$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft File: C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft (raw, json) Hash identifier: piwt6OoWHwi9+b6j7Zmjk6zF27JXeMbZDCMsSBV6wFI= Subject key identifier: DF:27:83:AC:CE:A5:B9:42:0A:BE:98:89:D1:D3:9E:63:8A:22:7B:04 Authority key identifier: C9:A0:E9:83:26:93:84:F0:0C:CE:85:7E:3A:8E:88:87:BE:9B:7F:C8 Certificate issuer: /CN=C9A0E983269384F00CCE857E3A8E8887BE9B7FC8 Certificate serial: 2587405050C5982A2398BFC25471D55F37989447 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:29:11 +0000 Manifest this update: Tue 12 May 2026 21:24:11 +0000 Manifest next update: Wed 13 May 2026 22:04:11 +0000 Files and hashes: 1: 323030313a6466323a623263303a3a2f34382d3438203d3e20313530393538.roa (hash: DNfu6S0MfyEIbWVxydJYNYlQdSHELvJkaaSCCqoydj0=) 2: 3130332e38312e3131302e302f32342d3234203d3e20313530393538.roa (hash: 1X7ytOOeZ7baYbrptPG956jTOlJu9VRB/BLTjRkOU00=) 3: C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl (hash: a97R520oR7Zn7RfDyNeEpd9UN9i+y+Lx7TxRDOK0wQ4=) 4: 3130332e38312e3131312e302f32342d3234203d3e20313530393538.roa (hash: l+i6wCpyx98LrkN6bI1lbQddhWqft7YLNRfJYsyxYlA=) 5: 3130332e38312e3131302e302f32332d3234203d3e20313530393538.roa (hash: PAwVQ07BR901R53ceqUz7lmumWNjRRTL4GW80ND0yx0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:87:40:50:50:c5:98:2a:23:98:bf:c2:54:71:d5:5f:37:98:94:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9A0E983269384F00CCE857E3A8E8887BE9B7FC8 Validity Not Before: May 12 21:24:11 2026 GMT Not After : May 13 22:04:11 2026 GMT Subject: CN=DF2783ACCEA5B9420ABE9889D1D39E638A227B04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:af:21:c5:d1:a9:e1:f4:d2:38:19:f6:f9:03: 6d:70:f1:38:b7:04:d0:df:81:39:c7:fe:85:f9:a2: ae:92:db:8c:80:44:2b:2e:5f:2c:76:93:f5:a2:93: 7f:a8:e3:b5:c2:c4:68:c3:74:b0:ff:04:df:22:b5: 11:2b:58:6a:1f:5a:3d:15:04:68:97:c5:5b:28:53: b7:0b:3d:25:e9:ae:a4:4b:f2:ef:cc:ea:cb:01:4a: a9:59:1a:b1:63:3f:a5:35:f9:a3:b0:a1:96:15:63: 8f:9a:94:ce:17:f1:54:16:2e:1b:e2:7f:e5:22:46: 85:c0:58:5b:e1:28:85:b1:3a:cc:a9:0d:7c:30:bc: 98:54:90:0c:b5:7c:d5:0d:7e:fa:4d:59:78:55:02: 1f:ed:93:f3:35:e2:80:bc:13:5d:6c:d9:9c:d5:3f: d5:4f:c0:06:53:c4:28:47:83:fd:e8:1d:c2:94:05: 43:47:3e:72:7c:23:22:c2:5a:c9:dc:36:42:2f:7b: 84:71:4e:83:68:b3:e3:d4:0c:ab:e2:54:08:12:39: 22:11:16:0e:b4:e3:16:63:6f:a8:c4:2f:8c:ee:b7: 96:21:aa:c8:01:1b:92:a5:7d:d3:e4:5b:6b:ab:9b: a3:2a:1b:6b:d1:42:c7:a7:aa:b7:48:53:e3:5c:47: b2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:27:83:AC:CE:A5:B9:42:0A:BE:98:89:D1:D3:9E:63:8A:22:7B:04 X509v3 Authority Key Identifier: keyid:C9:A0:E9:83:26:93:84:F0:0C:CE:85:7E:3A:8E:88:87:BE:9B:7F:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:8c:b7:95:bd:47:5f:1e:58:14:0d:d9:02:ea:df:70:9a:f8: 3a:38:dd:62:f5:a7:e8:61:17:36:d0:c1:e5:fe:03:ae:a5:86: 05:3e:de:8a:fb:27:bf:8a:05:04:e4:02:f7:d5:49:61:b7:d3: 42:c4:7e:07:79:a9:81:08:9e:91:d3:f7:73:cd:25:e5:1f:d5: ae:f0:8d:1e:14:e7:b3:1e:58:e0:f2:b3:f9:fc:9b:ed:04:fd: a2:46:a6:97:f1:83:ee:b2:9b:d5:34:8b:5f:8f:07:19:3a:e0: c4:89:59:63:be:ac:35:74:f7:6c:bc:a7:9d:c7:bd:1d:14:d2: 43:4c:fd:c2:f1:33:f0:e7:dd:f7:b9:3a:41:01:34:bf:77:74: c6:5b:ba:49:a4:a9:0e:15:04:0b:de:20:20:c5:c0:a5:32:8e: 34:43:1d:24:00:57:1f:38:81:1d:6d:3a:7e:4d:f1:a2:a5:51: e1:0e:18:d8:51:78:1b:7b:ee:e6:55:2a:dc:45:2c:be:d9:17: cd:3c:21:95:fe:7f:55:97:c4:c6:bb:8c:93:72:6d:5d:26:2d: cd:48:44:e7:12:31:9b:40:67:07:73:d5:95:7a:ae:04:d8:c4: 6d:22:85:4f:9f:4b:78:c8:76:9f:00:b0:33:2e:a2:f1:bd:15: 1c:c9:08:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJYdAUFDFmCojmL/CVHHVXzeYlEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlBMEU5ODMyNjkzODRGMDBDQ0U4NTdFM0E4RTg4ODdC RTlCN0ZDODAeFw0yNjA1MTIyMTI0MTFaFw0yNjA1MTMyMjA0MTFaMDMxMTAvBgNV BAMTKERGMjc4M0FDQ0VBNUI5NDIwQUJFOTg4OUQxRDM5RTYzOEEyMjdCMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLryHF0anh9NI4Gfb5A21w8Ti3 BNDfgTnH/oX5oq6S24yARCsuXyx2k/Wik3+o47XCxGjDdLD/BN8itRErWGofWj0V BGiXxVsoU7cLPSXprqRL8u/M6ssBSqlZGrFjP6U1+aOwoZYVY4+alM4X8VQWLhvi f+UiRoXAWFvhKIWxOsypDXwwvJhUkAy1fNUNfvpNWXhVAh/tk/M14oC8E11s2ZzV P9VPwAZTxChHg/3oHcKUBUNHPnJ8IyLCWsncNkIve4RxToNos+PUDKviVAgSOSIR Fg604xZjb6jEL4zut5YhqsgBG5KlfdPkW2urm6MqG2vRQsenqrdIU+NcR7K7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3yeDrM6luUIKvpiJ0dOeY4oiewQwHwYDVR0j BBgwFoAUyaDpgyaThPAMzoV+Oo6Ih76bf8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGYwYmNkYzMtMGZlYS00NzQ3LTk5MDctNjU2NDg2YmFlOGRhLzAvQzlBMEU5ODMy NjkzODRGMDBDQ0U4NTdFM0E4RTg4ODdCRTlCN0ZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUEwRTk4MzI2OTM4NEYwMENDRTg1N0UzQThFODg4N0JFOUI3 RkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGYwYmNkYzMtMGZlYS00NzQ3LTk5 MDctNjU2NDg2YmFlOGRhLzAvQzlBMEU5ODMyNjkzODRGMDBDQ0U4NTdFM0E4RTg4 ODdCRTlCN0ZDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJaMt5W9R18eWBQN2QLq33Ca+Do43WL1p+hh FzbQweX+A66lhgU+3or7J7+KBQTkAvfVSWG300LEfgd5qYEInpHT93PNJeUf1a7w jR4U57MeWODys/n8m+0E/aJGppfxg+6ym9U0i1+PBxk64MSJWWO+rDV092y8p53H vR0U0kNM/cLxM/Dn3fe5OkEBNL93dMZbukmkqQ4VBAveICDFwKUyjjRDHSQAVx84 gR1tOn5N8aKlUeEOGNhReBt77uZVKtxFLL7ZF808IZX+f1WXxMa7jJNybV0mLc1I ROcSMZtAZwdz1ZV6rgTYxG0ihU+fS3jIdp8AsDMuovG9FRzJCBg= -----END CERTIFICATE-----Generated at Wed May 13 02:27:09 2026 by rpki-client