$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft File: 0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft (raw, json) Hash identifier: 7NF5SC2wos4nMh2pwNhNC0iBWVMDSgr0v6RM21zpnKM= Subject key identifier: AA:A6:81:41:42:87:5A:47:5C:58:89:86:B7:F5:E7:B0:9F:17:CF:28 Authority key identifier: 0D:3C:CC:7A:B1:67:58:20:A7:FD:BC:CF:45:02:97:1C:50:B5:29:F6 Certificate issuer: /CN=0D3CCC7AB1675820A7FDBCCF4502971C50B529F6 Certificate serial: 4190F1465FBE1F774DE56E8A37B25A5E646487B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 00:49:34 +0000 Manifest this update: Thu 17 Sep 2026 00:44:34 +0000 Manifest next update: Fri 18 Sep 2026 04:07:34 +0000 Files and hashes: 1: 0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.crl (hash: Dj+q+TjAXuq6kJfd4UNgfYIX/fN6YU5N6GsNV6rqNUI=) 2: 3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa (hash: juymzIKjppYynqQQ7FDS68cI4msLoCrbwsScpp65U+4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.crl rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:90:f1:46:5f:be:1f:77:4d:e5:6e:8a:37:b2:5a:5e:64:64:87:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D3CCC7AB1675820A7FDBCCF4502971C50B529F6 Validity Not Before: Sep 17 00:44:34 2026 GMT Not After : Sep 18 04:07:34 2026 GMT Subject: CN=AAA6814142875A475C588986B7F5E7B09F17CF28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f9:a4:98:ad:e2:58:a3:c1:3b:8a:b4:a5:e4: 3d:40:d8:9f:7e:bf:d4:56:ab:11:b5:06:b6:b2:70: da:ec:11:67:7b:84:8a:83:88:a7:b8:8c:65:60:fa: 55:f8:14:30:46:3f:3e:47:09:68:ce:da:9b:0f:80: 57:7b:26:3f:12:15:31:6e:73:6a:c6:04:55:1a:b7: 56:f6:3a:13:32:a4:81:50:a0:0f:b2:4e:2a:65:f3: 32:81:34:5f:48:4a:78:b7:d9:79:4c:08:6a:16:f8: a1:ee:18:b2:ec:56:9a:65:88:c4:1d:7b:94:2b:2b: ad:aa:c6:42:b4:7c:2e:23:b3:5f:a5:9b:82:d1:fd: 46:d4:62:4a:70:91:c2:6b:dc:a5:cb:d8:92:e5:33: e7:4d:fa:cf:20:f9:6d:90:4e:ab:12:d0:ed:b7:46: 03:28:08:03:ff:51:ae:a6:54:70:af:c3:b9:4a:67: a7:56:e9:13:0f:70:b9:41:68:9e:6a:e2:ee:b5:d6: e4:79:ae:b5:f9:fb:ad:42:08:94:51:be:4e:9d:88: 1f:6a:74:6d:c1:f5:5d:34:fc:68:cd:3d:e6:fd:0f: 37:5d:fe:78:a8:f8:69:71:b2:18:49:89:e7:40:c7: cd:6c:b1:6c:05:3c:51:4d:ec:f6:3a:d6:09:06:40: df:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A6:81:41:42:87:5A:47:5C:58:89:86:B7:F5:E7:B0:9F:17:CF:28 X509v3 Authority Key Identifier: keyid:0D:3C:CC:7A:B1:67:58:20:A7:FD:BC:CF:45:02:97:1C:50:B5:29:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:94:bc:51:3d:b1:e3:f9:11:25:54:32:99:9c:3a:96:f1:61: