$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft File: 9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft (raw, json) Hash identifier: +B4K9ssIPDjkrcXIibJ4yf+v9P4gxptcc1hlcv8NL3E= Subject key identifier: 42:3B:92:66:02:0E:2C:41:95:03:BD:3D:FF:7B:17:64:8E:28:31:6C Authority key identifier: 9F:0E:DA:9B:A3:F7:B2:4D:18:F6:E1:7A:5B:61:08:F3:E9:EC:41:E4 Certificate issuer: /CN=9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4 Certificate serial: 7A4F0AC106F0B6C3DBCD9BFC5F5CF70DEC08728E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft Manifest number: A8 Signing time: Thu 03 Sep 2026 07:11:28 +0000 Manifest this update: Thu 03 Sep 2026 07:06:28 +0000 Manifest next update: Fri 04 Sep 2026 10:08:28 +0000 Files and hashes: 1: 9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.crl (hash: UZl/X9L/2mV8N8UYRLpfrkfpF7CBdwm9J3eMlDYY9ZU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.crl rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 10:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:4f:0a:c1:06:f0:b6:c3:db:cd:9b:fc:5f:5c:f7:0d:ec:08:72:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4 Validity Not Before: Sep 3 07:06:28 2026 GMT Not After : Sep 4 10:08:28 2026 GMT Subject: CN=423B9266020E2C419503BD3DFF7B17648E28316C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6c:dd:04:28:a2:c1:07:7d:d8:16:fe:a3:40: c1:8d:bf:a7:99:dc:69:fa:c1:66:54:e4:e2:2d:fd: ec:f0:7f:a7:31:19:29:b9:6d:a6:53:b7:41:af:02: 67:08:0f:4f:b5:ea:89:f7:23:03:a1:4b:48:c0:81: 9f:ed:d2:45:ae:1b:a9:97:9d:fd:08:60:80:98:21: 15:86:69:fe:0f:80:4a:56:d6:75:93:2e:22:d1:cf: 79:9d:01:df:6d:74:75:5a:aa:ac:95:c7:e4:d8:72: ab:67:f2:3f:c4:26:2c:d3:ab:25:f0:c2:59:94:bd: a1:e9:eb:6a:cb:50:ce:7a:53:d3:05:78:40:98:b4: 43:b8:33:9a:85:75:3e:ef:c3:3e:0f:7d:a8:35:b4: 72:44:9c:10:6b:a5:40:dc:74:59:dd:3d:ff:a6:03: d9:92:8b:74:7f:5f:9b:cc:f7:4c:d9:fe:7e:4f:ba: b3:8d:5a:b1:87:6b:df:55:77:e2:29:7d:a6:2d:94: de:b8:63:b1:e2:ac:cf:36:e2:ea:3e:0f:15:ed:5e: cf:ad:99:50:dc:d6:d4:60:5f:4a:55:ee:cb:f2:28: 6c:70:b1:9f:fb:3b:b1:9b:06:77:ee:07:f2:4c:44: 2d:5d:77:ae:39:11:d7:37:41:52:c5:05:fe:90:52: 8b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3B:92:66:02:0E:2C:41:95:03:BD:3D:FF:7B:17:64:8E:28:31:6C X509v3 Authority Key Identifier: keyid:9F:0E:DA:9B:A3:F7:B2:4D:18:F6:E1:7A:5B:61:08:F3:E9:EC:41:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:3a:bf:75:5f:45:48:34:ba:0e:fb:3e:8c:14:38:cd:b5:e1: 