$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft File: 9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft (raw, json) Hash identifier: DkCXE80kGrRBVnR3vDjaY5RWkAQnnStU6sZ+7vW20io= Subject key identifier: 6B:A6:8F:B6:86:43:7E:E8:C9:00:8E:AA:96:AE:0D:20:F7:44:A1:F3 Authority key identifier: 9B:AA:D5:D1:F3:6F:59:43:A3:5A:6E:E8:00:1A:5E:5F:C2:4D:9B:1E Certificate issuer: /CN=9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E Certificate serial: 3BF764181FD5A820B17885041E497A456139667E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 21:45:51 +0000 Manifest this update: Wed 16 Sep 2026 21:40:51 +0000 Manifest next update: Thu 17 Sep 2026 22:06:51 +0000 Files and hashes: 1: 9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl (hash: EnKsjPnfirDHjQyujASRslWLDqNaIHI1MOfm6RfC3So=) 2: 33362e35302e39362e302f32342d3234203d3e20313532333536.roa (hash: WdJUD9VymB093sIE0zYyqec++4X5oG27MXfWK367p8g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f7:64:18:1f:d5:a8:20:b1:78:85:04:1e:49:7a:45:61:39:66:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E Validity Not Before: Sep 16 21:40:51 2026 GMT Not After : Sep 17 22:06:51 2026 GMT Subject: CN=6BA68FB686437EE8C9008EAA96AE0D20F744A1F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:7c:9e:b7:0a:f2:2f:be:f1:71:e3:bf:77:fe: 50:b2:a1:9d:68:d2:10:4e:85:69:57:5f:40:6a:74: 3e:b2:36:07:96:98:4a:1d:eb:82:9e:cd:c6:51:64: d7:5b:ff:aa:f3:bf:2f:a6:53:bd:d4:be:c8:01:00: 57:b3:08:dd:5f:0b:5b:66:09:2d:e2:67:75:3e:d4: c2:fe:bd:56:ad:e4:9b:08:7e:75:4c:09:5c:ee:9b: 8a:c8:f2:a4:17:c1:8f:74:b7:aa:69:8a:3e:2c:69: f2:a9:03:f7:d6:cb:b0:b8:ac:8c:40:9e:fb:67:79: 1b:0a:34:08:4b:75:bd:81:d0:d7:c7:bc:2f:18:ff: 67:1f:b0:39:b4:50:8e:01:8a:5a:f7:d3:61:22:2a: f1:58:63:d4:96:1b:0c:e7:62:04:a3:fd:68:34:bd: 55:3f:41:e0:3f:b2:48:2e:17:d1:ce:87:ca:62:57: 7f:24:e1:82:f1:35:d5:a2:56:c7:6a:21:8e:1d:de: 9c:ec:74:ba:f1:74:cb:69:59:e2:09:b1:ae:04:47: 6b:63:de:f3:31:57:02:8f:57:5c:4d:62:a5:05:98: 78:a0:77:80:d0:d6:f5:e2:7e:71:33:6a:a8:ee:7d: eb:88:e1:61:b0:8c:ba:70:ac:67:d4:4f:16:60:14: 0c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A6:8F:B6:86:43:7E:E8:C9:00:8E:AA:96:AE:0D:20:F7:44:A1:F3 X509v3 Authority Key Identifier: keyid:9B:AA:D5:D1:F3:6F:59:43:A3:5A:6E:E8:00:1A:5E:5F:C2:4D:9B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:85:09:85:7f:bf:3b:6f:f6:05:24:03:3e:d5:8a:18:df:8c: 4a:63:bb:5b:3e:42:39:a2:c8:fa:4e:95:0f:2a:41:77:0d:e8: 