$ rpki-client -vvvf rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft File: 9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft (raw, json) Hash identifier: bRChagGUnUkhmVS3W0n447F1zNVNG+TggnBrSxvpe/w= Subject key identifier: B4:DA:75:51:2D:23:7C:0B:F6:42:42:C4:AE:87:08:23:09:43:E6:F5 Authority key identifier: 9B:61:7E:3E:89:75:C5:E8:37:FD:E8:E7:E3:A6:F7:F2:B0:7D:F2:FA Certificate issuer: /CN=9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA Certificate serial: 22D0F90E89EBA5DBB563849E93F8E32817CBE229 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 02:41:48 +0000 Manifest this update: Thu 17 Sep 2026 02:36:48 +0000 Manifest next update: Fri 18 Sep 2026 03:47:48 +0000 Files and hashes: 1: 9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl (hash: /JoirZt1ebynTUHBplhi7jywawn8QURCuN+eiL5/yiI=) 2: 3130332e34332e32352e302f32342d3234203d3e20313339343139.roa (hash: jbUXyMJGAUe8ArHS1H74yui1bmkFdiNku010i13gDLM=) 3: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (hash: Y6VzFaG2FbyNdRwLMR4BvXhR1/TPWS0MIZ86oCceOfk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d0:f9:0e:89:eb:a5:db:b5:63:84:9e:93:f8:e3:28:17:cb:e2:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA Validity Not Before: Sep 17 02:36:48 2026 GMT Not After : Sep 18 03:47:48 2026 GMT Subject: CN=B4DA75512D237C0BF64242C4AE8708230943E6F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:86:ba:fc:e2:a9:16:fe:91:b4:91:6e:03:c7: bf:05:cd:84:2f:cc:ea:41:d2:90:1c:ac:ca:1f:b7: 80:fd:ff:97:d7:0a:97:39:5e:6d:49:d5:10:24:07: e7:48:6a:59:f7:de:60:f6:05:ad:ef:d9:5a:3a:a2: c0:30:a7:bc:7e:fb:b2:42:f3:16:f8:78:f7:e0:da: 19:99:c7:71:82:09:c7:23:1a:1c:b2:f3:36:ac:78: c1:fd:8d:35:b8:b8:74:d3:3b:29:34:6c:45:6a:ef: f8:09:c2:43:d4:12:18:d9:d5:1d:bb:5f:58:b4:b8: 3c:91:0c:4b:89:02:67:42:65:58:98:93:73:aa:e6: 8a:22:84:4f:5b:68:0c:3d:02:e9:e2:0a:d9:62:7b: 08:e4:93:da:f0:a1:39:07:c2:4b:e8:ce:e1:d9:30: df:dc:83:36:f4:62:3e:ae:2f:88:17:98:44:79:6b: b6:ae:16:0d:6a:b0:a2:0a:d8:8d:44:5e:6b:0b:1a: fd:13:e6:68:ce:17:d9:7a:05:c9:98:0e:b4:98:8c: 38:13:85:e8:74:94:fa:09:fe:0d:aa:b9:97:6f:e5: dd:a3:6c:25:90:dd:2b:3d:0a:52:8b:45:01:a2:c2: b9:6d:d3:8d:c9:61:6f:90:28:10:f5:21:c3:fa:87: 44:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DA:75:51:2D:23:7C:0B:F6:42:42:C4:AE:87:08:23:09:43:E6:F5 X509v3 Authority Key Identifier: keyid:9B:61:7E:3E:89:75:C5:E8:37:FD:E8:E7:E3:A6:F7:F2:B0:7D:F2:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ec:dd:48:89:22:22:97:af:de:f0:e5:53:6f:a5:89:be:7f: