$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft File: C09B0826A8950269AAA9592F3B0B65A3232333C5.mft (raw, json) Hash identifier: JawYb6YZvmT40fPFybeRnDLdDcr0ew3QGQeRCR5MmNc= Subject key identifier: 71:AA:DD:7D:47:14:DE:25:50:85:97:21:B9:45:04:8F:B9:86:E7:A0 Authority key identifier: C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 Certificate issuer: /CN=C09B0826A8950269AAA9592F3B0B65A3232333C5 Certificate serial: 1861F2CF014E10C0CECA0F734D93EC0595040556 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 19:02:43 +0000 Manifest this update: Wed 16 Sep 2026 18:57:43 +0000 Manifest next update: Thu 17 Sep 2026 22:26:43 +0000 Files and hashes: 1: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: /OlYgkp/JUv7mWTKG1jRIEEEMwF4cVrVtCICjMapFuQ=) 2: C09B0826A8950269AAA9592F3B0B65A3232333C5.crl (hash: 5Jov3xz1BJonqNtImlgZdjH7aq4MOA9kkSop3Jqo96s=) 3: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: u7ID+/zmEfkiBk9A2DOk1aoUvKs6xhyBLUvlSwziv+4=) 4: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: qD0/6TXIm8wKpNkYb5k3M2VEq1Hkh2ZvC2u1LPq71Ck=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:61:f2:cf:01:4e:10:c0:ce:ca:0f:73:4d:93:ec:05:95:04:05:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C09B0826A8950269AAA9592F3B0B65A3232333C5 Validity Not Before: Sep 16 18:57:43 2026 GMT Not After : Sep 17 22:26:43 2026 GMT Subject: CN=71AADD7D4714DE2550859721B945048FB986E7A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ed:27:b2:51:b8:ed:b7:53:34:65:05:6b:82: bb:14:d8:50:a9:40:47:d6:62:56:a1:37:9e:58:ca: 14:c1:bd:37:12:29:5d:d8:03:94:6d:d0:40:ad:67: 70:53:68:de:b1:36:73:7e:ce:f6:29:f2:33:08:c7: 12:1b:ed:99:fe:85:d2:bb:33:ca:7a:ef:e9:19:24: 5f:33:e4:e8:92:a3:3e:e9:b1:1a:65:cc:d4:c0:3f: 65:7e:98:0b:1c:5c:b0:7d:17:38:a4:bd:63:82:e2: 7c:45:00:e7:b1:ed:46:38:73:80:37:de:67:1a:8f: 23:ce:94:80:4b:06:96:e2:a1:71:b5:8d:8a:e6:cd: 56:05:82:78:f1:5f:d5:87:74:45:ea:6b:4a:6f:08: 5c:5d:f3:26:33:ba:fe:62:d0:97:e7:93:54:49:34: f8:10:9c:47:d7:10:13:e9:af:69:ec:dd:65:2a:7b: aa:56:d6:d9:aa:00:61:64:4f:c3:3b:40:35:95:e9: cf:1a:e8:23:57:bc:a5:50:0d:78:d9:3a:76:87:eb: e6:00:fa:81:4a:3f:e9:d6:92:5e:3e:ff:6b:ab:0a: f6:72:80:86:77:dd:8f:36:94:60:ef:e4:41:00:e6: 59:cc:35:78:df:19:52:54:9e:be:b6:d6:fa:e9:22: 48:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AA:DD:7D:47:14:DE:25:50:85:97:21:B9:45:04:8F:B9:86:E7:A0 X509v3 Authority Key Identifier: keyid:C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:2a:5f:c3:e1:8f:db:96:de:7a:88:c4:d0:ae:cb:b6:21:50: 