$ rpki-client -vvvf rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft File: 9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft (raw, json) Hash identifier: K8KgMFZ0tYjjIv/Mpmenu2eEg3d84DZb8RSzhH9uI8Q= Subject key identifier: 15:25:D8:52:30:4A:30:2C:7E:EB:98:BD:78:D5:47:E3:89:C9:0E:D3 Authority key identifier: 9A:2E:70:15:61:0F:91:22:97:C9:C4:B0:FF:DE:85:57:63:38:C9:EA Certificate issuer: /CN=9A2E7015610F912297C9C4B0FFDE85576338C9EA Certificate serial: 2BC53CC19DB92F5A743A15FFD7B8E3B762AF7D8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 08:44:19 +0000 Manifest this update: Thu 17 Sep 2026 08:39:19 +0000 Manifest next update: Fri 18 Sep 2026 12:43:19 +0000 Files and hashes: 1: 9A2E7015610F912297C9C4B0FFDE85576338C9EA.crl (hash: XFJiBLBI9zrMu8nPCkvR/tiraIrIv/dmEFcTb3rqKuE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.crl rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c5:3c:c1:9d:b9:2f:5a:74:3a:15:ff:d7:b8:e3:b7:62:af:7d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A2E7015610F912297C9C4B0FFDE85576338C9EA Validity Not Before: Sep 17 08:39:19 2026 GMT Not After : Sep 18 12:43:19 2026 GMT Subject: CN=1525D852304A302C7EEB98BD78D547E389C90ED3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c2:cc:46:1f:19:58:f6:69:a8:bc:78:a3:8d: e3:58:0f:e9:44:63:86:1f:fb:92:20:de:e8:95:9e: 4c:af:87:3f:53:57:c9:93:9c:7d:1d:d1:62:5a:91: 74:58:35:bd:36:ce:17:83:35:db:e6:b5:6b:82:46: c2:0b:2c:e3:47:0c:17:95:3e:33:04:e8:2d:03:95: 52:43:51:80:b6:70:64:20:d1:84:d8:b7:53:04:bf: 59:18:3e:c1:bc:24:26:52:f8:14:75:5b:d6:14:b2: d0:d9:2b:64:f4:06:e1:63:8a:23:c4:67:04:cf:42: 73:eb:79:10:4b:7b:03:0b:fe:70:a0:6d:b2:3e:6f: 42:ff:84:7e:a5:c6:29:0e:61:69:38:6b:32:95:c0: b4:dd:9b:c1:33:a4:e2:d0:2b:5a:97:4f:a6:68:82: 02:9f:0d:0a:c9:3e:5f:88:39:2a:c5:42:61:1f:a6: 9a:30:24:bc:f1:0a:b4:21:9e:db:38:7a:6c:ef:f7: e3:d7:93:e2:b7:25:4c:7b:f9:e9:f3:94:b1:c1:21: f3:a1:1c:d5:61:65:98:8f:0b:67:73:20:15:2e:92: 2b:92:01:9d:f4:b4:05:e6:49:f8:dc:3e:9b:bb:68: 95:ad:6a:37:5a:8c:89:bd:45:ee:09:d6:bb:9a:06: 4e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:25:D8:52:30:4A:30:2C:7E:EB:98:BD:78:D5:47:E3:89:C9:0E:D3 X509v3 Authority Key Identifier: keyid:9A:2E:70:15:61:0F:91:22:97:C9:C4:B0:FF:DE:85:57:63:38:C9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:01:39:64:15:7e:cb:39:e0:4d:bd:dd:b0:9a:96:3d:72:b0: 22:e8:eb:f7:15:b6:08:51:e6:8f:23:9b:61:16:7e:5c:2c:84: 