$ rpki-client -vvvf rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft File: D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft (raw, json) Hash identifier: CqbKUi46VLsC/2pmbnTGRdHqY+9Q7cHkeQJX4FOYQBg= Subject key identifier: 09:CF:50:69:A4:92:D7:A5:5C:E3:12:19:B1:7C:CA:6D:19:A1:CC:27 Authority key identifier: D9:E4:B9:E5:C2:0C:5D:24:54:5E:4B:37:44:B7:24:23:24:23:ED:B7 Certificate issuer: /CN=D9E4B9E5C20C5D24545E4B3744B724232423EDB7 Certificate serial: 4C7AB7C2741223A4B75F90C7C0482B4F15BEC994 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft Manifest number: BA Signing time: Thu 17 Sep 2026 06:57:07 +0000 Manifest this update: Thu 17 Sep 2026 06:52:07 +0000 Manifest next update: Fri 18 Sep 2026 09:17:07 +0000 Files and hashes: 1: 3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa (hash: OK8J5tFKOjzZkYFlXmJIuP/RnOPH7Dha6p0ILyYgDYQ=) 2: D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl (hash: cVT7ORMrX6lfs2hspI9vMc1MtfiQXOfOEHDQjmtFu4g=) 3: 323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa (hash: cHfAqVSrYWCvGTjmxTN9VKckgkvEOepk7bQUQ5YDUTM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:7a:b7:c2:74:12:23:a4:b7:5f:90:c7:c0:48:2b:4f:15:be:c9:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9E4B9E5C20C5D24545E4B3744B724232423EDB7 Validity Not Before: Sep 17 06:52:07 2026 GMT Not After : Sep 18 09:17:07 2026 GMT Subject: CN=09CF5069A492D7A55CE31219B17CCA6D19A1CC27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ae:14:3c:c8:68:2c:f0:d8:19:52:52:04:02: 94:9e:57:c5:7b:d6:b7:74:cf:a6:a5:f6:9f:51:c3: e7:2b:0d:12:7b:b8:d3:b8:f6:94:4d:2b:76:a8:2b: 81:77:60:08:67:eb:58:48:e9:86:b8:62:43:50:71: d0:34:e6:59:8b:6d:04:48:1e:2d:cc:ce:f5:0c:92: 13:27:81:f6:96:c7:e1:01:5e:8b:68:83:c4:db:be: 29:b8:d0:96:3c:71:ea:5f:75:56:3c:14:78:72:d0: 09:f0:3b:6d:07:4d:98:df:03:2d:83:1e:46:80:da: ae:e6:1d:4a:64:ab:1a:98:00:7f:bd:db:e5:80:65: 0e:0a:da:d8:6f:ef:4e:aa:09:be:0a:86:47:04:33: ad:31:6d:71:fb:71:28:ae:6d:7d:01:b7:d6:9f:a3: d8:1e:fa:5f:37:8a:c6:ef:cc:2e:cd:59:d5:7a:9a: de:7a:73:22:2e:5d:d3:88:70:e3:03:a3:7a:56:11: 57:27:39:00:bf:9d:33:82:eb:e1:d8:2f:59:84:db: b3:5f:0a:30:10:34:85:05:63:c6:07:df:ec:33:a4: a8:1b:f0:31:69:42:73:40:ec:b3:d6:06:85:fd:09: 19:fd:71:75:bf:90:21:3f:c8:8d:07:72:af:87:82: 8b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CF:50:69:A4:92:D7:A5:5C:E3:12:19:B1:7C:CA:6D:19:A1:CC:27 X509v3 Authority Key Identifier: keyid:D9:E4:B9:E5:C2:0C:5D:24:54:5E:4B:37:44:B7:24:23:24:23:ED:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d6:23:fd:9f:28:06:dd:f7:f3:df:2d:bd:bf:bc:06:01:f9: