$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft File: 9F018573ABC40A1244EF018EE95D73D8E54A5247.mft (raw, json) Hash identifier: xBRmuHUl5e+87qUE5wH6eL4I6RAB0V4u/RC/FzmiS64= Subject key identifier: CD:84:EF:33:CF:66:D0:03:3E:3E:48:1F:64:A5:8C:74:B2:8E:71:46 Authority key identifier: 9F:01:85:73:AB:C4:0A:12:44:EF:01:8E:E9:5D:73:D8:E5:4A:52:47 Certificate issuer: /CN=9F018573ABC40A1244EF018EE95D73D8E54A5247 Certificate serial: 6B28ACBA4D1EA2DC59F5716CA654F4A0D96C0D6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft Manifest number: BA Signing time: Wed 16 Sep 2026 16:19:13 +0000 Manifest this update: Wed 16 Sep 2026 16:14:13 +0000 Manifest next update: Thu 17 Sep 2026 19:00:13 +0000 Files and hashes: 1: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: On7lPgtr4muQ2OAv+z91B4cwc8QzzKQys3kXiufzPRc=) 2: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: 5rI4L+b8xzlRIUsWxeEF2NdCqFStv1SMLdpn9443Ve4=) 3: 9F018573ABC40A1244EF018EE95D73D8E54A5247.crl (hash: PZ9ws5SDsB4s0JVQB5m8Qm5Wz50RBJKkfh78icqfnuU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.crl rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:28:ac:ba:4d:1e:a2:dc:59:f5:71:6c:a6:54:f4:a0:d9:6c:0d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F018573ABC40A1244EF018EE95D73D8E54A5247 Validity Not Before: Sep 16 16:14:13 2026 GMT Not After : Sep 17 19:00:13 2026 GMT Subject: CN=CD84EF33CF66D0033E3E481F64A58C74B28E7146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:48:2f:5e:11:5e:ed:bc:0e:a5:17:34:b3:68: 21:f0:f0:bc:a8:c3:a7:63:6d:d9:f7:2c:9b:37:6b: f9:2a:b2:ae:3f:52:3c:20:43:48:ac:25:25:65:02: e5:0e:43:ee:6a:b8:dc:ab:6c:90:fe:ed:03:31:4d: 2e:7d:4f:a7:a2:de:a7:69:60:87:d6:95:24:38:3a: 25:1d:4a:41:97:75:33:c2:1a:ba:58:3d:49:ee:bd: 86:d6:e7:e4:6f:4d:55:04:1b:2a:42:de:e7:14:fe: 7c:f5:8a:07:b6:a3:47:0b:08:54:5f:7a:0e:5d:6d: aa:b3:2e:a9:78:92:a0:1b:19:db:cd:35:b1:59:b9: a4:b2:c3:17:15:8e:89:8a:07:e1:2b:0e:26:7b:df: 4b:30:d1:0f:b7:90:b2:0e:df:86:5b:d1:52:df:d6: 22:e2:6c:de:bf:dc:fd:51:37:9c:04:93:34:7c:08: 75:57:04:61:7c:8f:14:50:dc:60:e1:a8:10:bf:4d: c9:96:15:c1:db:b3:ab:01:7d:fb:83:61:85:c6:42: c8:10:02:4c:df:bc:db:a5:af:27:c5:da:ce:23:60: c2:bb:94:05:7b:6f:25:39:24:11:2e:b6:47:89:c9: 6f:7c:c5:de:0c:dd:12:66:13:48:e5:d8:e2:04:8a: 92:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:84:EF:33:CF:66:D0:03:3E:3E:48:1F:64:A5:8C:74:B2:8E:71:46 X509v3 Authority Key Identifier: keyid:9F:01:85:73:AB:C4:0A:12:44:EF:01:8E:E9:5D:73:D8:E5:4A:52:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:be:8e:3b:7a:8d:57:7d:28:85:8b:3c:89:45:35:89:20:5a: