$ rpki-client -vvvf rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft File: 9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft (raw, json) Hash identifier: /z5EErg1VjvoDT27tfXqzoJJBjzsZzfz+PW7eU4+LNo= Subject key identifier: 86:FB:6F:34:D6:05:76:01:7C:54:6B:BA:9C:98:9A:BC:DB:81:B9:8D Authority key identifier: 9E:5A:74:B4:E1:E6:2D:25:BA:36:E3:E7:A4:40:2D:90:6E:F7:0E:2A Certificate issuer: /CN=9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A Certificate serial: 1FFC1DEB059EAECE93B4F6DCCB752D024294E92E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 13:30:19 +0000 Manifest this update: Thu 17 Sep 2026 13:25:19 +0000 Manifest next update: Fri 18 Sep 2026 15:58:19 +0000 Files and hashes: 1: 3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa (hash: lw3Ph+05xOCfBGre0101Mumi0SBmIeVe3yfjhxly5RI=) 2: 9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl (hash: 2oYoFZ8zbIB6wmC+TaQF0mPuEioztKC2A7FJ62F3vRU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:fc:1d:eb:05:9e:ae:ce:93:b4:f6:dc:cb:75:2d:02:42:94:e9:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A Validity Not Before: Sep 17 13:25:19 2026 GMT Not After : Sep 18 15:58:19 2026 GMT Subject: CN=86FB6F34D60576017C546BBA9C989ABCDB81B98D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a6:77:49:9c:f0:e0:48:41:8a:70:1e:bc:3a: 28:0d:d2:a4:1c:18:5d:6b:74:54:05:f2:81:dd:eb: 6c:f7:f4:0b:1a:c9:c8:92:88:93:c0:45:1e:b9:d8: c7:88:73:3e:4f:44:8e:7c:1c:12:89:c8:e0:34:ff: b7:f7:24:8a:60:08:24:c8:d3:fb:52:46:e2:e1:ee: 59:4f:92:54:df:06:27:ac:2d:24:34:8d:e1:6f:7d: f9:e2:67:9b:0f:7d:8d:6e:d5:95:d1:21:52:73:47: d4:19:65:44:b7:e8:1a:fb:4e:bc:e0:ee:48:31:cb: 1f:2e:8e:46:ea:e6:2c:e5:ee:52:47:33:5d:98:d2: 93:fa:85:8c:a1:62:3e:52:1a:99:b0:12:90:cb:b1: 7a:62:0d:f1:e1:c8:2d:22:82:1c:7d:6d:dd:56:82: 93:97:41:49:fb:6d:a0:c6:07:29:78:86:60:ba:ce: 84:6d:cb:25:38:89:44:aa:b5:67:e6:64:e7:d2:75: 40:52:12:ca:0d:1a:d9:85:e4:64:08:7c:63:ce:59: 64:55:aa:4e:1e:b6:69:44:e7:dc:6e:a7:ef:ac:00: 3c:35:df:b2:1a:87:4a:8f:8e:18:5f:4f:04:d3:1e: 34:ff:99:d2:56:93:78:59:ba:ab:35:5e:39:bb:5f: 45:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FB:6F:34:D6:05:76:01:7C:54:6B:BA:9C:98:9A:BC:DB:81:B9:8D X509v3 Authority Key Identifier: keyid:9E:5A:74:B4:E1:E6:2D:25:BA:36:E3:E7:A4:40:2D:90:6E:F7:0E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:ff:98:9a:17:6e:d0:68:c3:27:bf:12:75:c6:b9:41:52:4c: 3b:59:3b:d2:91:30:f7:c8:80:5a:b1:13:bc:b5:34:91:fc:46: 