$ rpki-client -vvf rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft File: 9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft (raw, json) Hash identifier: g3oSMSLLf82jXPc/H3ak3H7DzNugmSt6DjaJITPE0Lg= Subject key identifier: BA:3E:68:99:9A:12:D9:AD:34:9E:C5:2C:14:CB:AC:D9:93:E1:53:D4 Authority key identifier: 93:76:CD:F3:D2:A4:4C:C4:17:64:F8:9F:68:FD:7E:41:30:EB:35:1C Certificate issuer: /CN=9376CDF3D2A44CC41764F89F68FD7E4130EB351C Certificate serial: 253E70FF8B3B8F4AFBC3C66AAEAE5A91FD6D0B8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft Manifest number: 0E Signing time: Tue 12 May 2026 01:39:05 +0000 Manifest this update: Tue 12 May 2026 01:34:05 +0000 Manifest next update: Wed 13 May 2026 05:15:05 +0000 Files and hashes: 1: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: 1y2hMqgy1k18v9KwV+64AHSdurxHF23pHNvVVwGqp7s=) 2: 9376CDF3D2A44CC41764F89F68FD7E4130EB351C.crl (hash: LCsz/gqvL0Wg35KMSJamM+3Nfi4YiY8aVzo+HuFPMuk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.crl rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:3e:70:ff:8b:3b:8f:4a:fb:c3:c6:6a:ae:ae:5a:91:fd:6d:0b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9376CDF3D2A44CC41764F89F68FD7E4130EB351C Validity Not Before: May 12 01:34:05 2026 GMT Not After : May 13 05:15:05 2026 GMT Subject: CN=BA3E68999A12D9AD349EC52C14CBACD993E153D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9f:0d:9b:ba:b4:2e:e8:21:0b:83:19:18:9d: 21:54:ec:9f:a0:c0:1d:33:e0:4b:b2:9d:d0:b2:f4: 8c:77:e4:5e:47:74:e6:e2:f0:97:2c:4c:b8:1d:b7: 57:28:d0:35:a3:f0:88:1c:0a:6a:ab:ac:ea:17:22: a3:17:c1:fd:b9:f8:fe:ce:2c:96:13:37:f9:a0:06: 89:ff:db:13:63:34:81:d8:dc:23:90:11:b1:14:4b: 5f:c7:87:ca:55:0a:b1:0d:67:e2:03:08:50:05:e4: 28:fe:dd:98:9e:ef:a1:f1:f6:13:e7:ac:bf:d3:ec: f5:ce:35:5a:7f:a6:5f:ee:58:fa:db:f1:f6:25:0f: f3:86:b8:47:0c:c8:0b:6d:1d:ca:73:e9:c3:60:2c: 9c:a9:8e:6c:cc:56:88:b0:9d:d3:b4:3f:8d:ea:35: fc:05:0d:8c:fc:0d:29:5a:dd:7e:ee:bf:21:d0:d5: da:cc:51:8c:95:47:f2:a7:12:7a:5d:e1:74:98:b3: 29:13:d3:e9:f5:77:f0:9c:0f:cb:ff:a7:5d:ee:d9: f5:c9:a3:3b:8b:d8:db:0c:f1:d0:e2:fb:bc:75:02: 9b:4d:c2:10:de:f0:02:9f:c0:97:50:aa:9b:64:ed: 8f:9f:64:7b:eb:85:16:39:c2:3a:80:d9:18:1b:2c: b5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3E:68:99:9A:12:D9:AD:34:9E:C5:2C:14:CB:AC:D9:93:E1:53:D4 X509v3 Authority Key Identifier: keyid:93:76:CD:F3:D2:A4:4C:C4:17:64:F8:9F:68:FD:7E:41:30:EB:35:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:c2:fb:c2:c4:1f:73:6d:74:b7:ed:e8:46:72:5e:96:62:f5: 