$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft File: 09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft (raw, json) Hash identifier: RltXHRYnPQyySZ3Z8T78wjmM+q1wZpD67ASWZET3vMM= Subject key identifier: 1A:C5:D1:6A:CE:31:53:C3:3B:61:37:D4:4C:4D:D9:00:7F:DB:9D:7F Authority key identifier: 09:C4:BA:8A:F7:41:A5:1F:DD:8C:55:09:17:C9:6D:39:5C:BE:0F:FD Certificate issuer: /CN=09C4BA8AF741A51FDD8C550917C96D395CBE0FFD Certificate serial: 76273A1624453C8314D10CE5A9096712C607BCA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 05:20:03 +0000 Manifest this update: Thu 17 Sep 2026 05:15:03 +0000 Manifest next update: Fri 18 Sep 2026 06:24:03 +0000 Files and hashes: 1: 09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.crl (hash: gTKsYlQZxC6AL15ytX2EzkwA5U5avUkwidrRZVqpHOM=) 2: 3131332e32302e3133362e302f32312d3234203d3e203435373136.roa (hash: 9Dp0sbY0tRdXCsPfX1Bi/rh765yhn92aMlIVBuucvDU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.crl rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:27:3a:16:24:45:3c:83:14:d1:0c:e5:a9:09:67:12:c6:07:bc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09C4BA8AF741A51FDD8C550917C96D395CBE0FFD Validity Not Before: Sep 17 05:15:03 2026 GMT Not After : Sep 18 06:24:03 2026 GMT Subject: CN=1AC5D16ACE3153C33B6137D44C4DD9007FDB9D7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:59:47:87:cc:30:34:2c:9c:89:ed:98:10:2c: e0:0f:d4:40:df:7f:51:18:50:2b:1e:89:77:38:da: 44:51:d2:35:c7:29:b3:a6:ec:a3:cc:56:38:05:00: 1d:ac:61:8d:58:fd:6e:1b:28:7f:19:98:99:80:b0: 66:f9:3c:a3:b9:c3:a6:c8:f2:a8:9a:0c:de:0a:3f: be:97:b2:bf:a1:15:dc:cf:df:50:4b:b0:b0:b3:51: 32:f1:b2:9f:9c:02:cc:45:b8:05:b1:a0:8b:96:e2: cb:93:08:5c:46:56:9d:84:da:82:5c:32:af:c1:d3: 11:af:d6:03:1c:74:a9:82:3c:9c:f4:e3:33:a1:81: 8e:51:f0:8f:ea:41:0b:6f:e3:04:4d:94:6a:38:8a: 39:55:75:ff:e6:1d:63:bf:9f:80:fb:57:ec:b4:ba: 56:22:ea:d4:1d:17:81:c2:cb:62:2e:b0:46:b0:28: 7c:d9:48:09:e6:f6:31:5d:b5:0c:12:cf:42:3b:d3: 8e:56:bf:49:c4:a0:1b:18:51:7e:8d:72:21:5b:70: 86:cf:21:e4:87:6d:30:62:13:9a:68:30:aa:57:f4: 69:6b:ed:ae:b5:16:8c:14:4d:b1:60:09:58:7e:bc: dc:ad:22:89:ae:3b:af:62:5d:14:5d:0d:d2:b0:ea: 0d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C5:D1:6A:CE:31:53:C3:3B:61:37:D4:4C:4D:D9:00:7F:DB:9D:7F X509v3 Authority Key Identifier: keyid:09:C4:BA:8A:F7:41:A5:1F:DD:8C:55:09:17:C9:6D:39:5C:BE:0F:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:71:72:60:6f:e7:f1:b7:fd:58:13:2d:a8:d6:a1:cc:b7:58: 