$ rpki-client -vvvf rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft File: 9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft (raw, json) Hash identifier: x0k8VxFE5JJIey7m2Ef/+PkR/U6h7DPd4xQTNtHKQgY= Subject key identifier: D5:AD:0D:A0:A6:5E:11:64:9F:D4:87:A1:83:06:9D:46:D3:39:AE:A7 Authority key identifier: 9F:FB:79:1C:09:C2:A2:BF:53:CF:54:17:4A:8C:A1:AD:67:7B:35:64 Certificate issuer: /CN=9FFB791C09C2A2BF53CF54174A8CA1AD677B3564 Certificate serial: 5EDC983E30D4B02D0ADB787D4A5C88E2DF30D9E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 01:45:43 +0000 Manifest this update: Thu 17 Sep 2026 01:40:43 +0000 Manifest next update: Fri 18 Sep 2026 02:41:43 +0000 Files and hashes: 1: 9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl (hash: QSAeDOaN0ewn4cFSriZANGYFXNn9UiSBRMmfKiZZsEk=) 2: 3136302e32352e3234392e302f32342d3234203d3e20313336303939.roa (hash: U0YPo5BGNsV6sfhS2oiy7oPSHdSgcRKevuF2NKX91Xo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:dc:98:3e:30:d4:b0:2d:0a:db:78:7d:4a:5c:88:e2:df:30:d9:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFB791C09C2A2BF53CF54174A8CA1AD677B3564 Validity Not Before: Sep 17 01:40:43 2026 GMT Not After : Sep 18 02:41:43 2026 GMT Subject: CN=D5AD0DA0A65E11649FD487A183069D46D339AEA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:58:fb:76:12:8e:28:ad:db:c6:66:ac:33:d0: 5f:86:47:c3:e5:a5:bb:7f:96:ed:26:47:36:87:e6: 5b:6c:99:85:0a:cb:5a:73:ce:e4:9f:ce:4e:51:3a: 2d:70:f8:42:68:b7:45:38:c7:9f:13:5b:22:7d:20: e8:42:e2:1f:bf:d7:4c:ab:04:7d:74:a3:c8:d0:01: 1a:d2:06:42:13:54:cd:1f:b7:7c:ef:62:62:de:13: 48:55:01:a8:b9:33:1f:3f:62:eb:e0:c6:6e:6f:3d: be:09:19:4d:fc:c0:ae:6c:7e:59:71:f8:5d:0f:7c: c3:ff:0a:cc:a7:4d:27:b9:4d:21:e2:70:3e:1a:4f: cc:d5:e9:67:46:dc:5a:1c:73:e6:0c:2a:80:23:15: a4:18:24:7e:7d:5a:27:9c:e6:98:bd:3b:9e:f9:da: e9:3a:c6:4b:92:54:73:d0:37:1c:8a:05:53:fd:23: f7:92:e0:10:4e:fb:02:4f:05:5e:53:ae:58:29:67: 81:f0:ef:9f:91:92:46:af:b6:89:15:4b:9f:f8:37: 96:fa:5e:40:f5:fd:df:fe:fc:43:10:98:63:4f:a7: 1a:73:28:2e:22:4e:3b:26:1b:80:14:da:7c:f4:50: 8c:09:70:87:fb:19:85:d8:8f:6a:c3:8e:f9:cc:fb: b8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AD:0D:A0:A6:5E:11:64:9F:D4:87:A1:83:06:9D:46:D3:39:AE:A7 X509v3 Authority Key Identifier: keyid:9F:FB:79:1C:09:C2:A2:BF:53:CF:54:17:4A:8C:A1:AD:67:7B:35:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e6:7c:21:66:eb:ad:d2:8b:81:42:64:58:0e:11:82:8f:2f: 