$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft File: E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft (raw, json) Hash identifier: 1uz49ip+Mkn1Kzu286Sy/hkD3UU2ZJjfTlBqAPYm4CM= Subject key identifier: CD:73:6C:CE:9F:0B:92:B1:24:B8:ED:6F:58:FF:10:97:5E:B6:77:5D Authority key identifier: E9:DD:F9:8F:B3:21:D5:A9:77:AD:47:B0:C4:1C:D4:FE:29:A3:79:3A Certificate issuer: /CN=E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A Certificate serial: 22C1DF73D98B1D01AABAABB0B8F3ABF6FA584D96 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 18:52:33 +0000 Manifest this update: Wed 16 Sep 2026 18:47:33 +0000 Manifest next update: Thu 17 Sep 2026 19:25:33 +0000 Files and hashes: 1: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: CNG3TKSalvuCxf+hLEGkOQvjI+uVRC0qCR05spnG4ao=) 2: E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.crl (hash: PHc5l+Gutn3Rp3bXzr+kAqx8H/pNgXzd9dAN7RFI+Lg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.crl rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c1:df:73:d9:8b:1d:01:aa:ba:ab:b0:b8:f3:ab:f6:fa:58:4d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A Validity Not Before: Sep 16 18:47:33 2026 GMT Not After : Sep 17 19:25:33 2026 GMT Subject: CN=CD736CCE9F0B92B124B8ED6F58FF10975EB6775D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:49:f6:0a:cf:70:e3:43:ee:d8:33:1e:a4:9a: 80:06:92:38:ed:a8:55:92:80:f7:1f:9d:13:35:ee: 98:cb:89:08:f3:38:1d:c2:72:3c:6a:42:29:3c:cf: 55:95:f9:a1:d6:06:22:56:c9:fa:27:d1:61:21:79: 23:da:5e:ee:54:35:98:71:fb:d0:ad:37:e6:d9:8d: a5:03:57:db:61:98:ff:ad:a7:04:6f:4a:88:71:d3: 3d:51:2d:68:89:1c:6b:68:1b:32:d0:32:74:3a:1d: 65:e4:c5:66:cb:93:b4:02:2e:2b:5f:cc:f4:ad:22: 8a:4f:ed:bd:d8:a8:c4:cd:7e:16:fb:63:4a:69:00: 05:06:88:33:f0:2f:a9:33:03:09:69:1b:50:29:3a: 76:42:9e:b3:80:6f:5a:73:f5:26:59:9d:b3:72:ce: 1d:8c:5d:53:98:12:4f:99:18:b3:84:4c:57:0f:b2: 2b:a8:e7:70:90:8f:8d:99:84:68:f1:4d:69:fd:24: e7:39:3b:bf:e8:22:11:a4:16:89:09:5f:ac:93:76: 0d:35:f5:a9:3e:2a:83:56:2e:60:5f:1d:ce:8a:c9: dc:77:ed:76:7b:4f:aa:c4:94:8f:66:98:e0:88:fc: ed:a4:ec:ba:71:fe:8c:6d:82:5f:70:8e:43:2c:6c: f4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:73:6C:CE:9F:0B:92:B1:24:B8:ED:6F:58:FF:10:97:5E:B6:77:5D X509v3 Authority Key Identifier: keyid:E9:DD:F9:8F:B3:21:D5:A9:77:AD:47:B0:C4:1C:D4:FE:29:A3:79:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b3:f2:69:e3:0a:e7:ba:b3:66:2f:34:9f:fe:48:ef:8f:cd: 