62:6b:e0:7b:ba:ab:00:f7:7f:79:57:35:a3:1f:d3:1e:37:20: c1:d5:47:db:aa:fe:25:d3:89:7a:c9:bb:3f:28:b9:8e:ea:a7: c3:5a:eb:aa:10:e8:b9:46:7c:0c:71:8d:4b:14:4c:43:26:96: 4f:f3:ef:24:3b:7e:ce:82:f1:64:8a:6c:6f:ba:62:04:f8:e2: 2a:c2:d5:8e:63:0e:df:fd:f6:b8:89:ca:2c:ed:ed:4a:6b:89: 9f:f6:79:5e:4e:bd:46:e5:8c:1b:65:5f:d7:0a:df:6a:63:8b: 73:fe:00:c7:0c:d6:93:1f:02:2e:7c:1a:69:6c:18:46:a6:3a: 6c:c0:74:67:40:11:2a:43:a2:99:aa:8b:02:11:fd:44:77:4c: 34:48:b2:3c:26:50:a0:22:de:a6:e1:29:3a:74:1f:73:6c:c4: 62:96:be:c5:4d:12:c4:28:b5:f1:e3:60:ce:5f:a7:de:8b:e2: a5:1a:8b:5f:fb:61:3b:39:b3:15:31:13:f6:e0:5a:24:56:2a: d7:e7:88:93:0c:d6:0a:6e:6d:68:2f:01:8e:74:34:c5:ec:be: 24:cd:b3:1e:0b:e3:c2:7e:e2:18:85:f5:32:ad:2b:a3:9f:8b: 07:67:76:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJT5w/4s7j0r7w8Zqrq5akf1tC4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM3NkNERjNEMkE0NENDNDE3NjRGODlGNjhGRDdFNDEz MEVCMzUxQzAeFw0yNjA1MTIwMTM0MDVaFw0yNjA1MTMwNTE1MDVaMDMxMTAvBgNV BAMTKEJBM0U2ODk5OUExMkQ5QUQzNDlFQzUyQzE0Q0JBQ0Q5OTNFMTUzRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7nw2burQu6CELgxkYnSFU7J+g wB0z4EuyndCy9Ix35F5HdObi8JcsTLgdt1co0DWj8IgcCmqrrOoXIqMXwf25+P7O LJYTN/mgBon/2xNjNIHY3COQEbEUS1/Hh8pVCrENZ+IDCFAF5Cj+3Zie76Hx9hPn rL/T7PXONVp/pl/uWPrb8fYlD/OGuEcMyAttHcpz6cNgLJypjmzMVoiwndO0P43q NfwFDYz8DSla3X7uvyHQ1drMUYyVR/KnEnpd4XSYsykT0+n1d/CcD8v/p13u2fXJ ozuL2NsM8dDi+7x1AptNwhDe8AKfwJdQqptk7Y+fZHvrhRY5wjqA2RgbLLWNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuj5omZoS2a00nsUsFMus2ZPhU9QwHwYDVR0j BBgwFoAUk3bN89KkTMQXZPifaP1+QTDrNRwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTM0NmMwZTItODE5NC00MDI0LWJjYjMtZDAyOTU2Y2UzYTk5LzAvOTM3NkNERjNE MkE0NENDNDE3NjRGODlGNjhGRDdFNDEzMEVCMzUxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85Mzc2Q0RGM0QyQTQ0Q0M0MTc2NEY4OUY2OEZEN0U0MTMwRUIz NTFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTM0NmMwZTItODE5NC00MDI0LWJj YjMtZDAyOTU2Y2UzYTk5LzAvOTM3NkNERjNEMkE0NENDNDE3NjRGODlGNjhGRDdF NDEzMEVCMzUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfC+8LEH3NtdLft6EZyXpZi9WJr4Hu6qwD3 f3lXNaMf0x43IMHVR9uq/iXTiXrJuz8ouY7qp8Na66oQ6LlGfAxxjUsUTEMmlk/z 7yQ7fs6C8WSKbG+6YgT44irC1Y5jDt/99riJyizt7UpriZ/2eV5OvUbljBtlX9cK 32pji3P+AMcM1pMfAi58GmlsGEamOmzAdGdAESpDopmqiwIR/UR3TDRIsjwmUKAi 3qbhKTp0H3NsxGKWvsVNEsQotfHjYM5fp96L4qUai1/7YTs5sxUxE/bgWiRWKtfn iJMM1gpubWgvAY50NMXsviTNsx4L48J+4hiF9TKtK6OfiwdndoM= -----END CERTIFICATE-----Generated at Tue May 12 22:46:31 2026 by rpki-client