$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft File: 9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft (raw, json) Hash identifier: f24GXEolqVikRwqSsOsTqCkTbkJ5ymywuVG+s0C+8Qg= Subject key identifier: C7:1C:FC:6B:1D:C4:CF:75:6E:CE:50:5D:92:75:B7:DA:F5:32:EA:5C Authority key identifier: 93:76:CD:F3:D2:A4:4C:C4:17:64:F8:9F:68:FD:7E:41:30:EB:35:1C Certificate issuer: /CN=9376CDF3D2A44CC41764F89F68FD7E4130EB351C Certificate serial: 543D2AF818664DAB9AC14992FE0532246547BDB6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 10:52:02 +0000 Manifest this update: Thu 17 Sep 2026 10:47:02 +0000 Manifest next update: Fri 18 Sep 2026 12:57:02 +0000 Files and hashes: 1: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: 1y2hMqgy1k18v9KwV+64AHSdurxHF23pHNvVVwGqp7s=) 2: 9376CDF3D2A44CC41764F89F68FD7E4130EB351C.crl (hash: NGWwxUAGelDRUNTyd7rMAxhhxhjSu1y1/ilnVasJA8o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.crl rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:3d:2a:f8:18:66:4d:ab:9a:c1:49:92:fe:05:32:24:65:47:bd:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9376CDF3D2A44CC41764F89F68FD7E4130EB351C Validity Not Before: Sep 17 10:47:02 2026 GMT Not After : Sep 18 12:57:02 2026 GMT Subject: CN=C71CFC6B1DC4CF756ECE505D9275B7DAF532EA5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:19:3e:5f:e3:d6:63:6c:11:96:9e:2e:0d:d1: 4a:3e:3f:cd:d6:da:08:57:35:2f:ec:b7:b5:c7:8e: 41:60:ee:5b:6b:81:06:47:7e:c1:f2:dd:3e:cf:9a: 16:d1:2c:36:81:c5:f6:1e:5d:2c:e7:dd:a3:8a:97: 16:2e:d4:ad:ae:a0:f1:e2:22:ca:fe:30:e0:26:65: 66:d8:f8:83:73:88:af:81:1a:12:b7:ff:41:87:0a: b2:6a:21:fc:cd:22:bc:25:5a:ef:8a:23:7e:79:92: d5:14:52:aa:85:f0:49:70:23:e4:52:d5:cc:72:41: cc:8c:25:09:ea:17:7c:7d:26:94:2a:f4:d5:7a:ab: 67:c8:80:05:a2:25:ea:77:f7:61:11:80:54:bd:6b: 43:1b:51:be:e8:34:b9:0b:0a:9a:55:47:5f:ce:96: a5:62:2e:4e:80:0b:31:42:a9:ea:f5:73:52:80:a8: c7:88:c8:d1:fb:4e:23:79:41:a0:06:b0:cc:4c:61: 21:9d:2a:48:b4:79:58:b6:a1:db:60:8c:c6:13:c4: 42:10:0a:be:5b:7d:8b:ed:58:41:a1:8a:07:e8:40: d8:96:dd:34:3e:01:84:91:7c:1f:ec:75:36:71:8c: 7b:22:be:d5:2c:da:aa:a9:55:a0:b0:1e:0b:53:b3: ae:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1C:FC:6B:1D:C4:CF:75:6E:CE:50:5D:92:75:B7:DA:F5:32:EA:5C X509v3 Authority Key Identifier: keyid:93:76:CD:F3:D2:A4:4C:C4:17:64:F8:9F:68:FD:7E:41:30:EB:35:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:16:49:5f:40:63:e9:7d:13:3d:0d:ae:3c:1a:8c:dd:1e:f6: 