$ rpki-client -vvf rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft File: 9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft (raw, json) Hash identifier: PU/ttLqDXiF4OW3CL/871rHLPPHNVEmtfHKkFbrBsGI= Subject key identifier: A4:A1:1C:D7:E0:B4:E9:9F:C3:0E:D3:BF:77:BD:0F:D9:9B:A4:26:1D Authority key identifier: 9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F Certificate issuer: /CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F Certificate serial: 161D3487A1039C23EA7E82E3AB77505F31B9FEDC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:08:07 +0000 Manifest this update: Tue 12 May 2026 18:03:07 +0000 Manifest next update: Wed 13 May 2026 20:03:07 +0000 Files and hashes: 1: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: iowBD0aCpON/4cxOj5FQqoJWjlXtvZSA6Ncm7S12+nI=) 2: 9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl (hash: Lp7p2xJt+zq/TBWFtVyIbZcsb/aeVbSKTUWzNneAgiM=) 3: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: q/9H11WTYoKvscn357helrrghEhYAd3OjlCKI1SD+L4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:1d:34:87:a1:03:9c:23:ea:7e:82:e3:ab:77:50:5f:31:b9:fe:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F Validity Not Before: May 12 18:03:07 2026 GMT Not After : May 13 20:03:07 2026 GMT Subject: CN=A4A11CD7E0B4E99FC30ED3BF77BD0FD99BA4261D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0d:cb:0b:89:62:cc:a5:ae:56:19:28:73:de: cf:7b:1b:b5:78:d5:2f:f1:87:51:ba:c8:1f:11:5c: 9f:b3:9e:ea:91:32:83:ae:df:a8:36:79:fa:c0:bc: 4e:88:38:68:86:34:45:a7:72:b1:a8:d6:68:58:1d: a6:19:eb:29:72:ee:c6:54:76:90:22:48:3f:5b:c2: 12:87:f2:9c:2f:56:b1:4d:43:b3:7f:ac:7d:40:c1: bf:76:08:d7:1c:f2:4f:ea:db:6d:7b:c3:f9:a3:6a: 87:59:4d:40:4d:1c:b5:62:0e:dc:95:7c:a5:0a:00: a4:6e:c3:ed:16:79:ce:0a:f1:c6:2b:96:da:7f:44: 05:cb:c4:7d:0c:70:45:77:d5:d9:36:80:9f:52:a2: 24:93:08:63:f3:6b:b0:77:f5:f0:46:b1:a4:c2:3a: 5d:ca:0a:fd:6a:5c:2c:b2:08:4a:ec:74:b5:16:59: 49:e1:64:0e:5f:e2:6f:a1:2e:96:a6:bb:46:40:4b: ca:c0:a1:33:24:10:4d:13:47:22:35:c8:49:16:f3: 65:90:b5:f7:a4:5e:e0:b1:b9:58:da:24:13:6b:8d: b6:fe:b6:0f:8d:92:b9:ac:aa:0d:5a:76:cb:40:b5: 0d:ac:d7:bd:66:c8:d7:ed:e7:c0:1c:79:68:86:6b: 3c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A1:1C:D7:E0:B4:E9:9F:C3:0E:D3:BF:77:BD:0F:D9:9B:A4:26:1D X509v3 Authority Key Identifier: keyid:9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:41:cf:aa:15:c2:3d:77:ee:53:42:e7:01:bb:70:8d:ef:72: 