15:47:8d:33:b6:af:68:b4:e1:7e:20:60:5f:3e:21:b1:10:fc: 4e:27:87:0d:11:62:6d:96:aa:ac:b9:07:f9:70:08:d0:a2:5d: c3:24:89:7f:89:38:15:08:ae:54:e7:f2:68:64:29:cf:fd:46: 7a:b4:90:ac:c5:80:8d:0a:b8:21:e6:a1:58:34:d0:f7:c3:1e: bb:1d:26:da:85:51:7f:c3:05:25:d6:34:77:55:d7:d5:a6:fd: f3:f2:e9:06:1d:25:41:d6:47:74:5c:04:1d:a6:71:a6:a7:ca: 55:24:5d:5e:d2:6d:45:a8:a9:e1:e7:73:7e:cb:f5:c1:c0:ae: da:bb:ac:07:bf:e1:55:47:79:31:e3:2d:1a:fa:95:99:27:b0: bd:6b:a6:ea:97:36:e2:92:94:d8:af:39:83:39:9c:1b:fe:d4: 6b:98:84:d7:23:13:66:9c:be:a0:f6:22:76:80:1d:4d:a0:d6: a0:cd:bf:62:96:84:c0:28:22:fe:af:c4:74:24:92:54:6c:14: df:27:1f:e3:8e:a3:5a:f5:87:dd:5c:c7:8d:9c:b3:28:d5:d9: f0:13:ca:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/dkGB/VqCCxeIUEHkl6RWE5Zn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJBQUQ1RDFGMzZGNTk0M0EzNUE2RUU4MDAxQTVFNUZD MjREOUIxRTAeFw0yNjA5MTYyMTQwNTFaFw0yNjA5MTcyMjA2NTFaMDMxMTAvBgNV BAMTKDZCQTY4RkI2ODY0MzdFRThDOTAwOEVBQTk2QUUwRDIwRjc0NEExRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyfJ63CvIvvvFx4793/lCyoZ1o 0hBOhWlXX0BqdD6yNgeWmEod64KezcZRZNdb/6rzvy+mU73UvsgBAFezCN1fC1tm CS3iZ3U+1ML+vVat5JsIfnVMCVzum4rI8qQXwY90t6ppij4safKpA/fWy7C4rIxA nvtneRsKNAhLdb2B0NfHvC8Y/2cfsDm0UI4Bilr302EiKvFYY9SWGwznYgSj/Wg0 vVU/QeA/skguF9HOh8piV38k4YLxNdWiVsdqIY4d3pzsdLrxdMtpWeIJsa4ER2tj 3vMxVwKPV1xNYqUFmHigd4DQ1vXifnEzaqjufeuI4WGwjLpwrGfUTxZgFAzZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa6aPtoZDfujJAI6qlq4NIPdEofMwHwYDVR0j BBgwFoAUm6rV0fNvWUOjWm7oABpeX8JNmx4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ5MGQ4NmItMGIwZC00NTZmLTg0MWEtYmZkYjlkODA3ZmI3LzAvOUJBQUQ1RDFG MzZGNTk0M0EzNUE2RUU4MDAxQTVFNUZDMjREOUIxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkFBRDVEMUYzNkY1OTQzQTM1QTZFRTgwMDFBNUU1RkMyNEQ5 QjFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ5MGQ4NmItMGIwZC00NTZmLTg0 MWEtYmZkYjlkODA3ZmI3LzAvOUJBQUQ1RDFGMzZGNTk0M0EzNUE2RUU4MDAxQTVF NUZDMjREOUIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2FCYV/vztv9gUkAz7VihjfjEpju1s+Qjmi yPpOlQ8qQXcN6BVHjTO2r2i04X4gYF8+IbEQ/E4nhw0RYm2Wqqy5B/lwCNCiXcMk iX+JOBUIrlTn8mhkKc/9Rnq0kKzFgI0KuCHmoVg00PfDHrsdJtqFUX/DBSXWNHdV 19Wm/fPy6QYdJUHWR3RcBB2mcaanylUkXV7SbUWoqeHnc37L9cHArtq7rAe/4VVH eTHjLRr6lZknsL1rpuqXNuKSlNivOYM5nBv+1GuYhNcjE2acvqD2InaAHU2g1qDN v2KWhMAoIv6vxHQkklRsFN8nH+OOo1r1h91cx42csyjV2fATyuI= -----END CERTIFICATE-----Generated at Thu Sep 17 12:20:27 2026 by rpki-client