46:ec:4e:b6:44:c2:24:e5:35:f7:e5:ad:0a:04:4b:a0:7c:be: ec:37:77:b8:09:cc:92:f3:e1:7e:f9:df:6a:98:63:45:81:dc: 77:e1:06:c4:2b:8b:42:3d:29:ef:db:ea:85:89:45:c5:f9:92: 0a:0a:ae:0d:a2:59:21:d9:3d:10:59:82:4d:f0:a3:ee:7a:15: d1:a4:f7:f0:4a:cf:d2:78:7b:06:a7:7b:d3:8a:66:6e:e4:05: 92:c5:5a:e3:2d:04:eb:a4:13:ab:89:22:89:13:ee:23:3f:98: 61:64:6c:21:b1:ed:e0:6d:60:24:e7:75:d6:c3:11:91:59:23: d7:12:f9:a3:f8:d0:6c:a8:6e:b2:4b:39:49:d1:1d:dd:96:a2: 68:81:a0:d7:7f:65:7d:fd:f5:bd:fc:c1:37:d9:f1:43:88:c5: bf:48:e4:dc:e8:ff:46:da:79:ca:3c:60:54:c9:f7:0a:d6:38: 8f:2e:21:f7:bc:57:8b:1f:51:43:f2:5a:b1:1c:4a:22:f3:2f: 73:39:dc:59:df:90:03:e9:ab:c1:fd:77:a3:47:e2:7f:fe:d2: 5f:e9:46:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK8U8wZ25L1p0OhX/17jjt2KvfYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyRTcwMTU2MTBGOTEyMjk3QzlDNEIwRkZERTg1NTc2 MzM4QzlFQTAeFw0yNjA5MTcwODM5MTlaFw0yNjA5MTgxMjQzMTlaMDMxMTAvBgNV BAMTKDE1MjVEODUyMzA0QTMwMkM3RUVCOThCRDc4RDU0N0UzODlDOTBFRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgwsxGHxlY9mmovHijjeNYD+lE Y4Yf+5Ig3uiVnkyvhz9TV8mTnH0d0WJakXRYNb02zheDNdvmtWuCRsILLONHDBeV PjME6C0DlVJDUYC2cGQg0YTYt1MEv1kYPsG8JCZS+BR1W9YUstDZK2T0BuFjiiPE ZwTPQnPreRBLewML/nCgbbI+b0L/hH6lxikOYWk4azKVwLTdm8EzpOLQK1qXT6Zo ggKfDQrJPl+IOSrFQmEfppowJLzxCrQhnts4emzv9+PXk+K3JUx7+enzlLHBIfOh HNVhZZiPC2dzIBUukiuSAZ30tAXmSfjcPpu7aJWtajdajIm9Re4J1ruaBk7LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFSXYUjBKMCx+65i9eNVH44nJDtMwHwYDVR0j BBgwFoAUmi5wFWEPkSKXycSw/96FV2M4yeowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTNmYTdkNWMtMzY4ZC00YWYzLWI4ZTctMTc4NjI0NmRkNjJmLzAvOUEyRTcwMTU2 MTBGOTEyMjk3QzlDNEIwRkZERTg1NTc2MzM4QzlFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTJFNzAxNTYxMEY5MTIyOTdDOUM0QjBGRkRFODU1NzYzMzhD OUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTNmYTdkNWMtMzY4ZC00YWYzLWI4 ZTctMTc4NjI0NmRkNjJmLzAvOUEyRTcwMTU2MTBGOTEyMjk3QzlDNEIwRkZERTg1 NTc2MzM4QzlFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMBOWQVfss54E293bCalj1ysCLo6/cVtghR 5o8jm2EWflwshEbsTrZEwiTlNfflrQoES6B8vuw3d7gJzJLz4X7532qYY0WB3Hfh BsQri0I9Ke/b6oWJRcX5kgoKrg2iWSHZPRBZgk3wo+56FdGk9/BKz9J4ewane9OK Zm7kBZLFWuMtBOukE6uJIokT7iM/mGFkbCGx7eBtYCTnddbDEZFZI9cS+aP40Gyo brJLOUnRHd2WomiBoNd/ZX399b38wTfZ8UOIxb9I5Nzo/0baeco8YFTJ9wrWOI8u Ife8V4sfUUPyWrEcSiLzL3M53FnfkAPpq8H9d6NH4n/+0l/pRjA= -----END CERTIFICATE-----Generated at Thu Sep 17 13:24:30 2026 by rpki-client