$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft File: 9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft (raw, json) Hash identifier: T2NTgd6K9FMquYeGPeAv807dzR7hOT5LAgTmzPny2SE= Subject key identifier: 9F:DD:D4:C3:3F:27:05:77:48:FB:12:30:E9:F6:AB:1D:DA:B1:C5:61 Authority key identifier: 93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C Certificate issuer: /CN=9370AF17CF894C561A727E816DE3B11D5D8AAD9C Certificate serial: 6F813142EE6F6E660CA113595E1F3E862368281D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft Manifest number: 9C Signing time: Wed 26 Aug 2026 14:29:03 +0000 Manifest this update: Wed 26 Aug 2026 14:24:03 +0000 Manifest next update: Thu 27 Aug 2026 14:49:03 +0000 Files and hashes: 1: 3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa (hash: rp1e1zzn4/8hrijf1AXdkJbP5FeTjYw1wnI20jUxS/k=) 2: 9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl (hash: SHA1E4ikCqP5OBsJ9K1T6D/XvmatD4oI7AnukbBFgMw=) 3: 3130332e3138362e33332e302f32342d3234203d3e20313439363930.roa (hash: 66uNmMCT6fkEdO81aZRWkTBSkfQiCejM3k2UxZQSC6k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:81:31:42:ee:6f:6e:66:0c:a1:13:59:5e:1f:3e:86:23:68:28:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9370AF17CF894C561A727E816DE3B11D5D8AAD9C Validity Not Before: Aug 26 14:24:03 2026 GMT Not After : Aug 27 14:49:03 2026 GMT Subject: CN=9FDDD4C33F27057748FB1230E9F6AB1DDAB1C561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:69:10:20:f6:c1:f9:1c:02:db:f9:6d:b3:b4: ca:53:6d:9e:4a:3f:47:62:d1:2c:8a:2d:8b:62:2e: 01:70:96:2e:b6:5b:6b:a4:3e:86:72:2b:f3:c2:19: a5:d7:ab:67:f5:02:12:7c:af:74:bb:60:07:46:d4: 35:b5:9a:8d:4e:6f:c2:7f:3d:31:64:eb:60:8c:83: 4d:b2:f1:29:0a:ce:00:42:eb:0c:87:fa:c0:5d:45: 02:3d:4f:84:a8:90:93:b0:45:0d:3f:ba:4f:29:60: 02:da:f0:9e:bd:72:3e:85:6b:46:a0:fd:0d:8e:7a: 2e:03:ec:0e:03:d7:d4:00:25:90:fa:ad:e7:f0:b3: 81:33:05:8f:9c:d6:75:69:08:36:27:81:d2:e7:40: 22:bf:31:4c:8a:47:64:96:f8:70:2a:75:1e:81:bf: 5b:c5:01:8c:18:2b:3c:5f:56:1c:a1:05:d5:62:3f: 05:8c:13:9d:a2:76:fc:1a:4e:ad:6b:45:84:b6:6c: f6:8a:03:c2:dd:69:8d:d8:92:2c:52:8b:d2:c9:bb: 2c:0b:5d:3f:b1:37:15:b0:b9:18:4f:38:ef:0d:57: 66:37:a9:11:87:e6:21:5d:e5:43:20:62:a9:70:02: 06:ca:cb:02:73:7a:25:50:b2:4c:c8:52:41:c5:b9: 69:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DD:D4:C3:3F:27:05:77:48:FB:12:30:E9:F6:AB:1D:DA:B1:C5:61 X509v3 Authority Key Identifier: keyid:93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e4:47:ce:d3:7f:19:e1:16:e2:59:0c:e4:92:79:18:cd:c5: 