$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft File: 9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft (raw, json) Hash identifier: sKct+085bOQ9ePamyB0xSh2GAUbxCFx0g2pQud62kkQ= Subject key identifier: 11:BF:94:F5:32:CA:DB:1B:1F:32:95:8E:26:BC:31:97:67:E0:A7:01 Authority key identifier: 9C:47:04:20:4D:F8:9C:A1:B4:1C:1A:06:44:39:95:B3:CC:E3:86:CB Certificate issuer: /CN=9C4704204DF89CA1B41C1A06443995B3CCE386CB Certificate serial: 2E55AB5AB3695F3DA0B093EBCE82C3AB71DABAA8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft Manifest number: 0101 Signing time: Fri 11 Sep 2026 05:17:42 +0000 Manifest this update: Fri 11 Sep 2026 05:12:42 +0000 Manifest next update: Sat 12 Sep 2026 05:49:42 +0000 Files and hashes: 1: 9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl (hash: iFIoT6N4fEkcdRXglGKUWXX8/nHJlT3LnkfgIgDa9Yc=) 2: AS23693.roa (hash: OUEly4bXXzm41rGXk3bKvYWUbDew4+6SABgh9Lncy4E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 05:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:55:ab:5a:b3:69:5f:3d:a0:b0:93:eb:ce:82:c3:ab:71:da:ba:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C4704204DF89CA1B41C1A06443995B3CCE386CB Validity Not Before: Sep 11 05:12:42 2026 GMT Not After : Sep 12 05:49:42 2026 GMT Subject: CN=11BF94F532CADB1B1F32958E26BC319767E0A701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:16:f2:f0:12:4b:ce:6d:d8:b0:0d:07:c0:94: 99:58:34:f3:90:26:bd:d0:2f:94:62:08:8d:78:4c: eb:c3:b4:94:62:b6:dd:f3:e7:a1:fa:58:90:6e:60: ae:89:fe:64:3b:c0:6b:17:e6:aa:7f:d9:7e:c0:70: fd:af:64:c2:48:2a:e5:c3:fc:af:d1:53:c7:03:36: 85:e3:1e:ad:31:02:f8:9c:c2:ed:21:83:a3:a8:d4: 7e:e8:3c:b0:c6:95:bd:29:18:c9:20:f6:ea:65:9b: 64:ad:45:4a:aa:d4:94:65:4d:db:d4:7a:ec:1f:fe: bd:57:0a:11:7c:59:99:fd:1a:de:57:d0:be:89:44: 61:0e:85:c9:a2:b1:46:49:db:67:84:b0:eb:bc:c3: 2a:0e:a0:5d:fb:d4:69:eb:54:7c:ec:9b:37:3d:a4: 19:1c:bb:ee:61:cd:a9:c5:c9:6d:ef:d2:44:0b:6a: e8:45:6e:2e:86:d3:e6:9a:47:1c:ad:49:18:61:8a: 40:f5:1c:b9:5e:12:a0:bf:9f:a8:40:89:89:a7:c6: a0:15:0e:2f:fb:f6:3a:e4:e7:19:c9:25:78:a4:f8: b2:6c:7a:68:93:8c:a6:56:6e:74:b5:55:07:02:89: 1f:18:3b:0f:5c:80:15:22:28:d6:1b:b4:5d:d2:11: 21:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BF:94:F5:32:CA:DB:1B:1F:32:95:8E:26:BC:31:97:67:E0:A7:01 X509v3 Authority Key Identifier: keyid:9C:47:04:20:4D:F8:9C:A1:B4:1C:1A:06:44:39:95:B3:CC:E3:86:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:9b:9b:3f:b6:cf:e2:bb:f7:6c:47:76:2c:eb:8c:83:74:84: 