$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft File: 9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft (raw, json) Hash identifier: NayG61Om0KQrVFE4QbDMqWscHw28XOdwsJugSv/ikuA= Subject key identifier: 7C:9D:18:1D:4C:E0:C7:F7:66:BF:D4:69:11:76:2C:21:6A:A0:1D:CB Authority key identifier: 9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C Certificate issuer: /CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Certificate serial: 02F8D1939561B517E6F574CECD3BD809FFFFD14E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft Manifest number: C0 Signing time: Wed 16 Sep 2026 19:28:13 +0000 Manifest this update: Wed 16 Sep 2026 19:23:13 +0000 Manifest next update: Thu 17 Sep 2026 20:38:13 +0000 Files and hashes: 1: 9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl (hash: kUDLIo1CqVwcqF7qiNED3/3CIh5fO+iNcOSxXNPljlk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:f8:d1:93:95:61:b5:17:e6:f5:74:ce:cd:3b:d8:09:ff:ff:d1:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Validity Not Before: Sep 16 19:23:13 2026 GMT Not After : Sep 17 20:38:13 2026 GMT Subject: CN=7C9D181D4CE0C7F766BFD46911762C216AA01DCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a6:b2:58:48:0c:83:df:d1:bd:0c:97:95:af: 25:f5:e9:78:6e:9f:00:45:15:53:2a:d8:a0:7f:70: ee:1f:86:a1:be:2a:ef:2c:52:ed:46:58:68:46:9f: 01:d3:5e:d5:bd:11:3c:4c:38:59:82:dd:b9:e7:1f: 09:ce:d8:da:d3:93:bf:e3:a3:aa:85:45:c1:d5:f2: 07:59:1b:d7:34:ae:16:73:29:75:34:a6:df:1c:21: 50:f2:4a:24:70:74:86:4d:5a:49:4f:9c:da:78:44: 9a:25:f6:25:e0:57:3c:4e:45:7c:e0:a0:c6:1a:13: 7f:c6:3d:ee:a2:b0:2f:15:65:b3:fb:76:73:af:73: c9:75:4e:1b:67:0d:69:ef:4a:f5:43:b9:98:e3:d7: 5b:70:62:34:78:dc:aa:f9:d6:b9:3c:0e:c8:98:19: 3b:5a:de:04:90:df:bd:7f:68:e9:6f:09:ec:4b:4b: 1c:30:9f:7b:20:b4:3f:d8:5a:5d:10:66:a2:51:e9: f0:22:f3:17:ba:cd:6a:df:6d:28:87:08:bf:d7:6d: 79:2b:0c:69:ba:de:a3:12:7e:9d:8c:ae:57:99:27: 15:7f:5d:af:3b:66:5f:c3:24:25:df:4d:7d:04:d3: 92:6b:1c:86:11:ba:35:95:91:9c:5b:52:c9:c0:70: f0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9D:18:1D:4C:E0:C7:F7:66:BF:D4:69:11:76:2C:21:6A:A0:1D:CB X509v3 Authority Key Identifier: keyid:9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:1b:74:89:f7:07:09:f3:b8:02:62:41:ff:15:d7:f0:f3:d4: 27:d5:62:92:ac:16:b4:75:53:5f:73:e4:fd:e0:e5:d7:95:83: 04:4f:ee:b8:47:79:c5:b5:f5:03:56:c7:03:05:2a:cc:a4:e7: b1:b6:c5:c1:10:f7:95:60:30:40:84:66:d4:2d:b3:74:c3:48: 74:5d:85:50:8b:1e:78:d2:12:6d:f8:ac:13:36:88:a8:f3:e8: 87:68:22:be:bd:a0:1c:08:bc:c5:fa:34:dc:d3:f1:c5:4a:36: 72:77:67:61:b6:c7:03:1f:4c:bb:ea:d3:16:7a:0a:c0:11:86: 5c:f1:e8:e4:1c:9b:c6:cb:23:30:be:91:49:61:b4:f6:21:e2: b8:b2:e5:d1:50:2b:19:75:e3:16:81:c6:6b:85:5d:c0:0e:22: a9:59:42:fa:1a:96:0d:be:11:ff:28:15:5d:eb:c3:75:f8:70: 1d:17:5d:65:1b:36:9c:71:fe:d8:1e:bf:6a:1d:23:aa:35:67: cf:2e:09:1e:9f:b3:44:28:ce:d8:4d:58:16:ec:cc:e5:28:68: 81:04:22:b6:b2:a7:9d:ba:eb:68:b5:0d:72:f4:8f:65:13:ff: 48:ad:24:da:5e:9c:d2:cf:3a:7b:32:c5:21:e9:34:93:80:5f: 2d:21:2d:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAvjRk5VhtRfm9XTOzTvYCf//0U4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURCOEM0NzIzRTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1 QzgyQ0Q5QzAeFw0yNjA5MTYxOTIzMTNaFw0yNjA5MTcyMDM4MTNaMDMxMTAvBgNV BAMTKDdDOUQxODFENENFMEM3Rjc2NkJGRDQ2OTExNzYyQzIxNkFBMDFEQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClprJYSAyD39G9DJeVryX16Xhu nwBFFVMq2KB/cO4fhqG+Ku8sUu1GWGhGnwHTXtW9ETxMOFmC3bnnHwnO2NrTk7/j o6qFRcHV8gdZG9c0rhZzKXU0pt8cIVDySiRwdIZNWklPnNp4RJol9iXgVzxORXzg oMYaE3/GPe6isC8VZbP7dnOvc8l1ThtnDWnvSvVDuZjj11twYjR43Kr51rk8DsiY GTta3gSQ371/aOlvCexLSxwwn3sgtD/YWl0QZqJR6fAi8xe6zWrfbSiHCL/XbXkr DGm63qMSfp2MrleZJxV/Xa87Zl/DJCXfTX0E05JrHIYRujWVkZxbUsnAcPCnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfJ0YHUzgx/dmv9RpEXYsIWqgHcswHwYDVR0j BBgwFoAUnbjEcj47/dATinkWqLsSxFyCzZwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGQzZjA5NWItNzEzMC00MTIyLWFmMjUtN2QyZTdhMTFiMWIxLzAvOURCOEM0NzIz RTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1QzgyQ0Q5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REI4QzQ3MjNFM0JGREQwMTM4QTc5MTZBOEJCMTJDNDVDODJD RDlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGQzZjA5NWItNzEzMC00MTIyLWFm MjUtN2QyZTdhMTFiMWIxLzAvOURCOEM0NzIzRTNCRkREMDEzOEE3OTE2QThCQjEy QzQ1QzgyQ0Q5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGobdIn3BwnzuAJiQf8V1/Dz1CfVYpKsFrR1 U19z5P3g5deVgwRP7rhHecW19QNWxwMFKsyk57G2xcEQ95VgMECEZtQts3TDSHRd hVCLHnjSEm34rBM2iKjz6IdoIr69oBwIvMX6NNzT8cVKNnJ3Z2G2xwMfTLvq0xZ6 CsARhlzx6OQcm8bLIzC+kUlhtPYh4riy5dFQKxl14xaBxmuFXcAOIqlZQvoalg2+ Ef8oFV3rw3X4cB0XXWUbNpxx/tgev2odI6o1Z88uCR6fs0QozthNWBbszOUoaIEE Irayp52662i1DXL0j2UT/0itJNpenNLPOnsyxSHpNJOAXy0hLR4= -----END CERTIFICATE-----Generated at Thu Sep 17 11:05:19 2026 by rpki-client