$ rpki-client -vvvf rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft File: 9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft (raw, json) Hash identifier: DQqaCZ52lQjDw49V3J4MY3WbLWQmgeaXct0BqtRpRzQ= Subject key identifier: D2:53:D0:D7:D3:AA:EF:D4:4E:90:E4:F6:80:0E:DF:4F:AE:D8:53:37 Authority key identifier: 9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D Certificate issuer: /CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D Certificate serial: 157D0828ED37084B079366410EF2EEB62B26D90D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 21:25:34 +0000 Manifest this update: Wed 16 Sep 2026 21:20:34 +0000 Manifest next update: Thu 17 Sep 2026 23:06:34 +0000 Files and hashes: 1: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: JPXdi6WPGd4vFTIpgnAdhhx+7oMRZdsbWTFXkRgyRnk=) 2: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: npHUpI+a7i9Ge4o0vqbUWZs/Np3+nJB1Rs4IQBwLbvY=) 3: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: JZInvaWprZojdT0ogHnGT0fyYlzFziTH86i1Q0tvWkY=) 4: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: zmwA1y/xC2vL0cjTkZM+ObOlDKLV7xKiwSOMXdyAr5Q=) 5: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: H+4huOKuCZJDgCcIRHG5F336v2zTL76hXwSaEF33ZKg=) 6: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: BTFNI8KSCzEVQjrkzQTwBs7yIRfL1AV/7o2X6tYhvoE=) 7: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: Pbg7HMIUocxPePd7OOnLCPLrq3CDhKhitltGyutZn2w=) 8: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: 2hLM0mgbr0R6ifa3vNzIdaR5NaWhmXwQFTpATyRbVPI=) 9: 9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl (hash: W4pv54nuqFEt0krchnfnRbcmIkPekzfrzRwHEMKQN7Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:7d:08:28:ed:37:08:4b:07:93:66:41:0e:f2:ee:b6:2b:26:d9:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D Validity Not Before: Sep 16 21:20:34 2026 GMT Not After : Sep 17 23:06:34 2026 GMT Subject: CN=D253D0D7D3AAEFD44E90E4F6800EDF4FAED85337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e7:5e:c0:eb:ee:b2:bf:4a:50:00:58:e7:16: b7:61:29:f1:17:a7:7e:95:d1:12:35:66:1f:20:2f: 04:9c:ed:5a:52:7c:1c:8b:da:76:85:70:15:ae:10: 2a:4e:06:44:4d:09:39:76:0c:c0:ea:52:c5:ce:3f: 60:1d:d1:e5:cc:55:8d:61:66:0b:81:64:65:2e:a7: b7:8f:3c:aa:5d:c2:b6:c0:d5:0d:c9:85:ff:e8:81: 6d:30:2c:cf:04:a4:dd:cf:88:09:1f:90:77:b7:f0: 08:52:a2:07:9a:72:85:3d:5f:37:c8:de:bd:0e:5a: 35:a8:81:1b:cb:19:16:c1:29:6c:e8:89:be:16:5b: 39:94:ea:d1:37:3d:95:10:14:9f:4f:8e:96:a9:9a: 17:b8:b4:e3:04:8e:a9:b4:06:cf:ae:f1:a6:21:58: 17:6f:32:d3:fe:dc:66:58:bc:71:91:73:b9:ad:6c: 6b:76:3b:08:df:98:8e:6a:9c:94:a6:0d:c9:3b:d3: 73:75:70:b0:98:a5:ea:5a:42:e8:85:e2:4a:db:9d: 19:81:1d:a2:d4:03:98:56:6a:5d:50:14:5d:c3:01: 2f:ad:26:35:6d:b8:f4:0a:c7:2c:eb:6d:2b:c8:7c: f0:73:dd:f9:cd:87:03:b2:96:5e:79:7a:c3:9b:b6: 5a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:53:D0:D7:D3:AA:EF:D4:4E:90:E4:F6:80:0E:DF:4F:AE:D8:53:37 X509v3 Authority Key Identifier: keyid:9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:13:6a:66:41:55:9e:f3:9d:ab:f6:fe:95:d8:c0:a0:48:22: 00:a2:e1:b4:fb:47:df:cd:56:cb:85:b3:6d:d4:6b:92:08:58: ba:c9:fe:69:21:a7:14:dc:74:72:2b:f2:a4:bc:4f:97:b3:f1: c4:2c:b3:f6:02:c0:de:44:06:07:fb:71:c3:7d:4b:7b:10:3f: 1b:99:41:94:61:8c:90:24:72:02:b6:9f:a4:29:fb:42:46:44: 11:ab:40:df:d5:02:ff:cf:6a:f1:fe:27:1d:ec:84:91:8a:ea: 97:5b:02:2e:e9:77:b8:f1:5e:b2:53:e7:2a:f4:a0:50:18:6b: 1c:c3:46:73:7d:c9:37:06:84:ef:6e:76:bb:3c:99:ce:6b:e7: 07:25:77:1f:ad:d7:2c:2f:a5:4f:2e:3a:f9:cb:d8:b4:90:2d: 29:54:1e:53:93:bd:c2:1e:92:97:e7:b1:c2:0a:21:1e:8f:39: 1f:49:0a:bf:f4:50:84:af:e6:47:7c:c0:21:4a:ad:c6:e3:b4: cd:6e:ff:7c:1a:18:c1:2a:37:89:c0:9d:98:b7:37:a6:b1:84: c1:5c:9f:bf:33:c6:f6:c6:d7:62:bc:c5:73:8f:1c:52:87:de: 7a:41:0d:ed:41:1f:96:96:76:e3:9b:f8:a4:31:f5:ab:4b:ec: d9:e8:f1:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFX0IKO03CEsHk2ZBDvLutism2Q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUREN0ZEMUMwQTc0RkUzMTdFREE0MUU0RDFDREM4NTdB RkMxNzc5RDAeFw0yNjA5MTYyMTIwMzRaFw0yNjA5MTcyMzA2MzRaMDMxMTAvBgNV BAMTKEQyNTNEMEQ3RDNBQUVGRDQ0RTkwRTRGNjgwMEVERjRGQUVEODUzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ517A6+6yv0pQAFjnFrdhKfEX p36V0RI1Zh8gLwSc7VpSfByL2naFcBWuECpOBkRNCTl2DMDqUsXOP2Ad0eXMVY1h ZguBZGUup7ePPKpdwrbA1Q3Jhf/ogW0wLM8EpN3PiAkfkHe38AhSogeacoU9XzfI 3r0OWjWogRvLGRbBKWzoib4WWzmU6tE3PZUQFJ9Pjpapmhe4tOMEjqm0Bs+u8aYh WBdvMtP+3GZYvHGRc7mtbGt2OwjfmI5qnJSmDck703N1cLCYpepaQuiF4krbnRmB HaLUA5hWal1QFF3DAS+tJjVtuPQKxyzrbSvIfPBz3fnNhwOyll55esObtloRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0lPQ19Oq79ROkOT2gA7fT67YUzcwHwYDVR0j BBgwFoAUndf9HAp0/jF+2kHk0c3IV6/Bd50wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjkwYzkwMDktYWQ1My00ZmE2LWExODMtMzRiMzQ1N2JlYTAzLzAvOUREN0ZEMUMw QTc0RkUzMTdFREE0MUU0RDFDREM4NTdBRkMxNzc5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REQ3RkQxQzBBNzRGRTMxN0VEQTQxRTREMUNEQzg1N0FGQzE3 NzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvOUREN0ZEMUMwQTc0RkUzMTdFREE0MUU0RDFDREM4 NTdBRkMxNzc5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4TamZBVZ7znav2/pXYwKBIIgCi4bT7R9/N VsuFs23Ua5IIWLrJ/mkhpxTcdHIr8qS8T5ez8cQss/YCwN5EBgf7ccN9S3sQPxuZ QZRhjJAkcgK2n6Qp+0JGRBGrQN/VAv/PavH+Jx3shJGK6pdbAi7pd7jxXrJT5yr0 oFAYaxzDRnN9yTcGhO9udrs8mc5r5wcldx+t1ywvpU8uOvnL2LSQLSlUHlOTvcIe kpfnscIKIR6POR9JCr/0UISv5kd8wCFKrcbjtM1u/3waGMEqN4nAnZi3N6axhMFc n78zxvbG12K8xXOPHFKH3npBDe1BH5aWduOb+KQx9atL7Nno8Wo= -----END CERTIFICATE-----Generated at Thu Sep 17 11:34:57 2026 by rpki-client