$ rpki-client -vvvf rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft File: 9DE0710D199DAE298457CA63B91BD20C03F148B9.mft (raw, json) Hash identifier: UU4SuuhYjUbhZzWAbZRF1PPjknGT6qiPxxoxsdeGm3I= Subject key identifier: AA:83:26:D3:6E:0C:D6:02:18:4D:93:8B:D5:9A:20:3E:74:BF:99:2C Authority key identifier: 9D:E0:71:0D:19:9D:AE:29:84:57:CA:63:B9:1B:D2:0C:03:F1:48:B9 Certificate issuer: /CN=9DE0710D199DAE298457CA63B91BD20C03F148B9 Certificate serial: 6E6174513973F114AF78B8FD73C87DDFD138993A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 11:32:57 +0000 Manifest this update: Thu 17 Sep 2026 11:27:56 +0000 Manifest next update: Fri 18 Sep 2026 13:14:56 +0000 Files and hashes: 1: 9DE0710D199DAE298457CA63B91BD20C03F148B9.crl (hash: 0kj9RSGoi7x2foHb3wJal9n2M0weDbMtJEqBAUeaejI=) 2: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: Wixcu+2ilRcFPig7lum9EHWYiNT3uxWOphv6H0Og4uE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.crl rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:61:74:51:39:73:f1:14:af:78:b8:fd:73:c8:7d:df:d1:38:99:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DE0710D199DAE298457CA63B91BD20C03F148B9 Validity Not Before: Sep 17 11:27:56 2026 GMT Not After : Sep 18 13:14:56 2026 GMT Subject: CN=AA8326D36E0CD602184D938BD59A203E74BF992C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:44:b6:48:16:35:b2:15:08:02:b6:22:3d:35: b0:94:e0:9f:f1:92:15:6a:a7:65:e2:58:76:06:a6: 66:6e:f4:bf:7f:f4:fc:48:70:1c:88:4f:de:95:df: f6:09:a7:cc:e0:da:86:d2:0d:d7:9d:ce:6e:97:a7: eb:c3:0c:2a:3c:26:54:d5:2e:bf:45:97:43:b1:cd: c9:1d:61:ce:10:7a:32:cf:69:98:6e:e9:2a:60:2f: 8f:f6:39:14:6e:6a:a3:ee:ed:d6:99:a0:6f:25:8b: ca:a5:69:f5:9f:54:fe:ed:d3:1d:eb:a0:23:f2:9b: 56:d5:57:5d:86:29:e7:e7:be:1e:e5:74:2d:6d:17: b8:0f:82:23:a8:1a:5e:d1:6c:42:5a:86:86:15:8c: be:33:20:42:bf:7e:b3:20:d7:c2:eb:b5:a8:3b:47: 6d:70:ad:27:0d:06:20:8a:ac:e3:ad:50:0a:60:78: 01:f3:61:e7:dd:d5:be:ef:61:aa:93:36:18:83:93: d4:68:b5:4a:53:29:c6:9e:b4:19:24:6d:98:f6:ba: 27:22:60:75:e5:4d:95:c9:20:e9:b0:7b:07:1a:8e: 20:23:1c:11:9d:4c:1c:23:c8:b4:fe:61:c2:87:1c: 8e:ea:7c:e2:b5:7e:fa:b1:e6:48:01:d1:ca:2d:e7: aa:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:83:26:D3:6E:0C:D6:02:18:4D:93:8B:D5:9A:20:3E:74:BF:99:2C X509v3 Authority Key Identifier: keyid:9D:E0:71:0D:19:9D:AE:29:84:57:CA:63:B9:1B:D2:0C:03:F1:48:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a9:49:69:25:25:ba:0f:d7:8e:f5:01:e6:b4:1d:7f:44:70: 