$ rpki-client -vvvf rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft File: 657097DED993749F454B2CB2980019AC9335E3AD.mft (raw, json) Hash identifier: WMIJ4qhPzKWtLpGre5xD7xQHVoeNKmqlycbtKW/4ClY= Subject key identifier: 4F:BB:83:9F:4E:F4:B9:C3:9E:1E:80:C9:3D:C8:B9:25:03:8B:75:17 Authority key identifier: 65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD Certificate issuer: /CN=657097DED993749F454B2CB2980019AC9335E3AD Certificate serial: 6204F71BBE6ABD8F9B0E1F8992E5B44C16D1BB9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 08:18:47 +0000 Manifest this update: Thu 17 Sep 2026 08:13:47 +0000 Manifest next update: Fri 18 Sep 2026 08:41:47 +0000 Files and hashes: 1: 657097DED993749F454B2CB2980019AC9335E3AD.crl (hash: P7TB1Gmhnod9lvYIFfmd+AXfvoyEEXr6KDh9f9phC48=) 2: 3130332e37382e3233342e302f32342d3234203d3e203634333032.roa (hash: eJ1BYbsJGJ2bGSK9jVV+Gd+vXCEbHNqHyQWyZRyuJo0=) 3: 3130332e37382e3233322e302f32342d3234203d3e203634333032.roa (hash: je0fW/T+7CeDw/BD58L4wbwCS+OqE/uQcMZPbWUcwBw=) 4: 3130332e37382e3233352e302f32342d3234203d3e203634333032.roa (hash: 0jC3KwRI9r1ivA5GrXfbobGO1Ve7iEJj8iR97yMbeBk=) 5: 323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa (hash: hHvYrx/Q2c2wL+t/Mvndx8RZ1B96+Yi4bVgwQw+Eax8=) 6: 3130332e37382e3233332e302f32342d3234203d3e203634333032.roa (hash: QHrcU8/Y1C7fxNPrmLufpFIhIro1O+9k0qozDOyT2no=) 7: 3130332e37382e3233322e302f32322d3232203d3e203634333032.roa (hash: OIuTP91/14M0E047uX/8jj8cJw1PhQi/jIKe8uO7ED8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.crl rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:04:f7:1b:be:6a:bd:8f:9b:0e:1f:89:92:e5:b4:4c:16:d1:bb:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=657097DED993749F454B2CB2980019AC9335E3AD Validity Not Before: Sep 17 08:13:47 2026 GMT Not After : Sep 18 08:41:47 2026 GMT Subject: CN=4FBB839F4EF4B9C39E1E80C93DC8B925038B7517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0b:af:29:90:34:01:e1:77:49:2a:b3:74:7e: 2f:ea:cb:7f:b4:28:44:50:ee:64:48:bd:42:16:bd: e6:7b:12:8a:7e:da:d0:74:46:d2:4a:55:6d:6b:b5: 62:ca:2f:4d:f0:0d:7b:a0:83:6e:25:8b:af:fd:23: 54:64:91:fc:62:5d:ba:c0:65:2b:a6:20:98:61:88: 05:93:6f:b1:55:aa:74:9b:02:0a:9d:71:65:34:a9: 55:cc:37:29:04:d0:07:70:64:af:0f:95:31:d7:49: c6:35:2f:92:4b:20:39:f3:7e:0c:b0:51:5d:da:a3: 2e:43:0e:14:45:95:2a:50:2f:3a:10:00:cc:3f:14: b8:14:65:49:23:a1:00:fc:44:aa:23:45:e9:9a:58: b0:a8:82:32:93:9a:f7:91:f4:82:eb:2e:44:5c:fe: fc:8d:eb:b2:41:9c:46:77:7b:9f:c4:49:ca:dd:ae: 91:3c:0c:5b:d6:94:bd:3f:ba:1a:03:e2:cb:07:a1: f5:89:23:04:6a:06:0e:74:68:98:49:c5:bb:b5:93: 20:6b:07:a2:fe:1f:27:a9:d2:40:b7:a9:31:65:7e: b0:97:3f:54:d4:0a:66:8b:84:06:55:31:93:79:f1: 8e:89:6c:a1:1e:6d:18:17:fa:e8:10:03:af:12:d0: 65:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:BB:83:9F:4E:F4:B9:C3:9E:1E:80:C9:3D:C8:B9:25:03:8B:75:17 X509v3 Authority Key Identifier: keyid:65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:59:e5:61:60:47:19:e5:14:94:cc:3b:44:6d:1e:2f:5c:b6: ac:7a:4f:27:78:14:f9:be:2e:80:60:da:27:1f:db:08:85:09: f9:22:70:e7:91:3f:22:5a:7e:c4:db:e6:31:20:a8:20:06:6d: a8:db:16:2d:47:97:16:90:07:ee:e5:67:7b:94:d9:7b:d5:06: e2:28:9c:6d:9b:55:a9:0e:c2:8c:cf:06:55:00:f6:e6:e2:c8: 6b:30:02:7d:ec:9b:ff:7e:45:df:b6:a8:15:b6:51:6d:6a:57: 5d:fd:9e:05:79:ed:0c:88:93:72:9d:ba:4f:05:93:80:bc:02: 49:46:c5:d7:81:cb:68:6f:da:8e:69:4a:14:48:5e:77:7e:f5: 74:4f:3b:01:c5:48:e4:5c:2e:49:30:99:2f:19:46:08:b6:e6: 28:8f:49:9e:58:c6:95:4e:0c:f0:f9:24:7e:77:c5:4c:9e:8a: 53:e0:82:31:13:35:ba:94:74:9e:b8:c9:e7:f7:33:fe:e3:99: c4:1c:63:11:3d:58:33:99:5c:d2:39:a2:07:74:18:6d:9c:a9: a8:91:3c:12:bc:cd:19:6a:71:ab:f7:4a:00:fb:ff:15:16:35: 11:da:70:94:fe:30:41:13:c3:13:f2:0f:99:85:51:73:2d:51: 21:db:85:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYgT3G75qvY+bDh+JkuW0TBbRu54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU3MDk3REVEOTkzNzQ5RjQ1NEIyQ0IyOTgwMDE5QUM5 MzM1RTNBRDAeFw0yNjA5MTcwODEzNDdaFw0yNjA5MTgwODQxNDdaMDMxMTAvBgNV BAMTKDRGQkI4MzlGNEVGNEI5QzM5RTFFODBDOTNEQzhCOTI1MDM4Qjc1MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFC68pkDQB4XdJKrN0fi/qy3+0 KERQ7mRIvUIWveZ7Eop+2tB0RtJKVW1rtWLKL03wDXugg24li6/9I1RkkfxiXbrA ZSumIJhhiAWTb7FVqnSbAgqdcWU0qVXMNykE0AdwZK8PlTHXScY1L5JLIDnzfgyw UV3aoy5DDhRFlSpQLzoQAMw/FLgUZUkjoQD8RKojRemaWLCogjKTmveR9ILrLkRc /vyN67JBnEZ3e5/EScrdrpE8DFvWlL0/uhoD4ssHofWJIwRqBg50aJhJxbu1kyBr B6L+Hyep0kC3qTFlfrCXP1TUCmaLhAZVMZN58Y6JbKEebRgX+ugQA68S0GWJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT7uDn070ucOeHoDJPci5JQOLdRcwHwYDVR0j BBgwFoAUZXCX3tmTdJ9FSyyymAAZrJM1460wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRkZThmYjgtM2E3Ny00ODdlLTlkZmMtZjQ3OWQ2YjMzODA5LzAvNjU3MDk3REVE OTkzNzQ5RjQ1NEIyQ0IyOTgwMDE5QUM5MzM1RTNBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NTcwOTdERUQ5OTM3NDlGNDU0QjJDQjI5ODAwMTlBQzkzMzVF M0FELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRkZThmYjgtM2E3Ny00ODdlLTlk ZmMtZjQ3OWQ2YjMzODA5LzAvNjU3MDk3REVEOTkzNzQ5RjQ1NEIyQ0IyOTgwMDE5 QUM5MzM1RTNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhZ5WFgRxnlFJTMO0RtHi9ctqx6Tyd4FPm+ LoBg2icf2wiFCfkicOeRPyJafsTb5jEgqCAGbajbFi1HlxaQB+7lZ3uU2XvVBuIo nG2bVakOwozPBlUA9ubiyGswAn3sm/9+Rd+2qBW2UW1qV139ngV57QyIk3Kduk8F k4C8AklGxdeBy2hv2o5pShRIXnd+9XRPOwHFSORcLkkwmS8ZRgi25iiPSZ5YxpVO DPD5JH53xUyeilPggjETNbqUdJ64yef3M/7jmcQcYxE9WDOZXNI5ogd0GG2cqaiR PBK8zRlqcav3SgD7/xUWNRHacJT+MEETwxPyD5mFUXMtUSHbhSA= -----END CERTIFICATE-----Generated at Thu Sep 17 10:52:09 2026 by rpki-client