$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft File: 9EDB723FFE084B9B87B5B0A108574335936817FB.mft (raw, json) Hash identifier: RrP+2opf+Y2GhajIprOZzQOMRXZcj2qHmq3w7k7ORog= Subject key identifier: 04:54:7B:25:57:E6:C6:3A:49:CB:85:F9:8B:D0:C7:D4:DF:B7:C5:E7 Authority key identifier: 9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB Certificate issuer: /CN=9EDB723FFE084B9B87B5B0A108574335936817FB Certificate serial: 33C0B1BFA7F05B02867B8AC38C6ED0D24A1550B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 15:32:03 +0000 Manifest this update: Wed 02 Sep 2026 15:27:03 +0000 Manifest next update: Thu 03 Sep 2026 17:07:03 +0000 Files and hashes: 1: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: TKijjNdinkZx0yUPQ2piNtCq6wNxlLJwsDj7lMp8o1A=) 2: 9EDB723FFE084B9B87B5B0A108574335936817FB.crl (hash: EHELRbkAl/e3f/awChKpeBv8tbH+btNCU+3E6bwvzDc=) 3: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: i1PCAoIZ8GEBtvqZu9y6RsJ/+cUgKfG+tpL6n+2MQ0w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 17:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c0:b1:bf:a7:f0:5b:02:86:7b:8a:c3:8c:6e:d0:d2:4a:15:50:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EDB723FFE084B9B87B5B0A108574335936817FB Validity Not Before: Sep 2 15:27:03 2026 GMT Not After : Sep 3 17:07:03 2026 GMT Subject: CN=04547B2557E6C63A49CB85F98BD0C7D4DFB7C5E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a6:81:c8:1d:a3:5e:02:11:bb:80:4b:54:d0: 05:09:d5:1d:fb:04:65:4e:cf:ec:c6:ba:98:2f:72: 10:1b:d8:05:57:2c:d2:8c:7b:e0:16:7f:d6:17:83: 07:23:c0:d6:44:5a:f1:02:33:3f:de:d6:fa:61:d9: c7:b7:6f:3e:d1:fb:f1:77:0c:b8:8f:8c:30:37:36: 47:33:9c:1b:1c:68:59:5a:98:c8:0b:78:77:87:66: e1:e7:89:37:4d:0c:03:49:d5:df:78:34:8a:1a:75: 2f:1e:7a:3a:dc:4e:13:5b:85:05:63:8e:8d:57:09: f6:75:0d:5b:c4:1f:4b:28:e5:21:ca:b1:b7:02:db: 89:65:15:c8:e2:40:30:6c:2a:d3:75:71:04:c3:47: df:b7:67:39:87:f6:61:07:7d:fd:14:b2:c9:52:e6: 4e:7a:91:9f:b1:76:67:b8:79:d9:dc:85:39:f1:53: 05:a5:de:1e:a7:b8:15:d1:fc:14:37:2d:79:bc:77: 72:35:24:73:23:bf:36:71:18:54:eb:f2:d4:07:33: 93:44:8a:3c:2b:d2:d8:e2:01:fd:5a:b1:fc:1a:a0: 72:fe:78:de:08:e5:28:0f:df:74:19:f9:ae:d8:ab: 51:5d:f6:e5:64:5d:35:21:0e:eb:5f:1d:33:23:fe: 39:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:54:7B:25:57:E6:C6:3A:49:CB:85:F9:8B:D0:C7:D4:DF:B7:C5:E7 X509v3 Authority Key Identifier: keyid:9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ff:20:43:8b:f0:f4:01:bc:94:7c:5b:79:fa:88:a6:b6:df: bc:65:74:8a:5e:c6:27:4f:1f:e9:6e:40:65:d5:43:24:a3:2e: b8:a5:e9:df:d2:79:97:d7:5c:e8:05:fe:bd:7f:3c:89:09:c3: 58:92:ff:78:bd:ce:18:fa:9d:b3:6a:96:52:5e:cc:90:33:13: ae:74:3d:83:b3:af:fc:7f:ac:08:42:e1:23:f2:60:e4:bd:49: 42:fa:52:b9:37:7b:6e:19:cc:fe:8d:e4:de:78:a2:62:45:d8: 90:6d:cb:0a:2c:c2:98:b9:e9:bd:2d:e4:78:15:9b:65:30:4b: 33:31:8f:4a:3e:19:8c:3c:bf:30:99:c3:18:11:85:f2:61:5b: 12:65:50:99:4d:0c:4e:64:db:dd:0d:f5:d8:35:60:11:c6:c1: 0e:cd:9d:e0:31:49:06:2a:bc:3b:51:9e:3d:88:29:6f:26:1e: 3b:b6:2c:00:85:f1:1b:53:2c:e4:e6:72:03:af:27:a8:3f:cd: d5:99:fa:d2:52:de:d8:98:e8:5d:e7:68:22:07:11:f2:1a:a7: f7:b7:86:ad:60:b2:c2:d0:38:25:60:99:ee:23:47:31:4b:0b: 83:43:b7:a3:f8:66:02:27:36:97:01:8d:51:1f:15:e5:63:11: 94:6c:28:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM8Cxv6fwWwKGe4rDjG7Q0koVULUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVEQjcyM0ZGRTA4NEI5Qjg3QjVCMEExMDg1NzQzMzU5 MzY4MTdGQjAeFw0yNjA5MDIxNTI3MDNaFw0yNjA5MDMxNzA3MDNaMDMxMTAvBgNV BAMTKDA0NTQ3QjI1NTdFNkM2M0E0OUNCODVGOThCRDBDN0Q0REZCN0M1RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfpoHIHaNeAhG7gEtU0AUJ1R37 BGVOz+zGupgvchAb2AVXLNKMe+AWf9YXgwcjwNZEWvECMz/e1vph2ce3bz7R+/F3 DLiPjDA3NkcznBscaFlamMgLeHeHZuHniTdNDANJ1d94NIoadS8eejrcThNbhQVj jo1XCfZ1DVvEH0so5SHKsbcC24llFcjiQDBsKtN1cQTDR9+3ZzmH9mEHff0UsslS 5k56kZ+xdme4ednchTnxUwWl3h6nuBXR/BQ3LXm8d3I1JHMjvzZxGFTr8tQHM5NE ijwr0tjiAf1asfwaoHL+eN4I5SgP33QZ+a7Yq1Fd9uVkXTUhDutfHTMj/jnZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBFR7JVfmxjpJy4X5i9DH1N+3xecwHwYDVR0j BBgwFoAUnttyP/4IS5uHtbChCFdDNZNoF/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTBiYTk3ZWYtN2JjOC00NWI4LTgyYWItZjg1NTMzY2FlZGY0LzAvOUVEQjcyM0ZG RTA4NEI5Qjg3QjVCMEExMDg1NzQzMzU5MzY4MTdGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RURCNzIzRkZFMDg0QjlCODdCNUIwQTEwODU3NDMzNTkzNjgx N0ZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTBiYTk3ZWYtN2JjOC00NWI4LTgy YWItZjg1NTMzY2FlZGY0LzAvOUVEQjcyM0ZGRTA4NEI5Qjg3QjVCMEExMDg1NzQz MzU5MzY4MTdGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHn/IEOL8PQBvJR8W3n6iKa237xldIpexidP H+luQGXVQySjLril6d/SeZfXXOgF/r1/PIkJw1iS/3i9zhj6nbNqllJezJAzE650 PYOzr/x/rAhC4SPyYOS9SUL6Urk3e24ZzP6N5N54omJF2JBtywoswpi56b0t5HgV m2UwSzMxj0o+GYw8vzCZwxgRhfJhWxJlUJlNDE5k290N9dg1YBHGwQ7NneAxSQYq vDtRnj2IKW8mHju2LACF8RtTLOTmcgOvJ6g/zdWZ+tJS3tiY6F3naCIHEfIap/e3 hq1gssLQOCVgme4jRzFLC4NDt6P4ZgInNpcBjVEfFeVjEZRsKEk= -----END CERTIFICATE-----Generated at Thu Sep 3 05:58:37 2026 by rpki-client