$ rpki-client -vvvf rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft File: 9290697B92D08AFAAFB01253090BE0FE28871EA9.mft (raw, json) Hash identifier: U/H53COLrwsG7cHXJD5FblQACq1bGDpAUhO86Gsgn4E= Subject key identifier: A6:29:88:20:E5:BE:F6:23:72:A7:A0:E4:4B:2F:C2:4F:BE:75:E1:17 Authority key identifier: 92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9 Certificate issuer: /CN=9290697B92D08AFAAFB01253090BE0FE28871EA9 Certificate serial: 6D3C3227663B7FABDCE0BFA8B5668C4DF6D4FED4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft Manifest number: BA Signing time: Thu 17 Sep 2026 03:48:12 +0000 Manifest this update: Thu 17 Sep 2026 03:43:12 +0000 Manifest next update: Fri 18 Sep 2026 05:50:12 +0000 Files and hashes: 1: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: hRuNQymA0Kqk7Awfu8/hFwiPFpevo38okveHDPwRfwI=) 2: 9290697B92D08AFAAFB01253090BE0FE28871EA9.crl (hash: UqRa37CVPfVYwOIyQgnRe/LLTxV9iyCoGxixxB0eliY=) 3: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: ld7ZAKTrz/u5LDPP3+3DpOULg7oKh+lQm5wahDEcTNc=) 4: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: WJxpeyz7OfQNEVK9NO1sVdlmaQoTrq8jALq72l9BXpw=) 5: 323030313a6466373a376438303a3a2f34382d3438203d3e20313431393039.roa (hash: tw5oikVlx6lbDw0PXuWWK4JNZ7QDnCFmUnX8Ug8gws8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.crl rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:3c:32:27:66:3b:7f:ab:dc:e0:bf:a8:b5:66:8c:4d:f6:d4:fe:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9290697B92D08AFAAFB01253090BE0FE28871EA9 Validity Not Before: Sep 17 03:43:12 2026 GMT Not After : Sep 18 05:50:12 2026 GMT Subject: CN=A6298820E5BEF62372A7A0E44B2FC24FBE75E117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:16:32:d9:6f:0e:17:14:cf:fe:98:75:18:59: 8d:2d:36:ea:ab:4b:59:bc:cf:a8:46:92:f8:80:48: 60:e3:d5:b6:cd:35:d5:70:fc:41:34:ed:58:36:d8: 77:29:b2:8a:20:8a:2d:f4:8a:15:71:76:3c:eb:76: ba:cc:01:52:3a:79:a7:8f:65:c7:0e:07:68:b5:b6: 95:f5:31:82:a3:06:5a:24:fc:a6:a4:c8:f2:aa:2d: 7f:81:83:f1:dc:72:64:b4:87:2e:b2:ac:e6:9c:9f: 7a:37:36:8e:17:9f:9e:64:54:de:ec:de:63:98:8e: 02:26:77:db:48:c2:b5:04:c9:b1:1a:e7:39:31:88: 38:09:c4:4d:c2:ff:b9:cb:22:ef:04:2f:0c:3a:72: 0d:d9:95:19:a1:b0:e8:04:33:c3:05:2a:66:dd:d5: 21:ab:f9:c9:8f:0d:95:73:4a:0d:59:06:1e:32:5d: 7e:18:9e:69:ec:81:f6:0d:e6:9d:17:36:37:0a:d5: 22:af:9d:8c:67:2f:c9:6f:a6:cc:25:34:2f:66:07: 86:9c:f2:11:a8:a7:dd:38:35:af:ad:10:bc:58:9c: 79:25:9a:b6:e8:21:52:b9:05:b3:b9:b7:e8:4e:ce: 80:50:b7:5d:d9:41:68:1e:e7:e2:ce:47:36:34:e1: 53:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:29:88:20:E5:BE:F6:23:72:A7:A0:E4:4B:2F:C2:4F:BE:75:E1:17 