$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft File: 9AFC93CAEEA98CBFC0481089E308395A3234F158.mft (raw, json) Hash identifier: +Rtj9Yc/4F5VjtPpxbxRVkKOPcW0unO/WWqpbSz8kus= Subject key identifier: 06:7B:E4:D9:5F:A3:A8:24:C1:27:98:BE:FD:62:52:B4:44:A9:C8:DB Authority key identifier: 9A:FC:93:CA:EE:A9:8C:BF:C0:48:10:89:E3:08:39:5A:32:34:F1:58 Certificate issuer: /CN=9AFC93CAEEA98CBFC0481089E308395A3234F158 Certificate serial: 237A6F9CD22A20C9D303ECAC2A7086F6EFF1960A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 20:59:51 +0000 Manifest this update: Wed 16 Sep 2026 20:54:51 +0000 Manifest next update: Thu 17 Sep 2026 23:49:51 +0000 Files and hashes: 1: 3130332e3132332e3135382e302f32342d3234203d3e20313332363433.roa (hash: CJzRoBzW5EdikhLdqGZ7+quC12AshwM5y1ZUE0mtwGE=) 2: 9AFC93CAEEA98CBFC0481089E308395A3234F158.crl (hash: sceNQJy+36wiIF2vgtL/jPWSvM+/9PwQznBfu4PZQjQ=) 3: 3130332e32312e3232382e302f32342d3234203d3e20313332363433.roa (hash: mWMxWItQIy6KIu1MttVIKoQEGs+uqMB7va6yxk2ZK/w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.crl rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:7a:6f:9c:d2:2a:20:c9:d3:03:ec:ac:2a:70:86:f6:ef:f1:96:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFC93CAEEA98CBFC0481089E308395A3234F158 Validity Not Before: Sep 16 20:54:51 2026 GMT Not After : Sep 17 23:49:51 2026 GMT Subject: CN=067BE4D95FA3A824C12798BEFD6252B444A9C8DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9f:2f:b0:36:db:d0:43:91:14:cc:89:8f:45: 4f:a5:5b:9a:85:91:e1:6e:48:00:f7:3e:ef:fa:87: 0b:69:90:6e:e5:7b:5e:6d:14:4a:88:b2:7d:62:26: 3f:d9:26:a3:a6:43:cf:57:56:96:3a:e4:94:85:17: ec:e1:ee:8b:cd:e1:11:f9:38:76:35:f3:fc:fd:ee: 54:80:f1:02:f2:ce:f2:04:cc:59:fb:37:64:2a:ca: f8:35:97:77:ca:8c:97:1c:3a:ba:26:cd:97:70:5c: 03:e6:3c:ed:d7:97:e9:01:9a:23:0a:6a:a7:e8:54: 4b:50:95:f6:ff:c1:61:7c:db:2e:4f:40:39:b9:df: 2c:4a:fb:2e:36:c4:69:e6:00:c3:95:76:17:4b:61: 7b:de:6a:df:66:81:a5:dc:b0:82:78:7d:35:a0:85: 8f:ca:b3:8c:38:81:92:bc:2a:89:e0:5c:fc:9f:b1: 9a:f1:ea:72:2f:83:63:8a:7d:80:2e:c6:ef:dd:76: 70:30:2f:0b:8f:59:36:c6:ac:7c:d9:66:01:ee:74: 3e:c7:21:0b:50:b6:a7:98:11:eb:31:e3:b0:e6:a3: 5c:78:e0:2f:13:f4:e8:c6:25:44:bd:69:40:7a:43: f9:e9:90:a6:48:c5:36:1c:f1:bd:36:e5:68:86:b2: ab:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7B:E4:D9:5F:A3:A8:24:C1:27:98:BE:FD:62:52:B4:44:A9:C8:DB X509v3 Authority Key Identifier: keyid:9A:FC:93:CA:EE:A9:8C:BF:C0:48:10:89:E3:08:39:5A:32:34:F1:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:78:4a:80:86:65:6e:9a:61:d1:db:f7:c3:29:25:aa:ae:b3: 