$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft File: 9A9D4BDD4311519F6A96141040EA1E98B3363388.mft (raw, json) Hash identifier: EfMrxDtwrdvsp2Q3Q9nFry9DSFscVEoZWMKVd2nE9C4= Subject key identifier: 83:66:1C:28:56:8F:7D:0C:C7:57:86:18:64:FD:91:38:42:A4:B4:2E Authority key identifier: 9A:9D:4B:DD:43:11:51:9F:6A:96:14:10:40:EA:1E:98:B3:36:33:88 Certificate issuer: /CN=9A9D4BDD4311519F6A96141040EA1E98B3363388 Certificate serial: 73684CF52A4E98B11C7DFEC81A95C52828BAA1EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 03:22:39 +0000 Manifest this update: Thu 17 Sep 2026 03:17:39 +0000 Manifest next update: Fri 18 Sep 2026 07:06:39 +0000 Files and hashes: 1: 9A9D4BDD4311519F6A96141040EA1E98B3363388.crl (hash: 36fE1HxW/hycgql8s9PL87/qtVHWyeLDBb6BUMThvJs=) 2: 3130332e3133342e36362e302f32342d3234203d3e203435333132.roa (hash: DKDIZFIIa7OPxQWCaUBiuhGDeGm6kz/UIChkAD3FgzA=) 3: 3130332e3133342e36362e302f32332d3234203d3e203435333132.roa (hash: jEIwfeqUw3Ty0aBUNoGyFFLgparqhCueZmPPzJmpnn8=) 4: 3130332e3133342e36372e302f32342d3234203d3e203435333132.roa (hash: Rjd2vE2zGKftmY05BM4C0TjHIPA+ii1Rf27f+odCFqc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.crl rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:68:4c:f5:2a:4e:98:b1:1c:7d:fe:c8:1a:95:c5:28:28:ba:a1:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A9D4BDD4311519F6A96141040EA1E98B3363388 Validity Not Before: Sep 17 03:17:39 2026 GMT Not After : Sep 18 07:06:39 2026 GMT Subject: CN=83661C28568F7D0CC757861864FD913842A4B42E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f2:9a:33:48:93:7f:82:84:11:08:0a:51:eb: 80:e2:f6:ad:fa:b6:8e:ec:05:89:f6:b0:71:e9:22: 58:c0:1d:89:bd:da:6e:c0:63:9c:78:1c:57:7f:fe: d2:b5:20:6d:08:52:4d:e3:00:2f:f7:db:95:31:fb: af:78:c8:0a:1b:4d:ea:04:65:85:60:23:3a:0b:9a: 65:cf:a4:7a:08:85:74:1d:70:a9:e9:c4:53:ce:6b: 87:01:77:5a:61:b0:94:08:3f:64:67:0b:af:f9:91: 8b:e0:2c:cb:77:ba:52:90:60:d7:88:70:87:05:06: 3f:0d:a6:de:50:2b:4d:18:6a:3c:87:61:7a:89:5e: 2e:2c:ad:a8:eb:30:9b:ea:c7:a4:b7:b7:02:24:e9: 53:d6:51:ec:b1:ca:ee:83:86:66:8e:65:a6:f4:b5: da:e1:47:17:69:69:4d:cd:04:68:e6:2a:29:37:f6: d4:42:9f:09:1c:d5:40:67:4a:cb:97:a6:a5:b8:c0: 7b:cd:c3:b5:b9:2b:45:46:03:e9:fa:9c:0d:fe:b5: 82:06:7e:56:7e:68:03:38:4a:f7:8c:d4:b6:75:18: 96:95:da:e8:49:36:fe:3b:29:c8:d7:75:11:57:6f: 58:99:9b:09:b2:f8:03:5a:58:dd:a9:06:0a:65:10: 26:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:66:1C:28:56:8F:7D:0C:C7:57:86:18:64:FD:91:38:42:A4:B4:2E X509v3 Authority Key Identifier: keyid:9A:9D:4B:DD:43:11:51:9F:6A:96:14:10:40:EA:1E:98:B3:36:33:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:fb:60:af:e7:6f:98:c0:59:c6:25:8a:ce:b6:bd:06:f3:1a: ac:5c:bc:6d:a0:21:17:4f:9b:a4:4e:9f:62:6f:fb:66:0d:ad: 05:de:f0:35:9d:b1:b2:60:ad:fa:bf:36:70:e7:7c:41:19:23: 28:c3:70:f3:70:9d:2f:51:72:79:15:eb:f5:8e:4c:f9:66:e0: b6:96:40:e3:a9:13:a7:e1:96:23:ca:cf:83:73:99:57:e7:23: 1d:0a:2b:ed:7e:91:8a:30:2d:a4:eb:8c:16:03:49:e9:de:43: 12:a3:e5:08:bb:db:27:6a:ac:63:ba:16:b4:81:96:98:ae:e2: 62:20:ef:e5:f5:31:8e:5a:e2:d3:88:24:b2:66:0b:49:ce:82: 04:d7:2b:34:8e:4f:95:f4:4e:c2:3d:e0:65:28:0f:ed:6d:d1: 30:46:0e:8b:9f:2c:4f:08:26:c8:75:de:77:24:e8:ef:8a:f1: 9d:5b:be:be:38:e3:3d:bb:7a:da:81:e5:3e:fe:0f:a1:a1:d3: d9:41:5b:8c:11:0d:a5:67:81:f2:26:d3:af:c6:df:d6:21:f3: b2:eb:5c:9d:03:bb:f6:b6:eb:f4:81:ca:21:13:4b:f7:2e:aa: 2b:66:6c:03:ba:dc:f0:24:c0:19:de:c5:9e:ef:a3:5d:3e:2e: 58:2c:f6:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc2hM9SpOmLEcff7IGpXFKCi6oewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5RDRCREQ0MzExNTE5RjZBOTYxNDEwNDBFQTFFOThC MzM2MzM4ODAeFw0yNjA5MTcwMzE3MzlaFw0yNjA5MTgwNzA2MzlaMDMxMTAvBgNV BAMTKDgzNjYxQzI4NTY4RjdEMENDNzU3ODYxODY0RkQ5MTM4NDJBNEI0MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo8pozSJN/goQRCApR64Di9q36 to7sBYn2sHHpIljAHYm92m7AY5x4HFd//tK1IG0IUk3jAC/325Ux+694yAobTeoE ZYVgIzoLmmXPpHoIhXQdcKnpxFPOa4cBd1phsJQIP2RnC6/5kYvgLMt3ulKQYNeI cIcFBj8Npt5QK00YajyHYXqJXi4srajrMJvqx6S3twIk6VPWUeyxyu6DhmaOZab0 tdrhRxdpaU3NBGjmKik39tRCnwkc1UBnSsuXpqW4wHvNw7W5K0VGA+n6nA3+tYIG flZ+aAM4SveM1LZ1GJaV2uhJNv47KcjXdRFXb1iZmwmy+ANaWN2pBgplECbDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg2YcKFaPfQzHV4YYZP2ROEKktC4wHwYDVR0j BBgwFoAUmp1L3UMRUZ9qlhQQQOoemLM2M4gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmY2NmJmYTYtZGM0Yy00MTA4LTkzMmMtMjA0YjYyZTg2MjcyLzAvOUE5RDRCREQ0 MzExNTE5RjZBOTYxNDEwNDBFQTFFOThCMzM2MzM4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTlENEJERDQzMTE1MTlGNkE5NjE0MTA0MEVBMUU5OEIzMzYz Mzg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmY2NmJmYTYtZGM0Yy00MTA4LTkz MmMtMjA0YjYyZTg2MjcyLzAvOUE5RDRCREQ0MzExNTE5RjZBOTYxNDEwNDBFQTFF OThCMzM2MzM4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/7YK/nb5jAWcYlis62vQbzGqxcvG2gIRdP m6ROn2Jv+2YNrQXe8DWdsbJgrfq/NnDnfEEZIyjDcPNwnS9RcnkV6/WOTPlm4LaW QOOpE6fhliPKz4NzmVfnIx0KK+1+kYowLaTrjBYDSeneQxKj5Qi72ydqrGO6FrSB lpiu4mIg7+X1MY5a4tOIJLJmC0nOggTXKzSOT5X0TsI94GUoD+1t0TBGDoufLE8I Jsh13nck6O+K8Z1bvr444z27etqB5T7+D6Gh09lBW4wRDaVngfIm06/G39Yh87Lr XJ0Du/a26/SByiETS/cuqitmbAO63PAkwBnexZ7vo10+Llgs9t8= -----END CERTIFICATE-----Generated at Thu Sep 17 18:53:23 2026 by rpki-client