$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft File: D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft (raw, json) Hash identifier: pwY+fwyRNiFn1Nsq8KjvaIoWYaIb7S+EojosmlWv8LM= Subject key identifier: 4D:C0:DC:73:26:F3:19:8E:17:3F:45:EC:65:CA:C2:53:7C:3C:CF:9B Authority key identifier: D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6 Certificate issuer: /CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6 Certificate serial: 731DB4F717BE88C27A67ABA12606F33EFBCB2A00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 08:39:16 +0000 Manifest this update: Thu 17 Sep 2026 08:34:16 +0000 Manifest next update: Fri 18 Sep 2026 11:09:16 +0000 Files and hashes: 1: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: e4bsRLScbecV3EUW42ypNee+dC4atMUS4ULfB5R1TMs=) 2: 3136302e32322e3133372e302f32342d3234203d3e20313532383131.roa (hash: UJBNMpcsHaasyvcJ4Sq3J89ZHMIFKcGiQvcCBcd8DHY=) 3: D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl (hash: c3G4A+etYTZXDm482aUXyo3nEjjBvU3vHZFHqbJQQZQ=) 4: 3136302e32322e3133362e302f32342d3234203d3e20313532383131.roa (hash: mzkKba2j66n6wraFNQYRS+UC4ztp7C2s0dllCrbur4g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:1d:b4:f7:17:be:88:c2:7a:67:ab:a1:26:06:f3:3e:fb:cb:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6 Validity Not Before: Sep 17 08:34:16 2026 GMT Not After : Sep 18 11:09:16 2026 GMT Subject: CN=4DC0DC7326F3198E173F45EC65CAC2537C3CCF9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:57:48:87:3a:19:4c:5d:73:77:e1:e8:3e:8e: 46:03:f4:69:cb:a7:b9:0e:26:37:80:7a:25:51:e9: d7:6f:61:f7:63:de:3f:29:49:bc:ae:1d:19:ef:27: be:0b:86:6b:bb:27:af:b5:30:f2:c8:95:28:28:15: e2:75:ee:c5:f3:0e:6c:db:3d:e6:a0:db:06:ec:c7: 0f:8b:61:b5:05:5a:71:80:12:13:7d:24:10:40:25: ca:23:13:4f:44:f6:27:15:54:b5:9b:17:08:4e:7d: 97:cd:8f:46:26:9b:1d:b1:76:b2:49:15:52:3e:e1: c2:4e:d5:24:05:09:a1:e7:ce:89:45:6b:6e:a3:3a: d3:16:98:f6:36:37:4d:64:58:b7:1d:42:33:14:2a: 14:82:90:1c:16:12:48:8a:0f:0f:8a:1a:09:02:36: 13:a0:05:bf:48:dd:5a:15:05:ab:e8:ab:3e:b8:ba: 93:a2:0f:92:f7:89:dc:7b:65:72:1b:14:aa:4a:77: f2:39:e2:5c:22:f3:02:30:79:10:1e:81:16:23:18: d3:38:79:55:62:42:10:a6:84:c1:d0:84:ec:8c:27: 77:17:8f:e3:c7:ac:19:27:26:0e:e4:8b:26:e6:1a: f4:87:1f:fc:ea:c1:09:fd:67:43:fd:b4:d3:b0:03: 51:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C0:DC:73:26:F3:19:8E:17:3F:45:EC:65:CA:C2:53:7C:3C:CF:9B X509v3 Authority Key Identifier: keyid:D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:47:86:85:47:57:84:20:99:e1:de:3f:79:d5:a6:15:59:3b: 66:ca:b9:6a:36:75:e5:4f:5d:26:be:eb:a5:8d:bc:7f:bc:c8: 4f:ae:cc:9a:2a:5a:0c:c9:eb:82:c2:5d:a9:bc:c3:16:0c:f8: fa:03:97:7f:d5:f4:6a:d1:7b:92:32:79:38:ea:1a:c5:e3:87: 56:dd:a6:4d:fc:7d:37:e2:2c:de:7f:87:15:be:21:d7:2f:fb: 9b:98:3e:7e:c4:9c:53:54:a6:0e:2f:19:7d:63:a1:66:18:0c: 5d:b5:70:04:b0:07:ad:84:7d:65:f2:f9:ab:9c:60:d1:c5:74: 1b:07:3b:ed:07:3d:f0:23:25:a9:21:32:c1:cd:e0:c3:b3:42: 80:eb:69:e3:93:59:ce:95:dc:92:0f:ba:6a:4e:77:4c:16:72: be:fb:de:a2:7a:29:6f:9a:8b:9c:3e:30:4c:db:e8:09:d4:a5: b7:e3:11:d0:41:b4:e4:ad:a3:fc:f3:2f:8e:19:da:e7:06:21: 99:ea:53:f2:92:1f:6e:03:f5:5a:50:2a:5f:96:93:16:65:3a: 5f:04:ee:0b:de:a7:31:5c:12:80:28:f1:35:1d:cc:e6:ba:3c: 04:92:09:d2:e9:a6:76:c4:f2:57:6d:29:fe:70:46:6c:6a:12: ef:73:25:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcx209xe+iMJ6Z6uhJgbzPvvLKgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDNEI2QkU4NEM5MEJDNDA2QUI2NzFFNUY3NUE4Qzg2 NTYyOTRGNjAeFw0yNjA5MTcwODM0MTZaFw0yNjA5MTgxMTA5MTZaMDMxMTAvBgNV BAMTKDREQzBEQzczMjZGMzE5OEUxNzNGNDVFQzY1Q0FDMjUzN0MzQ0NGOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjV0iHOhlMXXN34eg+jkYD9GnL p7kOJjeAeiVR6ddvYfdj3j8pSbyuHRnvJ74Lhmu7J6+1MPLIlSgoFeJ17sXzDmzb Peag2wbsxw+LYbUFWnGAEhN9JBBAJcojE09E9icVVLWbFwhOfZfNj0Ymmx2xdrJJ FVI+4cJO1SQFCaHnzolFa26jOtMWmPY2N01kWLcdQjMUKhSCkBwWEkiKDw+KGgkC NhOgBb9I3VoVBavoqz64upOiD5L3idx7ZXIbFKpKd/I54lwi8wIweRAegRYjGNM4 eVViQhCmhMHQhOyMJ3cXj+PHrBknJg7kiybmGvSHH/zqwQn9Z0P9tNOwA1GHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTcDccybzGY4XP0XsZcrCU3w8z5swHwYDVR0j BBgwFoAU2cS2voTJC8QGq2ceX3WoyGVilPYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE5NWI0YjQtYmM4YS00Y2U1LWI1NTAtOWFhN2IzNmVlMWZhLzAvRDlDNEI2QkU4 NEM5MEJDNDA2QUI2NzFFNUY3NUE4Qzg2NTYyOTRGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EOUM0QjZCRTg0QzkwQkM0MDZBQjY3MUU1Rjc1QThDODY1NjI5 NEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvRDlDNEI2QkU4NEM5MEJDNDA2QUI2NzFFNUY3NUE4 Qzg2NTYyOTRGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5HhoVHV4QgmeHeP3nVphVZO2bKuWo2deVP XSa+66WNvH+8yE+uzJoqWgzJ64LCXam8wxYM+PoDl3/V9GrRe5IyeTjqGsXjh1bd pk38fTfiLN5/hxW+Idcv+5uYPn7EnFNUpg4vGX1joWYYDF21cASwB62EfWXy+auc YNHFdBsHO+0HPfAjJakhMsHN4MOzQoDraeOTWc6V3JIPumpOd0wWcr773qJ6KW+a i5w+MEzb6AnUpbfjEdBBtOSto/zzL44Z2ucGIZnqU/KSH24D9VpQKl+WkxZlOl8E 7gvepzFcEoAo8TUdzOa6PASSCdLppnbE8ldtKf5wRmxqEu9zJbw= -----END CERTIFICATE-----Generated at Thu Sep 17 14:22:22 2026 by rpki-client