$ rpki-client -vvvf rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft File: 9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft (raw, json) Hash identifier: Qr7nZCISQ8+iMAuy2iQ/Dh8vjMgUZ7YknYCFxY0Popc= Subject key identifier: AA:64:D9:F1:A7:36:E1:A8:FF:54:FA:96:46:D6:6A:56:F5:DA:42:23 Authority key identifier: 9E:FF:7D:BB:CC:32:80:07:85:86:E6:71:60:5F:4B:D3:C6:AF:62:A0 Certificate issuer: /CN=9EFF7DBBCC3280078586E671605F4BD3C6AF62A0 Certificate serial: 28284183097070675440E93B1ABA0C7B5DDF3E5F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 10:31:38 +0000 Manifest this update: Thu 17 Sep 2026 10:26:38 +0000 Manifest next update: Fri 18 Sep 2026 12:28:38 +0000 Files and hashes: 1: 9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.crl (hash: ae9V4+TqgzWdGfMddsRxpjDx04swEBb5X9meIUbRSfI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.crl rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:28:41:83:09:70:70:67:54:40:e9:3b:1a:ba:0c:7b:5d:df:3e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EFF7DBBCC3280078586E671605F4BD3C6AF62A0 Validity Not Before: Sep 17 10:26:38 2026 GMT Not After : Sep 18 12:28:38 2026 GMT Subject: CN=AA64D9F1A736E1A8FF54FA9646D66A56F5DA4223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:db:43:59:30:4d:92:55:a9:65:67:1f:d3:6f: 09:f8:3f:d6:20:e3:21:fb:ec:be:9b:8e:4c:85:df: 8f:f3:87:fe:fa:06:0b:f2:06:79:9a:6a:3a:19:4c: 4f:81:d2:05:99:25:76:4e:bb:81:c4:7f:d0:a9:59: 5d:69:0a:3a:21:99:c3:e8:2c:35:33:8e:6b:69:34: 43:22:50:8b:f3:1b:b0:a3:f4:00:8e:38:24:d7:b6: 8b:06:3c:94:e2:81:aa:5c:96:b2:c8:b7:c1:cf:dd: f3:87:52:b0:05:72:4b:09:0e:9a:de:3e:80:b7:f7: 74:6f:a8:18:30:fe:57:35:06:a4:bd:5a:bd:6f:21: 88:61:4a:a8:dd:bc:5c:14:01:b2:1f:70:05:b7:fa: 31:1a:3e:c8:d1:41:d3:68:44:0d:d9:4c:50:4d:ed: 7a:65:4c:7d:7e:68:8e:9e:52:c0:0c:aa:6e:fd:0c: 4c:28:c0:e1:13:7b:57:92:99:1f:fe:04:56:dd:3e: 29:df:f6:70:73:0e:8a:44:ab:34:10:dd:cb:86:a6: 83:1d:8a:c2:f7:46:6b:d9:20:c8:4b:56:d7:00:05: fa:75:2e:75:a3:51:7e:35:ea:b6:80:00:81:7d:82: 40:82:e9:c1:45:2e:bb:d3:06:73:4b:03:f0:07:e1: b3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:64:D9:F1:A7:36:E1:A8:FF:54:FA:96:46:D6:6A:56:F5:DA:42:23 X509v3 Authority Key Identifier: keyid:9E:FF:7D:BB:CC:32:80:07:85:86:E6:71:60:5F:4B:D3:C6:AF:62:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:cc:d8:51:4c:0b:2f:66:2f:43:b8:37:40:87:b4:42:03:6a: 62:1e:47:d0:d7:f8:d8:05:d4:69:db:6f:54:69:d5:cb:5d:fd: