$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft File: 9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft (raw, json) Hash identifier: tNSfwsmaXxeM2L9yezuZoU9znRYJ+XCPOM5dmS/1KSk= Subject key identifier: 39:2E:CB:55:05:71:03:84:E9:BC:9E:4F:E2:11:71:BE:4D:70:3F:77 Authority key identifier: 9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9 Certificate issuer: /CN=9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9 Certificate serial: 43AA18A014FF8ED0AA85A8CF3A8C00C4459D2AD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 07:53:13 +0000 Manifest this update: Thu 17 Sep 2026 07:48:13 +0000 Manifest next update: Fri 18 Sep 2026 08:24:13 +0000 Files and hashes: 1: 9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl (hash: /NZ7FckUbtWU+N73u4r8+QuGDsYVoE36px27N/FMwXg=) 2: 3136302e32322e3230382e302f32332d3234203d3e20313532383239.roa (hash: geTlR2xlRfEtN72u5a2Y4lLKK2jTFc1FYHlhZP1ErB8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:aa:18:a0:14:ff:8e:d0:aa:85:a8:cf:3a:8c:00:c4:45:9d:2a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9 Validity Not Before: Sep 17 07:48:13 2026 GMT Not After : Sep 18 08:24:13 2026 GMT Subject: CN=392ECB5505710384E9BC9E4FE21171BE4D703F77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:10:70:88:fb:a7:ce:1b:b3:e8:c5:ea:1a: e6:bc:1b:0b:a7:c2:ba:cf:3b:70:10:3d:20:32:50: 69:d5:cf:87:a3:bb:3b:32:4a:b2:e2:08:c5:af:c1: 47:36:29:bc:8e:14:1f:64:e9:61:80:4d:26:12:9e: 22:7e:10:40:8d:9d:59:27:76:bd:cd:9f:a7:c5:e2: 5e:9b:b3:5f:5e:0c:f2:03:a9:27:4d:ff:d2:69:b4: 90:1d:42:3d:bd:8f:d2:b0:c0:47:84:c5:27:f1:58: 10:f1:eb:7b:42:2b:22:6d:e6:89:de:8a:10:cf:ba: a1:9c:27:1d:13:f9:e7:72:59:32:81:6d:a0:24:95: 89:c1:de:81:22:31:ee:20:31:80:d8:0d:f1:89:18: 65:d9:bc:99:63:77:1d:16:5f:1a:c7:c0:07:c1:b2: 98:d0:f6:0d:00:72:e8:79:63:22:2b:4b:99:3b:dd: 2b:72:f9:89:ef:8d:58:c6:b1:4b:38:a6:23:9d:d5: f3:c1:aa:54:3d:4f:30:14:5e:bd:55:1c:56:85:a3: e0:9c:4a:4d:b6:0c:c0:b2:0b:18:7b:54:b9:90:a3: c9:1c:09:41:c6:6c:88:3a:a4:44:0f:cb:e6:b1:c6: 64:9d:87:8f:9b:5b:8c:27:c8:06:a0:0d:b5:72:1a: 08:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2E:CB:55:05:71:03:84:E9:BC:9E:4F:E2:11:71:BE:4D:70:3F:77 X509v3 Authority Key Identifier: keyid:9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:7b:24:06:16:96:c9:e5:4e:35:dd:5d:a5:31:07:51:dc:c9: 71:58:5d:95:ba:21:cf:37:2e:49:1b:5c:6d:1c:ac:33:f7:da: 