85:58:f9:fb:c6:e9:31:8c:3c:b6:07:b9:fd:34:5b:15:9d:31: 8e:08:a7:1b:6a:5e:1d:f7:94:e5:8a:48:b0:98:49:d6:e7:3f: 44:4b:fc:4d:a3:74:b1:3a:b2:2a:1d:2e:40:95:bf:00:f7:4e: b9:c0:cf:a0:d4:c8:88:3a:b3:86:ad:4f:03:d8:be:e1:a2:3d: e2:6a:0e:f1:8b:3a:eb:08:80:8b:ca:fa:88:31:57:61:b0:51: f2:2c:ee:7e:90:db:5f:20:cb:bf:c0:1d:e0:a4:cd:43:db:e4: de:ca:42:3c:79:77:3a:fa:58:ba:2c:92:10:40:2e:03:ea:8a: 4c:3d:ba:9b:e7:92:fa:d7:de:84:c3:fa:e7:80:e6:c1:47:5f: da:9b:79:3b:08:9d:24:c1:e3:1e:7f:ba:9b:d4:0b:01:ee:ab: 3e:dc:9b:66:f9:14:86:18:d9:2d:9b:d0:9d:25:0a:ea:83:92: 55:71:fc:45:b1:66:ee:36:55:f6:d8:85:ac:99:6e:63:2c:4a: 81:ec:0f:77:4f:7b:27:08:f1:dd:f4:b6:9b:7a:56:d1:08:e3: c2:f1:0b:b7:84:e2:ae:37:ae:7c:2e:57:4e:99:d4:ef:9f:95: 4e:d1:b3:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbmF0UTlz8RSveLj9c8h939E4mTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURFMDcxMEQxOTlEQUUyOTg0NTdDQTYzQjkxQkQyMEMw M0YxNDhCOTAeFw0yNjA5MTcxMTI3NTZaFw0yNjA5MTgxMzE0NTZaMDMxMTAvBgNV BAMTKEFBODMyNkQzNkUwQ0Q2MDIxODREOTM4QkQ1OUEyMDNFNzRCRjk5MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoRLZIFjWyFQgCtiI9NbCU4J/x khVqp2XiWHYGpmZu9L9/9PxIcByIT96V3/YJp8zg2obSDdedzm6Xp+vDDCo8JlTV Lr9Fl0OxzckdYc4QejLPaZhu6SpgL4/2ORRuaqPu7daZoG8li8qlafWfVP7t0x3r oCPym1bVV12GKefnvh7ldC1tF7gPgiOoGl7RbEJahoYVjL4zIEK/frMg18Lrtag7 R21wrScNBiCKrOOtUApgeAHzYefd1b7vYaqTNhiDk9RotUpTKcaetBkkbZj2uici YHXlTZXJIOmwewcajiAjHBGdTBwjyLT+YcKHHI7qfOK1fvqx5kgB0cot56qXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqoMm024M1gIYTZOL1ZogPnS/mSwwHwYDVR0j BBgwFoAUneBxDRmdrimEV8pjuRvSDAPxSLkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjVmODQyNzgtZTA2ZC00MTE5LWJhNDQtNWMzMjk2OGE4YmJkLzAvOURFMDcxMEQx OTlEQUUyOTg0NTdDQTYzQjkxQkQyMEMwM0YxNDhCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REUwNzEwRDE5OURBRTI5ODQ1N0NBNjNCOTFCRDIwQzAzRjE0 OEI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjVmODQyNzgtZTA2ZC00MTE5LWJh NDQtNWMzMjk2OGE4YmJkLzAvOURFMDcxMEQxOTlEQUUyOTg0NTdDQTYzQjkxQkQy MEMwM0YxNDhCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKpSWklJboP1471Aea0HX9EcIVY+fvG6TGM PLYHuf00WxWdMY4IpxtqXh33lOWKSLCYSdbnP0RL/E2jdLE6siodLkCVvwD3TrnA z6DUyIg6s4atTwPYvuGiPeJqDvGLOusIgIvK+ogxV2GwUfIs7n6Q218gy7/AHeCk zUPb5N7KQjx5dzr6WLoskhBALgPqikw9upvnkvrX3oTD+ueA5sFHX9qbeTsInSTB 4x5/upvUCwHuqz7cm2b5FIYY2S2b0J0lCuqDklVx/EWxZu42VfbYhayZbmMsSoHs D3dPeycI8d30tpt6VtEI48LxC7eE4q43rnwuV06Z1O+flU7Rs18= -----END CERTIFICATE-----Generated at Thu Sep 17 14:43:03 2026 by rpki-client