$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft File: 9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft (raw, json) Hash identifier: kRfQGzQQacz5uQXLS4TB3KpBJwzuZr/Td8/C03S/kXQ= Subject key identifier: 8A:D9:EA:7E:C7:A1:9C:50:29:9B:E3:35:A5:CE:FD:D1:7C:53:0C:52 Authority key identifier: 91:76:CB:6B:BE:53:90:8A:B2:1A:EF:FC:4F:8F:15:1D:9A:74:7E:75 Certificate issuer: /CN=9176CB6BBE53908AB21AEFFC4F8F151D9A747E75 Certificate serial: 21C364E218B43598ED0A8E58704C8BE425803E9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 14:06:34 +0000 Manifest this update: Wed 16 Sep 2026 14:01:34 +0000 Manifest next update: Thu 17 Sep 2026 17:18:34 +0000 Files and hashes: 1: 3130332e3235332e302e302f32322d3234203d3e203539313339.roa (hash: 7wsmv0kZBtWJ620fNkkrSVx5J21lFglGMK7gAbjRHjo=) 2: 3131362e302e302e302f32312d3234203d3e203539313339.roa (hash: sLtYSAekx4+fWo5lqk7vJ2/nnu8bKXpxqT5BWuDEsBY=) 3: 9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.crl (hash: 28wbBNGjLxhfm6TsPSuvIOp2Y8QzvEPNgwEYTfmFQDw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.crl rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c3:64:e2:18:b4:35:98:ed:0a:8e:58:70:4c:8b:e4:25:80:3e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9176CB6BBE53908AB21AEFFC4F8F151D9A747E75 Validity Not Before: Sep 16 14:01:34 2026 GMT Not After : Sep 17 17:18:34 2026 GMT Subject: CN=8AD9EA7EC7A19C50299BE335A5CEFDD17C530C52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0a:99:8a:1e:b5:bd:92:8c:a2:57:ab:d6:50: d1:3e:40:f6:c4:2d:c5:16:93:37:5d:85:9a:4e:1e: 2c:61:a9:f5:3e:72:ae:39:f7:22:eb:81:46:4f:55: 5f:84:a5:5c:e2:5e:45:71:ed:f7:15:82:6a:56:6d: ff:12:f4:53:2a:ab:5e:8e:be:89:27:6f:57:68:46: 6e:a6:5b:60:a1:da:30:e7:69:47:fd:f9:26:f4:22: 50:68:80:10:be:d5:98:ec:9c:e5:d8:0e:27:a3:61: 16:bc:c2:ec:ce:84:a2:03:d6:7b:85:61:15:fc:f6: bc:68:cd:6a:f6:c9:2e:fb:fc:86:63:1a:33:c7:9d: 17:a6:be:1b:19:51:90:ff:a6:47:b0:43:48:58:96: 22:3e:34:6d:f0:e4:ac:91:86:a1:1b:79:06:a1:ce: ad:00:56:a7:f7:75:55:2a:6a:21:c1:fd:70:34:5f: c9:9c:aa:9f:32:4c:e3:66:ab:1f:9f:6f:d1:e8:79: 2d:2f:8d:26:dd:e2:a2:6f:26:40:5d:ae:8d:af:50: 2e:11:ea:5d:25:94:1a:d7:05:44:fb:97:d1:40:c7: c9:4e:56:9e:8f:e7:a3:7e:a3:6c:b1:bb:4e:b6:e9: a4:bc:bb:db:4c:40:6d:b9:30:2a:8b:d0:5d:7c:35: 2c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D9:EA:7E:C7:A1:9C:50:29:9B:E3:35:A5:CE:FD:D1:7C:53:0C:52 X509v3 Authority Key Identifier: keyid:91:76:CB:6B:BE:53:90:8A:B2:1A:EF:FC:4F:8F:15:1D:9A:74:7E:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:49:2b:d1:4a:f3:8b:c5:47:5b:49:8f:9c:92:6a:55:31:75: 