$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft File: 933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft (raw, json) Hash identifier: rsfCqQzMEzZ2P6jyFKAcfSPkUtCa9RbqIDo2HnOQjhY= Subject key identifier: 79:F0:F3:58:D7:6E:DF:90:A5:CE:67:0B:69:73:2E:E7:9B:AB:A9:C5 Authority key identifier: 93:35:48:F0:87:67:77:5D:7B:02:8B:D1:D8:A8:C0:B6:B7:D8:6E:93 Certificate issuer: /CN=933548F08767775D7B028BD1D8A8C0B6B7D86E93 Certificate serial: 413D0BB2DE191FF15EBCF3E8777167723446C7F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/933548F08767775D7B028BD1D8A8C0B6B7D86E93.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 05:15:00 +0000 Manifest this update: Thu 17 Sep 2026 05:10:00 +0000 Manifest next update: Fri 18 Sep 2026 05:36:00 +0000 Files and hashes: 1: 933548F08767775D7B028BD1D8A8C0B6B7D86E93.crl (hash: 0/tmrEyMT1KonK69DKQQOy6i19FiDfsPEnw+7YpRS3k=) 2: 3130332e3136342e35362e302f32342d3234203d3e20313431393033.roa (hash: zoDD4RhxLX2w3djQTafSQhXib0k+dFwrPjaxCZF6N3M=) 3: 3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa (hash: 95qI5TTOif1MY2iIjk3ZkvKBiCiEWOUsXhE4Y/1tZsk=) 4: 3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa (hash: Y8+QftugPZbHwSkPpvPN8/JuYMkdCrQIqoTMc5y/xEM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.crl rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/933548F08767775D7B028BD1D8A8C0B6B7D86E93.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:3d:0b:b2:de:19:1f:f1:5e:bc:f3:e8:77:71:67:72:34:46:c7:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=933548F08767775D7B028BD1D8A8C0B6B7D86E93 Validity Not Before: Sep 17 05:10:00 2026 GMT Not After : Sep 18 05:36:00 2026 GMT Subject: CN=79F0F358D76EDF90A5CE670B69732EE79BABA9C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:17:e1:ce:68:44:fc:f9:25:18:75:3c:90:fd: 08:f4:0f:f4:2a:e1:5b:ad:33:0c:8a:18:73:61:ab: 18:9c:4e:0c:53:48:60:43:48:9f:3e:d5:73:ad:07: 3f:2a:38:08:40:9d:a7:e6:39:d2:51:99:46:1b:6a: 07:d1:c1:dd:b3:74:d1:a1:28:b8:60:b0:ba:ab:0f: 95:89:40:eb:bd:cf:79:bc:5d:18:27:d9:b7:05:ad: 9c:e0:cf:b3:87:eb:ce:29:87:c0:52:1c:b8:e2:7f: 37:98:d8:54:5c:db:ff:15:f6:b3:e8:2d:ba:47:bd: 85:16:95:70:a4:42:03:27:54:b2:18:ae:06:63:09: cc:66:75:08:56:05:2e:c4:65:51:1a:de:70:4f:fc: d9:cd:83:60:21:bd:b4:08:a3:b8:29:a3:8d:dd:4d: f5:9a:21:fa:05:14:8c:79:be:24:2d:0a:50:8e:9d: 8c:c0:d9:54:e1:92:02:42:18:fc:80:65:bf:64:66: 98:28:14:38:75:63:19:4a:a2:b3:bc:fc:93:e7:12: 5a:33:f0:97:61:f0:1c:9d:15:bc:30:53:3c:c4:3c: 93:cd:cb:3d:1d:80:f4:a1:6a:c8:a7:fe:2e:d1:87: b5:24:e1:89:55:c9:a0:74:05:74:97:21:0a:31:d9: 9c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F0:F3:58:D7:6E:DF:90:A5:CE:67:0B:69:73:2E:E7:9B:AB:A9:C5 X509v3 Authority Key Identifier: keyid:93:35:48:F0:87:67:77:5D:7B:02:8B:D1:D8:A8:C0:B6:B7:D8:6E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/933548F08767775D7B028BD1D8A8C0B6B7D86E93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ee:96:17:fd:e3:90:28:05:f3:4c:b4:39:e2:eb:a3:44:4b: e4:71:41:11:c6:c7:9b:7f:8b:81:9d:75:56:55:8b:a9:e1:e0: 2b:8e:9d:3c:67:e0:9f:cb:d8:1c:39:e6:3f:25:27:18:17:af: 0d:65:fb:ea:ae:25:fe:d4:bc:33:58:4c:93:dc:e6:43:43:c4: 1a:e1:1c:fc:e7:7d:6b:be:1b:da:f2:b3:9c:40:62:63:33:b8: e4:58:74:d7:11:78:65:52:4d:0a:6f:f9:96:f2:69:20:89:bc: d0:76:1d:34:13:88:34:61:ef:1c:cd:50:fc:c3:a5:c2:84:ee: 43:a6:c2:e2:d6:d8:c1:84:86:52:77:92:b7:ec:9e:1d:73:2c: a6:10:59:3b:f9:87:5b:a0:a1:6f:47:fc:03:6f:d8:dd:78:ab: 0d:c2:41:7f:75:0b:68:35:3a:41:78:ba:40:9d:36:7d:48:ea: 8e:f2:1b:22:ad:f4:3f:ca:5f:8b:e0:2f:1f:6c:7f:7a:ca:5c: f7:d4:5c:4b:e6:0e:f8:5d:56:74:a1:d4:68:4e:c0:04:74:9d: 22:1d:60:81:1f:81:c9:92:77:88:66:a0:7c:2a:c1:5f:cb:77: eb:14:78:05:72:ec:c2:73:be:35:1a:82:73:34:ed:b7:c0:4e: 67:3e:92:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQT0Lst4ZH/FevPPod3FncjRGx/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMzNTQ4RjA4NzY3Nzc1RDdCMDI4QkQxRDhBOEMwQjZC N0Q4NkU5MzAeFw0yNjA5MTcwNTEwMDBaFw0yNjA5MTgwNTM2MDBaMDMxMTAvBgNV BAMTKDc5RjBGMzU4RDc2RURGOTBBNUNFNjcwQjY5NzMyRUU3OUJBQkE5QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyF+HOaET8+SUYdTyQ/Qj0D/Qq 4VutMwyKGHNhqxicTgxTSGBDSJ8+1XOtBz8qOAhAnafmOdJRmUYbagfRwd2zdNGh KLhgsLqrD5WJQOu9z3m8XRgn2bcFrZzgz7OH684ph8BSHLjifzeY2FRc2/8V9rPo LbpHvYUWlXCkQgMnVLIYrgZjCcxmdQhWBS7EZVEa3nBP/NnNg2AhvbQIo7gpo43d TfWaIfoFFIx5viQtClCOnYzA2VThkgJCGPyAZb9kZpgoFDh1YxlKorO8/JPnEloz 8Jdh8BydFbwwUzzEPJPNyz0dgPShasin/i7Rh7Uk4YlVyaB0BXSXIQox2ZwbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUefDzWNdu35ClzmcLaXMu55urqcUwHwYDVR0j BBgwFoAUkzVI8Idnd117AovR2KjAtrfYbpMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdjZDUxMWYtYWZmZi00ZmVjLTg3MjQtZDQxMTlmODkxZGYyLzAvOTMzNTQ4RjA4 NzY3Nzc1RDdCMDI4QkQxRDhBOEMwQjZCN0Q4NkU5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzM1NDhGMDg3Njc3NzVEN0IwMjhCRDFEOEE4QzBCNkI3RDg2 RTkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdjZDUxMWYtYWZmZi00ZmVjLTg3 MjQtZDQxMTlmODkxZGYyLzAvOTMzNTQ4RjA4NzY3Nzc1RDdCMDI4QkQxRDhBOEMw QjZCN0Q4NkU5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTulhf945AoBfNMtDni66NES+RxQRHGx5t/ i4GddVZVi6nh4CuOnTxn4J/L2Bw55j8lJxgXrw1l++quJf7UvDNYTJPc5kNDxBrh HPznfWu+G9rys5xAYmMzuORYdNcReGVSTQpv+ZbyaSCJvNB2HTQTiDRh7xzNUPzD pcKE7kOmwuLW2MGEhlJ3krfsnh1zLKYQWTv5h1ugoW9H/ANv2N14qw3CQX91C2g1 OkF4ukCdNn1I6o7yGyKt9D/KX4vgLx9sf3rKXPfUXEvmDvhdVnSh1GhOwAR0nSId YIEfgcmSd4hmoHwqwV/Ld+sUeAVy7MJzvjUagnM07bfATmc+krU= -----END CERTIFICATE-----Generated at Thu Sep 17 13:56:59 2026 by rpki-client