92:f7:38:c7:2c:88:8c:2d:b7:57:de:84:bd:4d:05:b9:76:ab: fa:62:c8:5c:5c:e4:e4:1d:f3:6c:b7:a8:0c:c4:38:fd:ae:a5: a5:dd:f5:b8:40:06:4c:7f:2a:bf:11:b0:f0:ef:dc:94:75:99: bb:21:1f:97:aa:3c:bc:ae:0f:ed:81:7f:de:09:28:b7:8b:e3: 5c:27:85:f6:2a:f9:2d:a2:1a:cb:9d:34:06:d1:32:57:6b:7b: ee:15:ad:dd:1d:b2:42:8d:0e:16:dc:64:e6:8c:78:dc:d4:62: b7:8e:89:24:cd:d5:81:2b:77:0a:dd:ce:21:4f:4f:16:7a:78: 9c:f3:dc:2e:61:6e:c9:89:91:78:ac:b1:04:5b:2b:26:2f:0a: 0d:8b:34:d1:9c:90:08:5e:49:9b:fe:43:44:05:15:8a:51:36: 37:a5:82:e8:71:dc:32:41:08:11:23:7e:12:b3:65:1d:84:68: 1c:eb:5d:c0:ab:f2:e5:ab:e6:9d:27:71:23:e3:b7:17:f0:7c: 33:01:61:f4:f1:62:dc:00:be:84:d6:48:f6:22:35:ef:7e:de: 35:21:a3:a4:b0:1e:e7:e1:d2:db:a6:63:99:01:c3:d6:03:18: 9a:d3:7f:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUek8KwQbwtsPbzZv8X1z3DewIco4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwRURBOUJBM0Y3QjI0RDE4RjZFMTdBNUI2MTA4RjNF OUVDNDFFNDAeFw0yNjA5MDMwNzA2MjhaFw0yNjA5MDQxMDA4MjhaMDMxMTAvBgNV BAMTKDQyM0I5MjY2MDIwRTJDNDE5NTAzQkQzREZGN0IxNzY0OEUyODMxNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNbN0EKKLBB33YFv6jQMGNv6eZ 3Gn6wWZU5OIt/ezwf6cxGSm5baZTt0GvAmcID0+16on3IwOhS0jAgZ/t0kWuG6mX nf0IYICYIRWGaf4PgEpW1nWTLiLRz3mdAd9tdHVaqqyVx+TYcqtn8j/EJizTqyXw wlmUvaHp62rLUM56U9MFeECYtEO4M5qFdT7vwz4Pfag1tHJEnBBrpUDcdFndPf+m A9mSi3R/X5vM90zZ/n5PurONWrGHa99Vd+IpfaYtlN64Y7HirM824uo+DxXtXs+t mVDc1tRgX0pV7svyKGxwsZ/7O7GbBnfuB/JMRC1dd645Edc3QVLFBf6QUosxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQjuSZgIOLEGVA709/3sXZI4oMWwwHwYDVR0j BBgwFoAUnw7am6P3sk0Y9uF6W2EI8+nsQeQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzAzODAyZTItMDNhZi00ZGQwLThkY2UtNTRjMjhhNzI1NjNkLzAvOUYwRURBOUJB M0Y3QjI0RDE4RjZFMTdBNUI2MTA4RjNFOUVDNDFFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjBFREE5QkEzRjdCMjREMThGNkUxN0E1QjYxMDhGM0U5RUM0 MUU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzAzODAyZTItMDNhZi00ZGQwLThk Y2UtNTRjMjhhNzI1NjNkLzAvOUYwRURBOUJBM0Y3QjI0RDE4RjZFMTdBNUI2MTA4 RjNFOUVDNDFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADo6v3VfRUg0ug77PowUOM214ZL3OMcsiIwt t1fehL1NBbl2q/piyFxc5OQd82y3qAzEOP2upaXd9bhABkx/Kr8RsPDv3JR1mbsh H5eqPLyuD+2Bf94JKLeL41wnhfYq+S2iGsudNAbRMldre+4Vrd0dskKNDhbcZOaM eNzUYreOiSTN1YErdwrdziFPTxZ6eJzz3C5hbsmJkXissQRbKyYvCg2LNNGckAhe SZv+Q0QFFYpRNjelguhx3DJBCBEjfhKzZR2EaBzrXcCr8uWr5p0ncSPjtxfwfDMB YfTxYtwAvoTWSPYiNe9+3jUho6SwHufh0tumY5kBw9YDGJrTf5M= -----END CERTIFICATE-----Generated at Thu Sep 3 20:48:20 2026 by rpki-client