28:6f:56:59:70:7b:b8:bd:45:5d:73:11:15:f8:88:62:fa:e5: 70:ee:4f:cd:f9:a2:54:8a:b5:bf:07:56:e8:d3:ba:e7:ab:cf: 71:5c:54:77:9a:88:eb:76:b6:61:3e:39:9a:1b:18:c5:e7:01: 18:75:b3:09:51:ba:b5:e1:56:f9:a1:d6:7a:d6:e9:9b:c0:5d: 8f:2f:98:1b:15:1c:0d:8f:77:c3:31:88:2e:b0:a0:08:91:e4: 3d:89:ce:79:d6:a2:51:25:80:26:27:16:d6:18:f0:75:af:c7: bc:4f:b1:2c:5a:67:a1:5d:50:60:cc:c7:c6:70:75:65:36:b3: 13:e8:cf:20:0a:ed:24:62:e7:fd:9d:26:51:83:19:28:30:66: bd:6f:c4:a7:79:c6:25:a4:ce:8a:ac:2c:30:d8:98:b7:4f:37: 2e:c1:f6:43:45:6f:16:e9:b4:5d:90:a3:a3:64:b1:84:a5:8a: c0:d8:d9:09:89:ee:3b:6d:42:82:4f:9f:92:41:bb:c3:0e:a3: a3:37:1a:b0:41:eb:66:6a:a2:62:b4:b0:4b:95:2b:18:44:75: ad:de:0e:29:be:15:6a:b2:56:9b:aa:60:62:dc:74:11:31:02: 91:e5:5e:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI3pvnNIqIMnTA+ysKnCG9u/xlgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGQzkzQ0FFRUE5OENCRkMwNDgxMDg5RTMwODM5NUEz MjM0RjE1ODAeFw0yNjA5MTYyMDU0NTFaFw0yNjA5MTcyMzQ5NTFaMDMxMTAvBgNV BAMTKDA2N0JFNEQ5NUZBM0E4MjRDMTI3OThCRUZENjI1MkI0NDRBOUM4REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ny+wNtvQQ5EUzImPRU+lW5qF keFuSAD3Pu/6hwtpkG7le15tFEqIsn1iJj/ZJqOmQ89XVpY65JSFF+zh7ovN4RH5 OHY18/z97lSA8QLyzvIEzFn7N2Qqyvg1l3fKjJccOromzZdwXAPmPO3Xl+kBmiMK aqfoVEtQlfb/wWF82y5PQDm53yxK+y42xGnmAMOVdhdLYXveat9mgaXcsIJ4fTWg hY/Ks4w4gZK8KongXPyfsZrx6nIvg2OKfYAuxu/ddnAwLwuPWTbGrHzZZgHudD7H IQtQtqeYEesx47Dmo1x44C8T9OjGJUS9aUB6Q/npkKZIxTYc8b025WiGsqsLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBnvk2V+jqCTBJ5i+/WJStESpyNswHwYDVR0j BBgwFoAUmvyTyu6pjL/ASBCJ4wg5WjI08VgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNhZjI3MWYtYzgzZC00NDFlLWJlYTktMThhMjQ0ZDBlMDBlLzAvOUFGQzkzQ0FF RUE5OENCRkMwNDgxMDg5RTMwODM5NUEzMjM0RjE1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QUZDOTNDQUVFQTk4Q0JGQzA0ODEwODlFMzA4Mzk1QTMyMzRG MTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNhZjI3MWYtYzgzZC00NDFlLWJl YTktMThhMjQ0ZDBlMDBlLzAvOUFGQzkzQ0FFRUE5OENCRkMwNDgxMDg5RTMwODM5 NUEzMjM0RjE1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACx4SoCGZW6aYdHb98MpJaqusyhvVllwe7i9 RV1zERX4iGL65XDuT835olSKtb8HVujTuuerz3FcVHeaiOt2tmE+OZobGMXnARh1 swlRurXhVvmh1nrW6ZvAXY8vmBsVHA2Pd8MxiC6woAiR5D2JznnWolElgCYnFtYY 8HWvx7xPsSxaZ6FdUGDMx8ZwdWU2sxPozyAK7SRi5/2dJlGDGSgwZr1vxKd5xiWk zoqsLDDYmLdPNy7B9kNFbxbptF2Qo6NksYSlisDY2QmJ7jttQoJPn5JBu8MOo6M3 GrBB62ZqomK0sEuVKxhEda3eDim+FWqyVpuqYGLcdBExApHlXqo= -----END CERTIFICATE-----Generated at Thu Sep 17 10:57:23 2026 by rpki-client