$ rpki-client -vvvf rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft File: 9E6973F078195021DC7E37753A16BDC3BD2CE345.mft (raw, json) Hash identifier: b33wt+I/PZzEpgP0p2rpENLSRhFK03Ss8Z3O9ZLDbm0= Subject key identifier: E9:38:6C:C0:27:20:3D:5D:E7:D7:39:D0:25:7D:53:B0:3A:E0:02:77 Authority key identifier: 9E:69:73:F0:78:19:50:21:DC:7E:37:75:3A:16:BD:C3:BD:2C:E3:45 Certificate issuer: /CN=9E6973F078195021DC7E37753A16BDC3BD2CE345 Certificate serial: 2B1E77993AA147F281149E65B31B488034D27916 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 05:14:58 +0000 Manifest this update: Thu 17 Sep 2026 05:09:58 +0000 Manifest next update: Fri 18 Sep 2026 06:00:58 +0000 Files and hashes: 1: 9E6973F078195021DC7E37753A16BDC3BD2CE345.crl (hash: pXPOo2C+qZNf0Oh7wxgAksZ6Hjv/xEWsoZkS+xdom3c=) 2: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: rDhWNdSE+MiC9nWV9xic84xxhEExen6QKYzm8hSRAZY=) 3: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: 70nvBnU+j3RyzkTv1EtBoPc4XFT8NOWYE+TEopumrFA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.crl rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:1e:77:99:3a:a1:47:f2:81:14:9e:65:b3:1b:48:80:34:d2:79:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6973F078195021DC7E37753A16BDC3BD2CE345 Validity Not Before: Sep 17 05:09:58 2026 GMT Not After : Sep 18 06:00:58 2026 GMT Subject: CN=E9386CC027203D5DE7D739D0257D53B03AE00277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:74:5f:b6:f9:d9:a0:a4:eb:7d:7e:e8:89:66: 71:59:fb:38:dc:a3:e1:a7:13:a1:3b:d8:8c:e1:11: a3:ae:e8:23:d4:e3:dd:2b:26:32:80:05:0a:98:e4: ec:cd:7e:aa:f6:fe:84:f6:1c:6b:f3:e7:c0:76:cb: a0:02:18:47:9f:04:ef:c1:13:3e:20:69:97:06:84: 04:e5:ec:29:47:2d:50:fb:54:74:5f:ec:e9:91:07: aa:6f:b9:a0:16:b4:1e:99:fc:08:72:d4:c1:a4:45: aa:7d:25:d2:7e:90:bd:6e:f4:ae:c0:9c:e4:48:d9: a9:02:1e:eb:94:7b:64:a8:ac:27:0c:8c:09:fe:40: a6:81:a5:16:9f:0d:6f:fc:f2:ca:35:a9:d1:e2:d3: 3c:2d:16:82:f8:be:f1:6a:13:33:57:6a:82:c2:7a: 11:d2:bd:34:40:97:ae:ed:ae:29:20:23:f9:03:cb: f9:8c:70:3a:81:d4:43:4a:78:92:23:dd:3e:02:f2: ef:d6:b4:d5:bb:40:1c:ad:88:88:0f:a8:bd:c1:44: b7:7a:a9:0b:57:e1:c2:55:1f:0c:9a:47:36:e8:c6: d7:b6:6b:8c:1a:7f:f6:80:50:d4:95:6c:4e:23:4e: c7:aa:8c:83:f4:b6:99:f4:49:20:b1:07:35:43:95: ef:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:38:6C:C0:27:20:3D:5D:E7:D7:39:D0:25:7D:53:B0:3A:E0:02:77 X509v3 Authority Key Identifier: keyid:9E:69:73:F0:78:19:50:21:DC:7E:37:75:3A:16:BD:C3:BD:2C:E3:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:f3:c2:8e:72:e9:97:99:fc:f4:d1:cf:46:26:da:6b:d4:88: 