$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft File: 2CE9A084598867F6677FDE09C272DA8D05C480FC.mft (raw, json) Hash identifier: UZf1ec75ZKK2C7EuItcPYkPwUNt7LroQ8+nPdkzwf3M= Subject key identifier: 13:F5:B2:04:DD:B7:63:D6:95:48:F5:6B:DE:FF:46:4E:8E:2D:0A:DC Authority key identifier: 2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC Certificate issuer: /CN=2CE9A084598867F6677FDE09C272DA8D05C480FC Certificate serial: 7D4200F15F8B3A5982E4149F1AD461A6B7C654E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 04:44:16 +0000 Manifest this update: Thu 17 Sep 2026 04:39:16 +0000 Manifest next update: Fri 18 Sep 2026 05:19:16 +0000 Files and hashes: 1: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: 7nMz4s5YYhUtNRJIR+ORKIg42vTypWbintD4uEN6yZw=) 2: 2CE9A084598867F6677FDE09C272DA8D05C480FC.crl (hash: RpqKdV1gQGIKxHHVfOhUyWM16scMaJ6DwkMdKi8ypoU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:42:00:f1:5f:8b:3a:59:82:e4:14:9f:1a:d4:61:a6:b7:c6:54:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CE9A084598867F6677FDE09C272DA8D05C480FC Validity Not Before: Sep 17 04:39:16 2026 GMT Not After : Sep 18 05:19:16 2026 GMT Subject: CN=13F5B204DDB763D69548F56BDEFF464E8E2D0ADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:0d:a6:36:94:95:21:74:be:ce:da:28:ef: bc:bf:9b:aa:5a:c6:5c:00:11:10:94:94:9c:ca:64: 0b:fd:bd:d2:b9:5c:43:66:87:04:60:31:6a:b8:22: 68:68:68:6a:4f:b6:25:fe:4e:65:72:30:01:d6:9d: 5a:a8:03:66:82:1a:0f:fd:9d:fc:15:df:ea:c7:f2: 94:e4:9d:eb:ce:da:14:9c:e6:ee:c7:42:8a:cb:8c: c9:97:da:51:35:e0:17:e7:fb:dd:ab:dc:2a:69:7a: d9:82:63:d7:e7:5a:02:43:52:f2:35:78:ab:a7:96: 6a:42:3c:2c:04:3a:5b:f5:f4:f7:2f:c6:c5:39:fe: 69:55:05:00:9e:a2:16:d7:a4:50:13:72:4d:b7:db: 24:ae:47:fd:ad:ca:71:07:8e:54:fb:1a:d4:88:bc: 68:a8:bf:17:5e:74:26:d7:1e:3b:d7:97:7e:6f:10: 6a:77:29:7e:77:c3:64:98:e3:b6:40:3c:9b:48:dd: 85:c5:49:0e:f9:7a:23:21:12:58:d3:cf:3c:35:6c: e0:09:32:99:b7:a5:1d:5f:e3:32:39:1c:45:89:b3: 6e:ae:9a:37:91:d6:45:cd:02:36:ec:30:7a:50:96: d0:43:f0:46:24:f6:60:44:75:34:43:de:54:dc:af: bf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F5:B2:04:DD:B7:63:D6:95:48:F5:6B:DE:FF:46:4E:8E:2D:0A:DC X509v3 Authority Key Identifier: keyid:2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:de:9b:fa:52:e0:ba:f8:d7:4c:f9:0c:a9:17:ea:c2:d3:8f: b7:03:81:67:9c:33:a3:5b:de:d8:ae:44:fd:81:fb:1b:98:74: 