$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft File: 202AE8066C06A8D8247209E512833DDA85B77BB8.mft (raw, json) Hash identifier: VbBTN10GOo5N7HM98NzwSVY2NECz1yrTACNNmDNTwEo= Subject key identifier: 74:ED:66:9A:C5:1E:CF:2C:F1:8E:B8:64:0C:36:C3:7B:65:5F:FE:2E Authority key identifier: 20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 Certificate issuer: /CN=202AE8066C06A8D8247209E512833DDA85B77BB8 Certificate serial: 1BCBA09FD5AD793B646707304C74BFE0F1A8C641 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft Manifest number: B9 Signing time: Fri 18 Sep 2026 05:30:06 +0000 Manifest this update: Fri 18 Sep 2026 05:25:06 +0000 Manifest next update: Sat 19 Sep 2026 05:57:06 +0000 Files and hashes: 1: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (hash: VqpFZFZX8l9YzsFUEW1KN7wbhAWqil6y6lntU3UefIg=) 2: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (hash: cqtnc1i5sl/i5SSZ+1p5ccjOtXsU77bjgEVzGiDIIzQ=) 3: 202AE8066C06A8D8247209E512833DDA85B77BB8.crl (hash: eDf5fHVZLnvQDVGEq1psSAny3u1l2PXBYcudKkBgUTg=) 4: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (hash: 7tCfrY+RtB6+WkTyes1RDW6n/IACRq2QGZK0+NvNBQg=) 5: 3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (hash: Lfhcsuq0sTwRRhPKyKhPGs2CL51mhkSyNfRDvbtgTl8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Sep 2026 05:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:cb:a0:9f:d5:ad:79:3b:64:67:07:30:4c:74:bf:e0:f1:a8:c6:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202AE8066C06A8D8247209E512833DDA85B77BB8 Validity Not Before: Sep 18 05:25:06 2026 GMT Not After : Sep 19 05:57:06 2026 GMT Subject: CN=74ED669AC51ECF2CF18EB8640C36C37B655FFE2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4c:a6:d8:79:a5:22:1f:df:78:c9:d1:d3:95: 6c:56:0d:d4:bf:49:82:71:e5:95:3d:d9:c0:28:9f: a7:67:59:eb:aa:5a:d6:05:61:db:57:33:0c:e8:e0: 97:64:28:08:59:d5:f5:23:99:0d:4c:92:2a:d1:99: e1:40:76:21:0d:fd:ed:c4:07:fc:48:ea:68:93:a6: f2:89:b2:c4:8f:d3:cf:91:b1:88:c9:24:b7:cd:27: 1f:6c:af:f5:a7:6f:02:44:59:20:12:b2:43:9f:9a: 5b:af:b0:88:83:2e:dd:55:aa:a3:a4:86:96:ac:38: 87:79:fb:b5:ab:a8:f5:88:1b:83:1c:98:94:53:35: 99:1d:34:af:92:0c:75:86:90:f8:8c:89:23:20:c1: 7a:6b:6f:1e:07:d2:dc:61:fe:02:e6:98:48:86:3c: 70:94:d5:4b:63:61:0d:88:c8:61:01:71:42:e5:6b: 90:44:ca:f9:82:14:0a:55:3b:95:f8:49:7c:ec:00: ed:15:93:f9:d8:3f:42:e5:cf:1b:61:86:e6:58:d0: fb:6a:ff:d4:17:54:34:87:85:dc:2c:c5:0e:f4:5b: bb:6d:2f:1d:9a:59:9d:ef:16:3d:20:e0:71:62:fa: 5e:08:49:fd:45:f6:bc:20:af:ea:0c:77:9c:f7:2e: 46:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:ED:66:9A:C5:1E:CF:2C:F1:8E:B8:64:0C:36:C3:7B:65:5F:FE:2E