$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft File: 1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft (raw, json) Hash identifier: +h34wS7hex/9Fzv5y/3RorG/ki7z7/PTJfBQ4tL6xeE= Subject key identifier: C4:3C:B3:74:48:DC:0F:FA:1C:F7:A9:B5:A7:1E:70:57:DC:90:00:75 Authority key identifier: 1D:91:17:06:C9:A5:E8:A4:99:3B:1A:D5:19:49:8D:E9:F6:09:FD:97 Certificate issuer: /CN=1D911706C9A5E8A4993B1AD519498DE9F609FD97 Certificate serial: 45BC1B6198E7141C483D9FF79F3E31F746599750 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 20:19:15 +0000 Manifest this update: Wed 16 Sep 2026 20:14:15 +0000 Manifest next update: Thu 17 Sep 2026 21:57:15 +0000 Files and hashes: 1: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: F4rX5kdBMIK+q1JAnOl0J4l31YWcV9qdCJ59RuEth5I=) 2: 1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl (hash: fPVoetCuC0WqznNNWcKZzfY0HQULVeK9RK6fqw2/w64=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:bc:1b:61:98:e7:14:1c:48:3d:9f:f7:9f:3e:31:f7:46:59:97:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D911706C9A5E8A4993B1AD519498DE9F609FD97 Validity Not Before: Sep 16 20:14:15 2026 GMT Not After : Sep 17 21:57:15 2026 GMT Subject: CN=C43CB37448DC0FFA1CF7A9B5A71E7057DC900075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2f:43:f7:c4:da:bf:cb:b2:27:a3:d6:76:26: 15:bc:76:20:27:c8:82:76:38:84:9a:4a:c5:d2:11: 37:3e:e3:38:2a:4d:3b:76:c9:36:58:24:7b:a1:6c: 53:d4:a7:08:62:b5:c5:e0:9e:63:89:f2:0f:14:cb: ea:47:8d:c4:9b:34:e1:42:63:a4:45:80:b6:58:2b: fb:93:59:e4:14:6b:77:bb:11:e1:dd:62:16:ac:87: 63:5f:63:0b:3d:59:09:6b:da:fd:26:2b:de:9d:83: d4:d3:a2:b2:72:f6:09:5c:5f:5d:f3:83:87:52:fe: 1b:c8:72:0a:19:f1:50:f1:31:71:93:af:37:02:18: 8a:5a:45:c6:f8:01:b3:77:4a:96:6e:0e:28:59:9b: e7:35:cb:b7:81:26:5d:e0:d7:8e:92:54:63:c5:d0: 28:12:9b:15:36:fc:47:73:d8:54:bd:f4:1c:f9:78: 37:c5:f7:59:89:9a:5f:df:66:bf:0b:6b:43:59:9b: e9:e8:be:c3:f6:b5:6a:99:27:b9:be:2b:e6:c4:70: f3:57:9a:c8:fe:ec:74:72:a0:9e:11:0e:cc:e9:e8: 19:eb:ae:ef:6e:48:0f:09:82:ba:5b:c5:c9:ff:ab: 18:17:e6:fe:65:ab:f0:34:ed:d9:63:81:29:95:45: 59:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3C:B3:74:48:DC:0F:FA:1C:F7:A9:B5:A7:1E:70:57:DC:90:00:75 X509v3 Authority Key Identifier: keyid:1D:91:17:06:C9:A5:E8:A4:99:3B:1A:D5:19:49:8D:E9:F6:09:FD:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:16:b7:0a:48:0e:c4:83:41:bc:13:4f:13:3a:2a:54:68:15: 