b3:e8:1c:b4:d1:a3:69:2c:b3:79:6c:a4:0a:69:1e:4c:34:d9: 8e:14:10:ba:20:45:fc:83:82:e7:83:5c:dc:72:97:39:25:8f: 6b:9e:f0:72:46:ed:f1:e6:38:ec:06:b5:f4:99:0f:d7:6e:9a: d7:2a:ab:8a:0d:96:1c:81:a2:4b:ed:e5:8d:74:97:6d:4c:f1: 62:90:99:ca:45:e1:a8:34:b2:1a:0d:d1:dc:36:da:5e:f2:56: 77:2b:66:ca:24:f7:bf:25:c3:ab:b3:4c:a7:d3:9f:53:77:c4: 33:4e:70:d4:fc:0a:a1:48:ed:63:04:ee:db:38:1f:3d:a7:7f: fd:73:81:bc:96:3e:d4:63:7f:ae:95:c9:4e:aa:c8:56:2c:42: 30:63:1b:4e:d0:46:35:ac:f3:ae:7d:96:4c:8e:07:c5:77:67: d1:b2:79:ec:a2:0b:cc:a2:dc:6c:34:57:dd:e8:23:6e:d8:8e: a4:45:fd:cf:98:bb:d2:e2:31:3f:12:30:d9:83:79:de:bb:ae: 77:dd:58:56:d2:a8:0d:ce:f0:54:63:86:84:21:be:f3:26:14: fd:0d:0b:d1:8b:b2:bb:b1:7b:b8:ab:55:08:a9:49:59:27:91: 9a:ef:30:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUItD5Donrpdu1Y4Sek/jjKBfL4ikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI2MTdFM0U4OTc1QzVFODM3RkRFOEU3RTNBNkY3RjJC MDdERjJGQTAeFw0yNjA5MTcwMjM2NDhaFw0yNjA5MTgwMzQ3NDhaMDMxMTAvBgNV BAMTKEI0REE3NTUxMkQyMzdDMEJGNjQyNDJDNEFFODcwODIzMDk0M0U2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6hrr84qkW/pG0kW4Dx78FzYQv zOpB0pAcrMoft4D9/5fXCpc5Xm1J1RAkB+dIaln33mD2Ba3v2Vo6osAwp7x++7JC 8xb4ePfg2hmZx3GCCccjGhyy8zaseMH9jTW4uHTTOyk0bEVq7/gJwkPUEhjZ1R27 X1i0uDyRDEuJAmdCZViYk3Oq5ooihE9baAw9AuniCtliewjkk9rwoTkHwkvozuHZ MN/cgzb0Yj6uL4gXmER5a7auFg1qsKIK2I1EXmsLGv0T5mjOF9l6BcmYDrSYjDgT heh0lPoJ/g2quZdv5d2jbCWQ3Ss9ClKLRQGiwrlt043JYW+QKBD1IcP6h0RDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtNp1US0jfAv2QkLErocIIwlD5vUwHwYDVR0j BBgwFoAUm2F+Pol1xeg3/ejn46b38rB98vowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDIwODNkNDQtNzgzNS00NDNkLTg1M2EtMGE3OWNmMDBlOTUwLzAvOUI2MTdFM0U4 OTc1QzVFODM3RkRFOEU3RTNBNkY3RjJCMDdERjJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QjYxN0UzRTg5NzVDNUU4MzdGREU4RTdFM0E2RjdGMkIwN0RG MkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDIwODNkNDQtNzgzNS00NDNkLTg1 M2EtMGE3OWNmMDBlOTUwLzAvOUI2MTdFM0U4OTc1QzVFODM3RkRFOEU3RTNBNkY3 RjJCMDdERjJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXs3UiJIiKXr97w5VNvpYm+f7PoHLTRo2ks s3lspAppHkw02Y4UELogRfyDgueDXNxylzklj2ue8HJG7fHmOOwGtfSZD9dumtcq q4oNlhyBokvt5Y10l21M8WKQmcpF4ag0shoN0dw22l7yVncrZsok978lw6uzTKfT n1N3xDNOcNT8CqFI7WME7ts4Hz2nf/1zgbyWPtRjf66VyU6qyFYsQjBjG07QRjWs 8659lkyOB8V3Z9GyeeyiC8yi3Gw0V93oI27YjqRF/c+Yu9LiMT8SMNmDed67rnfd WFbSqA3O8FRjhoQhvvMmFP0NC9GLsruxe7irVQipSVknkZrvMKg= -----END CERTIFICATE-----Generated at Thu Sep 17 14:23:49 2026 by rpki-client