01:ec:89:41:84:ef:eb:a5:ca:6b:1a:a4:9e:68:23:ce:79:51: ab:d2:9e:6c:da:9d:9c:c9:3f:b1:9c:03:39:af:bf:42:65:aa: 59:e2:64:56:6c:ee:89:ee:31:b4:f0:ba:84:f9:d5:f8:7c:52: 76:31:8d:2e:03:41:0d:23:f9:b9:a2:93:72:8f:d9:f1:37:94: 42:a0:0d:68:50:3b:f4:6e:69:2c:d6:17:d9:3f:b5:7e:ef:78: 02:88:61:b1:e1:98:be:10:d0:c8:a6:01:91:46:85:b7:90:ad: b8:f0:5c:9d:84:d0:93:9e:ed:19:e7:b2:f5:9a:fa:80:23:a6: f3:e1:ec:26:1e:ba:95:7f:b0:db:c0:4c:d5:3f:40:76:50:7c: a0:44:fe:91:ea:4b:40:73:ac:da:b4:ef:e6:da:4f:d0:58:d9: 05:27:98:8c:ec:be:63:d4:31:d3:d3:31:2d:66:f9:9f:5f:d5: 3b:66:ae:e5:ca:dd:47:2c:63:d7:3e:71:11:8f:cb:81:ec:21: 2a:a8:9d:08:15:a8:fe:1f:16:fd:45:0d:65:b3:f0:71:ec:27: e3:b9:37:bf:5d:39:9a:8e:3e:66:15:15:20:ba:f4:1e:1e:da: db:2b:5d:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFh00h6EDnCPqfoLjq3dQXzG5/twwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJDRjI2MUYxRUVCRDBBOTYxNDg3NjFGQTJFOThFOTNG QkFGQjA2RjAeFw0yNjA1MTIxODAzMDdaFw0yNjA1MTMyMDAzMDdaMDMxMTAvBgNV BAMTKEE0QTExQ0Q3RTBCNEU5OUZDMzBFRDNCRjc3QkQwRkQ5OUJBNDI2MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0DcsLiWLMpa5WGShz3s97G7V4 1S/xh1G6yB8RXJ+znuqRMoOu36g2efrAvE6IOGiGNEWncrGo1mhYHaYZ6yly7sZU dpAiSD9bwhKH8pwvVrFNQ7N/rH1Awb92CNcc8k/q2217w/mjaodZTUBNHLViDtyV fKUKAKRuw+0Wec4K8cYrltp/RAXLxH0McEV31dk2gJ9SoiSTCGPza7B39fBGsaTC Ol3KCv1qXCyyCErsdLUWWUnhZA5f4m+hLpamu0ZAS8rAoTMkEE0TRyI1yEkW82WQ tfekXuCxuVjaJBNrjbb+tg+Nkrmsqg1adstAtQ2s171myNft58AceWiGazwlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpKEc1+C06Z/DDtO/d70P2ZukJh0wHwYDVR0j BBgwFoAUm88mHx7r0KlhSHYfoumOk/uvsG8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIzNGVmMWQtNzM0ZC00YzcxLThiYTctZDMxZTE2OGI2MzJjLzAvOUJDRjI2MUYx RUVCRDBBOTYxNDg3NjFGQTJFOThFOTNGQkFGQjA2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkNGMjYxRjFFRUJEMEE5NjE0ODc2MUZBMkU5OEU5M0ZCQUZC MDZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvOUJDRjI2MUYxRUVCRDBBOTYxNDg3NjFGQTJFOThF OTNGQkFGQjA2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFBz6oVwj137lNC5wG7cI3vcgHsiUGE7+ul ymsapJ5oI855UavSnmzanZzJP7GcAzmvv0JlqlniZFZs7onuMbTwuoT51fh8UnYx jS4DQQ0j+bmik3KP2fE3lEKgDWhQO/RuaSzWF9k/tX7veAKIYbHhmL4Q0MimAZFG hbeQrbjwXJ2E0JOe7RnnsvWa+oAjpvPh7CYeupV/sNvATNU/QHZQfKBE/pHqS0Bz rNq07+baT9BY2QUnmIzsvmPUMdPTMS1m+Z9f1TtmruXK3UcsY9c+cRGPy4HsISqo nQgVqP4fFv1FDWWz8HHsJ+O5N79dOZqOPmYVFSC69B4e2tsrXW0= -----END CERTIFICATE-----Generated at Wed May 13 02:11:43 2026 by rpki-client