$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft File: 9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft (raw, json) Hash identifier: t9AAq5LZbVCrZk62otNW8Fda9MOUipZOT+Bqu04KRBE= Subject key identifier: A7:88:16:AD:24:98:40:96:88:30:2A:E8:DE:46:4E:AB:85:F0:1B:52 Authority key identifier: 9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C Certificate issuer: /CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C Certificate serial: 7F0B3C07879B3E05E4EFBA9C2AD4D4D1C2FB1E64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 22:47:04 +0000 Manifest this update: Wed 16 Sep 2026 22:42:04 +0000 Manifest next update: Fri 18 Sep 2026 02:11:04 +0000 Files and hashes: 1: 3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (hash: w0+5fhmaBdxaqda6UhvTmcPuYEdSCtqjLZVClfvW/98=) 2: 323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa (hash: OPLg91e3QDUz0oxlHDtfye2YYgsL8tJKKqHtqB32VO0=) 3: 3130332e32332e39382e302f32332d3233203d3e20313530323435.roa (hash: 7xqE0F9v+EXRL9dCkePN1NHTFDTfqFm2QwKgbcBy4ao=) 4: 3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (hash: /Ar9BLD37pzpWiMramvnEnpVLlVnDEgU4xEdcB/AMOA=) 5: 9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl (hash: mlOdQigPykUNDeeKSIi9+ddFGIjIKNYgh4U7CTuBk60=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:0b:3c:07:87:9b:3e:05:e4:ef:ba:9c:2a:d4:d4:d1:c2:fb:1e:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C Validity Not Before: Sep 16 22:42:04 2026 GMT Not After : Sep 18 02:11:04 2026 GMT Subject: CN=A78816AD2498409688302AE8DE464EAB85F01B52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:55:a7:a2:0b:78:1a:48:29:5a:7d:6d:47:be: 83:1c:42:f3:25:91:3e:d6:b8:8e:da:51:4e:81:e3: 12:0f:5f:24:de:05:f7:ae:23:53:4a:d1:c9:96:dd: 23:18:5e:4e:c4:80:5b:35:9e:d5:34:b7:84:f1:38: d3:22:95:c6:8a:80:ae:82:04:08:82:35:c6:14:60: c5:85:87:e0:c0:f4:f5:ee:71:e6:66:73:8b:33:4c: 7d:27:08:7a:96:41:7b:45:e8:0b:6b:7b:04:c0:2c: 1f:5d:85:df:32:7f:e3:31:d2:c9:83:82:c0:0f:9e: 0d:64:af:3b:6e:e6:16:c1:7e:34:c5:4c:6a:f3:c1: 4c:8f:5f:f4:58:8a:8a:94:80:ff:c8:d9:08:4c:28: 85:43:f0:49:05:8b:82:a3:f8:ed:64:de:0d:34:31: e5:b7:33:4a:cb:a4:1d:c8:7c:35:d2:28:2c:d7:2a: 54:3c:5d:5c:9c:dc:c5:ce:16:1c:36:09:89:64:c6: 1a:75:b9:43:64:3c:42:ba:9a:d5:80:c2:95:46:5a: 5e:a3:c4:98:88:a9:17:8f:0b:8f:b7:a3:0d:a3:08: 75:aa:8c:02:a2:ad:f1:82:f4:3b:00:2f:f1:91:02: 00:74:e9:43:d0:1d:ef:60:42:e8:84:5a:df:72:b8: 63:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:88:16:AD:24:98:40:96:88:30:2A:E8:DE:46:4E:AB:85:F0:1B:52 X509v3 Authority Key Identifier: keyid:9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:34:13:79:84:95:64:22:04:bd:f7:b1:64:af:52:c9:78:da: 2d:93:5f:5c:f3:31:34:21:47:d8:a3:4d:8b:71:50:1d:a4:b1: d7:54:77:41:10:63:bf:93:00:c3:fa:de:65:5a:b5:d2:3c:be: df:d8:d7:87:c7:e2:40:96:2a:21:72:ee:32:46:0a:64:3e:b3: dc:ba:49:4c:37:fc:27:2b:d4:0c:06:9b:88:2b:b8:77:3d:f3: ee:c4:2e:a5:45:0b:3e:77:29:62:67:3b:c2:8f:21:2a:2d:af: 51:1e:9a:03:12:1f:ec:8b:86:a1:43:36:e6:bc:a9:2a:fe:fd: da:57:c8:ee:cc:e5:37:94:6b:4f:8d:1b:c5:a3:6e:86:41:07: e4:7c:7c:1b:b6:f2:a3:46:19:58:63:be:2a:a8:57:c8:88:44: 67:50:15:fd:1f:bb:e9:53:40:e7:5a:63:68:da:55:41:8e:d3: b2:43:ca:2c:48:4b:b4:fe:e8:fe:f0:ce:82:85:b8:13:e0:eb: a6:f5:90:bf:26:08:5b:c3:1e:cf:06:07:82:a3:b0:e3:9c:6e: 2e:f9:70:ce:ab:42:1a:6b:b1:5d:27:04:5b:a8:de:1e:82:ef: e9:6a:7c:92:89:03:e6:ca:1a:6c:7e:f1:cc:8c:92:99:88:5c: ba:74:71:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfws8B4ebPgXk77qcKtTU0cL7HmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURGQzdBNTE0OUQzRkNDMEFDRDlCQkVENTVDNENFOEVB ODJBMDM4QzAeFw0yNjA5MTYyMjQyMDRaFw0yNjA5MTgwMjExMDRaMDMxMTAvBgNV BAMTKEE3ODgxNkFEMjQ5ODQwOTY4ODMwMkFFOERFNDY0RUFCODVGMDFCNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPVaeiC3gaSClafW1HvoMcQvMl kT7WuI7aUU6B4xIPXyTeBfeuI1NK0cmW3SMYXk7EgFs1ntU0t4TxONMilcaKgK6C BAiCNcYUYMWFh+DA9PXuceZmc4szTH0nCHqWQXtF6AtrewTALB9dhd8yf+Mx0smD gsAPng1krztu5hbBfjTFTGrzwUyPX/RYioqUgP/I2QhMKIVD8EkFi4Kj+O1k3g00 MeW3M0rLpB3IfDXSKCzXKlQ8XVyc3MXOFhw2CYlkxhp1uUNkPEK6mtWAwpVGWl6j xJiIqRePC4+3ow2jCHWqjAKirfGC9DsAL/GRAgB06UPQHe9gQuiEWt9yuGPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp4gWrSSYQJaIMCro3kZOq4XwG1IwHwYDVR0j BBgwFoAUnfx6UUnT/MCs2bvtVcTOjqgqA4wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg0NmY0MjItYzMwMi00NDYyLWI1ODQtNzAwZTkzNDZjYTA5LzAvOURGQzdBNTE0 OUQzRkNDMEFDRDlCQkVENTVDNENFOEVBODJBMDM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REZDN0E1MTQ5RDNGQ0MwQUNEOUJCRUQ1NUM0Q0U4RUE4MkEw MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg0NmY0MjItYzMwMi00NDYyLWI1 ODQtNzAwZTkzNDZjYTA5LzAvOURGQzdBNTE0OUQzRkNDMEFDRDlCQkVENTVDNENF OEVBODJBMDM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGo0E3mElWQiBL33sWSvUsl42i2TX1zzMTQh R9ijTYtxUB2ksddUd0EQY7+TAMP63mVatdI8vt/Y14fH4kCWKiFy7jJGCmQ+s9y6 SUw3/Ccr1AwGm4gruHc98+7ELqVFCz53KWJnO8KPISotr1EemgMSH+yLhqFDNua8 qSr+/dpXyO7M5TeUa0+NG8WjboZBB+R8fBu28qNGGVhjviqoV8iIRGdQFf0fu+lT QOdaY2jaVUGO07JDyixIS7T+6P7wzoKFuBPg66b1kL8mCFvDHs8GB4KjsOOcbi75 cM6rQhprsV0nBFuo3h6C7+lqfJKJA+bKGmx+8cyMkpmIXLp0cUA= -----END CERTIFICATE-----Generated at Thu Sep 17 10:56:39 2026 by rpki-client