$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft File: 9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft (raw, json) Hash identifier: 7L2GVszxRqX73wI2J1OzyOKfFzapK3cGlPaOzdCkO3Y= Subject key identifier: 9B:34:20:A3:B9:17:48:65:8B:82:1F:CB:9D:86:E2:F6:7A:FA:05:22 Authority key identifier: 95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0 Certificate issuer: /CN=9588905DE5DA3CEB7B575E4C7B475E22276450F0 Certificate serial: 5E6F875C4B65BDB063C960886C58B80FD68A154C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 21:09:31 +0000 Manifest this update: Thu 17 Sep 2026 21:04:31 +0000 Manifest next update: Fri 18 Sep 2026 21:19:31 +0000 Files and hashes: 1: 34392e3135362e35372e302f32342d3234203d3e203535363637.roa (hash: t5M4q+wjV6k977kCQYS5NWkmORi7rVl+URL29ZG5i/Y=) 2: 34392e3135362e35362e302f32342d3234203d3e203535363637.roa (hash: aLMfdsIVj+NArpBFKbx+R57YG2afPDJAmU3iGMb6+6c=) 3: 34392e3135362e35362e302f32332d3233203d3e203535363637.roa (hash: LXofhMEruHNZkVP/FDGdRjlE9GAdxzBp7sQ6AFEv168=) 4: 9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl (hash: /FJUu7vMMSeakjC74/3ctMj5jcoTrJSNphglF2U6RFE=) 5: 34392e3135362e36302e302f32342d3234203d3e203535363637.roa (hash: dUcYMxyxr0kR8WWHVwUrDj577thKceAoVrMPKHmFvPk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 21:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:6f:87:5c:4b:65:bd:b0:63:c9:60:88:6c:58:b8:0f:d6:8a:15:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9588905DE5DA3CEB7B575E4C7B475E22276450F0 Validity Not Before: Sep 17 21:04:31 2026 GMT Not After : Sep 18 21:19:31 2026 GMT Subject: CN=9B3420A3B91748658B821FCB9D86E2F67AFA0522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5f:67:eb:f2:5f:24:92:60:1b:26:3a:cd:c6: 45:de:6f:1d:ed:f2:45:fa:11:55:a9:5b:7f:0b:01: d5:8f:d0:8e:ed:7b:90:a9:49:7c:68:74:04:f4:c2: 28:56:07:2b:c4:d6:5a:15:01:2e:c6:b1:e0:93:3e: 13:0c:48:c1:ea:5d:1f:2d:da:dd:17:20:95:17:eb: 17:90:f3:71:96:da:5a:30:ea:b5:db:a5:3f:44:c0: a2:be:68:6a:17:23:ad:c7:d6:a7:85:1d:7c:da:49: 03:8b:2c:c9:1a:28:12:82:b9:e4:4f:df:de:29:22: 46:97:a8:66:c3:93:a5:d9:ef:1c:b5:01:2d:27:46: 2b:92:03:17:09:9b:54:23:65:42:03:fe:bc:07:7b: 04:88:02:cf:1c:aa:aa:db:21:22:07:ac:c5:66:03: fa:1a:ad:f0:ba:ad:9a:4b:c2:38:c1:5e:1d:e9:03: da:33:fe:a6:3b:12:e5:a3:f0:8f:de:a8:cc:1a:e3: 09:17:68:28:1b:55:24:26:6f:0d:09:df:e9:4f:93: 17:2f:d5:36:cc:5b:08:1a:e3:a8:8e:b7:95:6b:13: b4:ff:1d:7f:46:73:f5:03:77:2c:a7:b5:0b:5e:e3: c3:5f:b4:13:08:d6:a6:20:d0:04:ae:90:58:67:1e: 65:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:34:20:A3:B9:17:48:65:8B:82:1F:CB:9D:86:E2:F6:7A:FA:05:22 X509v3 