09:30:42:e7:bb:1e:25:9f:26:aa:7c:c8:dd:db:06:c6:6f:cb: 37:4b:1f:dd:8a:07:52:ab:34:a2:0e:80:b7:b3:cc:9b:d2:97: 04:35:3d:6b:9a:95:96:e3:ff:b2:d2:00:73:97:6c:a3:f0:8f: 2a:44:c1:6a:a2:ca:41:70:9d:61:57:62:d2:42:08:a9:2d:d8: ae:b4:1a:e2:9d:0d:c2:68:ef:22:2b:e5:b9:ca:8c:3b:f2:8f: 27:80:4a:fd:71:e9:d0:a9:2e:fd:10:22:39:c3:c1:aa:2f:36: 20:85:92:df:8f:9b:a5:f1:92:b3:b6:17:72:b3:cc:0b:d2:74: 06:58:51:18:b8:84:92:62:7f:07:91:1e:db:2e:9e:91:5c:41: 35:39:c3:a0:15:0c:d2:1f:df:9a:65:87:0c:69:98:45:ad:92: 25:d3:3d:6e:51:58:96:03:bb:b5:7c:ed:ed:c6:f9:59:65:03: c0:10:30:7a:1c:0f:5b:57:f0:d0:ce:35:59:4f:44:08:54:05: af:da:46:bb:72:58:7e:bb:47:f2:d6:6e:da:45:4e:76:d5:b5: cf:df:8f:fc:08:10:77:c7:b4:bb:c2:65:2f:7b:f0:dd:49:92: e1:87:84:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVD0q+BhmTauawUmS/gUyJGVHvbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM3NkNERjNEMkE0NENDNDE3NjRGODlGNjhGRDdFNDEz MEVCMzUxQzAeFw0yNjA5MTcxMDQ3MDJaFw0yNjA5MTgxMjU3MDJaMDMxMTAvBgNV BAMTKEM3MUNGQzZCMURDNENGNzU2RUNFNTA1RDkyNzVCN0RBRjUzMkVBNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyGT5f49ZjbBGWni4N0Uo+P83W 2ghXNS/st7XHjkFg7ltrgQZHfsHy3T7PmhbRLDaBxfYeXSzn3aOKlxYu1K2uoPHi Isr+MOAmZWbY+INziK+BGhK3/0GHCrJqIfzNIrwlWu+KI355ktUUUqqF8ElwI+RS 1cxyQcyMJQnqF3x9JpQq9NV6q2fIgAWiJep392ERgFS9a0MbUb7oNLkLCppVR1/O lqViLk6ACzFCqer1c1KAqMeIyNH7TiN5QaAGsMxMYSGdKki0eVi2odtgjMYTxEIQ Cr5bfYvtWEGhigfoQNiW3TQ+AYSRfB/sdTZxjHsivtUs2qqpVaCwHgtTs66lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxxz8ax3Ez3VuzlBdknW32vUy6lwwHwYDVR0j BBgwFoAUk3bN89KkTMQXZPifaP1+QTDrNRwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTM0NmMwZTItODE5NC00MDI0LWJjYjMtZDAyOTU2Y2UzYTk5LzAvOTM3NkNERjNE MkE0NENDNDE3NjRGODlGNjhGRDdFNDEzMEVCMzUxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85Mzc2Q0RGM0QyQTQ0Q0M0MTc2NEY4OUY2OEZEN0U0MTMwRUIz NTFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTM0NmMwZTItODE5NC00MDI0LWJj YjMtZDAyOTU2Y2UzYTk5LzAvOTM3NkNERjNEMkE0NENDNDE3NjRGODlGNjhGRDdF NDEzMEVCMzUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYWSV9AY+l9Ez0NrjwajN0e9gkwQue7HiWf Jqp8yN3bBsZvyzdLH92KB1KrNKIOgLezzJvSlwQ1PWualZbj/7LSAHOXbKPwjypE wWqiykFwnWFXYtJCCKkt2K60GuKdDcJo7yIr5bnKjDvyjyeASv1x6dCpLv0QIjnD waovNiCFkt+Pm6XxkrO2F3KzzAvSdAZYURi4hJJifweRHtsunpFcQTU5w6AVDNIf 35plhwxpmEWtkiXTPW5RWJYDu7V87e3G+VllA8AQMHocD1tX8NDONVlPRAhUBa/a RrtyWH67R/LWbtpFTnbVtc/fj/wIEHfHtLvCZS978N1JkuGHhOQ= -----END CERTIFICATE-----Generated at Thu Sep 17 14:45:59 2026 by rpki-client