$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft File: 9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft (raw, json) Hash identifier: 07eAipxM4ELnLLnBGvwdlNEwDqCikR76uiZoj0gXZxk= Subject key identifier: D0:4F:28:93:B0:C2:D4:5A:3D:AB:52:F7:9A:4C:90:7E:ED:70:A5:AB Authority key identifier: 9E:E0:13:29:B0:8F:B2:3B:3B:84:0A:A8:0A:D1:66:E4:27:A1:2E:C8 Certificate issuer: /CN=9EE01329B08FB23B3B840AA80AD166E427A12EC8 Certificate serial: 0CC5F49AB6D4FFB1F7F1D2C05B8B8806501CBFB2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 21:05:02 +0000 Manifest this update: Wed 16 Sep 2026 21:00:02 +0000 Manifest next update: Fri 18 Sep 2026 00:37:02 +0000 Files and hashes: 1: 9EE01329B08FB23B3B840AA80AD166E427A12EC8.crl (hash: zIPEERjmFzbl+G6mCcXa19NJoPPubeOkNd0oE8ZkNvc=) 2: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (hash: baidtJB1I5sZbU9lybxXsdsHbmGXConPY+qLEFZYE2g=) 3: 3130332e3136312e3131302e302f32342d3234203d3e20313431363135.roa (hash: uoMkZJAPDBUsE5XNKk03G6DUQfsrgq24ZoSComGkHz4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.crl rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c5:f4:9a:b6:d4:ff:b1:f7:f1:d2:c0:5b:8b:88:06:50:1c:bf:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EE01329B08FB23B3B840AA80AD166E427A12EC8 Validity Not Before: Sep 16 21:00:02 2026 GMT Not After : Sep 18 00:37:02 2026 GMT Subject: CN=D04F2893B0C2D45A3DAB52F79A4C907EED70A5AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7f:ff:59:3d:80:df:a8:21:5a:07:dc:53:2d: 23:7c:90:0a:ba:b1:7d:fa:82:1a:87:f9:6c:d2:a2: 77:43:a4:52:3a:10:56:c5:53:ee:65:d1:ec:47:f9: 46:14:6b:58:c6:9f:44:63:db:f2:29:c6:b6:03:57: f3:4c:ae:a7:eb:aa:d3:da:6e:83:ba:cd:e5:b1:d2: bb:78:5a:d8:50:03:4b:f9:16:1d:a8:97:cd:c2:35: d9:2b:c5:65:51:4b:67:69:7a:45:44:99:ce:c0:2e: ac:96:1e:73:93:f2:4f:85:a8:c0:ae:0c:f5:a3:d3: 16:8d:67:c8:fe:ff:50:ab:7b:e9:ed:c5:99:32:6c: ab:1f:61:c1:20:04:c0:5f:3a:e8:da:ea:15:e6:9a: 2e:e9:ff:3d:38:ee:5a:75:6f:8a:29:3d:24:55:86: 5d:90:c3:b4:4a:5e:19:51:55:7d:75:9e:e9:7b:61: 0f:4d:40:6a:29:7e:ba:90:59:10:f6:a2:ce:56:6b: 1f:68:5e:3d:e5:e0:66:e7:ab:f3:7e:65:d1:6d:d8: 78:a4:25:3d:48:c0:bd:e7:02:8f:ad:ea:cb:74:10: 0a:92:32:ed:9d:42:4e:fa:42:a8:da:73:e1:7d:71: 57:f1:da:1b:20:c9:27:e1:4e:f9:35:05:d7:38:f8: 8e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4F:28:93:B0:C2:D4:5A:3D:AB:52:F7:9A:4C:90:7E:ED:70:A5:AB X509v3 Authority Key Identifier: keyid:9E:E0:13:29:B0:8F:B2:3B:3B:84:0A:A8:0A:D1:66:E4:27:A1:2E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:a1:9e:b9:28:d9:68:4d:3e:fa:49:69:6b:13:f0:20:87:6a: 