$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft File: 09F1FCE71540608DD361D20037B585CA6313B714.mft (raw, json) Hash identifier: Y7AVBNCYk3QXczWtQ5RnulkIcxlCa2W5ICbohQzJjJg= Subject key identifier: 5C:15:B2:9F:72:F9:E8:A7:86:95:EE:F2:56:B5:98:99:C5:94:26:58 Authority key identifier: 09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14 Certificate issuer: /CN=09F1FCE71540608DD361D20037B585CA6313B714 Certificate serial: 6832F4A7F2CF365415248E4528A2F96A8035F760 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 01:20:11 +0000 Manifest this update: Thu 17 Sep 2026 01:15:11 +0000 Manifest next update: Fri 18 Sep 2026 02:39:11 +0000 Files and hashes: 1: 323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (hash: lNRKhcmiZUAq3a5jFdaJmEqXMHj1lj+pscOEkjDxix0=) 2: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (hash: Tdrs/9MxQFRJ04JmOuNBrPQeJZxfkO1jdYAYtxuEviE=) 3: 09F1FCE71540608DD361D20037B585CA6313B714.crl (hash: V/q57hISgQ6TDTERkOVDSEV0VbAMEYDqizhFJvHZ0dE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:32:f4:a7:f2:cf:36:54:15:24:8e:45:28:a2:f9:6a:80:35:f7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F1FCE71540608DD361D20037B585CA6313B714 Validity Not Before: Sep 17 01:15:11 2026 GMT Not After : Sep 18 02:39:11 2026 GMT Subject: CN=5C15B29F72F9E8A78695EEF256B59899C5942658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e4:61:fe:ff:df:44:bf:2b:d0:2e:ee:a2:23: f6:4e:3d:5d:16:29:b4:4e:81:a9:0b:8d:b2:c8:b2: 91:60:ed:58:fd:2c:f1:19:ad:13:9e:71:da:bb:76: 5f:bb:50:ba:ad:a5:cf:37:c9:81:3a:93:fb:12:e5: 49:22:36:11:1e:b5:33:88:fb:1b:6a:7d:de:3b:ac: 7e:b7:a4:65:b7:e4:81:40:0a:63:d2:d9:34:73:7b: 4b:c2:43:a4:be:58:93:69:1e:23:f3:35:e2:e0:4e: 37:0e:51:36:ce:3f:52:26:49:ec:5b:73:ef:e2:d9: 56:7f:1a:4e:b1:a6:7a:2e:8a:e3:06:58:96:b7:65: ac:c0:27:dd:77:9c:5a:78:4e:8d:ec:dc:e2:3b:4e: 78:0d:b2:53:78:13:f1:b5:f9:27:51:6f:55:76:b4: 8f:d7:00:4c:28:87:e3:99:61:62:7d:a4:6e:9f:51: 7d:a3:b1:d9:c4:7b:79:c8:20:65:95:d5:80:36:6d: de:67:bc:bd:fd:6b:87:91:ec:49:b8:c5:e6:9a:e0: 82:2f:c4:b9:4a:7c:f0:a1:17:a4:90:de:d4:75:04: 68:c0:ad:6f:86:7b:96:fb:a3:bc:45:c5:ba:8f:e0: c2:e9:5c:92:e4:f9:81:8f:be:d0:6b:08:9f:2e:86: cb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:15:B2:9F:72:F9:E8:A7:86:95:EE:F2:56:B5:98:99:C5:94:26:58 X509v3 Authority Key Identifier: keyid:09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:8f:9a:e9:e0:c5:6b:92:1f:f1:be:56:6e:5e:f1:66:03:48: 