$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft File: 9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft (raw, json) Hash identifier: ErmV5BWiD3qLMcZkuX0qkz6fuK7chFGSEF1CG1wsnBo= Subject key identifier: BB:EB:08:C4:6E:40:56:35:53:65:F4:C3:3E:57:3A:33:70:9E:79:62 Authority key identifier: 9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A Certificate issuer: /CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A Certificate serial: 5E1D86A1FDF27E7A0B7A14E4F29E692D25855DDC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft Manifest number: BA Signing time: Thu 17 Sep 2026 12:49:35 +0000 Manifest this update: Thu 17 Sep 2026 12:44:35 +0000 Manifest next update: Fri 18 Sep 2026 16:30:35 +0000 Files and hashes: 1: 3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa (hash: Dgai9I/TT4G/oQBQ3mEn1fS7dXTCrr7cZjoLYBavMXQ=) 2: 3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (hash: y7jgS/ZISqQ0Ejz5jszYlUpeJRIijdmrHPSpWEnYBQg=) 3: 3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa (hash: rpX5Z9CNMyEUL+veiVsOhDnQwGzSm68cJVDfJbI5SIE=) 4: 9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl (hash: fGDa1ZWFh/QgS33OR1DYAabeF6iy9qktriVvVzoHBx0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:1d:86:a1:fd:f2:7e:7a:0b:7a:14:e4:f2:9e:69:2d:25:85:5d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A Validity Not Before: Sep 17 12:44:35 2026 GMT Not After : Sep 18 16:30:35 2026 GMT Subject: CN=BBEB08C46E4056355365F4C33E573A33709E7962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:30:41:c9:9b:04:e6:a7:19:7a:91:56:5d:93: bb:0f:ae:c7:0c:74:8b:5d:3d:c9:de:ee:11:53:4d: 4f:52:71:25:b0:d9:a5:ab:e7:77:66:7e:8f:1a:31: d4:b4:f6:7d:c4:98:9a:90:ee:29:95:63:ac:14:30: 3f:c5:fd:c1:59:b1:15:e3:04:4e:96:ad:c2:1b:d6: 2e:90:86:a9:a1:07:6e:be:8a:f2:77:75:b1:22:80: 55:0c:d3:3d:a9:4a:ce:de:34:22:1f:48:b1:9a:bc: db:e2:cf:35:36:0b:37:55:c4:b8:0b:4e:73:6b:41: b9:6a:cc:9e:d5:0e:ad:02:0e:d8:74:58:20:38:9d: 64:0c:cd:f8:ad:a3:ca:86:f2:db:d1:62:31:d3:80: 64:b1:a4:74:41:be:1a:1a:68:62:5d:2e:5e:fd:4e: 5e:a9:35:91:47:22:3f:98:7d:d0:bb:df:5f:cb:31: 7b:4f:5e:47:10:2e:ab:ed:8e:0c:5c:ee:40:4c:1c: c0:28:cf:d4:4a:75:53:56:95:f9:d4:51:5b:6c:1f: 7a:49:59:aa:11:49:dc:0b:49:1d:41:2c:96:2c:74: eb:50:97:84:b5:04:1c:f7:6e:eb:8b:1b:dd:2e:ac: 28:4a:13:fb:cc:58:bf:a0:73:e3:d8:25:16:83:bb: 40:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EB:08:C4:6E:40:56:35:53:65:F4:C3:3E:57:3A:33:70:9E:79:62 X509v3 Authority Key Identifier: keyid:9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ee:83:00:cc:4d:a2:af:bd:ac:08:85:e2:d0:ea:55:94:cf: 03:c2:74:62:5f:b2:9d:a4:19:47:4c:27:c4:27:d2:89:b2:43: b8:d9:4b:d9:bf:cd:43:03:51:f0:47:f1:bc:d9:62:50:6f:5d: 12:9f:fd:35:7c:56:f2:1e:59:41:a0:64:ea:e7:0f:36:5b:1e: 3a:13:18:e6:17:e3:f3:75:4a:af:4d:8b:61:08:a6:49:16:1d: f9:b2:9c:a4:fe:10:bc:50:36:22:46:43:58:f0:a9:e2:b3:70: 89:00:c7:2d:ae:35:b9:63:d4:91:86:68:fe:d9:e8:ad:15:2b: 37:c6:d1:1a:75:0c:21:57:ad:7d:d1:0e:d1:f0:81:9c:c7:6c: 50:9d:ba:a4:47:8c:bd:8c:4c:05:e2:ce:9a:83:72:c6:e1:d6: b6:52:cc:f9:5b:a6:8e:a1:74:43:fe:be:e2:30:24:c8:8d:f4: 75:29:0d:34:d6:49:4e:ce:67:8f:8b:5a:b3:ad:57:09:a3:47: 48:d2:a6:ee:a0:c0:50:85:07:4c:1f:d3:d2:f2:6b:b0:b1:f1: 3d:44:f5:26:1d:b1:78:b7:aa:6f:92:f5:f7:28:39:d5:05:8f: 98:ef:20:f6:3b:c8:64:67:f7:9a:aa:17:e2:72:dd:ce:8c:65: 96:42:95:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXh2Gof3yfnoLehTk8p5pLSWFXdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBODgwMDU2RENGOUFEQjdBNzBENDYxRkY4MzA4NkQ4 RkU4ODk3QTAeFw0yNjA5MTcxMjQ0MzVaFw0yNjA5MTgxNjMwMzVaMDMxMTAvBgNV BAMTKEJCRUIwOEM0NkU0MDU2MzU1MzY1RjRDMzNFNTczQTMzNzA5RTc5NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAMEHJmwTmpxl6kVZdk7sPrscM dItdPcne7hFTTU9ScSWw2aWr53dmfo8aMdS09n3EmJqQ7imVY6wUMD/F/cFZsRXj BE6WrcIb1i6QhqmhB26+ivJ3dbEigFUM0z2pSs7eNCIfSLGavNvizzU2CzdVxLgL TnNrQblqzJ7VDq0CDth0WCA4nWQMzfito8qG8tvRYjHTgGSxpHRBvhoaaGJdLl79 Tl6pNZFHIj+YfdC731/LMXtPXkcQLqvtjgxc7kBMHMAoz9RKdVNWlfnUUVtsH3pJ WaoRSdwLSR1BLJYsdOtQl4S1BBz3buuLG90urChKE/vMWL+gc+PYJRaDu0BTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu+sIxG5AVjVTZfTDPlc6M3CeeWIwHwYDVR0j BBgwFoAUn6iABW3Pmtt6cNRh/4MIbY/oiXowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0NDI1MmItZDMwZS00YmRjLTgzMmYtYjM4YjA1YzdhMDM1LzAvOUZBODgwMDU2 RENGOUFEQjdBNzBENDYxRkY4MzA4NkQ4RkU4ODk3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkE4ODAwNTZEQ0Y5QURCN0E3MEQ0NjFGRjgzMDg2RDhGRTg4 OTdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0NDI1MmItZDMwZS00YmRjLTgz MmYtYjM4YjA1YzdhMDM1LzAvOUZBODgwMDU2RENGOUFEQjdBNzBENDYxRkY4MzA4 NkQ4RkU4ODk3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzugwDMTaKvvawIheLQ6lWUzwPCdGJfsp2k GUdMJ8Qn0omyQ7jZS9m/zUMDUfBH8bzZYlBvXRKf/TV8VvIeWUGgZOrnDzZbHjoT GOYX4/N1Sq9Ni2EIpkkWHfmynKT+ELxQNiJGQ1jwqeKzcIkAxy2uNblj1JGGaP7Z 6K0VKzfG0Rp1DCFXrX3RDtHwgZzHbFCduqRHjL2MTAXizpqDcsbh1rZSzPlbpo6h dEP+vuIwJMiN9HUpDTTWSU7OZ4+LWrOtVwmjR0jSpu6gwFCFB0wf09Lya7Cx8T1E 9SYdsXi3qm+S9fcoOdUFj5jvIPY7yGRn95qqF+Jy3c6MZZZCleU= -----END CERTIFICATE-----Generated at Thu Sep 17 14:39:38 2026 by rpki-client