$ rpki-client -vvvf rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft File: 9C7034B698C7FF4F82CC082FF9330FF137728D54.mft (raw, json) Hash identifier: 1Lt6Vjy8+pC/hg5v2EivXJRsFyxuK7Di6Ptfuehao5M= Subject key identifier: 6A:84:7F:30:8D:17:B7:7C:82:E2:6E:6E:5F:69:D1:64:44:68:5C:5C Authority key identifier: 9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54 Certificate issuer: /CN=9C7034B698C7FF4F82CC082FF9330FF137728D54 Certificate serial: 48C6B7D20A87C5C97687E2CD8347A825677FB6A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft Manifest number: BB Signing time: Fri 18 Sep 2026 13:44:59 +0000 Manifest this update: Fri 18 Sep 2026 13:39:59 +0000 Manifest next update: Sat 19 Sep 2026 15:27:59 +0000 Files and hashes: 1: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: uv4Ad3tws8/RhWdgc4kD3cmhisuMAvoQ5Utlm3Sezl0=) 2: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: xnLexvfVVhCVbKeAWwrGqbTG74y7g6OtFXMau20Rt9I=) 3: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: TOy78GGmZmDA6OtrgiUd51MTS8SFXQdRl3WQeCtShh4=) 4: 9C7034B698C7FF4F82CC082FF9330FF137728D54.crl (hash: /W3C+iIKzwK9YA1nIwKqmWBz0k8RyLcQY7edChbYMPQ=) 5: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: A0PveJD1fWZi8ZLG9jSQDXLx0OXP4OJbe2qchugQ+9k=) 6: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: QME/pBUvHikqT9rtnZPTg9o0f1I9fV6K/fmu0Ood5pA=) 7: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: bxedlCP85y9hLJaoDhEB2yAE5TUTBHMZLlN+XLPSDLU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.crl rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Sep 2026 04:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:c6:b7:d2:0a:87:c5:c9:76:87:e2:cd:83:47:a8:25:67:7f:b6:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C7034B698C7FF4F82CC082FF9330FF137728D54 Validity Not Before: Sep 18 13:39:59 2026 GMT Not After : Sep 19 15:27:59 2026 GMT Subject: CN=6A847F308D17B77C82E26E6E5F69D16444685C5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:35:eb:97:24:cb:fb:1d:0e:91:5b:e4:d8: 64:df:6a:95:d0:80:1e:bb:c6:99:50:f7:d8:48:b4: c8:ee:c2:db:ae:b2:29:71:c8:72:48:95:dc:43:a0: 55:c8:ec:da:22:11:3d:1b:38:ea:2a:b9:37:1f:c3: 47:07:7c:00:cc:66:b8:fd:91:4c:ce:4e:47:56:52: e4:a2:05:31:19:fb:bc:d2:e6:de:01:24:fb:fd:d3: c1:f9:f1:1a:9a:fc:83:52:eb:32:18:ce:db:84:94: 4e:53:54:38:0e:25:fc:91:b3:09:67:c1:23:96:23: e8:9c:b0:fd:fa:7d:3c:f2:ca:f5:2b:f6:24:d4:f3: 0b:d5:d0:2c:59:ba:f9:64:bc:28:ad:2f:f7:1f:5c: 8b:fe:4c:bb:12:75:b8:00:39:27:ea:00:97:73:c9: a7:93:a7:14:e1:90:23:19:86:c2:61:28:48:4f:fa: e6:20:85:13:89:4a:ca:5c:78:db:ed:f9:d1:c3:7c: a9:09:e0:9d:8e:5f:51:eb:18:77:df:70:3e:58:62: 8e:1d:ce:ee:f3:11:a9:b5:89:e3:67:a7:0e:0c:96: ee:46:96:45:3f:5d:d6:bd:71:dd:d2:3d:60:f7:5d: 3a:37:3d:e6:be:d4:a1:42:07:c9:72:cc:48:92:fa: fa:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:84:7F:30:8D:17:B7:7C:82:E2:6E:6E:5F:69:D1:64:44:68:5C:5C X509v3 Authority Key Identifier: keyid:9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:06:25:4c:11:cb:94:f7:73:a2:4b:c1:15:8e:f0:ea:3c:88: 7f:62:44:23:57:b6:91:a2:a2:86:fa:e1:12:b3:a1:a0:e4:0a: 20:1d:85:4a:33:01:42:1b:06:52:4c:63:aa:d4:1f:fb:fc:a8: 63:59:1b:19:e2:45:ba:a3:17:86:fe:e7:a3:83:9c:c6:07:23: 55:ff:90:0a:fc:43:b1:6b:7d:2d:d0:2a:98:21:b1:50:37:12: 7d:a1:2b:6f:88:d5:a9:40:05:68:c7:89:e7:e1:f4:83:9a:37: ba:5e:26:aa:a1:96:b8:ee:b7:6b:79:35:72:47:4b:88:27:51: 05:a1:6a:96:c2:d9:07:5a:5c:7c:96:e7:19:19:dc:a2:f0:ce: b8:f9:5e:5a:b3:f8:60:05:cd:85:b6:c6:d1:9d:57:6c:8b:91: 93:60:0d:f0:29:13:87:34:9d:e5:40:6f:6d:3f:65:23:e9:39: 12:e2:f0:e8:ec:68:af:ef:22:77:4c:0f:8b:06:46:28:d4:2a: 2b:e9:cf:8c:4c:ab:05:c1:63:8d:fb:24:8c:de:00:fb:87:99: a5:55:6c:fd:9b:01:19:dd:08:d6:7a:d9:01:c9:38:f2:9f:d0: ad:36:65:0b:d2:83:e6:93:07:ad:c3:3c:6b:aa:1a:53:ff:35: e9:00:fc:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSMa30gqHxcl2h+LNg0eoJWd/tqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM3MDM0QjY5OEM3RkY0RjgyQ0MwODJGRjkzMzBGRjEz NzcyOEQ1NDAeFw0yNjA5MTgxMzM5NTlaFw0yNjA5MTkxNTI3NTlaMDMxMTAvBgNV BAMTKDZBODQ3RjMwOEQxN0I3N0M4MkUyNkU2RTVGNjlEMTY0NDQ2ODVDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC53TXrlyTL+x0OkVvk2GTfapXQ gB67xplQ99hItMjuwtuusilxyHJIldxDoFXI7NoiET0bOOoquTcfw0cHfADMZrj9 kUzOTkdWUuSiBTEZ+7zS5t4BJPv908H58Rqa/INS6zIYztuElE5TVDgOJfyRswln wSOWI+icsP36fTzyyvUr9iTU8wvV0CxZuvlkvCitL/cfXIv+TLsSdbgAOSfqAJdz yaeTpxThkCMZhsJhKEhP+uYghROJSspceNvt+dHDfKkJ4J2OX1HrGHffcD5YYo4d zu7zEam1ieNnpw4Mlu5GlkU/Xda9cd3SPWD3XTo3Pea+1KFCB8lyzEiS+voJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaoR/MI0Xt3yC4m5uX2nRZERoXFwwHwYDVR0j BBgwFoAUnHA0tpjH/0+CzAgv+TMP8TdyjVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDllY2E1MGItNTcyMi00OTE4LTgzMTQtODU5ZDNjMWY1NWEyLzAvOUM3MDM0QjY5 OEM3RkY0RjgyQ0MwODJGRjkzMzBGRjEzNzcyOEQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85QzcwMzRCNjk4QzdGRjRGODJDQzA4MkZGOTMzMEZGMTM3NzI4 RDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDllY2E1MGItNTcyMi00OTE4LTgz MTQtODU5ZDNjMWY1NWEyLzAvOUM3MDM0QjY5OEM3RkY0RjgyQ0MwODJGRjkzMzBG RjEzNzcyOEQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcGJUwRy5T3c6JLwRWO8Oo8iH9iRCNXtpGi oob64RKzoaDkCiAdhUozAUIbBlJMY6rUH/v8qGNZGxniRbqjF4b+56ODnMYHI1X/ kAr8Q7FrfS3QKpghsVA3En2hK2+I1alABWjHiefh9IOaN7peJqqhlrjut2t5NXJH S4gnUQWhapbC2QdaXHyW5xkZ3KLwzrj5Xlqz+GAFzYW2xtGdV2yLkZNgDfApE4c0 neVAb20/ZSPpORLi8OjsaK/vIndMD4sGRijUKivpz4xMqwXBY437JIzeAPuHmaVV bP2bARndCNZ62QHJOPKf0K02ZQvSg+aTB63DPGuqGlP/NekA/A4= -----END CERTIFICATE-----Generated at Fri Sep 18 18:08:30 2026 by rpki-client