99:d6:64:52:d1:4b:51:75:b1:b1:ca:8c:7c:81:6c:14:35:d6: 10:a1:3c:0c:85:48:3f:e9:b5:79:49:a9:2f:ae:89:fa:8a:d9: a1:59:ed:fa:15:ea:cc:50:e9:98:05:6a:40:c0:b5:53:09:88: 76:53:c4:20:b9:77:bc:d5:a8:53:5d:8f:68:b9:85:f0:ab:3f: 10:8c:26:c4:9b:b8:df:37:4e:5d:29:d5:b8:de:1c:57:52:56: 3b:08:b5:f6:d8:5d:0b:b4:c4:07:5a:ce:60:b8:fe:5e:fa:09: 59:02:1b:62:44:fb:da:aa:57:c3:00:bf:21:38:80:41:cb:5a: 59:49:e3:5c:8f:35:24:d0:8c:c3:e6:fd:8f:ed:5d:a4:3a:f5: 7e:89:0f:87:53:1c:8f:d4:cf:e5:c4:e2:e7:0c:25:40:78:35: ce:39:01:f8:f3:05:15:79:c1:39:71:cc:80:28:0e:88:f9:08: b6:ba:2b:2b:6f:70:33:de:d6:57:be:f6:b6:e9:1d:4f:e2:8d: ff:35:3a:72:81:98:4a:3a:0b:6d:0e:e9:77:ad:30:48:b2:3f: ee:f7:6e:a0:5d:12:88:1c:db:a4:80:67:83:55:02:22:9a:36: 01:33:3e:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKx53mTqhR/KBFJ5lsxtIgDTSeRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2OTczRjA3ODE5NTAyMURDN0UzNzc1M0ExNkJEQzNC RDJDRTM0NTAeFw0yNjA5MTcwNTA5NThaFw0yNjA5MTgwNjAwNThaMDMxMTAvBgNV BAMTKEU5Mzg2Q0MwMjcyMDNENURFN0Q3MzlEMDI1N0Q1M0IwM0FFMDAyNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVdF+2+dmgpOt9fuiJZnFZ+zjc o+GnE6E72IzhEaOu6CPU490rJjKABQqY5OzNfqr2/oT2HGvz58B2y6ACGEefBO/B Ez4gaZcGhATl7ClHLVD7VHRf7OmRB6pvuaAWtB6Z/Ahy1MGkRap9JdJ+kL1u9K7A nORI2akCHuuUe2SorCcMjAn+QKaBpRafDW/88so1qdHi0zwtFoL4vvFqEzNXaoLC ehHSvTRAl67trikgI/kDy/mMcDqB1ENKeJIj3T4C8u/WtNW7QBytiIgPqL3BRLd6 qQtX4cJVHwyaRzboxte2a4waf/aAUNSVbE4jTseqjIP0tpn0SSCxBzVDle8XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6ThswCcgPV3n1znQJX1TsDrgAncwHwYDVR0j BBgwFoAUnmlz8HgZUCHcfjd1Oha9w70s40UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjdkYjIzYjctOTE1OS00NmM3LTg4NTMtMDY2NTRhZTQ3YWVkLzAvOUU2OTczRjA3 ODE5NTAyMURDN0UzNzc1M0ExNkJEQzNCRDJDRTM0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RTY5NzNGMDc4MTk1MDIxREM3RTM3NzUzQTE2QkRDM0JEMkNF MzQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjdkYjIzYjctOTE1OS00NmM3LTg4 NTMtMDY2NTRhZTQ3YWVkLzAvOUU2OTczRjA3ODE5NTAyMURDN0UzNzc1M0ExNkJE QzNCRDJDRTM0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXzwo5y6ZeZ/PTRz0Ym2mvUiJnWZFLRS1F1 sbHKjHyBbBQ11hChPAyFSD/ptXlJqS+uifqK2aFZ7foV6sxQ6ZgFakDAtVMJiHZT xCC5d7zVqFNdj2i5hfCrPxCMJsSbuN83Tl0p1bjeHFdSVjsItfbYXQu0xAdazmC4 /l76CVkCG2JE+9qqV8MAvyE4gEHLWllJ41yPNSTQjMPm/Y/tXaQ69X6JD4dTHI/U z+XE4ucMJUB4Nc45AfjzBRV5wTlxzIAoDoj5CLa6KytvcDPe1le+9rbpHU/ijf81 OnKBmEo6C20O6XetMEiyP+73bqBdEogc26SAZ4NVAiKaNgEzPkw= -----END CERTIFICATE-----Generated at Thu Sep 17 15:54:39 2026 by rpki-client