$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft File: C9C56B3341FC31139F57F78A815CF9851E91375E.mft (raw, json) Hash identifier: 27rITD1IUFF8/DGwLB0eTspN7nHxEWjHr4lYgLDq1lU= Subject key identifier: 35:C8:12:3C:AA:59:6B:A6:D3:BB:37:4F:7B:F9:32:9B:8A:45:E9:02 Authority key identifier: C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E Certificate issuer: /CN=C9C56B3341FC31139F57F78A815CF9851E91375E Certificate serial: 55FEB0ACD40DB1E66697649763E528CE458B04DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft Manifest number: B6 Signing time: Thu 17 Sep 2026 08:54:38 +0000 Manifest this update: Thu 17 Sep 2026 08:49:38 +0000 Manifest next update: Fri 18 Sep 2026 10:52:38 +0000 Files and hashes: 1: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: ++K50lF9/3pIjVc4GT4lTLKYd8Uj+kdHUPhBXnfZ3JA=) 2: C9C56B3341FC31139F57F78A815CF9851E91375E.crl (hash: KQtLZN6M00AOS/+WFtCGKhS6kONSBArnt3tE7vIiUL4=) 3: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: YDyhEGDnWg4aoTzQ4Kj70ioCxeiG+fWs6BKdMJUBP40=) 4: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: UvvLQHaYsHEf6H/EOqibK//gY5katYyU5vu1/kohXeI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:fe:b0:ac:d4:0d:b1:e6:66:97:64:97:63:e5:28:ce:45:8b:04:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9C56B3341FC31139F57F78A815CF9851E91375E Validity Not Before: Sep 17 08:49:38 2026 GMT Not After : Sep 18 10:52:38 2026 GMT Subject: CN=35C8123CAA596BA6D3BB374F7BF9329B8A45E902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9b:1e:a8:73:89:51:3a:7d:cb:f6:29:41:25: a0:ae:38:be:da:f8:ab:97:14:3a:97:40:9c:89:9b: cd:c2:e0:10:62:ec:f8:c5:2e:99:ec:1f:8c:d3:de: 3e:61:54:83:15:0e:c7:42:bc:39:2f:b4:47:a5:57: 34:55:5c:25:ba:7a:4b:01:9b:33:0d:46:98:41:80: 15:0c:82:38:46:b9:a4:10:f4:8d:e0:b4:3c:6f:92: 26:e7:68:06:e8:b9:a4:16:f5:72:2a:f6:ea:81:0b: c6:4a:3d:73:76:cf:69:1e:3d:10:9e:81:71:c5:d0: 9b:d7:5d:84:44:f6:74:b9:72:0e:f8:cc:24:94:e7: 32:ca:75:bd:8b:3a:68:b7:b5:c9:71:32:7f:ce:be: 52:7f:55:18:67:7d:80:4f:79:de:72:71:98:54:51: 96:21:83:6b:91:0a:f9:d0:7c:2a:7a:82:d9:33:a2: 0f:f8:cc:b3:a0:37:ea:50:9e:45:e8:7a:2a:b1:d1: ee:cb:31:ea:ef:51:96:27:3c:3a:c4:7c:2f:bc:e1: 75:08:94:48:fb:cc:05:9b:28:e8:74:3b:c0:29:cf: 07:6e:89:86:55:79:b6:7a:38:39:22:76:98:03:87: e5:0b:be:a4:66:10:2e:44:7e:31:7d:c7:8c:19:6f: e2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C8:12:3C:AA:59:6B:A6:D3:BB:37:4F:7B:F9:32:9B:8A:45:E9:02 X509v3 Authority Key Identifier: keyid:C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b2:b8:98:24:4e:13:91:dd:bd:8a:69:ae:9a:a2:a3:aa:df: f8:47:ab:b7:a6:5c:63:e6:3d:b0:f4:76:ea:12:8b:c5:e4:c0: 81:be:07:24:12:12:3c:e8:28:16:97:84:fe:9c:50:18:af:69: a5:2e:bc:a9:77:db:2e:75:d5:af:19:ed:4b:bf:d5:64:02:bb: e1:92:30:2a:d4:09:34:29:99:99:2b:27:63:46:25:8f:32:e9: 14:05:cd:16:65:88:9a:48:00:8b:f2:ac:8f:ed:3b:47:03:4c: 6b:3d:19:9d:c3:2c:c3:17:7b:36:6c:b5:13:24:fb:09:16:13: f5:e8:4d:7b:51:a2:60:2f:53:5e:3a:08:1e:1f:03:d3:17:4b: 92:64:09:a8:05:51:aa:53:75:cd:97:af:0e:42:f0:56:2b:ae: 1b:63:0f:14:c7:86:6c:2c:17:e1:b3:eb:ae:bd:1e:3e:c8:80: 1c:4a:8f:57:0a:3b:10:b1:09:0d:8c:b3:18:ef:22:74:87:59: 04:5f:77:4e:55:ec:6b:32:b5:35:e4:f2:a6:a3:09:5d:aa:d9: d9:96:c0:cb:de:7b:42:72:c8:c6:07:8d:10:e2:c9:28:2f:ee: f4:cf:94:14:55:56:b8:14:e6:76:85:6a:4b:cc:ca:3d:c5:3a: ff:8e:4b:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVf6wrNQNseZml2SXY+UozkWLBN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlDNTZCMzM0MUZDMzExMzlGNTdGNzhBODE1Q0Y5ODUx RTkxMzc1RTAeFw0yNjA5MTcwODQ5MzhaFw0yNjA5MTgxMDUyMzhaMDMxMTAvBgNV BAMTKDM1QzgxMjNDQUE1OTZCQTZEM0JCMzc0RjdCRjkzMjlCOEE0NUU5MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/mx6oc4lROn3L9ilBJaCuOL7a +KuXFDqXQJyJm83C4BBi7PjFLpnsH4zT3j5hVIMVDsdCvDkvtEelVzRVXCW6eksB mzMNRphBgBUMgjhGuaQQ9I3gtDxvkibnaAbouaQW9XIq9uqBC8ZKPXN2z2kePRCe gXHF0JvXXYRE9nS5cg74zCSU5zLKdb2LOmi3tclxMn/OvlJ/VRhnfYBPed5ycZhU UZYhg2uRCvnQfCp6gtkzog/4zLOgN+pQnkXoeiqx0e7LMervUZYnPDrEfC+84XUI lEj7zAWbKOh0O8ApzwduiYZVebZ6ODkidpgDh+ULvqRmEC5EfjF9x4wZb+K9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNcgSPKpZa6bTuzdPe/kym4pF6QIwHwYDVR0j BBgwFoAUycVrM0H8MROfV/eKgVz5hR6RN14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI4YTdmYTUtZmRhMy00YTNlLTkyZjctZmFiZmVkMDVhOTVjLzAvQzlDNTZCMzM0 MUZDMzExMzlGNTdGNzhBODE1Q0Y5ODUxRTkxMzc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUM1NkIzMzQxRkMzMTEzOUY1N0Y3OEE4MTVDRjk4NTFFOTEz NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvQzlDNTZCMzM0MUZDMzExMzlGNTdGNzhBODE1Q0Y5 ODUxRTkxMzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6yuJgkThOR3b2Kaa6aoqOq3/hHq7emXGPm PbD0duoSi8XkwIG+ByQSEjzoKBaXhP6cUBivaaUuvKl32y511a8Z7Uu/1WQCu+GS MCrUCTQpmZkrJ2NGJY8y6RQFzRZliJpIAIvyrI/tO0cDTGs9GZ3DLMMXezZstRMk +wkWE/XoTXtRomAvU146CB4fA9MXS5JkCagFUapTdc2Xrw5C8FYrrhtjDxTHhmws F+Gz6669Hj7IgBxKj1cKOxCxCQ2MsxjvInSHWQRfd05V7GsytTXk8qajCV2q2dmW wMvee0JyyMYHjRDiySgv7vTPlBRVVrgU5naFakvMyj3FOv+OS5k= -----END CERTIFICATE-----Generated at Thu Sep 17 14:43:03 2026 by rpki-client