6c:31:d5:c9:29:fe:84:37:91:07:41:52:c9:48:12:17:c3:84: fe:f6:ed:cb:90:c7:63:c9:40:02:8d:07:e3:8c:8a:33:20:2f: 00:6d:3d:aa:02:cb:30:64:af:45:7b:4f:80:f6:a0:bd:39:c1: f0:41:d4:c2:38:72:f9:07:20:9a:a2:43:09:bf:77:ea:33:40: e1:f8:9c:4f:90:8d:7d:42:f1:0a:e3:ea:0e:d2:54:06:4c:fa: 01:e5:79:a7:4b:aa:87:f8:66:0c:75:b7:b4:58:59:e1:02:5d: 80:ef:8f:1d:9d:03:52:37:67:4c:99:6d:7a:32:4a:ba:84:16: d4:77:70:53:98:36:c9:74:cc:c1:25:37:18:77:f5:ed:15:27: 9a:65:74:9b:c8:2e:54:02:72:f2:f8:1e:6b:13:fe:be:03:24: a3:aa:8c:0d:ab:81:b9:df:77:a5:cc:d3:fc:7d:57:88:52:7c: c3:ba:2d:65:5c:92:b3:c3:a1:0b:84:02:45:dd:8b:2a:6b:e6: c8:f2:b1:69:3a:50:b1:0e:b8:af:23:6c:8d:29:3b:df:63:29: 3a:6d:77:79:33:c9:6a:67:43:e3:7a:56:05:58:52:38:e0:c9: 59:2e:59:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb4ExQu5vbmYMoRNZXh8+hiNoKB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM3MEFGMTdDRjg5NEM1NjFBNzI3RTgxNkRFM0IxMUQ1 RDhBQUQ5QzAeFw0yNjA4MjYxNDI0MDNaFw0yNjA4MjcxNDQ5MDNaMDMxMTAvBgNV BAMTKDlGRERENEMzM0YyNzA1Nzc0OEZCMTIzMEU5RjZBQjFEREFCMUM1NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgaRAg9sH5HALb+W2ztMpTbZ5K P0di0SyKLYtiLgFwli62W2ukPoZyK/PCGaXXq2f1AhJ8r3S7YAdG1DW1mo1Ob8J/ PTFk62CMg02y8SkKzgBC6wyH+sBdRQI9T4SokJOwRQ0/uk8pYALa8J69cj6Fa0ag /Q2Oei4D7A4D19QAJZD6refws4EzBY+c1nVpCDYngdLnQCK/MUyKR2SW+HAqdR6B v1vFAYwYKzxfVhyhBdViPwWME52idvwaTq1rRYS2bPaKA8LdaY3YkixSi9LJuywL XT+xNxWwuRhPOO8NV2Y3qRGH5iFd5UMgYqlwAgbKywJzeiVQskzIUkHFuWnZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn93Uwz8nBXdI+xIw6farHdqxxWEwHwYDVR0j BBgwFoAUk3CvF8+JTFYacn6BbeOxHV2KrZwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGNlOWY0M2QtMDhiYS00ZDAyLThmMzgtNzQ3MzJmMTVjZDhjLzAvOTM3MEFGMTdD Rjg5NEM1NjFBNzI3RTgxNkRFM0IxMUQ1RDhBQUQ5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzcwQUYxN0NGODk0QzU2MUE3MjdFODE2REUzQjExRDVEOEFB RDlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGNlOWY0M2QtMDhiYS00ZDAyLThm MzgtNzQ3MzJmMTVjZDhjLzAvOTM3MEFGMTdDRjg5NEM1NjFBNzI3RTgxNkRFM0Ix MUQ1RDhBQUQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvkR87TfxnhFuJZDOSSeRjNxWwx1ckp/oQ3 kQdBUslIEhfDhP727cuQx2PJQAKNB+OMijMgLwBtPaoCyzBkr0V7T4D2oL05wfBB 1MI4cvkHIJqiQwm/d+ozQOH4nE+QjX1C8Qrj6g7SVAZM+gHleadLqof4Zgx1t7RY WeECXYDvjx2dA1I3Z0yZbXoySrqEFtR3cFOYNsl0zMElNxh39e0VJ5pldJvILlQC cvL4HmsT/r4DJKOqjA2rgbnfd6XM0/x9V4hSfMO6LWVckrPDoQuEAkXdiypr5sjy sWk6ULEOuK8jbI0pO99jKTptd3kzyWpnQ+N6VgVYUjjgyVkuWT0= -----END CERTIFICATE-----Generated at Wed Aug 26 18:58:36 2026 by rpki-client