X509v3 Authority Key Identifier: keyid:20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:8d:55:0a:03:10:6b:f8:71:a9:8a:20:38:02:6f:8f:61:46: 71:26:00:9f:c6:1a:ea:4c:0b:c3:cb:6d:0a:1b:19:d4:2b:a0: 8b:54:f0:57:12:7b:4e:68:da:94:8e:17:8c:81:d4:ec:b6:8e: f6:2e:fa:a5:ac:3f:68:9e:55:0e:f3:bc:41:2b:d5:fe:68:65: 00:4c:13:1f:b1:d9:9e:a8:8f:c7:46:7e:31:e1:8c:f6:ce:b2: 87:cc:4b:d2:a6:5b:98:78:b7:68:c7:51:04:1b:88:25:1d:33: 4c:7b:aa:4f:00:2f:b1:f0:f2:47:00:6e:77:2e:66:bb:47:e8: b3:44:17:43:8d:a6:6d:58:73:e3:23:27:cd:4f:10:c7:69:9d: ec:5b:51:b0:07:8e:74:ad:35:33:96:1c:94:30:6c:9c:0d:a9: 74:15:b5:96:e1:4d:f7:04:f1:f4:c6:3c:32:04:b2:c1:94:85: ff:d0:7c:7d:3f:95:a8:8c:93:c0:78:d8:0c:5c:ac:6a:d7:a7: 06:3f:cd:8a:f1:c3:07:e5:2b:17:4e:c2:f4:bf:b1:15:b4:ff: a0:00:52:a5:c5:16:ca:9a:24:8f:01:72:8f:72:1e:fe:2b:f5: e0:4b:86:12:3a:c9:19:1c:6b:86:9d:bd:0c:e4:3d:e6:69:da: 84:ff:6f:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG8ugn9WteTtkZwcwTHS/4PGoxkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQUU4MDY2QzA2QThEODI0NzIwOUU1MTI4MzNEREE4 NUI3N0JCODAeFw0yNjA5MTgwNTI1MDZaFw0yNjA5MTkwNTU3MDZaMDMxMTAvBgNV BAMTKDc0RUQ2NjlBQzUxRUNGMkNGMThFQjg2NDBDMzZDMzdCNjU1RkZFMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUTKbYeaUiH994ydHTlWxWDdS/ SYJx5ZU92cAon6dnWeuqWtYFYdtXMwzo4JdkKAhZ1fUjmQ1MkirRmeFAdiEN/e3E B/xI6miTpvKJssSP08+RsYjJJLfNJx9sr/WnbwJEWSASskOfmluvsIiDLt1VqqOk hpasOId5+7WrqPWIG4McmJRTNZkdNK+SDHWGkPiMiSMgwXprbx4H0txh/gLmmEiG PHCU1UtjYQ2IyGEBcULla5BEyvmCFApVO5X4SXzsAO0Vk/nYP0LlzxthhuZY0Ptq /9QXVDSHhdwsxQ70W7ttLx2aWZ3vFj0g4HFi+l4ISf1F9rwgr+oMd5z3LkarAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdO1mmsUezyzxjrhkDDbDe2Vf/i4wHwYDVR0j BBgwFoAUICroBmwGqNgkcgnlEoM92oW3e7gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJmMTQxN2EtNTcxOC00MDcxLTlmMzUtYzEyMjU1NWRhYzdhLzAvMjAyQUU4MDY2 QzA2QThEODI0NzIwOUU1MTI4MzNEREE4NUI3N0JCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDJBRTgwNjZDMDZBOEQ4MjQ3MjA5RTUxMjgzM0REQTg1Qjc3 QkI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJmMTQxN2EtNTcxOC00MDcxLTlm MzUtYzEyMjU1NWRhYzdhLzAvMjAyQUU4MDY2QzA2QThEODI0NzIwOUU1MTI4MzNE REE4NUI3N0JCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeNVQoDEGv4camKIDgCb49hRnEmAJ/GGupM C8PLbQobGdQroItU8FcSe05o2pSOF4yB1Oy2jvYu+qWsP2ieVQ7zvEEr1f5oZQBM Ex+x2Z6oj8dGfjHhjPbOsofMS9KmW5h4t2jHUQQbiCUdM0x7qk8AL7Hw8kcAbncu ZrtH6LNEF0ONpm1Yc+MjJ81PEMdpnexbUbAHjnStNTOWHJQwbJwNqXQVtZbhTfcE 8fTGPDIEssGUhf/QfH0/laiMk8B42AxcrGrXpwY/zYrxwwflKxdOwvS/sRW0/6AA UqXFFsqaJI8Bco9yHv4r9eBLhhI6yRkca4advQzkPeZp2oT/b4Y= -----END CERTIFICATE-----Generated at Fri Sep 18 14:04:40 2026 by rpki-client