0f:c9:54:e2:ac:a3:9c:79:78:b5:d1:c6:49:53:70:c3:55:e5: e9:bc:fb:56:4c:54:92:ef:43:5a:bb:b6:12:a4:52:74:0a:e4: 1c:09:4b:1a:d5:09:a3:ab:6b:92:c8:81:e5:8a:74:99:f1:e5: a1:fb:e4:ef:da:a2:ac:c3:86:52:54:d0:ba:15:23:03:d1:aa: eb:98:46:10:9f:ce:bd:4c:6f:10:ec:04:5f:71:d8:59:9d:a0: 07:ed:40:c6:c8:64:21:f9:5a:5d:76:48:e2:73:e9:1c:48:2b: ad:02:7c:a5:69:1f:9f:a7:cf:54:0b:3f:f5:01:6c:0d:e2:85: c8:5a:f5:a3:8f:ff:2a:e4:a7:7f:6d:f5:d3:71:4f:7f:c2:cb: 2e:25:db:7e:0d:17:42:91:21:a2:9b:8a:cf:77:68:d7:08:25: 13:52:c1:e6:4d:17:0f:1e:1f:58:08:5b:77:cb:6f:3a:e3:fc: 88:56:4d:23:f6:6a:d3:c4:c8:c6:9e:f2:7e:e4:65:1a:0e:a4: fc:b7:c4:2f:2a:99:c3:6a:07:34:e8:d9:81:04:14:4d:f2:6f: 46:c7:bc:c4:f4:1e:8c:30:13:fa:7b:ef:1d:1c:06:e1:95:74: 90:6c:9c:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGGHyzwFOEMDOyg9zTZPsBZUEBVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA5QjA4MjZBODk1MDI2OUFBQTk1OTJGM0IwQjY1QTMy MzIzMzNDNTAeFw0yNjA5MTYxODU3NDNaFw0yNjA5MTcyMjI2NDNaMDMxMTAvBgNV BAMTKDcxQUFERDdENDcxNERFMjU1MDg1OTcyMUI5NDUwNDhGQjk4NkU3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW7SeyUbjtt1M0ZQVrgrsU2FCp QEfWYlahN55YyhTBvTcSKV3YA5Rt0ECtZ3BTaN6xNnN+zvYp8jMIxxIb7Zn+hdK7 M8p67+kZJF8z5OiSoz7psRplzNTAP2V+mAscXLB9FzikvWOC4nxFAOex7UY4c4A3 3mcajyPOlIBLBpbioXG1jYrmzVYFgnjxX9WHdEXqa0pvCFxd8yYzuv5i0Jfnk1RJ NPgQnEfXEBPpr2ns3WUqe6pW1tmqAGFkT8M7QDWV6c8a6CNXvKVQDXjZOnaH6+YA +oFKP+nWkl4+/2urCvZygIZ33Y82lGDv5EEA5lnMNXjfGVJUnr621vrpIkiVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcardfUcU3iVQhZchuUUEj7mG56AwHwYDVR0j BBgwFoAUwJsIJqiVAmmqqVkvOwtloyMjM8UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjhkYzA4NDktODNmYi00Y2M4LThjMjEtYmU2Y2E3YTJlZDgzLzAvQzA5QjA4MjZB ODk1MDI2OUFBQTk1OTJGM0IwQjY1QTMyMzIzMzNDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMDlCMDgyNkE4OTUwMjY5QUFBOTU5MkYzQjBCNjVBMzIzMjMz M0M1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvQzA5QjA4MjZBODk1MDI2OUFBQTk1OTJGM0IwQjY1 QTMyMzIzMzNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAqX8Phj9uW3nqIxNCuy7YhUA/JVOKso5x5 eLXRxklTcMNV5em8+1ZMVJLvQ1q7thKkUnQK5BwJSxrVCaOra5LIgeWKdJnx5aH7 5O/aoqzDhlJU0LoVIwPRquuYRhCfzr1MbxDsBF9x2FmdoAftQMbIZCH5Wl12SOJz 6RxIK60CfKVpH5+nz1QLP/UBbA3ihcha9aOP/yrkp39t9dNxT3/Cyy4l234NF0KR IaKbis93aNcIJRNSweZNFw8eH1gIW3fLbzrj/IhWTSP2atPEyMae8n7kZRoOpPy3 xC8qmcNqBzTo2YEEFE3yb0bHvMT0HowwE/p77x0cBuGVdJBsnIU= -----END CERTIFICATE-----Generated at Thu Sep 17 13:56:56 2026 by rpki-client