$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft File: 872439399C3ADEB5FD342E7B6286CED219899CA2.mft (raw, json) Hash identifier: EJ0KPojf4uxRLC/pPy4Fee+zlZ4mdjc42I9GT/JuWDY= Subject key identifier: F4:90:78:10:56:B8:7D:E4:67:33:D5:13:17:1A:88:5B:BF:05:2E:6F Authority key identifier: 87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2 Certificate issuer: /CN=872439399C3ADEB5FD342E7B6286CED219899CA2 Certificate serial: 47E7EC8BC461578B4CED09C95E9EF08240957F88 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 08:49:28 +0000 Manifest this update: Thu 17 Sep 2026 08:44:28 +0000 Manifest next update: Fri 18 Sep 2026 09:13:28 +0000 Files and hashes: 1: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: yjf0/JJFQABhzT0gnDsCQ/oag0HSQ3URmpUm4ciNYx4=) 2: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: NKC5Np3Ag/+a1x7nhQql2VpKY7CAeiWtD4pS8O2fPAg=) 3: 872439399C3ADEB5FD342E7B6286CED219899CA2.crl (hash: kJjoar7X2sph5q+2q2eBRiGTR20s/090vc3gupuh4Qs=) 4: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: adl429vFkP0oWDwTvPnmag7OFx0zxihqimWJrrJGrRE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e7:ec:8b:c4:61:57:8b:4c:ed:09:c9:5e:9e:f0:82:40:95:7f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=872439399C3ADEB5FD342E7B6286CED219899CA2 Validity Not Before: Sep 17 08:44:28 2026 GMT Not After : Sep 18 09:13:28 2026 GMT Subject: CN=F490781056B87DE46733D513171A885BBF052E6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:56:a3:ff:dd:38:1a:c1:5f:ba:af:f0:d5:be: f6:42:23:f2:34:53:4a:3b:d6:5a:ee:fe:08:24:13: 77:42:01:2c:ef:dc:b4:8b:c2:ed:92:1d:3e:68:8f: 7f:27:ba:94:dd:e3:0c:17:59:53:7e:e3:b2:93:2a: 7e:fb:2d:01:32:02:78:8c:c4:3c:97:7c:58:0d:c6: 13:ce:91:63:08:a8:f3:f4:8d:65:3e:d3:5d:e3:7b: f2:20:ce:4f:86:c5:97:4f:54:f8:53:d8:42:0b:68: e9:a0:41:de:42:95:a0:c9:75:22:76:8e:31:3d:17: 6a:a4:58:40:fe:83:f9:5c:08:98:d5:a8:ab:ee:8d: ba:ec:30:98:03:fd:03:0e:04:d7:1f:01:77:85:10: c7:52:d1:03:57:ff:67:0f:8f:fe:89:65:a6:0a:5d: f8:81:ba:91:be:4e:83:58:48:77:0d:ba:5b:f2:1c: 97:3a:4e:ac:6c:44:60:4a:1a:29:3a:7f:5d:13:ff: bc:6f:95:80:15:d9:08:2b:c9:f4:e5:64:36:46:48: c4:45:d8:f0:2b:04:8c:51:23:13:7b:5e:4f:17:9d: f4:05:40:b1:43:27:c8:d2:b7:7e:b1:16:8e:f9:e2: 62:7a:3b:b1:27:df:29:15:ca:d9:b1:1b:45:45:30: 08:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:90:78:10:56:B8:7D:E4:67:33:D5:13:17:1A:88:5B:BF:05:2E:6F X509v3 Authority Key Identifier: keyid:87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f0:d6:c9:cf:bb:70:16:47:d6:82:b0:ec:ac:e4:00:bd:72: 68:bd:9f:55:d0:b2:97:65:90:52:d6:aa:70:12:f9:48:1a:29: 8c:b5:68:0e:0c:63:10:89:70:42:28:70:d0:b5:7d:df:d8:d3: de:95:b8:80:16:8e:42:d8:0b:10:a0:bb:6e:e2:b1:86:13:e3: d8:bc:03:f4:10:a7:e0:19:8b:81:99:03:e0:ad:be:f2:7d:53: cd:8e:5f:42:f0:85:83:38:01:9c:7c:b6:db:7d:12:f0:be:df: 42:8c:04:77:09:35:dd:0a:16:af:7a:3b:7e:1f:6d:74:ea:73: ea:f6:35:0b:89:36:dc:84:32:24:9b:e0:f3:9f:86:24:02:88: f8:ee:20:ac:b2:29:d5:09:fb:18:6f:4f:a3:33:c1:87:b7:f8: 3a:29:08:b0:19:db:e5:a6:30:77:26:38:d3:63:b1:41:b0:27: a3:2e:be:5c:37:27:9b:b6:e8:ec:35:89:22:a4:33:a8:17:93: 26:94:38:c0:28:c8:2a:7a:60:93:f7:ce:b6:03:48:df:15:8f: 10:34:ea:3a:c5:b0:a5:e8:25:3b:b7:3c:8e:05:52:05:d2:d8: 50:fa:c0:e1:3e:01:50:8b:37:5b:71:ac:f8:1a:71:6b:ca:e8: a6:13:a2:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR+fsi8RhV4tM7QnJXp7wgkCVf4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyNDM5Mzk5QzNBREVCNUZEMzQyRTdCNjI4NkNFRDIx OTg5OUNBMjAeFw0yNjA5MTcwODQ0MjhaFw0yNjA5MTgwOTEzMjhaMDMxMTAvBgNV BAMTKEY0OTA3ODEwNTZCODdERTQ2NzMzRDUxMzE3MUE4ODVCQkYwNTJFNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeVqP/3TgawV+6r/DVvvZCI/I0 U0o71lru/ggkE3dCASzv3LSLwu2SHT5oj38nupTd4wwXWVN+47KTKn77LQEyAniM xDyXfFgNxhPOkWMIqPP0jWU+013je/Igzk+GxZdPVPhT2EILaOmgQd5ClaDJdSJ2 jjE9F2qkWED+g/lcCJjVqKvujbrsMJgD/QMOBNcfAXeFEMdS0QNX/2cPj/6JZaYK XfiBupG+ToNYSHcNulvyHJc6TqxsRGBKGik6f10T/7xvlYAV2QgryfTlZDZGSMRF 2PArBIxRIxN7Xk8XnfQFQLFDJ8jSt36xFo754mJ6O7En3ykVytmxG0VFMAg9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9JB4EFa4feRnM9UTFxqIW78FLm8wHwYDVR0j BBgwFoAUhyQ5OZw63rX9NC57YobO0hmJnKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM3ZDNjYmYtMjRkNi00YjFjLTg2Y2ItMWQ0ODg3NmYzYzZiLzAvODcyNDM5Mzk5 QzNBREVCNUZEMzQyRTdCNjI4NkNFRDIxOTg5OUNBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzI0MzkzOTlDM0FERUI1RkQzNDJFN0I2Mjg2Q0VEMjE5ODk5 Q0EyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvODcyNDM5Mzk5QzNBREVCNUZEMzQyRTdCNjI4NkNF RDIxOTg5OUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7w1snPu3AWR9aCsOys5AC9cmi9n1XQspdl kFLWqnAS+UgaKYy1aA4MYxCJcEIocNC1fd/Y096VuIAWjkLYCxCgu27isYYT49i8 A/QQp+AZi4GZA+CtvvJ9U82OX0LwhYM4AZx8ttt9EvC+30KMBHcJNd0KFq96O34f bXTqc+r2NQuJNtyEMiSb4POfhiQCiPjuIKyyKdUJ+xhvT6MzwYe3+DopCLAZ2+Wm MHcmONNjsUGwJ6Muvlw3J5u26Ow1iSKkM6gXkyaUOMAoyCp6YJP3zrYDSN8VjxA0 6jrFsKXoJTu3PI4FUgXS2FD6wOE+AVCLN1txrPgacWvK6KYToiI= -----END CERTIFICATE-----Generated at Thu Sep 17 14:21:37 2026 by rpki-client