$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft File: C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft (raw, json) Hash identifier: IkuYD9z8X5fcj7axfbLR6QN3M7FqEEaVRuGg3PSvY+c= Subject key identifier: 09:14:1D:D0:C7:81:E3:03:66:A4:09:86:7F:74:5B:4E:8B:3F:7E:3C Authority key identifier: C9:04:68:D7:EB:B1:55:0C:7E:74:86:32:F6:8F:6F:E0:83:EB:BD:DD Certificate issuer: /CN=C90468D7EBB1550C7E748632F68F6FE083EBBDDD Certificate serial: 652BF02A09C671708889F91368B85F9A4CBB2D1E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 11:27:45 +0000 Manifest this update: Thu 17 Sep 2026 11:22:44 +0000 Manifest next update: Fri 18 Sep 2026 15:24:44 +0000 Files and hashes: 1: C90468D7EBB1550C7E748632F68F6FE083EBBDDD.crl (hash: k89OvqYP1i0EKjx2FVB/vip1ZCqrG47MzugBHTH3QAg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.crl rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2b:f0:2a:09:c6:71:70:88:89:f9:13:68:b8:5f:9a:4c:bb:2d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C90468D7EBB1550C7E748632F68F6FE083EBBDDD Validity Not Before: Sep 17 11:22:44 2026 GMT Not After : Sep 18 15:24:44 2026 GMT Subject: CN=09141DD0C781E30366A409867F745B4E8B3F7E3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:49:87:d3:8f:2f:7c:b3:0b:de:65:07:42:a3: 3c:c1:b8:84:44:87:bc:63:04:30:a4:8b:77:e5:22: 77:d9:c4:73:d5:1f:ac:0c:36:97:b7:91:3b:4c:cd: 35:dd:ee:32:7d:68:9e:00:01:22:bd:e0:84:6e:2b: 70:e0:33:13:e2:4e:05:04:3f:b8:c4:60:b2:c6:96: 23:cd:67:79:c4:02:cb:4f:e6:c0:93:49:0e:ac:49: ea:d9:f2:b3:52:22:12:d2:67:35:a1:14:05:2a:39: c3:55:b2:55:62:58:92:7b:5a:7a:1b:0a:96:ee:d0: 07:3a:22:30:6e:47:97:0f:74:7b:0c:cc:94:31:85: fe:11:f2:9f:07:e2:6b:71:1f:00:00:ca:d0:54:42: 54:e7:e2:fa:ae:24:74:10:77:f2:60:7d:4e:70:b7: 2d:12:b0:b7:78:50:a8:d4:79:e6:04:5f:da:bd:46: 8e:ab:2e:4b:e3:a5:a7:f5:31:2b:e5:00:99:3d:c1: 62:f5:23:63:be:50:bf:3b:dd:5d:56:2d:dd:67:cc: 24:f8:ea:f3:56:a5:e6:75:a1:d3:08:e4:76:54:33: ff:79:ac:d0:6a:6c:c4:43:31:e7:f1:1b:2b:05:c5: e9:e4:dc:1d:f0:bd:53:10:58:27:2d:c4:3b:da:45: b2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:14:1D:D0:C7:81:E3:03:66:A4:09:86:7F:74:5B:4E:8B:3F:7E:3C X509v3 Authority Key Identifier: keyid:C9:04:68:D7:EB:B1:55:0C:7E:74:86:32:F6:8F:6F:E0:83:EB:BD:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:2f:1c:67:fa:eb:aa:80:d2:32:82:f8:f8:0f:e1:8d:e7:17: 03:d6:26:94:0d:c3:44:09:27:4d:24:26:48:93:10:a0:6c:8a: 