$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft File: B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft (raw, json) Hash identifier: uceHdII5cQpJ/85bI2MA3/ZbvTu7ehm/xpozvw7juDM= Subject key identifier: E7:43:03:C9:D7:FF:72:08:9A:76:B5:EC:DB:5B:23:F4:4E:07:5F:95 Authority key identifier: B9:D7:A5:A4:9B:32:2E:D9:87:28:18:32:AB:CF:B5:DC:50:9A:B8:89 Certificate issuer: /CN=B9D7A5A49B322ED987281832ABCFB5DC509AB889 Certificate serial: 65AE5C6C72537DF3E5BD4C84EBE8A4BC1D97AFF3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 22:01:04 +0000 Manifest this update: Wed 16 Sep 2026 21:56:04 +0000 Manifest next update: Thu 17 Sep 2026 23:36:04 +0000 Files and hashes: 1: 3130332e3137362e3132312e302f32342d3234203d3e20313437313330.roa (hash: mPIkuQVE9R3LTUTej85wxcqgd13oKy/e6VbDwXPFIhY=) 2: 3130332e3137362e36382e302f32342d3234203d3e20313437313330.roa (hash: huLq2YMQLck+XmMqgf5+tIkuWDJY1pNSg4kGrXts0QE=) 3: B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl (hash: YnMtDwi780kN9eIodX4R+YkXwwb7DhJRKblM5r46VbU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ae:5c:6c:72:53:7d:f3:e5:bd:4c:84:eb:e8:a4:bc:1d:97:af:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9D7A5A49B322ED987281832ABCFB5DC509AB889 Validity Not Before: Sep 16 21:56:04 2026 GMT Not After : Sep 17 23:36:04 2026 GMT Subject: CN=E74303C9D7FF72089A76B5ECDB5B23F44E075F95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c6:61:db:14:ba:b4:37:51:5d:84:64:b0:18: 73:67:18:5a:5b:b9:3f:ad:5b:1a:cb:61:e3:ba:17: c9:c9:38:0f:45:e1:22:73:4c:56:26:7c:0d:02:2e: 11:6c:39:89:16:38:78:c2:5b:77:19:fa:4c:90:cc: 1b:94:41:3f:13:06:d6:aa:13:e7:e4:51:b9:be:2a: 6b:73:8f:d3:54:f9:9c:23:c0:b7:55:d6:5b:c2:98: 8f:14:bb:e4:83:a2:7a:bd:70:ca:f6:d6:88:e5:75: 3d:09:d1:92:94:89:44:c1:8c:1a:4f:86:a2:8d:98: 6f:85:48:8b:ec:38:37:52:32:ab:7a:fd:cb:37:0c: 3c:d6:b9:e2:07:14:15:eb:d3:c5:09:ee:41:34:79: 61:02:e6:e8:52:88:b7:6d:6b:8b:13:1f:fd:8d:ce: bb:d2:ce:8f:0e:37:90:1c:16:19:8b:26:a1:35:8f: cd:a1:e7:5d:a6:7a:5a:bd:36:44:45:f8:c6:40:9c: d3:8a:c1:8b:36:bd:21:5b:d6:fe:e3:e3:f6:5e:10: 2b:07:06:a4:ea:72:88:7e:23:f9:43:f8:cf:05:76: 63:53:e5:29:0a:73:73:00:c1:cd:46:8b:0c:0f:1e: 66:f0:09:69:98:15:78:2c:68:e2:39:e2:a9:b1:de: 74:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:43:03:C9:D7:FF:72:08:9A:76:B5:EC:DB:5B:23:F4:4E:07:5F:95 X509v3 Authority Key Identifier: keyid:B9:D7:A5:A4:9B:32:2E:D9:87:28:18:32:AB:CF:B5:DC:50:9A:B8:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:fb:30:83:90:18:ca:7e:a7:d1:7a:e8:8d:c6:49:39:b4:ff: 