e7:ff:c4:9f:eb:db:bc:e9:d9:ee:35:98:c2:fc:d1:7f:22:fe: e5:2b:13:fe:ec:c3:67:b5:c0:58:7e:14:81:3d:75:5c:6e:7d: b1:a8:b8:53:4b:e6:b2:14:08:b1:8a:48:62:11:62:99:88:ba: 40:6a:9b:9c:95:33:14:9e:4b:73:f6:63:1b:03:c3:a7:f7:7a: d2:05:bd:33:26:06:2f:1a:08:66:a4:e8:05:35:f9:7e:51:b1: 31:82:86:4f:f4:0a:70:7b:35:01:cf:87:57:a6:94:52:f3:d8: 45:6c:0e:45:90:0f:db:72:a1:a5:f6:9a:27:57:e3:a7:c1:6e: b7:bf:60:1c:8b:04:42:fe:22:53:9a:8a:a2:10:25:2d:4c:43: d6:00:87:81:2e:a3:12:93:ed:cc:00:38:3e:60:fc:8e:40:64: 0f:41:b0:90:ff:b7:4e:e4:1f:06:bd:72:19:45:26:87:5b:1a: 62:64:41:c1:29:53:06:6b:6e:62:3a:fc:b4:c4:49:92:79:a9: 7a:9a:c4:a9:b7:85:c4:f0:fd:cb:3f:88:f0:94:51:dc:c6:bc: 49:42:96:d3:94:0b:89:0c:8f:d2:8d:c2:64:39:45:01:39:e6: 3e:cb:dc:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQZDxRl++H3dN5W6KN7JaXmRkh7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQzQ0NDN0FCMTY3NTgyMEE3RkRCQ0NGNDUwMjk3MUM1 MEI1MjlGNjAeFw0yNjA5MTcwMDQ0MzRaFw0yNjA5MTgwNDA3MzRaMDMxMTAvBgNV BAMTKEFBQTY4MTQxNDI4NzVBNDc1QzU4ODk4NkI3RjVFN0IwOUYxN0NGMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd+aSYreJYo8E7irSl5D1A2J9+ v9RWqxG1BraycNrsEWd7hIqDiKe4jGVg+lX4FDBGPz5HCWjO2psPgFd7Jj8SFTFu c2rGBFUat1b2OhMypIFQoA+yTipl8zKBNF9ISni32XlMCGoW+KHuGLLsVppliMQd e5QrK62qxkK0fC4js1+lm4LR/UbUYkpwkcJr3KXL2JLlM+dN+s8g+W2QTqsS0O23 RgMoCAP/Ua6mVHCvw7lKZ6dW6RMPcLlBaJ5q4u611uR5rrX5+61CCJRRvk6diB9q dG3B9V00/GjNPeb9Dzdd/nio+GlxshhJiedAx81ssWwFPFFN7PY61gkGQN91AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqqaBQUKHWkdcWImGt/XnsJ8XzygwHwYDVR0j BBgwFoAUDTzMerFnWCCn/bzPRQKXHFC1KfYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkwOTNhZDYtYjExNS00ZjEwLTg4ZDctNmU1N2RjZmQzMjIzLzAvMEQzQ0NDN0FC MTY3NTgyMEE3RkRCQ0NGNDUwMjk3MUM1MEI1MjlGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRDNDQ0M3QUIxNjc1ODIwQTdGREJDQ0Y0NTAyOTcxQzUwQjUy OUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkwOTNhZDYtYjExNS00ZjEwLTg4 ZDctNmU1N2RjZmQzMjIzLzAvMEQzQ0NDN0FCMTY3NTgyMEE3RkRCQ0NGNDUwMjk3 MUM1MEI1MjlGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuUvFE9seP5ESVUMpmcOpbxYef/xJ/r27zp 2e41mML80X8i/uUrE/7sw2e1wFh+FIE9dVxufbGouFNL5rIUCLGKSGIRYpmIukBq m5yVMxSeS3P2YxsDw6f3etIFvTMmBi8aCGak6AU1+X5RsTGChk/0CnB7NQHPh1em lFLz2EVsDkWQD9tyoaX2midX46fBbre/YByLBEL+IlOaiqIQJS1MQ9YAh4EuoxKT 7cwAOD5g/I5AZA9BsJD/t07kHwa9chlFJodbGmJkQcEpUwZrbmI6/LTESZJ5qXqa xKm3hcTw/cs/iPCUUdzGvElCltOUC4kMj9KNwmQ5RQE55j7L3Mk= -----END CERTIFICATE-----Generated at Thu Sep 17 10:58:18 2026 by rpki-client