68:a7:c5:96:8f:0a:f3:22:d9:3a:17:ff:d1:9f:b3:f7:4f:57: 9a:4a:73:65:cf:18:6c:af:46:c7:a7:10:9d:84:6d:fc:39:af: dd:96:a7:45:59:d5:41:07:25:b0:71:9c:c2:cd:3e:f4:7b:08: 35:0c:6b:6b:6e:a7:a3:e7:e2:8b:60:f6:ea:e1:1e:09:3e:2a: 89:4f:75:f5:a7:44:32:d7:f9:03:c3:29:36:5e:5f:6b:25:82: 80:77:4a:52:ce:6c:e6:38:66:6b:b6:d3:23:1e:ec:65:ec:62: f6:f5:b2:f8:d2:8a:a4:3f:7f:d6:b0:88:c0:8f:f8:86:b7:6e: 74:51:3f:6f:8e:c3:9e:18:07:0f:db:4f:6f:5d:4e:e4:9f:60: 14:56:96:64:53:27:fa:62:24:27:78:04:a4:4a:3c:08:e5:4a: 09:59:26:2e:f9:48:93:19:ca:30:01:1b:6f:c3:cf:13:ba:98: 39:ae:39:bd:cc:dd:27:f8:5a:80:ec:33:df:7a:9e:83:26:79: 93:a4:54:20:9d:6d:61:3d:7c:51:1a:a5:38:ad:ee:cf:ab:6c: b0:18:26:d4:e6:f9:14:1d:a4:7d:e8:4e:28:4d:29:fb:ab:41: 92:6b:e9:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDMX0mrbU/7H38dLAW4uIBlAcv7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVFMDEzMjlCMDhGQjIzQjNCODQwQUE4MEFEMTY2RTQy N0ExMkVDODAeFw0yNjA5MTYyMTAwMDJaFw0yNjA5MTgwMDM3MDJaMDMxMTAvBgNV BAMTKEQwNEYyODkzQjBDMkQ0NUEzREFCNTJGNzlBNEM5MDdFRUQ3MEE1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsf/9ZPYDfqCFaB9xTLSN8kAq6 sX36ghqH+WzSondDpFI6EFbFU+5l0exH+UYUa1jGn0Rj2/IpxrYDV/NMrqfrqtPa boO6zeWx0rt4WthQA0v5Fh2ol83CNdkrxWVRS2dpekVEmc7ALqyWHnOT8k+FqMCu DPWj0xaNZ8j+/1Cre+ntxZkybKsfYcEgBMBfOuja6hXmmi7p/z047lp1b4opPSRV hl2Qw7RKXhlRVX11nul7YQ9NQGopfrqQWRD2os5Wax9oXj3l4Gbnq/N+ZdFt2Hik JT1IwL3nAo+t6st0EAqSMu2dQk76Qqjac+F9cVfx2hsgySfhTvk1Bdc4+I7XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0E8ok7DC1Fo9q1L3mkyQfu1wpaswHwYDVR0j BBgwFoAUnuATKbCPsjs7hAqoCtFm5CehLsgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2Y0MDhlNDQtM2U5Yy00NWU1LWJjYTQtNWRmYmQ0YjI3MTMwLzAvOUVFMDEzMjlC MDhGQjIzQjNCODQwQUE4MEFEMTY2RTQyN0ExMkVDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RUUwMTMyOUIwOEZCMjNCM0I4NDBBQTgwQUQxNjZFNDI3QTEy RUM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2Y0MDhlNDQtM2U5Yy00NWU1LWJj YTQtNWRmYmQ0YjI3MTMwLzAvOUVFMDEzMjlCMDhGQjIzQjNCODQwQUE4MEFEMTY2 RTQyN0ExMkVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHahnrko2WhNPvpJaWsT8CCHaminxZaPCvMi 2ToX/9Gfs/dPV5pKc2XPGGyvRsenEJ2Ebfw5r92Wp0VZ1UEHJbBxnMLNPvR7CDUM a2tup6Pn4otg9urhHgk+KolPdfWnRDLX+QPDKTZeX2slgoB3SlLObOY4Zmu20yMe 7GXsYvb1svjSiqQ/f9awiMCP+Ia3bnRRP2+Ow54YBw/bT29dTuSfYBRWlmRTJ/pi JCd4BKRKPAjlSglZJi75SJMZyjABG2/DzxO6mDmuOb3M3Sf4WoDsM996noMmeZOk VCCdbWE9fFEapTit7s+rbLAYJtTm+RQdpH3oTihNKfurQZJr6Us= -----END CERTIFICATE-----Generated at Thu Sep 17 08:33:28 2026 by rpki-client