e1:2f:e2:b8:22:ab:2d:d9:e2:a3:40:2b:fa:83:65:08:5d:34: 86:ba:ff:09:81:34:28:78:8c:d4:f7:d7:72:9c:f0:4b:a4:c1: cf:c8:c3:21:ed:8c:bb:bb:3c:ba:9b:ba:fa:38:66:2b:98:69: 6f:b6:09:b7:cb:60:c6:d9:bf:e5:a7:2a:a7:17:5d:36:95:a2: e2:ad:dd:dc:ee:72:5d:fe:1f:51:26:ed:e8:e4:dd:7c:c5:ae: a1:1e:0d:77:c6:5e:aa:5a:47:57:5c:85:a9:a8:47:82:48:75: 34:fe:7e:06:5c:00:be:dc:c9:95:6c:40:eb:75:15:26:fe:85: df:8d:16:fc:2f:52:bb:b8:6e:6d:41:4b:66:b4:46:22:66:d1: 64:49:e2:fa:96:e9:e8:a9:ee:c8:40:99:64:b5:45:d8:8d:74: 88:24:90:cf:95:23:92:1a:b1:1e:9c:58:38:f9:de:3f:16:3d: 7a:85:22:fc:eb:79:dd:f4:77:ec:4c:bc:f6:3c:71:d0:20:c1: cb:7a:75:d2:b9:8a:8d:7a:78:95:73:73:27:11:18:72:71:ee: 23:6c:b7:90:60:e9:bf:22:58:6f:8f:50:ac:bc:23:53:32:83: d5:f2:3d:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUayisuk0eotxZ9XFsplT0oNlsDW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwMTg1NzNBQkM0MEExMjQ0RUYwMThFRTk1RDczRDhF NTRBNTI0NzAeFw0yNjA5MTYxNjE0MTNaFw0yNjA5MTcxOTAwMTNaMDMxMTAvBgNV BAMTKENEODRFRjMzQ0Y2NkQwMDMzRTNFNDgxRjY0QTU4Qzc0QjI4RTcxNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDISC9eEV7tvA6lFzSzaCHw8Lyo w6djbdn3LJs3a/kqsq4/UjwgQ0isJSVlAuUOQ+5quNyrbJD+7QMxTS59T6ei3qdp YIfWlSQ4OiUdSkGXdTPCGrpYPUnuvYbW5+RvTVUEGypC3ucU/nz1ige2o0cLCFRf eg5dbaqzLql4kqAbGdvNNbFZuaSywxcVjomKB+ErDiZ730sw0Q+3kLIO34Zb0VLf 1iLibN6/3P1RN5wEkzR8CHVXBGF8jxRQ3GDhqBC/TcmWFcHbs6sBffuDYYXGQsgQ AkzfvNulryfF2s4jYMK7lAV7byU5JBEutkeJyW98xd4M3RJmE0jl2OIEipKRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzYTvM89m0AM+PkgfZKWMdLKOcUYwHwYDVR0j BBgwFoAUnwGFc6vEChJE7wGO6V1z2OVKUkcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTNmNzVlOTgtMTRlZi00NDU3LTk0ZjMtZTViNzNhOTIyZmM1LzAvOUYwMTg1NzNB QkM0MEExMjQ0RUYwMThFRTk1RDczRDhFNTRBNTI0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjAxODU3M0FCQzQwQTEyNDRFRjAxOEVFOTVENzNEOEU1NEE1 MjQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0 ZjMtZTViNzNhOTIyZmM1LzAvOUYwMTg1NzNBQkM0MEExMjQ0RUYwMThFRTk1RDcz RDhFNTRBNTI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEW+jjt6jVd9KIWLPIlFNYkgWuEv4rgiqy3Z 4qNAK/qDZQhdNIa6/wmBNCh4jNT313Kc8Eukwc/IwyHtjLu7PLqbuvo4ZiuYaW+2 CbfLYMbZv+WnKqcXXTaVouKt3dzucl3+H1Em7ejk3XzFrqEeDXfGXqpaR1dchamo R4JIdTT+fgZcAL7cyZVsQOt1FSb+hd+NFvwvUru4bm1BS2a0RiJm0WRJ4vqW6eip 7shAmWS1RdiNdIgkkM+VI5IasR6cWDj53j8WPXqFIvzred30d+xMvPY8cdAgwct6 ddK5io16eJVzcycRGHJx7iNst5Bg6b8iWG+PUKy8I1Myg9XyPco= -----END CERTIFICATE-----Generated at Thu Sep 17 12:20:03 2026 by rpki-client