7e:57:fc:38:48:a0:4b:24:cf:d2:8a:09:10:96:b1:05:bf:34: f3:b5:e0:b8:58:c1:7d:de:c7:3f:36:d0:b5:26:b6:ea:e4:cf: 86:58:ee:bc:58:33:8a:94:1a:39:cb:33:2d:4f:ce:00:12:d2: 63:c2:f7:da:98:eb:93:45:f7:69:d1:6b:3e:25:2c:d8:bd:dd: 25:68:97:92:d9:d6:e4:64:08:db:1f:f3:11:66:82:7d:dd:91: 5a:f1:c8:05:a3:d7:47:99:28:5c:76:4d:e5:36:c1:67:d7:a8: 40:69:b5:73:20:ad:95:cd:90:27:17:07:d9:82:39:59:54:63: 04:42:ca:57:58:b5:6a:f8:f6:11:01:10:35:a5:44:c2:9a:e9: 00:3f:63:92:60:99:8e:b9:6c:ae:f4:3e:91:26:ec:ea:b9:10: 8d:d1:63:26:74:15:b3:fb:d6:26:d4:19:56:7f:ad:b7:04:b8: c0:45:30:0f:69:f1:41:48:73:2b:d5:90:57:09:01:de:22:29: e7:bf:56:49:de:80:f1:64:f7:53:92:38:61:83:a9:ee:f1:37: ec:aa:a2:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH/wd6wWers6TtPbcy3UtAkKU6S4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU1QTc0QjRFMUU2MkQyNUJBMzZFM0U3QTQ0MDJEOTA2 RUY3MEUyQTAeFw0yNjA5MTcxMzI1MTlaFw0yNjA5MTgxNTU4MTlaMDMxMTAvBgNV BAMTKDg2RkI2RjM0RDYwNTc2MDE3QzU0NkJCQTlDOTg5QUJDREI4MUI5OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjpndJnPDgSEGKcB68OigN0qQc GF1rdFQF8oHd62z39AsayciSiJPARR652MeIcz5PRI58HBKJyOA0/7f3JIpgCCTI 0/tSRuLh7llPklTfBiesLSQ0jeFvffniZ5sPfY1u1ZXRIVJzR9QZZUS36Br7Trzg 7kgxyx8ujkbq5izl7lJHM12Y0pP6hYyhYj5SGpmwEpDLsXpiDfHhyC0ighx9bd1W gpOXQUn7baDGByl4hmC6zoRtyyU4iUSqtWfmZOfSdUBSEsoNGtmF5GQIfGPOWWRV qk4etmlE59xup++sADw137Iah0qPjhhfTwTTHjT/mdJWk3hZuqs1Xjm7X0U7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhvtvNNYFdgF8VGu6nJiavNuBuY0wHwYDVR0j BBgwFoAUnlp0tOHmLSW6NuPnpEAtkG73DiowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZjMGNkNWQtZDA4NS00ZTJmLWIyMzAtN2I3ZTY2ZDEzOTNmLzAvOUU1QTc0QjRF MUU2MkQyNUJBMzZFM0U3QTQ0MDJEOTA2RUY3MEUyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RTVBNzRCNEUxRTYyRDI1QkEzNkUzRTdBNDQwMkQ5MDZFRjcw RTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZjMGNkNWQtZDA4NS00ZTJmLWIy MzAtN2I3ZTY2ZDEzOTNmLzAvOUU1QTc0QjRFMUU2MkQyNUJBMzZFM0U3QTQ0MDJE OTA2RUY3MEUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANH/mJoXbtBowye/EnXGuUFSTDtZO9KRMPfI gFqxE7y1NJH8Rn5X/DhIoEskz9KKCRCWsQW/NPO14LhYwX3exz820LUmturkz4ZY 7rxYM4qUGjnLMy1PzgAS0mPC99qY65NF92nRaz4lLNi93SVol5LZ1uRkCNsf8xFm gn3dkVrxyAWj10eZKFx2TeU2wWfXqEBptXMgrZXNkCcXB9mCOVlUYwRCyldYtWr4 9hEBEDWlRMKa6QA/Y5JgmY65bK70PpEm7Oq5EI3RYyZ0FbP71ibUGVZ/rbcEuMBF MA9p8UFIcyvVkFcJAd4iKee/VknegPFk91OSOGGDqe7xN+yqogM= -----END CERTIFICATE-----Generated at Thu Sep 17 16:01:35 2026 by rpki-client