$ rpki-client -vvf rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft File: 9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft (raw, json) Hash identifier: BPom4Nd+iKw76JKvHAz9LjOCj/5WQKeP1tgxNH9W4uQ= Subject key identifier: 96:08:D2:FD:DC:B9:1B:0F:1B:1E:94:09:DD:E4:35:1B:A6:42:1B:1F Authority key identifier: 9A:2E:70:15:61:0F:91:22:97:C9:C4:B0:FF:DE:85:57:63:38:C9:EA Certificate issuer: /CN=9A2E7015610F912297C9C4B0FFDE85576338C9EA Certificate serial: 226B903F158B83791F745EB6274084B0B9B259F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft Manifest number: 0E Signing time: Tue 12 May 2026 17:01:39 +0000 Manifest this update: Tue 12 May 2026 16:56:39 +0000 Manifest next update: Wed 13 May 2026 20:10:39 +0000 Files and hashes: 1: 9A2E7015610F912297C9C4B0FFDE85576338C9EA.crl (hash: qBnF+vX20GZk6LDSDuThXL1+7tJbFGbvBXzQewNqiWE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.crl rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:6b:90:3f:15:8b:83:79:1f:74:5e:b6:27:40:84:b0:b9:b2:59:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A2E7015610F912297C9C4B0FFDE85576338C9EA Validity Not Before: May 12 16:56:39 2026 GMT Not After : May 13 20:10:39 2026 GMT Subject: CN=9608D2FDDCB91B0F1B1E9409DDE4351BA6421B1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:40:2e:75:9d:d8:4d:ec:16:16:d9:14:28:a6: 61:a5:75:9a:ef:35:3b:1b:f3:bb:be:0c:7c:cd:b9: ef:32:31:25:d8:31:b0:a8:e0:28:91:b3:26:48:72: 07:c5:df:c9:39:1b:23:d9:ec:79:2d:87:9b:cc:70: 91:ae:23:54:75:78:b9:9d:f0:ac:fe:e7:b7:44:1a: 4d:85:36:c9:3c:2b:d4:27:c4:43:74:44:be:64:de: e7:a3:e2:04:87:8a:f1:2b:ae:f5:60:1a:d1:b7:ff: 43:a8:24:d8:10:90:c4:ee:d9:0a:24:9e:11:37:e5: 27:1f:6f:50:91:82:ce:d7:3d:40:ca:e1:8a:e6:97: 21:ad:00:a8:a2:02:14:dc:d7:89:9a:af:73:1b:8f: 0a:f9:39:09:4c:90:89:11:dd:f0:ae:86:9b:ab:85: d3:4a:1a:c5:95:0c:78:86:f8:08:f4:46:1f:b7:9b: ad:7d:7d:bb:05:c2:d9:fa:3d:fa:c9:d5:83:e6:23: 00:f4:58:b1:43:fc:a6:87:b3:21:5b:79:1b:aa:81: 89:e7:64:2d:c8:dd:03:1b:68:7a:ca:c0:02:6e:46: 61:49:90:4d:8a:f5:f1:0f:8a:ba:37:d8:e7:f8:8d: 2c:04:8f:7c:8b:67:a2:81:6d:39:bd:b6:a2:94:f8: 11:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:08:D2:FD:DC:B9:1B:0F:1B:1E:94:09:DD:E4:35:1B:A6:42:1B:1F X509v3 Authority Key Identifier: keyid:9A:2E:70:15:61:0F:91:22:97:C9:C4:B0:FF:DE:85:57:63:38:C9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:cc:f5:4b:8e:0c:b8:06:d2:ca:32:fb:ea:65:f4:8c:28:2d: e4:1e:f1:92:0a:8b:b4:b2:e0:08:bc:e2:2d:c8:4a:bf:3b:19: 39:54:2a:59:0e:78:fa:7b:26:76:74:b7:f1:9b:66:96:d0:a1: 4a:9f:a2:b0:2f:a5:57:75:cd:14:ec:65:b6:61:4f:bf:8a:77: 15:cb:21:ce:e1:d4:14:45:91:03:f2:67:2f:05:0b:f9:90:c4: 7d:c5:5f:6f:ed:99:e3:d2:32:db:2f:ce:48:72:45:c8:26:5f: 51:5d:b3:6d:35:ad:35:41:ed:80:f7:97:e6:f8:3d:bd:b8:cb: 0b:e9:7e:1d:43:28:7d:37:d2:a6:69:c0:73:05:b5:87:51:85: 73:cc:92:dd:b8:c7:77:d6:1d:7b:ed:36:2c:a1:92:15:58:b1: f6:c6:e2:13:7d:59:e2:bd:36:a5:76:0f:34:9a:cf:f4:64:0c: 1d:1b:de:2c:b5:ee:90:11:ea:08:b4:1d:f4:c6:16:bb:da:9b: 2b:62:46:91:10:a8:64:14:6e:f0:2f:36:97:63:9d:83:04:e5: 0d:39:09:7e:c9:e3:0d:0c:56:96:f8:b3:81:63:3f:38:c5:41: 56:af:a8:57:59:17:d1:6e:92:dc:a7:fc:1f:bb:ed:41:b0:36: e0:b9:10:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUImuQPxWLg3kfdF62J0CEsLmyWfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyRTcwMTU2MTBGOTEyMjk3QzlDNEIwRkZERTg1NTc2 MzM4QzlFQTAeFw0yNjA1MTIxNjU2MzlaFw0yNjA1MTMyMDEwMzlaMDMxMTAvBgNV BAMTKDk2MDhEMkZERENCOTFCMEYxQjFFOTQwOURERTQzNTFCQTY0MjFCMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWQC51ndhN7BYW2RQopmGldZrv NTsb87u+DHzNue8yMSXYMbCo4CiRsyZIcgfF38k5GyPZ7Hkth5vMcJGuI1R1eLmd 8Kz+57dEGk2FNsk8K9QnxEN0RL5k3uej4gSHivErrvVgGtG3/0OoJNgQkMTu2Qok nhE35Scfb1CRgs7XPUDK4YrmlyGtAKiiAhTc14mar3Mbjwr5OQlMkIkR3fCuhpur hdNKGsWVDHiG+Aj0Rh+3m619fbsFwtn6PfrJ1YPmIwD0WLFD/KaHsyFbeRuqgYnn ZC3I3QMbaHrKwAJuRmFJkE2K9fEPiro32Of4jSwEj3yLZ6KBbTm9tqKU+BErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlgjS/dy5Gw8bHpQJ3eQ1G6ZCGx8wHwYDVR0j BBgwFoAUmi5wFWEPkSKXycSw/96FV2M4yeowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTNmYTdkNWMtMzY4ZC00YWYzLWI4ZTctMTc4NjI0NmRkNjJmLzAvOUEyRTcwMTU2 MTBGOTEyMjk3QzlDNEIwRkZERTg1NTc2MzM4QzlFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTJFNzAxNTYxMEY5MTIyOTdDOUM0QjBGRkRFODU1NzYzMzhD OUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTNmYTdkNWMtMzY4ZC00YWYzLWI4 ZTctMTc4NjI0NmRkNjJmLzAvOUEyRTcwMTU2MTBGOTEyMjk3QzlDNEIwRkZERTg1 NTc2MzM4QzlFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzM9UuODLgG0soy++pl9IwoLeQe8ZIKi7Sy 4Ai84i3ISr87GTlUKlkOePp7JnZ0t/GbZpbQoUqforAvpVd1zRTsZbZhT7+KdxXL Ic7h1BRFkQPyZy8FC/mQxH3FX2/tmePSMtsvzkhyRcgmX1Fds201rTVB7YD3l+b4 Pb24ywvpfh1DKH030qZpwHMFtYdRhXPMkt24x3fWHXvtNiyhkhVYsfbG4hN9WeK9 NqV2DzSaz/RkDB0b3iy17pAR6gi0HfTGFrvamytiRpEQqGQUbvAvNpdjnYME5Q05 CX7J4w0MVpb4s4FjPzjFQVavqFdZF9Fuktyn/B+77UGwNuC5EIs= -----END CERTIFICATE-----Generated at Wed May 13 05:47:21 2026 by rpki-client