d7:21:18:5c:b7:bc:c3:17:96:45:b3:80:d4:ae:5b:48:3b:22: af:a4:12:07:41:21:f2:cc:4d:47:e4:7d:97:bc:63:6d:25:b3: 60:79:aa:ae:65:cd:3e:1b:b5:84:37:a3:46:d1:cf:89:c2:c0: 2d:78:57:bd:34:5f:27:4c:96:8f:25:ca:6e:e4:47:6c:77:55: c6:c8:9d:cd:6a:ff:d9:cd:64:01:51:55:8b:72:2d:71:1a:d3: b0:3a:c7:3d:4b:32:1e:21:00:b7:cb:bf:99:43:31:d5:18:83: c6:c4:37:2d:8a:1c:fb:8b:50:2c:eb:f6:6e:2d:45:61:74:04: 88:f8:e8:62:41:5d:e5:b0:29:92:dc:79:08:54:0b:e6:89:55: 63:63:00:b1:de:03:08:6f:cf:0d:36:8b:e6:f6:96:6e:b6:cf: 71:79:d8:a1:7e:38:52:eb:a3:34:98:f3:1a:23:4a:c5:10:c3: 0f:02:6b:c5:ad:ab:28:8a:c7:bf:f2:cc:fb:8f:1e:73:b0:c6: 47:e5:0d:30:b8:ef:52:9c:cc:b5:a0:35:ef:0b:09:8d:31:19: db:e4:01:7c:23:b0:fc:6d:d4:d0:46:f4:54:58:93:bb:ff:0f: 67:41:1c:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTHq3wnQSI6S3X5DHwEgrTxW+yZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFNEI5RTVDMjBDNUQyNDU0NUU0QjM3NDRCNzI0MjMy NDIzRURCNzAeFw0yNjA5MTcwNjUyMDdaFw0yNjA5MTgwOTE3MDdaMDMxMTAvBgNV BAMTKDA5Q0Y1MDY5QTQ5MkQ3QTU1Q0UzMTIxOUIxN0NDQTZEMTlBMUNDMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwrhQ8yGgs8NgZUlIEApSeV8V7 1rd0z6al9p9Rw+crDRJ7uNO49pRNK3aoK4F3YAhn61hI6Ya4YkNQcdA05lmLbQRI Hi3MzvUMkhMngfaWx+EBXotog8Tbvim40JY8cepfdVY8FHhy0AnwO20HTZjfAy2D HkaA2q7mHUpkqxqYAH+92+WAZQ4K2thv706qCb4KhkcEM60xbXH7cSiubX0Bt9af o9ge+l83isbvzC7NWdV6mt56cyIuXdOIcOMDo3pWEVcnOQC/nTOC6+HYL1mE27Nf CjAQNIUFY8YH3+wzpKgb8DFpQnNA7LPWBoX9CRn9cXW/kCE/yI0Hcq+HgotrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCc9QaaSS16Vc4xIZsXzKbRmhzCcwHwYDVR0j BBgwFoAU2eS55cIMXSRUXks3RLckIyQj7bcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzBhMzkyZGMtMmU0ZS00NzcwLThmNjgtYmM2MWY4MGI3NGE3LzAvRDlFNEI5RTVD MjBDNUQyNDU0NUU0QjM3NDRCNzI0MjMyNDIzRURCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOUU0QjlFNUMyMEM1RDI0NTQ1RTRCMzc0NEI3MjQyMzI0MjNF REI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzBhMzkyZGMtMmU0ZS00NzcwLThm NjgtYmM2MWY4MGI3NGE3LzAvRDlFNEI5RTVDMjBDNUQyNDU0NUU0QjM3NDRCNzI0 MjMyNDIzRURCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzWI/2fKAbd9/PfLb2/vAYB+dchGFy3vMMX lkWzgNSuW0g7Iq+kEgdBIfLMTUfkfZe8Y20ls2B5qq5lzT4btYQ3o0bRz4nCwC14 V700XydMlo8lym7kR2x3VcbInc1q/9nNZAFRVYtyLXEa07A6xz1LMh4hALfLv5lD MdUYg8bENy2KHPuLUCzr9m4tRWF0BIj46GJBXeWwKZLceQhUC+aJVWNjALHeAwhv zw02i+b2lm62z3F52KF+OFLrozSY8xojSsUQww8Ca8WtqyiKx7/yzPuPHnOwxkfl DTC471KczLWgNe8LCY0xGdvkAXwjsPxt1NBG9FRYk7v/D2dBHPY= -----END CERTIFICATE-----Generated at Thu Sep 17 10:58:21 2026 by rpki-client