04:78:83:a7:28:64:d6:50:5a:44:e2:ad:40:d9:27:a7:26:4c: c4:38:ed:71:47:7d:16:eb:99:7d:fe:62:e4:2b:ae:c7:26:f3: 73:0d:c7:a7:fc:c9:55:a9:cf:24:7d:f2:b6:b6:7a:4b:1a:71: 03:e6:28:09:07:4d:4d:83:73:9d:9e:c4:15:f2:67:de:25:66: 71:ff:c3:2a:b4:84:b8:81:3b:1e:db:13:df:bc:d5:f5:b4:79: 7c:74:ba:5e:8c:69:c0:f4:e9:9c:f4:8b:68:69:5b:cf:56:49: 67:8d:78:a1:5b:b6:18:c4:89:97:45:e4:be:b3:bc:36:21:9f: 9b:d7:84:8a:d0:c0:fe:65:0c:33:f1:08:d5:8d:22:c6:8b:5b: 63:86:fc:db:84:4c:8f:eb:4e:f9:00:1c:63:27:0e:26:b8:c6: 00:92:4d:f2:78:f7:58:38:50:11:0f:87:da:a1:45:7f:7b:e2: aa:f1:f2:34:05:3f:b6:f1:92:88:8e:9a:7d:46:a7:73:b8:a5: aa:8d:63:f3:e9:72:04:ad:d8:97:76:4d:37:e9:e6:93:f4:f1: 51:d2:45:ec:6c:61:83:95:06:1d:a6:43:68:85:f0:06:f4:d2: 8e:54:fa:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaDL0p/LPNlQVJI5FKKL5aoA192AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMUZDRTcxNTQwNjA4REQzNjFEMjAwMzdCNTg1Q0E2 MzEzQjcxNDAeFw0yNjA5MTcwMTE1MTFaFw0yNjA5MTgwMjM5MTFaMDMxMTAvBgNV BAMTKDVDMTVCMjlGNzJGOUU4QTc4Njk1RUVGMjU2QjU5ODk5QzU5NDI2NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj5GH+/99EvyvQLu6iI/ZOPV0W KbROgakLjbLIspFg7Vj9LPEZrROecdq7dl+7ULqtpc83yYE6k/sS5UkiNhEetTOI +xtqfd47rH63pGW35IFACmPS2TRze0vCQ6S+WJNpHiPzNeLgTjcOUTbOP1ImSexb c+/i2VZ/Gk6xpnouiuMGWJa3ZazAJ913nFp4To3s3OI7TngNslN4E/G1+SdRb1V2 tI/XAEwoh+OZYWJ9pG6fUX2jsdnEe3nIIGWV1YA2bd5nvL39a4eR7Em4xeaa4IIv xLlKfPChF6SQ3tR1BGjArW+Ge5b7o7xFxbqP4MLpXJLk+YGPvtBrCJ8uhsupAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXBWyn3L56KeGle7yVrWYmcWUJlgwHwYDVR0j BBgwFoAUCfH85xVAYI3TYdIAN7WFymMTtxQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU1YWE5M2QtNzg3Yi00YTE3LTg3ZDAtN2VmNDFiMGYyZGVmLzAvMDlGMUZDRTcx NTQwNjA4REQzNjFEMjAwMzdCNTg1Q0E2MzEzQjcxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOUYxRkNFNzE1NDA2MDhERDM2MUQyMDAzN0I1ODVDQTYzMTNC NzE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU1YWE5M2QtNzg3Yi00YTE3LTg3 ZDAtN2VmNDFiMGYyZGVmLzAvMDlGMUZDRTcxNTQwNjA4REQzNjFEMjAwMzdCNTg1 Q0E2MzEzQjcxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaPmungxWuSH/G+Vm5e8WYDSAR4g6coZNZQ WkTirUDZJ6cmTMQ47XFHfRbrmX3+YuQrrscm83MNx6f8yVWpzyR98ra2eksacQPm KAkHTU2Dc52exBXyZ94lZnH/wyq0hLiBOx7bE9+81fW0eXx0ul6MacD06Zz0i2hp W89WSWeNeKFbthjEiZdF5L6zvDYhn5vXhIrQwP5lDDPxCNWNIsaLW2OG/NuETI/r TvkAHGMnDia4xgCSTfJ491g4UBEPh9qhRX974qrx8jQFP7bxkoiOmn1Gp3O4paqN Y/PpcgSt2Jd2TTfp5pP08VHSRexsYYOVBh2mQ2iF8Ab00o5U+mw= -----END CERTIFICATE-----Generated at Thu Sep 17 13:08:17 2026 by rpki-client