98:8d:f4:95:e3:40:6f:52:0f:40:32:74:1e:a6:e5:ba:1e:f0: e5:1c:eb:3f:23:2d:e7:31:80:2f:2c:b7:1c:fe:26:84:9d:40: 64:19:83:38:89:3e:57:18:73:a8:a3:48:49:7b:c4:05:d9:65: 72:3b:6d:5e:5f:ad:5c:f9:9f:c8:c5:4e:ae:3d:43:38:a7:f4: 01:89:aa:d4:8a:08:44:ce:18:28:b6:16:59:8d:0d:0f:bf:3f: cd:4a:82:a4:89:c0:56:6b:5e:82:a9:f6:bf:6e:78:92:0b:88: 95:1e:2a:43:16:af:3f:96:47:74:7b:d2:b3:f5:66:61:f3:54: 57:d8:eb:b1:18:5e:c7:75:84:3d:74:52:40:5a:f5:1a:35:15: 30:e2:c7:35:8a:f4:f4:b9:b5:22:ad:9e:e2:12:70:c5:96:17: ca:df:c2:60:1b:b6:2e:73:59:eb:cc:b7:c3:25:fa:8f:3b:36: 91:cb:59:63:a3:a8:4e:b1:76:b9:b3:e8:3d:2b:be:cf:63:b1: fc:37:48:85:02:4d:f4:38:d0:1b:3c:05:a3:38:e3:fb:7f:43: b6:69:f1:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZSvwKgnGcXCIifkTaLhfmky7LR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkwNDY4RDdFQkIxNTUwQzdFNzQ4NjMyRjY4RjZGRTA4 M0VCQkRERDAeFw0yNjA5MTcxMTIyNDRaFw0yNjA5MTgxNTI0NDRaMDMxMTAvBgNV BAMTKDA5MTQxREQwQzc4MUUzMDM2NkE0MDk4NjdGNzQ1QjRFOEIzRjdFM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWSYfTjy98swveZQdCozzBuIRE h7xjBDCki3flInfZxHPVH6wMNpe3kTtMzTXd7jJ9aJ4AASK94IRuK3DgMxPiTgUE P7jEYLLGliPNZ3nEAstP5sCTSQ6sSerZ8rNSIhLSZzWhFAUqOcNVslViWJJ7Wnob Cpbu0Ac6IjBuR5cPdHsMzJQxhf4R8p8H4mtxHwAAytBUQlTn4vquJHQQd/JgfU5w ty0SsLd4UKjUeeYEX9q9Ro6rLkvjpaf1MSvlAJk9wWL1I2O+UL873V1WLd1nzCT4 6vNWpeZ1odMI5HZUM/95rNBqbMRDMefxGysFxenk3B3wvVMQWCctxDvaRbITAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCRQd0MeB4wNmpAmGf3RbTos/fjwwHwYDVR0j BBgwFoAUyQRo1+uxVQx+dIYy9o9v4IPrvd0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2NkMzIzYmUtODM3ZC00MjQ0LTg0NmMtN2QyMzkzYTlhMDA5LzAvQzkwNDY4RDdF QkIxNTUwQzdFNzQ4NjMyRjY4RjZGRTA4M0VCQkRERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTA0NjhEN0VCQjE1NTBDN0U3NDg2MzJGNjhGNkZFMDgzRUJC RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2NkMzIzYmUtODM3ZC00MjQ0LTg0 NmMtN2QyMzkzYTlhMDA5LzAvQzkwNDY4RDdFQkIxNTUwQzdFNzQ4NjMyRjY4RjZG RTA4M0VCQkRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0vHGf666qA0jKC+PgP4Y3nFwPWJpQNw0QJ J00kJkiTEKBsipiN9JXjQG9SD0AydB6m5boe8OUc6z8jLecxgC8stxz+JoSdQGQZ gziJPlcYc6ijSEl7xAXZZXI7bV5frVz5n8jFTq49Qzin9AGJqtSKCETOGCi2FlmN DQ+/P81KgqSJwFZrXoKp9r9ueJILiJUeKkMWrz+WR3R70rP1ZmHzVFfY67EYXsd1 hD10UkBa9Ro1FTDixzWK9PS5tSKtnuIScMWWF8rfwmAbti5zWevMt8Ml+o87NpHL WWOjqE6xdrmz6D0rvs9jsfw3SIUCTfQ40Bs8BaM44/t/Q7Zp8fM= -----END CERTIFICATE-----Generated at Thu Sep 17 14:42:58 2026 by rpki-client