54:34:4e:e1:ab:11:a7:c7:f7:f1:58:d4:3c:ed:29:c1:63:e9: 5f:b7:89:38:34:63:32:d2:19:d6:0c:aa:3c:3c:a9:3f:2f:b2: 32:49:c3:dd:a5:a8:01:f9:9c:b7:e6:6d:68:50:89:ab:51:f9: 83:cb:bc:a9:32:e3:b5:85:1f:8b:dc:f8:4f:8b:3f:2e:af:6e: 29:0c:c8:1c:26:a6:71:66:97:ca:40:9d:0a:2a:21:19:d7:fd: e6:53:6c:5b:49:46:4f:ab:e9:a6:b8:ca:e9:bf:99:2e:00:35: 58:41:f5:37:80:b6:19:4d:e4:b1:52:17:a7:21:ba:c0:4c:c2: e3:6d:aa:a4:f7:67:78:53:0f:38:d3:31:47:c5:b9:ff:31:1f: e4:00:9f:f2:e2:b1:51:ab:90:9e:5b:02:59:92:68:f4:b4:4d: 0b:c3:97:6e:29:b6:a2:9c:ec:09:9f:6e:7a:0b:43:26:c0:c4: 9c:b8:85:7a:d8:2e:a9:d3:af:fe:41:14:0e:ae:22:53:23:b1: cd:b1:06:28:11:09:60:e4:eb:68:9d:7c:01:4e:6b:04:e0:19: 40:23:e2:1f:e2:59:f5:5c:e5:22:a5:0e:5f:08:11:df:25:79: e1:43:78:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULlWrWrNpXz2gsJPrzoLDq3HauqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM0NzA0MjA0REY4OUNBMUI0MUMxQTA2NDQzOTk1QjND Q0UzODZDQjAeFw0yNjA5MTEwNTEyNDJaFw0yNjA5MTIwNTQ5NDJaMDMxMTAvBgNV BAMTKDExQkY5NEY1MzJDQURCMUIxRjMyOTU4RTI2QkMzMTk3NjdFMEE3MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbFvLwEkvObdiwDQfAlJlYNPOQ Jr3QL5RiCI14TOvDtJRitt3z56H6WJBuYK6J/mQ7wGsX5qp/2X7AcP2vZMJIKuXD /K/RU8cDNoXjHq0xAvicwu0hg6Oo1H7oPLDGlb0pGMkg9uplm2StRUqq1JRlTdvU euwf/r1XChF8WZn9Gt5X0L6JRGEOhcmisUZJ22eEsOu8wyoOoF371GnrVHzsmzc9 pBkcu+5hzanFyW3v0kQLauhFbi6G0+aaRxytSRhhikD1HLleEqC/n6hAiYmnxqAV Di/79jrk5xnJJXik+LJsemiTjKZWbnS1VQcCiR8YOw9cgBUiKNYbtF3SESFDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEb+U9TLK2xsfMpWOJrwxl2fgpwEwHwYDVR0j BBgwFoAUnEcEIE34nKG0HBoGRDmVs8zjhsswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzMyOGYyNGUtZGM3Zi00NTYyLWE1MWQtZTJlMzhjMzY3N2QxLzAvOUM0NzA0MjA0 REY4OUNBMUI0MUMxQTA2NDQzOTk1QjNDQ0UzODZDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QzQ3MDQyMDRERjg5Q0ExQjQxQzFBMDY0NDM5OTVCM0NDRTM4 NkNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvOUM0NzA0MjA0REY4OUNBMUI0MUMxQTA2NDQzOTk1 QjNDQ0UzODZDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKbmz+2z+K792xHdizrjIN0hFQ0TuGrEafH 9/FY1DztKcFj6V+3iTg0YzLSGdYMqjw8qT8vsjJJw92lqAH5nLfmbWhQiatR+YPL vKky47WFH4vc+E+LPy6vbikMyBwmpnFml8pAnQoqIRnX/eZTbFtJRk+r6aa4yum/ mS4ANVhB9TeAthlN5LFSF6chusBMwuNtqqT3Z3hTDzjTMUfFuf8xH+QAn/LisVGr kJ5bAlmSaPS0TQvDl24ptqKc7AmfbnoLQybAxJy4hXrYLqnTr/5BFA6uIlMjsc2x BigRCWDk62idfAFOawTgGUAj4h/iWfVc5SKlDl8IEd8leeFDeJo= -----END CERTIFICATE-----Generated at Fri Sep 11 12:42:15 2026 by rpki-client