Authority Key Identifier: keyid:95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b8:38:ff:e6:56:26:0f:44:e1:17:ae:15:22:af:52:8b:20: 47:6c:bd:8d:57:9c:39:87:8b:ee:48:2a:47:72:51:ac:f1:3a: 99:0e:04:a3:8a:6e:56:45:cd:49:9d:cb:b8:d6:26:38:8e:a2: ee:14:b1:ba:4c:0b:64:c8:c6:1c:5e:db:23:77:ca:96:7f:5f: 07:a9:a5:a5:fc:ab:94:07:08:c8:90:df:c6:8b:26:6c:d9:29: e1:e0:92:c4:1f:76:43:c6:12:4f:10:5f:b9:d9:6d:4a:0f:5a: 3a:12:cb:c0:5a:59:74:5a:b9:f1:b2:65:6d:3b:29:76:d2:21: 2c:72:0e:d1:e1:6f:8c:b9:f4:2d:8a:27:66:15:0b:b3:52:6f: d7:2b:15:8a:79:68:46:44:a3:c2:00:eb:0c:8c:48:fc:35:78: 44:c4:ed:ed:67:4b:e3:43:37:57:ca:7f:0c:f2:5d:9b:6b:03: c2:9c:f2:85:8e:c2:21:d6:b6:02:a8:b6:a5:e0:38:53:0e:b4: 14:ee:0b:36:91:07:e8:ed:34:62:cc:07:1e:5f:7f:6e:76:9e: f8:0e:0f:c6:06:b9:a8:ff:a4:e1:61:3b:a4:f8:ff:66:71:6f: ff:95:1c:51:10:e8:94:e3:ab:82:81:6d:11:86:db:c7:9b:ac: 56:df:bd:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXm+HXEtlvbBjyWCIbFi4D9aKFUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU4ODkwNURFNURBM0NFQjdCNTc1RTRDN0I0NzVFMjIy NzY0NTBGMDAeFw0yNjA5MTcyMTA0MzFaFw0yNjA5MTgyMTE5MzFaMDMxMTAvBgNV BAMTKDlCMzQyMEEzQjkxNzQ4NjU4QjgyMUZDQjlEODZFMkY2N0FGQTA1MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2X2fr8l8kkmAbJjrNxkXebx3t 8kX6EVWpW38LAdWP0I7te5CpSXxodAT0wihWByvE1loVAS7GseCTPhMMSMHqXR8t 2t0XIJUX6xeQ83GW2low6rXbpT9EwKK+aGoXI63H1qeFHXzaSQOLLMkaKBKCueRP 394pIkaXqGbDk6XZ7xy1AS0nRiuSAxcJm1QjZUID/rwHewSIAs8cqqrbISIHrMVm A/oarfC6rZpLwjjBXh3pA9oz/qY7EuWj8I/eqMwa4wkXaCgbVSQmbw0J3+lPkxcv 1TbMWwga46iOt5VrE7T/HX9Gc/UDdyyntQte48NftBMI1qYg0ASukFhnHmVHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmzQgo7kXSGWLgh/LnYbi9nr6BSIwHwYDVR0j BBgwFoAUlYiQXeXaPOt7V15Me0deIidkUPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIwNmNmNTAtYTNkMS00Y2M5LTkyNjAtOTg3YjJjYTBjOTI3LzAvOTU4ODkwNURF NURBM0NFQjdCNTc1RTRDN0I0NzVFMjIyNzY0NTBGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTg4OTA1REU1REEzQ0VCN0I1NzVFNEM3QjQ3NUUyMjI3NjQ1 MEYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIwNmNmNTAtYTNkMS00Y2M5LTky NjAtOTg3YjJjYTBjOTI3LzAvOTU4ODkwNURFNURBM0NFQjdCNTc1RTRDN0I0NzVF MjIyNzY0NTBGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFu4OP/mViYPROEXrhUir1KLIEdsvY1XnDmH i+5IKkdyUazxOpkOBKOKblZFzUmdy7jWJjiOou4UsbpMC2TIxhxe2yN3ypZ/Xwep paX8q5QHCMiQ38aLJmzZKeHgksQfdkPGEk8QX7nZbUoPWjoSy8BaWXRaufGyZW07 KXbSISxyDtHhb4y59C2KJ2YVC7NSb9crFYp5aEZEo8IA6wyMSPw1eETE7e1nS+ND N1fKfwzyXZtrA8Kc8oWOwiHWtgKotqXgOFMOtBTuCzaRB+jtNGLMBx5ff252nvgO D8YGuaj/pOFhO6T4/2Zxb/+VHFEQ6JTjq4KBbRGG28ebrFbfvXA= -----END CERTIFICATE-----Generated at Fri Sep 18 14:05:03 2026 by rpki-client