ac:35:42:38:8e:0d:c9:c6:20:a2:0f:31:ba:09:c8:07:a2:45: 9c:04:e4:d8:ed:94:6f:d5:89:8d:66:0d:35:cb:ed:34:36:87: b0:84:9e:f4:95:83:b5:17:e4:9c:14:69:29:19:40:53:34:97: 75:7d:c0:c2:b5:30:df:2a:b1:c4:ff:54:0f:06:6c:66:c9:b7: 85:27:ec:df:26:74:cf:c3:48:98:fd:ea:d7:ce:14:b8:ca:8f: 28:c0:d3:ef:e5:da:c3:6d:d8:90:70:a7:b8:bb:9a:51:bc:16: 51:e2:b4:e7:10:e9:06:3e:a8:22:05:c5:1d:ea:38:45:b2:aa: 3d:e2:e0:be:0c:08:20:79:a6:da:5c:fc:95:4e:d6:ef:a1:1c: 6c:fc:e6:37:99:fb:31:21:e3:e7:2a:85:3a:b7:a2:72:d9:b9: 0e:5d:1f:25:d4:fc:52:aa:ef:94:bb:51:93:36:f0:73:a1:b6: 18:80:ad:ea:5f:c9:e6:3a:96:8a:a7:30:e3:37:a8:1a:37:07: 8d:1d:37:f3:af:26:ea:46:8e:93:9f:c5:43:35:11:28:a5:c8: 09:c5:0b:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKChBgwlwcGdUQOk7GroMe13fPl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVGRjdEQkJDQzMyODAwNzg1ODZFNjcxNjA1RjRCRDND NkFGNjJBMDAeFw0yNjA5MTcxMDI2MzhaFw0yNjA5MTgxMjI4MzhaMDMxMTAvBgNV BAMTKEFBNjREOUYxQTczNkUxQThGRjU0RkE5NjQ2RDY2QTU2RjVEQTQyMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV20NZME2SVallZx/Tbwn4P9Yg 4yH77L6bjkyF34/zh/76BgvyBnmaajoZTE+B0gWZJXZOu4HEf9CpWV1pCjohmcPo LDUzjmtpNEMiUIvzG7Cj9ACOOCTXtosGPJTigapclrLIt8HP3fOHUrAFcksJDpre PoC393RvqBgw/lc1BqS9Wr1vIYhhSqjdvFwUAbIfcAW3+jEaPsjRQdNoRA3ZTFBN 7XplTH1+aI6eUsAMqm79DEwowOETe1eSmR/+BFbdPinf9nBzDopEqzQQ3cuGpoMd isL3RmvZIMhLVtcABfp1LnWjUX416raAAIF9gkCC6cFFLrvTBnNLA/AH4bNfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqmTZ8ac24aj/VPqWRtZqVvXaQiMwHwYDVR0j BBgwFoAUnv99u8wygAeFhuZxYF9L08avYqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ0ZjI0NjAtZmU1MC00ODAwLWFlMDItNTdjYjNlODE1ZDVlLzAvOUVGRjdEQkJD QzMyODAwNzg1ODZFNjcxNjA1RjRCRDNDNkFGNjJBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RUZGN0RCQkNDMzI4MDA3ODU4NkU2NzE2MDVGNEJEM0M2QUY2 MkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ0ZjI0NjAtZmU1MC00ODAwLWFl MDItNTdjYjNlODE1ZDVlLzAvOUVGRjdEQkJDQzMyODAwNzg1ODZFNjcxNjA1RjRC RDNDNkFGNjJBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzM2FFMCy9mL0O4N0CHtEIDamIeR9DX+NgF 1Gnbb1Rp1ctd/aw1QjiODcnGIKIPMboJyAeiRZwE5NjtlG/ViY1mDTXL7TQ2h7CE nvSVg7UX5JwUaSkZQFM0l3V9wMK1MN8qscT/VA8GbGbJt4Un7N8mdM/DSJj96tfO FLjKjyjA0+/l2sNt2JBwp7i7mlG8FlHitOcQ6QY+qCIFxR3qOEWyqj3i4L4MCCB5 ptpc/JVO1u+hHGz85jeZ+zEh4+cqhTq3onLZuQ5dHyXU/FKq75S7UZM28HOhthiA repfyeY6loqnMOM3qBo3B40dN/OvJupGjpOfxUM1ESilyAnFC4g= -----END CERTIFICATE-----Generated at Thu Sep 17 14:43:34 2026 by rpki-client