28:92:34:96:08:91:49:dd:d5:4d:79:09:49:97:30:c2:a1:0e: 48:f6:74:d9:0d:9c:d7:a0:3e:87:66:a5:82:a7:4f:4c:98:be: 80:ee:f6:f0:be:f2:6d:3f:ce:ad:2d:a6:69:a4:99:21:7e:b0: d8:05:0a:21:b3:61:db:79:26:71:d3:00:9c:72:f0:0d:a0:17: 3b:f6:88:22:06:77:fd:a0:56:bf:b6:e0:42:60:6c:33:ba:22: 19:58:83:b3:84:12:69:51:cd:35:b6:1a:79:4d:6b:6d:1c:a1: 2a:15:8e:79:68:7b:91:e3:07:a6:00:35:2e:a5:c9:c0:c1:75: 60:c9:10:4c:e2:1b:75:17:73:e6:0d:08:c2:5c:79:18:86:69: ab:c2:f2:61:05:8f:19:21:e9:12:79:6a:6d:4d:ea:90:4a:6e: 86:a0:d2:64:34:6d:c9:b0:ad:96:72:39:c9:37:15:6a:6b:13: 0c:df:60:cf:53:87:20:31:46:4f:ba:70:59:d6:40:07:5d:3a: 5d:49:92:db:eb:5a:6e:5f:6d:a5:e2:f4:8f:73:82:18:7e:ea: 12:84:ce:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6oYoBT/jtCqhajPOowAxEWdKtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMyM0ZCM0U4Qjg1OTYxRkQ0OEJDNzgwREFGNDRDRUZC NjQ3QzZFOTAeFw0yNjA5MTcwNzQ4MTNaFw0yNjA5MTgwODI0MTNaMDMxMTAvBgNV BAMTKDM5MkVDQjU1MDU3MTAzODRFOUJDOUU0RkUyMTE3MUJFNEQ3MDNGNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzxBBwiPunzhuz6MXqGua8Gwun wrrPO3AQPSAyUGnVz4ejuzsySrLiCMWvwUc2KbyOFB9k6WGATSYSniJ+EECNnVkn dr3Nn6fF4l6bs19eDPIDqSdN/9JptJAdQj29j9KwwEeExSfxWBDx63tCKyJt5one ihDPuqGcJx0T+edyWTKBbaAklYnB3oEiMe4gMYDYDfGJGGXZvJljdx0WXxrHwAfB spjQ9g0Acuh5YyIrS5k73Sty+YnvjVjGsUs4piOd1fPBqlQ9TzAUXr1VHFaFo+Cc Sk22DMCyCxh7VLmQo8kcCUHGbIg6pEQPy+axxmSdh4+bW4wnyAagDbVyGgirAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOS7LVQVxA4TpvJ5P4hFxvk1wP3cwHwYDVR0j BBgwFoAUnCP7PouFlh/Ui8eA2vRM77ZHxukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNjYjUwYjAtNDNjYy00OGQwLTkxZjQtMDViYmRlN2FjMWQwLzAvOUMyM0ZCM0U4 Qjg1OTYxRkQ0OEJDNzgwREFGNDRDRUZCNjQ3QzZFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85QzIzRkIzRThCODU5NjFGRDQ4QkM3ODBEQUY0NENFRkI2NDdD NkU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvOUMyM0ZCM0U4Qjg1OTYxRkQ0OEJDNzgwREFGNDRD RUZCNjQ3QzZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADp7JAYWlsnlTjXdXaUxB1HcyXFYXZW6Ic83 LkkbXG0crDP32iiSNJYIkUnd1U15CUmXMMKhDkj2dNkNnNegPodmpYKnT0yYvoDu 9vC+8m0/zq0tpmmkmSF+sNgFCiGzYdt5JnHTAJxy8A2gFzv2iCIGd/2gVr+24EJg bDO6IhlYg7OEEmlRzTW2GnlNa20coSoVjnloe5HjB6YANS6lycDBdWDJEEziG3UX c+YNCMJceRiGaavC8mEFjxkh6RJ5am1N6pBKboag0mQ0bcmwrZZyOck3FWprEwzf YM9ThyAxRk+6cFnWQAddOl1JktvrWm5fbaXi9I9zghh+6hKEzmA= -----END CERTIFICATE-----Generated at Thu Sep 17 10:45:34 2026 by rpki-client