5b:ca:49:4e:bf:73:83:c4:e5:c4:ff:b4:32:6b:12:ce:84:b8: ad:92:0e:8b:50:57:7f:b1:b4:2f:a4:95:9b:03:16:0d:8d:19: 58:7a:1a:13:2d:17:db:63:90:91:22:06:32:db:2b:7b:2f:f3: 4d:4c:14:5e:30:83:dd:48:f1:26:d0:2a:f3:4a:d9:d6:06:67: c2:6b:ef:b0:5f:c1:34:c0:31:70:e8:b3:84:96:25:f4:b1:88: 63:cc:da:ef:12:c9:f6:29:b3:a8:6d:03:21:bf:de:1c:a8:60: 87:d8:2d:09:09:fd:89:84:03:0f:c0:be:5f:24:43:0d:30:cd: 1e:54:16:a8:02:dd:8e:5c:b3:ed:c7:df:f9:c9:9b:ac:fd:00: 81:b8:0c:08:ff:22:32:2f:d0:30:4e:c0:0c:75:07:e1:b4:2b: 4b:24:d4:94:31:b0:cc:d7:7d:2e:e3:81:3f:68:f3:0c:63:71: 5c:d0:d4:2c:70:f8:4d:22:1b:bb:bc:72:f1:65:1e:2a:2d:7e: c8:92:01:2a:2f:2b:c3:60:a1:4f:f8:f6:4a:b6:03:c9:7f:71: f3:59:d4:31:17:b0:13:29:0d:16:01:c8:56:20:c0:5e:36:4b: 6d:df:91:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIsHfc9mLHQGququwuPOr9vpYTZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlEREY5OEZCMzIxRDVBOTc3QUQ0N0IwQzQxQ0Q0RkUy OUEzNzkzQTAeFw0yNjA5MTYxODQ3MzNaFw0yNjA5MTcxOTI1MzNaMDMxMTAvBgNV BAMTKENENzM2Q0NFOUYwQjkyQjEyNEI4RUQ2RjU4RkYxMDk3NUVCNjc3NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3SfYKz3DjQ+7YMx6kmoAGkjjt qFWSgPcfnRM17pjLiQjzOB3CcjxqQik8z1WV+aHWBiJWyfon0WEheSPaXu5UNZhx +9CtN+bZjaUDV9thmP+tpwRvSohx0z1RLWiJHGtoGzLQMnQ6HWXkxWbLk7QCLitf zPStIopP7b3YqMTNfhb7Y0ppAAUGiDPwL6kzAwlpG1ApOnZCnrOAb1pz9SZZnbNy zh2MXVOYEk+ZGLOETFcPsiuo53CQj42ZhGjxTWn9JOc5O7/oIhGkFokJX6yTdg01 9ak+KoNWLmBfHc6Kydx37XZ7T6rElI9mmOCI/O2k7Lpx/oxtgl9wjkMsbPSnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzXNszp8LkrEkuO1vWP8Ql162d10wHwYDVR0j BBgwFoAU6d35j7Mh1al3rUewxBzU/imjeTowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQzM2ExYzYtMGY3MC00Yzk4LTk2YjAtY2FiNTgxMjZhYjk0LzAvRTlEREY5OEZC MzIxRDVBOTc3QUQ0N0IwQzQxQ0Q0RkUyOUEzNzkzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOURERjk4RkIzMjFENUE5NzdBRDQ3QjBDNDFDRDRGRTI5QTM3 OTNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2 YjAtY2FiNTgxMjZhYjk0LzAvRTlEREY5OEZCMzIxRDVBOTc3QUQ0N0IwQzQxQ0Q0 RkUyOUEzNzkzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGez8mnjCue6s2YvNJ/+SO+PzVvKSU6/c4PE 5cT/tDJrEs6EuK2SDotQV3+xtC+klZsDFg2NGVh6GhMtF9tjkJEiBjLbK3sv801M FF4wg91I8SbQKvNK2dYGZ8Jr77BfwTTAMXDos4SWJfSxiGPM2u8SyfYps6htAyG/ 3hyoYIfYLQkJ/YmEAw/Avl8kQw0wzR5UFqgC3Y5cs+3H3/nJm6z9AIG4DAj/IjIv 0DBOwAx1B+G0K0sk1JQxsMzXfS7jgT9o8wxjcVzQ1Cxw+E0iG7u8cvFlHiotfsiS ASovK8NgoU/49kq2A8l/cfNZ1DEXsBMpDRYByFYgwF42S23fkUw= -----END CERTIFICATE-----Generated at Thu Sep 17 10:49:35 2026 by rpki-client