64:ba:cc:0b:88:7b:4d:4e:ae:f4:17:d0:fc:4e:c8:f6:c3:35: 67:79:a4:3f:7e:d7:b8:aa:be:8d:48:0a:d6:3f:fe:8d:fb:8d: 2c:14:e6:5e:5d:9f:fe:41:0f:cd:fb:48:a0:12:22:5d:e6:9c: ca:da:f0:b7:66:5a:ae:a2:78:86:5a:c5:5b:bf:a3:a2:f1:45: 3b:2b:90:2b:5e:94:d0:82:aa:42:c8:ac:ad:10:29:97:e7:fc: 52:48:4a:54:e5:e3:68:2c:3a:6a:02:6d:fa:51:e9:1d:b0:09: 53:ea:46:02:d7:fa:8d:dd:b7:04:bd:b8:6e:7f:3f:ee:86:52: 21:67:0a:78:d6:0c:09:aa:0f:e2:a8:f1:52:5d:a2:00:26:90: 32:64:ed:89:44:7f:8b:63:a0:7e:10:1b:29:39:f1:9f:75:5a: b2:79:76:e1:63:64:68:4a:98:5e:2c:fd:8b:64:ea:17:24:9e: e8:0c:f6:de:f1:41:f3:e9:37:c7:2b:f9:14:fe:ea:b0:86:4a: de:51:52:85:02:96:c7:e6:f0:bb:14:e1:4b:49:b2:2a:9e:46: 88:f8:db:b7:dd:86:c3:14:6b:0b:ed:c6:c8:1e:e7:18:2a:29: 2b:d0:8d:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdic6FiRFPIMU0QzlqQlnEsYHvKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlDNEJBOEFGNzQxQTUxRkREOEM1NTA5MTdDOTZEMzk1 Q0JFMEZGRDAeFw0yNjA5MTcwNTE1MDNaFw0yNjA5MTgwNjI0MDNaMDMxMTAvBgNV BAMTKDFBQzVEMTZBQ0UzMTUzQzMzQjYxMzdENDRDNEREOTAwN0ZEQjlEN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWUeHzDA0LJyJ7ZgQLOAP1EDf f1EYUCseiXc42kRR0jXHKbOm7KPMVjgFAB2sYY1Y/W4bKH8ZmJmAsGb5PKO5w6bI 8qiaDN4KP76Xsr+hFdzP31BLsLCzUTLxsp+cAsxFuAWxoIuW4suTCFxGVp2E2oJc Mq/B0xGv1gMcdKmCPJz04zOhgY5R8I/qQQtv4wRNlGo4ijlVdf/mHWO/n4D7V+y0 ulYi6tQdF4HCy2IusEawKHzZSAnm9jFdtQwSz0I7045Wv0nEoBsYUX6NciFbcIbP IeSHbTBiE5poMKpX9Glr7a61FowUTbFgCVh+vNytIomuO69iXRRdDdKw6g17AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGsXRas4xU8M7YTfUTE3ZAH/bnX8wHwYDVR0j BBgwFoAUCcS6ivdBpR/djFUJF8ltOVy+D/0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhZjAwZWMtZDA4My00YTlmLTgyMWYtN2RhMThmODE1NDE3LzAvMDlDNEJBOEFG NzQxQTUxRkREOEM1NTA5MTdDOTZEMzk1Q0JFMEZGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOUM0QkE4QUY3NDFBNTFGREQ4QzU1MDkxN0M5NkQzOTVDQkUw RkZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhZjAwZWMtZDA4My00YTlmLTgy MWYtN2RhMThmODE1NDE3LzAvMDlDNEJBOEFGNzQxQTUxRkREOEM1NTA5MTdDOTZE Mzk1Q0JFMEZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJxcmBv5/G3/VgTLajWocy3WGS6zAuIe01O rvQX0PxOyPbDNWd5pD9+17iqvo1ICtY//o37jSwU5l5dn/5BD837SKASIl3mnMra 8LdmWq6ieIZaxVu/o6LxRTsrkCtelNCCqkLIrK0QKZfn/FJISlTl42gsOmoCbfpR 6R2wCVPqRgLX+o3dtwS9uG5/P+6GUiFnCnjWDAmqD+Ko8VJdogAmkDJk7YlEf4tj oH4QGyk58Z91WrJ5duFjZGhKmF4s/Ytk6hcknugM9t7xQfPpN8cr+RT+6rCGSt5R UoUClsfm8LsU4UtJsiqeRoj427fdhsMUawvtxsge5xgqKSvQjb4= -----END CERTIFICATE-----Generated at Thu Sep 17 10:56:56 2026 by rpki-client