29:12:47:3e:cd:db:7b:74:9e:fc:c2:0e:f7:28:d6:a7:20:64: 7d:33:b6:e7:3d:12:d1:ad:1d:c7:9f:13:43:8d:5b:2b:32:2d: eb:36:73:b1:56:8b:13:be:b8:b5:7a:07:0a:f6:5a:05:da:78: d3:f1:06:27:91:3c:b8:8f:66:1d:e9:f7:4f:13:4b:1b:2c:0c: 69:9c:1d:92:31:15:35:3d:3a:1b:26:31:f9:ff:ac:b5:df:25: c2:8a:89:0a:fa:f1:fc:9c:e7:04:76:d7:39:fb:0c:1c:9c:23: 45:3e:6d:56:f5:97:d0:0e:22:0f:47:b0:70:29:b3:7d:8f:2f: 03:d2:07:30:05:6f:2e:de:9f:40:33:ec:a4:b5:7b:02:a2:8b: 60:4f:e9:be:01:30:0a:64:5d:56:c5:dc:39:86:1e:ec:22:66: e2:4f:0d:88:7b:06:ba:ac:87:c5:c6:de:3d:9f:fd:f6:4c:7a: 3c:99:a8:ff:01:55:9f:1c:08:50:96:a3:68:62:16:12:b7:8f: 1e:bb:2d:9a:33:b0:ee:51:5d:4b:bf:85:4c:56:41:8c:bf:e0: 1f:4d:5e:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfUIA8V+LOlmC5BSfGtRhprfGVOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNFOUEwODQ1OTg4NjdGNjY3N0ZERTA5QzI3MkRBOEQw NUM0ODBGQzAeFw0yNjA5MTcwNDM5MTZaFw0yNjA5MTgwNTE5MTZaMDMxMTAvBgNV BAMTKDEzRjVCMjA0RERCNzYzRDY5NTQ4RjU2QkRFRkY0NjRFOEUyRDBBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Ow2mNpSVIXS+ztoo77y/m6pa xlwAERCUlJzKZAv9vdK5XENmhwRgMWq4ImhoaGpPtiX+TmVyMAHWnVqoA2aCGg/9 nfwV3+rH8pTknevO2hSc5u7HQorLjMmX2lE14Bfn+92r3CppetmCY9fnWgJDUvI1 eKunlmpCPCwEOlv19PcvxsU5/mlVBQCeohbXpFATck232ySuR/2tynEHjlT7GtSI vGiovxdedCbXHjvXl35vEGp3KX53w2SY47ZAPJtI3YXFSQ75eiMhEljTzzw1bOAJ Mpm3pR1f4zI5HEWJs26umjeR1kXNAjbsMHpQltBD8EYk9mBEdTRD3lTcr7+/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE/WyBN23Y9aVSPVr3v9GTo4tCtwwHwYDVR0j BBgwFoAULOmghFmIZ/Znf94JwnLajQXEgPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTliODE1MmUtYWE4Ni00ZDhhLTgxZGEtZTcxMDg2YjI5NTZjLzAvMkNFOUEwODQ1 OTg4NjdGNjY3N0ZERTA5QzI3MkRBOEQwNUM0ODBGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yQ0U5QTA4NDU5ODg2N0Y2Njc3RkRFMDlDMjcyREE4RDA1QzQ4 MEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvMkNFOUEwODQ1OTg4NjdGNjY3N0ZERTA5QzI3MkRB OEQwNUM0ODBGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbem/pS4Lr410z5DKkX6sLTj7cDgWecM6Nb 3tiuRP2B+xuYdCkSRz7N23t0nvzCDvco1qcgZH0ztuc9EtGtHcefE0ONWysyLes2 c7FWixO+uLV6Bwr2WgXaeNPxBieRPLiPZh3p908TSxssDGmcHZIxFTU9OhsmMfn/ rLXfJcKKiQr68fyc5wR21zn7DBycI0U+bVb1l9AOIg9HsHAps32PLwPSBzAFby7e n0Az7KS1ewKii2BP6b4BMApkXVbF3DmGHuwiZuJPDYh7Brqsh8XG3j2f/fZMejyZ qP8BVZ8cCFCWo2hiFhK3jx67LZozsO5RXUu/hUxWQYy/4B9NXs4= -----END CERTIFICATE-----Generated at Thu Sep 17 10:01:30 2026 by rpki-client