24:e7:85:8b:8a:79:4e:09:06:56:18:9d:24:6e:ea:b0:fa:64: 87:be:cc:0c:3e:cf:24:fc:34:38:3a:cf:22:c7:76:53:64:ac: 38:3c:ab:50:0d:56:ee:bf:30:e8:42:3d:ac:71:42:d4:f1:70: 4d:8e:35:de:aa:43:75:54:64:90:a2:a9:62:c2:fe:51:28:8d: 81:b1:4c:ef:18:1a:81:9a:9d:a5:20:32:7d:8c:84:ee:83:0b: 4f:a3:a8:7c:dd:57:e1:12:c5:50:85:07:37:ad:65:dd:75:aa: a5:54:bb:b4:49:a2:94:c4:c4:9c:b4:10:e1:4b:d4:e1:fd:05: 78:f8:99:ca:d8:b1:3d:ef:90:75:ec:ad:f2:65:38:d2:b4:02: f6:cf:6e:9f:27:3b:c9:43:55:ae:a8:d3:65:27:54:91:4b:06: 68:17:02:0a:89:9d:82:2a:46:24:c1:f5:e1:cb:b2:2e:95:c2: e0:99:4c:84:dc:37:f9:46:6d:ef:28:7f:d1:9d:56:bc:65:a0: f8:82:da:5c:b6:8c:b7:3b:f7:9a:25:c6:ad:bb:71:bf:0a:8c: 87:95:17:4f:c1:43:4f:db:03:82:ef:cb:7c:a8:24:b4:83:1c: 3e:15:b2:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXtyYPjDUsC0K23h9SlyI4t8w2ekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQjc5MUMwOUMyQTJCRjUzQ0Y1NDE3NEE4Q0ExQUQ2 NzdCMzU2NDAeFw0yNjA5MTcwMTQwNDNaFw0yNjA5MTgwMjQxNDNaMDMxMTAvBgNV BAMTKEQ1QUQwREEwQTY1RTExNjQ5RkQ0ODdBMTgzMDY5RDQ2RDMzOUFFQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmWPt2Eo4ordvGZqwz0F+GR8Pl pbt/lu0mRzaH5ltsmYUKy1pzzuSfzk5ROi1w+EJot0U4x58TWyJ9IOhC4h+/10yr BH10o8jQARrSBkITVM0ft3zvYmLeE0hVAai5Mx8/Yuvgxm5vPb4JGU38wK5sfllx +F0PfMP/CsynTSe5TSHicD4aT8zV6WdG3Focc+YMKoAjFaQYJH59Wiec5pi9O575 2uk6xkuSVHPQNxyKBVP9I/eS4BBO+wJPBV5TrlgpZ4Hw75+RkkavtokVS5/4N5b6 XkD1/d/+/EMQmGNPpxpzKC4iTjsmG4AU2nz0UIwJcIf7GYXYj2rDjvnM+7jVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1a0NoKZeEWSf1IehgwadRtM5rqcwHwYDVR0j BBgwFoAUn/t5HAnCor9Tz1QXSoyhrWd7NWQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDE0MDU1NDUtYzM1ZC00ZGUxLTk2MTgtNDRiNWY0MTdhMzAzLzAvOUZGQjc5MUMw OUMyQTJCRjUzQ0Y1NDE3NEE4Q0ExQUQ2NzdCMzU2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85RkZCNzkxQzA5QzJBMkJGNTNDRjU0MTc0QThDQTFBRDY3N0Iz NTY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzAvOUZGQjc5MUMwOUMyQTJCRjUzQ0Y1NDE3NEE4Q0Ex QUQ2NzdCMzU2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrmfCFm663Si4FCZFgOEYKPLyTnhYuKeU4J BlYYnSRu6rD6ZIe+zAw+zyT8NDg6zyLHdlNkrDg8q1ANVu6/MOhCPaxxQtTxcE2O Nd6qQ3VUZJCiqWLC/lEojYGxTO8YGoGanaUgMn2MhO6DC0+jqHzdV+ESxVCFBzet Zd11qqVUu7RJopTExJy0EOFL1OH9BXj4mcrYsT3vkHXsrfJlONK0AvbPbp8nO8lD Va6o02UnVJFLBmgXAgqJnYIqRiTB9eHLsi6VwuCZTITcN/lGbe8of9GdVrxloPiC 2ly2jLc795olxq27cb8KjIeVF0/BQ0/bA4Lvy3yoJLSDHD4VsnE= -----END CERTIFICATE-----Generated at Thu Sep 17 15:08:17 2026 by rpki-client