X509v3 Authority Key Identifier: keyid:92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a0:1f:bd:57:3c:d2:03:82:ab:3c:96:f3:96:b2:36:c4:7a: 82:20:44:30:a2:6d:f7:4f:66:7d:ca:47:e3:06:7a:eb:72:d0: 53:35:6a:c0:e5:33:a1:01:d7:fe:49:32:2b:fa:f4:c1:85:87: 8f:69:ef:cd:98:67:1b:c9:ea:a1:9d:ec:35:3f:d3:38:b1:c7: 6f:88:f9:d9:14:e2:2a:85:56:d0:ce:aa:6c:ea:de:ad:84:aa: 80:3d:05:bc:af:d6:f4:e4:33:c2:ca:40:29:ca:7d:69:6a:3a: f5:e4:0c:3e:b0:bd:86:87:37:ee:12:97:59:e1:de:e3:6c:15: e0:74:5f:92:07:38:3f:a2:fa:22:19:24:23:7c:35:11:df:3d: 3b:8a:f8:8f:b9:f1:bf:d0:18:4c:2f:6d:f9:5e:70:a7:96:91: e1:e5:bd:d8:1b:5b:e1:a6:c4:86:f8:13:48:99:d6:f0:10:b6: 0e:37:93:d9:6a:0e:18:a6:cb:19:45:4c:ff:73:50:1c:e4:1f: 32:2d:60:09:23:89:11:0c:a3:90:51:49:67:af:f1:68:8a:9b: a8:25:5b:a3:60:fa:f2:26:27:fc:6f:d7:6a:10:17:6b:2e:38: b7:a0:7d:6c:b3:e4:8f:f0:18:3e:58:80:1c:69:b3:4e:d3:1e: f8:ed:a9:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbTwyJ2Y7f6vc4L+otWaMTfbU/tQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI5MDY5N0I5MkQwOEFGQUFGQjAxMjUzMDkwQkUwRkUy ODg3MUVBOTAeFw0yNjA5MTcwMzQzMTJaFw0yNjA5MTgwNTUwMTJaMDMxMTAvBgNV BAMTKEE2Mjk4ODIwRTVCRUY2MjM3MkE3QTBFNDRCMkZDMjRGQkU3NUUxMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9FjLZbw4XFM/+mHUYWY0tNuqr S1m8z6hGkviASGDj1bbNNdVw/EE07Vg22Hcpsoogii30ihVxdjzrdrrMAVI6eaeP ZccOB2i1tpX1MYKjBlok/KakyPKqLX+Bg/HccmS0hy6yrOacn3o3No4Xn55kVN7s 3mOYjgImd9tIwrUEybEa5zkxiDgJxE3C/7nLIu8ELww6cg3ZlRmhsOgEM8MFKmbd 1SGr+cmPDZVzSg1ZBh4yXX4YnmnsgfYN5p0XNjcK1SKvnYxnL8lvpswlNC9mB4ac 8hGop904Na+tELxYnHklmrboIVK5BbO5t+hOzoBQt13ZQWge5+LORzY04VPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpimIIOW+9iNyp6DkSy/CT7514RcwHwYDVR0j BBgwFoAUkpBpe5LQivqvsBJTCQvg/iiHHqkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAxYzRkNjEtZGNlZi00YTIwLWJkNGMtYTI4MmEzN2FhNjllLzAvOTI5MDY5N0I5 MkQwOEFGQUFGQjAxMjUzMDkwQkUwRkUyODg3MUVBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjkwNjk3QjkyRDA4QUZBQUZCMDEyNTMwOTBCRTBGRTI4ODcx RUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAxYzRkNjEtZGNlZi00YTIwLWJk NGMtYTI4MmEzN2FhNjllLzAvOTI5MDY5N0I5MkQwOEFGQUFGQjAxMjUzMDkwQkUw RkUyODg3MUVBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHegH71XPNIDgqs8lvOWsjbEeoIgRDCibfdP Zn3KR+MGeuty0FM1asDlM6EB1/5JMiv69MGFh49p782YZxvJ6qGd7DU/0zixx2+I +dkU4iqFVtDOqmzq3q2EqoA9Bbyv1vTkM8LKQCnKfWlqOvXkDD6wvYaHN+4Sl1nh 3uNsFeB0X5IHOD+i+iIZJCN8NRHfPTuK+I+58b/QGEwvbflecKeWkeHlvdgbW+Gm xIb4E0iZ1vAQtg43k9lqDhimyxlFTP9zUBzkHzItYAkjiREMo5BRSWev8WiKm6gl W6Ng+vImJ/xv12oQF2suOLegfWyz5I/wGD5YgBxps07THvjtqUg= -----END CERTIFICATE-----Generated at Thu Sep 17 13:49:28 2026 by rpki-client