$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft File: 267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft (raw, json) Hash identifier: uxuvel5YtOMhaIxpc6o1zOrwks6w6Nw65eNauKw8HnE= Subject key identifier: AE:33:D0:4C:89:C9:DD:3D:FA:F9:14:3C:EA:33:5D:15:9B:82:95:95 Authority key identifier: 26:7E:9A:66:F7:A7:C7:8F:7C:C7:C0:49:86:D6:1B:87:DE:BF:51:23 Certificate issuer: /CN=267E9A66F7A7C78F7CC7C04986D61B87DEBF5123 Certificate serial: 38392EA33718762177E35EB8D4608882584317A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 05:04:43 +0000 Manifest this update: Thu 17 Sep 2026 04:59:43 +0000 Manifest next update: Fri 18 Sep 2026 08:49:43 +0000 Files and hashes: 1: 3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (hash: vTNwoFQSRd6UXwDXhePDtYRySxnP7vYZs8QtGgvL7F8=) 2: 267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.crl (hash: mDeA/e/DYfUujxtVep1NeDn5avJG+5TPbMr1qneIorU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.crl rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:39:2e:a3:37:18:76:21:77:e3:5e:b8:d4:60:88:82:58:43:17:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=267E9A66F7A7C78F7CC7C04986D61B87DEBF5123 Validity Not Before: Sep 17 04:59:43 2026 GMT Not After : Sep 18 08:49:43 2026 GMT Subject: CN=AE33D04C89C9DD3DFAF9143CEA335D159B829595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2a:4c:62:64:7d:e5:77:82:27:ce:08:42:16: a8:41:4f:d0:d2:58:ee:5c:d6:7f:16:da:d6:e1:94: 11:f6:e3:9c:ae:18:82:7d:1d:67:0e:c1:98:a7:ab: 6e:86:24:74:b5:0c:66:30:50:19:28:08:d7:b3:84: c2:b8:6a:b0:df:85:3c:03:95:da:b4:58:80:0a:04: 95:ba:86:ac:39:89:22:bf:74:71:71:c2:3f:63:07: 90:d9:4d:33:59:01:9e:2d:6b:bb:6b:bc:f7:9d:f3: 0b:ea:15:62:15:c4:63:3d:a3:1b:07:64:77:bd:d9: e0:bb:a4:e4:1e:01:ff:d5:a6:b1:4b:3b:d0:b8:11: 1f:38:02:73:bf:6c:e1:0f:07:93:69:00:f3:57:a9: 38:b1:c4:0e:a3:d3:24:b3:46:3f:1a:d8:5c:3a:61: 38:bc:61:73:a6:53:ea:85:1b:f8:84:e5:85:0e:79: fa:2a:ee:97:e5:42:41:65:03:f9:38:96:43:65:3a: 41:e9:6e:99:1e:e5:35:52:8e:56:fb:99:4f:00:8e: 9c:b0:76:02:13:1e:5c:ac:d3:d7:0a:b2:ee:fc:ea: 63:b0:9c:bd:ec:5c:41:6e:bf:c1:e0:e5:4d:2f:ca: 32:e5:36:86:09:e5:91:ce:fb:d8:2b:90:7c:8e:ce: 04:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:33:D0:4C:89:C9:DD:3D:FA:F9:14:3C:EA:33:5D:15:9B:82:95:95 X509v3 Authority Key Identifier: keyid:26:7E:9A:66:F7:A7:C7:8F:7C:C7:C0:49:86:D6:1B:87:DE:BF:51:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b1:c9:6f:77:1c:21:59:06:07:83:6a:19:5a:2d:da:9b:7f: bc:97:5f:c3:4f:24:32:8a:d4:28:00:99:3e:64:0c:1d:4f:d4: 62:6a:22:83:28:03:05:23:05:4b:79:15:2d:0f:75:05:3b:87: 4e:0d:68:23:ec:82:aa:e4:e0:ca:cf:b0:94:8b:93:19:92:f5: 2c:06:a2:55:49:12:b1:c8:10:84:fe:16:54:77:f6:88:cd:38: 00:d5:4b:82:3d:eb:f3:a4:e3:15:83:76:46:79:87:63:c7:eb: d8:19:ec:30:b5:64:b3:7d:bc:80:b8:af:0c:3e:8f:d0:2c:22: 19:94:fe:6e:f4:63:d7:c3:4e:00:25:eb:98:ac:01:33:22:c7: b6:b1:0b:18:a9:75:24:3c:66:dc:16:0e:6b:18:6c:b9:0c:16: 29:48:4f:f5:77:e6:d4:95:22:76:9f:50:89:36:8f:ac:33:50: 93:65:e2:d3:22:52:ea:ab:8c:99:37:60:d4:ff:af:51:42:0a: f9:4c:a4:16:a7:7b:a0:f9:66:39:c2:4b:75:48:a8:83:95:a1: 8e:0b:b6:ae:80:19:27:57:18:b6:95:68:3a:6a:fa:62:a3:eb: a0:10:d8:db:df:1a:83:62:7b:18:ec:c8:2d:f0:fe:2e:55:b4: d8:e1:7a:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUODkuozcYdiF341641GCIglhDF6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY3RTlBNjZGN0E3Qzc4RjdDQzdDMDQ5ODZENjFCODdE RUJGNTEyMzAeFw0yNjA5MTcwNDU5NDNaFw0yNjA5MTgwODQ5NDNaMDMxMTAvBgNV BAMTKEFFMzNEMDRDODlDOUREM0RGQUY5MTQzQ0VBMzM1RDE1OUI4Mjk1OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEKkxiZH3ld4InzghCFqhBT9DS WO5c1n8W2tbhlBH245yuGIJ9HWcOwZinq26GJHS1DGYwUBkoCNezhMK4arDfhTwD ldq0WIAKBJW6hqw5iSK/dHFxwj9jB5DZTTNZAZ4ta7trvPed8wvqFWIVxGM9oxsH ZHe92eC7pOQeAf/VprFLO9C4ER84AnO/bOEPB5NpAPNXqTixxA6j0ySzRj8a2Fw6 YTi8YXOmU+qFG/iE5YUOefoq7pflQkFlA/k4lkNlOkHpbpke5TVSjlb7mU8Ajpyw dgITHlys09cKsu786mOwnL3sXEFuv8Hg5U0vyjLlNoYJ5ZHO+9grkHyOzgSXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrjPQTInJ3T36+RQ86jNdFZuClZUwHwYDVR0j BBgwFoAUJn6aZvenx498x8BJhtYbh96/USMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTBmN2M3OTAtNzZiNS00OTY3LWI2ZmYtMTJkYzc1NmJiZjdkLzAvMjY3RTlBNjZG N0E3Qzc4RjdDQzdDMDQ5ODZENjFCODdERUJGNTEyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yNjdFOUE2NkY3QTdDNzhGN0NDN0MwNDk4NkQ2MUI4N0RFQkY1 MTIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTBmN2M3OTAtNzZiNS00OTY3LWI2 ZmYtMTJkYzc1NmJiZjdkLzAvMjY3RTlBNjZGN0E3Qzc4RjdDQzdDMDQ5ODZENjFC ODdERUJGNTEyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABixyW93HCFZBgeDahlaLdqbf7yXX8NPJDKK 1CgAmT5kDB1P1GJqIoMoAwUjBUt5FS0PdQU7h04NaCPsgqrk4MrPsJSLkxmS9SwG olVJErHIEIT+FlR39ojNOADVS4I96/Ok4xWDdkZ5h2PH69gZ7DC1ZLN9vIC4rww+ j9AsIhmU/m70Y9fDTgAl65isATMix7axCxipdSQ8ZtwWDmsYbLkMFilIT/V35tSV InafUIk2j6wzUJNl4tMiUuqrjJk3YNT/r1FCCvlMpBane6D5ZjnCS3VIqIOVoY4L tq6AGSdXGLaVaDpq+mKj66AQ2NvfGoNiexjsyC3w/i5VtNjheoE= -----END CERTIFICATE-----Generated at Thu Sep 17 10:54:23 2026 by rpki-client