59:bb:00:c2:53:af:5e:2a:bb:39:4e:d7:7a:b5:bb:09:d4:4e: 7a:46:90:26:0b:6b:8d:15:78:84:a3:50:f5:c5:bc:41:d0:00: 1a:76:63:43:ff:7e:19:da:6f:1e:07:7f:ff:8b:26:58:3e:e4: ab:4f:5e:3c:85:34:91:61:48:43:1a:9b:d8:81:53:e0:9d:ff: 91:2d:c8:ff:f4:97:46:6d:49:e7:56:f1:e5:b4:4d:e4:fc:21: 5d:77:df:19:d3:89:96:94:d9:6f:6c:f5:ee:e7:73:67:2f:68: 5f:03:67:d5:d8:97:97:3a:0a:67:15:16:3c:45:cc:66:13:bc: e2:93:79:a7:98:5b:cf:5e:2f:64:05:df:4d:31:06:de:60:ff: 87:51:4a:6f:cc:d0:20:c9:46:a0:1e:5e:b1:72:e6:b4:0f:e1: d8:12:40:ce:c2:9c:95:33:1e:c4:fc:ce:0d:5c:93:71:f8:15: 85:6f:53:6c:8c:a9:92:b9:0a:28:9f:9c:cc:2f:f9:25:10:4e: 69:e9:ea:cb:ea:3c:bd:f5:e0:0e:b3:9b:b9:c2:ee:66:39:bd: cb:d8:53:f1:96:f4:88:12:4c:18:ef:f7:ba:15:2d:db:33:50: de:a4:e3:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURbwbYZjnFBxIPZ/3nz4x90ZZl1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ5MTE3MDZDOUE1RThBNDk5M0IxQUQ1MTk0OThERTlG NjA5RkQ5NzAeFw0yNjA5MTYyMDE0MTVaFw0yNjA5MTcyMTU3MTVaMDMxMTAvBgNV BAMTKEM0M0NCMzc0NDhEQzBGRkExQ0Y3QTlCNUE3MUU3MDU3REM5MDAwNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgL0P3xNq/y7Ino9Z2JhW8diAn yIJ2OISaSsXSETc+4zgqTTt2yTZYJHuhbFPUpwhitcXgnmOJ8g8Uy+pHjcSbNOFC Y6RFgLZYK/uTWeQUa3e7EeHdYhash2NfYws9WQlr2v0mK96dg9TTorJy9glcX13z g4dS/hvIcgoZ8VDxMXGTrzcCGIpaRcb4AbN3SpZuDihZm+c1y7eBJl3g146SVGPF 0CgSmxU2/Edz2FS99Bz5eDfF91mJml/fZr8La0NZm+novsP2tWqZJ7m+K+bEcPNX msj+7HRyoJ4RDszp6Bnrru9uSA8Jgrpbxcn/qxgX5v5lq/A07dljgSmVRVnbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxDyzdEjcD/oc96m1px5wV9yQAHUwHwYDVR0j BBgwFoAUHZEXBsml6KSZOxrVGUmN6fYJ/ZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTMyOTc5M2UtOGYxOC00MTE2LTkyNjgtYTEzM2RhZjExY2VmLzAvMUQ5MTE3MDZD OUE1RThBNDk5M0IxQUQ1MTk0OThERTlGNjA5RkQ5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRDkxMTcwNkM5QTVFOEE0OTkzQjFBRDUxOTQ5OERFOUY2MDlG RDk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky NjgtYTEzM2RhZjExY2VmLzAvMUQ5MTE3MDZDOUE1RThBNDk5M0IxQUQ1MTk0OThE RTlGNjA5RkQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQWtwpIDsSDQbwTTxM6KlRoFVm7AMJTr14q uzlO13q1uwnUTnpGkCYLa40VeISjUPXFvEHQABp2Y0P/fhnabx4Hf/+LJlg+5KtP XjyFNJFhSEMam9iBU+Cd/5EtyP/0l0ZtSedW8eW0TeT8IV133xnTiZaU2W9s9e7n c2cvaF8DZ9XYl5c6CmcVFjxFzGYTvOKTeaeYW89eL2QF300xBt5g/4dRSm/M0CDJ RqAeXrFy5rQP4dgSQM7CnJUzHsT8zg1ck3H4FYVvU2yMqZK5CiifnMwv+SUQTmnp 6svqPL314A6zm7nC7mY5vcvYU/GW9IgSTBjv97oVLdszUN6k408= -----END CERTIFICATE-----Generated at Thu Sep 17 12:42:57 2026 by rpki-client