20:53:c9:fc:f5:4f:07:31:03:c5:91:b9:19:c3:89:92:23:8b: f1:e3:fc:0b:14:31:95:24:47:05:72:9e:ec:20:b7:de:fb:06: 62:0e:d1:d1:9a:aa:88:7d:10:a2:28:49:86:f4:16:9e:23:b3: 35:40:3d:6c:da:e5:d5:02:c2:0e:8f:1a:67:d1:8a:4a:10:43: 98:48:7f:bc:43:37:a7:97:bf:cd:58:7a:ae:f4:4f:46:f8:03: 68:75:38:62:de:27:2d:3a:92:af:6e:76:f7:3e:ad:01:f0:50: 17:f3:cc:33:af:4f:eb:c2:66:ad:28:91:c8:2d:20:1b:40:3b: b5:68:cc:60:ea:f2:92:c8:0f:2e:e5:44:9c:4e:89:e0:4f:37: dc:1e:48:b1:17:71:e2:c3:49:7a:05:39:fe:69:af:b6:ff:9f: c1:ba:83:8b:1a:ac:a4:57:c8:c7:9c:f6:39:14:27:29:70:02: 9f:d4:9e:c9:59:31:f4:cf:eb:95:da:2d:09:43:7d:8d:ea:73: 17:e8:8f:a7:68:f6:18:24:c0:8f:b0:6d:36:0b:42:a3:5a:a1: b9:8e:35:33:5b:e2:b0:e7:83:05:9f:00:ea:8a:b3:4a:cd:9a: 0b:3b:d1:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZa5cbHJTffPlvUyE6+ikvB2Xr/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlEN0E1QTQ5QjMyMkVEOTg3MjgxODMyQUJDRkI1REM1 MDlBQjg4OTAeFw0yNjA5MTYyMTU2MDRaFw0yNjA5MTcyMzM2MDRaMDMxMTAvBgNV BAMTKEU3NDMwM0M5RDdGRjcyMDg5QTc2QjVFQ0RCNUIyM0Y0NEUwNzVGOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtxmHbFLq0N1FdhGSwGHNnGFpb uT+tWxrLYeO6F8nJOA9F4SJzTFYmfA0CLhFsOYkWOHjCW3cZ+kyQzBuUQT8TBtaq E+fkUbm+Kmtzj9NU+ZwjwLdV1lvCmI8Uu+SDonq9cMr21ojldT0J0ZKUiUTBjBpP hqKNmG+FSIvsODdSMqt6/cs3DDzWueIHFBXr08UJ7kE0eWEC5uhSiLdta4sTH/2N zrvSzo8ON5AcFhmLJqE1j82h512melq9NkRF+MZAnNOKwYs2vSFb1v7j4/ZeECsH BqTqcoh+I/lD+M8FdmNT5SkKc3MAwc1GiwwPHmbwCWmYFXgsaOI54qmx3nRNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU50MDydf/cgiadrXs21sj9E4HX5UwHwYDVR0j BBgwFoAUudelpJsyLtmHKBgyq8+13FCauIkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTk1MWRmZWUtYTc1Yi00NDIwLWE3NTUtMmM3MzU4YmFmN2QzLzAvQjlEN0E1QTQ5 QjMyMkVEOTg3MjgxODMyQUJDRkI1REM1MDlBQjg4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUQ3QTVBNDlCMzIyRUQ5ODcyODE4MzJBQkNGQjVEQzUwOUFC ODg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTk1MWRmZWUtYTc1Yi00NDIwLWE3 NTUtMmM3MzU4YmFmN2QzLzAvQjlEN0E1QTQ5QjMyMkVEOTg3MjgxODMyQUJDRkI1 REM1MDlBQjg4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFz7MIOQGMp+p9F66I3GSTm0/yBTyfz1Twcx A8WRuRnDiZIji/Hj/AsUMZUkRwVynuwgt977BmIO0dGaqoh9EKIoSYb0Fp4jszVA PWza5dUCwg6PGmfRikoQQ5hIf7xDN6eXv81Yeq70T0b4A2h1OGLeJy06kq9udvc+ rQHwUBfzzDOvT+vCZq0okcgtIBtAO7VozGDq8pLIDy7lRJxOieBPN9weSLEXceLD SXoFOf5pr7b/n8G6g4sarKRXyMec9jkUJylwAp/UnslZMfTP65XaLQlDfY3qcxfo j6do9hgkwI+wbTYLQqNaobmONTNb4rDngwWfAOqKs0rNmgs70aE= -----END CERTIFICATE-----Generated at Thu Sep 17 10:46:17 2026 by rpki-client