7c:f8:e7:cd:80:27:ae:ad:a9:a4:11:e3:1b:7b:da:15:95:d3: 97:50:b3:36:14:f7:24:06:62:63:c0:5f:23:76:2c:df:4b:ed: 09:f7:8a:5c:f9:64:6c:db:03:38:98:dc:cd:d5:c1:49:04:fe: 5d:54:18:f1:b8:dd:7a:28:84:61:2f:24:84:d4:50:f6:6e:8f: 0e:9c:6c:ec:35:74:02:5d:ad:a9:f2:f7:b3:32:47:f7:4b:ec: 23:96:ed:cc:f6:b2:35:8a:1d:e2:18:3f:6c:2c:15:f0:0f:4a: 21:d6:0f:1d:c3:19:d1:0f:0f:1c:43:37:7b:5f:7b:3f:84:e1: 53:b5:73:09:c3:c1:bf:61:a2:27:82:24:59:8f:6f:d4:72:ea: 6a:5b:c1:9d:14:cf:22:17:49:36:3d:39:4c:4b:ea:44:52:0d: 73:12:b3:48:85:e3:7a:85:7f:71:35:97:81:33:90:a4:d1:d6: f9:cf:d8:b0:76:77:3d:00:7d:dd:f3:a3:0d:d9:2d:c1:b4:86: 66:63:a8:bd:ce:88:b1:3e:35:3f:0b:00:02:80:e4:bf:6a:3e: 62:67:da:ea:06:79:9e:82:1d:ca:95:6a:f8:ca:c1:91:cf:f6: 3e:1f:8e:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIcNk4hi0NZjtCo5YcEyL5CWAPpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3NkNCNkJCRTUzOTA4QUIyMUFFRkZDNEY4RjE1MUQ5 QTc0N0U3NTAeFw0yNjA5MTYxNDAxMzRaFw0yNjA5MTcxNzE4MzRaMDMxMTAvBgNV BAMTKDhBRDlFQTdFQzdBMTlDNTAyOTlCRTMzNUE1Q0VGREQxN0M1MzBDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRCpmKHrW9koyiV6vWUNE+QPbE LcUWkzddhZpOHixhqfU+cq459yLrgUZPVV+EpVziXkVx7fcVgmpWbf8S9FMqq16O voknb1doRm6mW2Ch2jDnaUf9+Sb0IlBogBC+1ZjsnOXYDiejYRa8wuzOhKID1nuF YRX89rxozWr2yS77/IZjGjPHnRemvhsZUZD/pkewQ0hYliI+NG3w5KyRhqEbeQah zq0AVqf3dVUqaiHB/XA0X8mcqp8yTONmqx+fb9HoeS0vjSbd4qJvJkBdro2vUC4R 6l0llBrXBUT7l9FAx8lOVp6P56N+o2yxu0626aS8u9tMQG25MCqL0F18NSwNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUitnqfsehnFApm+M1pc790XxTDFIwHwYDVR0j BBgwFoAUkXbLa75TkIqyGu/8T48VHZp0fnUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U4Y2Q5N2UtNTZmNS00Y2E1LWE4NWMtNTVhMzIzZjA2MDhjLzAvOTE3NkNCNkJC RTUzOTA4QUIyMUFFRkZDNEY4RjE1MUQ5QTc0N0U3NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTc2Q0I2QkJFNTM5MDhBQjIxQUVGRkM0RjhGMTUxRDlBNzQ3 RTc1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U4Y2Q5N2UtNTZmNS00Y2E1LWE4 NWMtNTVhMzIzZjA2MDhjLzAvOTE3NkNCNkJCRTUzOTA4QUIyMUFFRkZDNEY4RjE1 MUQ5QTc0N0U3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpJK9FK84vFR1tJj5ySalUxdXz4582AJ66t qaQR4xt72hWV05dQszYU9yQGYmPAXyN2LN9L7Qn3ilz5ZGzbAziY3M3VwUkE/l1U GPG43XoohGEvJITUUPZujw6cbOw1dAJdrany97MyR/dL7COW7cz2sjWKHeIYP2ws FfAPSiHWDx3DGdEPDxxDN3tfez+E4VO1cwnDwb9hoieCJFmPb9Ry6mpbwZ0UzyIX STY9OUxL6kRSDXMSs0iF43qFf3E1l4EzkKTR1vnP2LB2dz0Afd3zow3ZLcG0hmZj qL3OiLE+NT8LAAKA5L9qPmJn2uoGeZ6CHcqVavjKwZHP9j4fjiM= -----END CERTIFICATE-----Generated at Thu Sep 17 09:16:50 2026 by rpki-client