$ rpki-client -vvvf rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft File: 00095019ECFE138568A45C973E2550DDCDFE24F9.mft (raw, json) Hash identifier: vjG0v8OxbWNeLQJHT1YW7WmgI170dCZREwAEOpBEY7Y= Subject key identifier: 25:49:F0:B6:B6:77:89:7E:C8:BB:9E:A4:BC:64:A1:F5:42:BF:81:FB Authority key identifier: 00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9 Certificate issuer: /CN=00095019ECFE138568A45C973E2550DDCDFE24F9 Certificate serial: 4EE3E8A9C7C4592F251BC5B8ADEF9CDBF3990075 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 20:54:50 +0000 Manifest this update: Wed 16 Sep 2026 20:49:50 +0000 Manifest next update: Thu 17 Sep 2026 21:14:50 +0000 Files and hashes: 1: 3138302e39342e392e302f32342d3234203d3e20313532303430.roa (hash: 9NjGQraMtFt8WFleFmys2JeiEGfDbejk4iig/XaEVZ4=) 2: 00095019ECFE138568A45C973E2550DDCDFE24F9.crl (hash: ozRYX62rwy0XS15qrbHE54A5kOVIZGUFk9G+7cjpKMY=) 3: 3138302e39342e382e302f32342d3234203d3e20313532303430.roa (hash: QD46OeSAEEYRUHA+p9YKqowoXvSQlWoPfMsfotiNmwI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e3:e8:a9:c7:c4:59:2f:25:1b:c5:b8:ad:ef:9c:db:f3:99:00:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00095019ECFE138568A45C973E2550DDCDFE24F9 Validity Not Before: Sep 16 20:49:50 2026 GMT Not After : Sep 17 21:14:50 2026 GMT Subject: CN=2549F0B6B677897EC8BB9EA4BC64A1F542BF81FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fe:88:ab:22:d3:cc:01:8e:5a:91:9b:16:d7: 20:b8:8c:66:f4:ca:fd:bd:22:e0:ed:9f:fa:e7:8b: ea:f2:02:8c:74:0a:e8:76:ad:e0:e9:ce:45:db:e1: 80:6d:a2:61:f2:26:5a:e6:ed:49:48:31:16:3c:50: 47:f7:f4:45:fc:d8:37:5f:a6:b8:53:3d:37:e9:9d: f4:2f:53:5b:6b:f1:86:78:6f:8f:7c:74:94:a0:28: 9d:6d:b2:9f:4c:cd:3f:ed:f8:91:bf:ed:83:24:bf: 6f:7c:1a:27:36:99:87:91:38:5c:a3:cf:8b:4c:b0: 8d:7a:80:60:cf:94:7b:dd:3c:5c:2c:76:1f:16:8f: fd:93:62:b7:07:b5:30:ba:98:79:07:e1:87:c2:0d: 2c:89:91:7a:f7:3e:09:87:5f:e2:4a:47:05:be:90: ed:c8:8a:96:c4:fd:42:95:0a:2e:68:24:e7:b4:0a: 14:ff:ca:47:2a:8f:33:7c:c0:53:a0:8e:ae:68:8a: 47:bb:cd:6f:ca:20:4c:14:56:a5:8b:00:23:1f:f5: c6:72:c6:27:0a:4c:d7:35:8b:b5:31:74:8d:10:e6: 09:41:22:ed:83:dd:da:dd:89:66:c5:da:d1:af:f5: ca:30:f9:b9:d0:8b:6e:e3:49:96:19:05:bc:62:29: 8f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:49:F0:B6:B6:77:89:7E:C8:BB:9E:A4:BC:64:A1:F5:42:BF:81:FB X509v3 Authority Key Identifier: keyid:00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:c7:7e:b6:9f:ca:bf:1d:81:c3:05:18:e7:20:30:9d:08:a5: ff:43:bb:e5:9c:eb:8e:be:1f:f8:f3:61:0c:de:4e:c4:16:a2: 3e:06:55:f7:ac:eb:79:0b:f7:bd:ff:40:92:f0:84:c5:fa:08: 46:01:f7:27:37:fa:2b:b3:3d:8f:03:ab:ad:26:d2:6e:49:b8: 53:db:11:b6:ad:6b:14:4b:01:9f:9c:51:45:51:b7:ec:cd:3e: 95:03:68:5a:09:f5:35:41:23:85:df:ba:fb:0b:1e:c8:28:4c: e3:ba:0f:a9:ec:68:cc:0c:be:c5:a4:dc:de:5a:bd:7b:98:08: 36:d9:8a:90:2c:63:cb:e4:0b:32:28:6f:6e:ca:dc:ca:aa:36: 9e:16:9b:fd:7e:47:71:dd:92:1b:51:ab:2f:e1:6c:41:e6:3d: d6:dd:19:77:e2:55:e3:ec:21:ab:76:b6:c4:6d:92:59:d4:bd: 86:da:54:ae:9d:b6:57:ea:21:19:04:14:89:c2:c7:96:b1:bd: e7:c0:97:0c:1f:6f:16:0a:99:1e:4a:a6:3b:fe:04:10:79:5e: 66:83:ae:b4:39:3d:5a:fa:4c:48:f3:af:a2:fc:31:94:b6:09: 17:c4:75:e3:a4:bd:81:5f:03:c6:6a:a9:d3:d8:fe:c0:b6:15: 85:70:02:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTuPoqcfEWS8lG8W4re+c2/OZAHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAwOTUwMTlFQ0ZFMTM4NTY4QTQ1Qzk3M0UyNTUwRERD REZFMjRGOTAeFw0yNjA5MTYyMDQ5NTBaFw0yNjA5MTcyMTE0NTBaMDMxMTAvBgNV BAMTKDI1NDlGMEI2QjY3Nzg5N0VDOEJCOUVBNEJDNjRBMUY1NDJCRjgxRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh/oirItPMAY5akZsW1yC4jGb0 yv29IuDtn/rni+ryAox0Cuh2reDpzkXb4YBtomHyJlrm7UlIMRY8UEf39EX82Ddf prhTPTfpnfQvU1tr8YZ4b498dJSgKJ1tsp9MzT/t+JG/7YMkv298Gic2mYeROFyj z4tMsI16gGDPlHvdPFwsdh8Wj/2TYrcHtTC6mHkH4YfCDSyJkXr3PgmHX+JKRwW+ kO3IipbE/UKVCi5oJOe0ChT/ykcqjzN8wFOgjq5oike7zW/KIEwUVqWLACMf9cZy xicKTNc1i7UxdI0Q5glBIu2D3drdiWbF2tGv9cow+bnQi27jSZYZBbxiKY/RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJUnwtrZ3iX7Iu56kvGSh9UK/gfswHwYDVR0j BBgwFoAUAAlQGez+E4VopFyXPiVQ3c3+JPkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZmMWViNGItNDhkYy00ZWVhLTkxODEtMTI4Y2IyOGIzZGJhLzAvMDAwOTUwMTlF Q0ZFMTM4NTY4QTQ1Qzk3M0UyNTUwRERDREZFMjRGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDA5NTAxOUVDRkUxMzg1NjhBNDVDOTczRTI1NTBERENERkUy NEY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZmMWViNGItNDhkYy00ZWVhLTkx ODEtMTI4Y2IyOGIzZGJhLzAvMDAwOTUwMTlFQ0ZFMTM4NTY4QTQ1Qzk3M0UyNTUw RERDREZFMjRGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvHfrafyr8dgcMFGOcgMJ0Ipf9Du+Wc646+ H/jzYQzeTsQWoj4GVfes63kL973/QJLwhMX6CEYB9yc3+iuzPY8Dq60m0m5JuFPb EbataxRLAZ+cUUVRt+zNPpUDaFoJ9TVBI4XfuvsLHsgoTOO6D6nsaMwMvsWk3N5a vXuYCDbZipAsY8vkCzIob27K3MqqNp4Wm/1+R3HdkhtRqy/hbEHmPdbdGXfiVePs Iat2tsRtklnUvYbaVK6dtlfqIRkEFInCx5axvefAlwwfbxYKmR5Kpjv+BBB5XmaD rrQ5PVr6TEjzr6L8MZS2CRfEdeOkvYFfA8ZqqdPY/sC2FYVwAuQ= -----END CERTIFICATE-----Generated at Thu Sep 17 14:22:04 2026 by rpki-client