGOEM3OEIzQTRFNUQyOEVDRDFDNTE3REM5 ODQzODUwODdDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSZGndm0Cw6KeQX5eBTGPiznsp/zAfNCYhg m3PbRNG7AV/a2rjXKB96PW2YYutClRVMFhcacDRqlJXvuijc9w+wyOUh5PgcWs1n Z3/0TR/jdKam1Vcdbxy+Fnof94KBECtbFkHKBbFPIoW6ItaroigSphczI9sC0J5Z 3fxRiHkan21HYvOlDbXPuMdWSy9Fdo4DTSlkWgaW5ztEqD7lNgAZxs7I63uGKSU2 Cd9vKfgbRW7gpfTSyJLp7ZQUXNcqOiLiABX6Rfq0l/pyrCgf1XoFcQ0fBudbUYCZ UASB5xJ6KO+YbDCOCP8aZ7SUxIlX8u/dBoyjLliY5nixqqj4dt8= -----END CERTIFICATE-----Generated at Thu Sep 3 05:11:48 2026 by rpki-client