$ rpki-client -vvf rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft File: 9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft (raw, json) Hash identifier: ktQmIS482R2mi/VqyS/V21m4DDm4HGm07KdsPhLRonw= Subject key identifier: 17:7D:79:61:A7:8C:F9:4D:CB:93:9D:DD:36:C9:D9:24:A1:3A:07:3C Authority key identifier: 9D:92:E9:3E:B1:58:0E:3C:D4:0F:F3:4C:FA:B3:04:AD:DB:06:81:87 Certificate issuer: /CN=9D92E93EB1580E3CD40FF34CFAB304ADDB068187 Certificate serial: 7C4019920239A7E1F049D78414EEFD3603D3D4B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:14:42 +0000 Manifest this update: Tue 12 May 2026 08:09:42 +0000 Manifest next update: Wed 13 May 2026 09:09:42 +0000 Files and hashes: 1: 3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa (hash: LO0XYAcYP+wJFsgGl9xbalFh8oG/l3nUuL82q6wx3FE=) 2: 323430343a643863303a3a2f33322d3438203d3e20313338383630.roa (hash: OBT9V34k6UtzzKNYWF9awZ7+etL3ZsNE8k4xpnFdPg0=) 3: 9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl (hash: 9aRFdoGuC8qTo84k77FgXoN7KeeSG2lmOLDSEW1f2HE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:40:19:92:02:39:a7:e1:f0:49:d7:84:14:ee:fd:36:03:d3:d4:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D92E93EB1580E3CD40FF34CFAB304ADDB068187 Validity Not Before: May 12 08:09:42 2026 GMT Not After : May 13 09:09:42 2026 GMT Subject: CN=177D7961A78CF94DCB939DDD36C9D924A13A073C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:c9:8f:6b:d4:f9:65:59:a7:83:44:25:31: 5b:9a:78:03:6a:0f:8e:f6:8e:93:60:6c:87:6c:0f: 4d:23:e5:76:75:0d:8a:ff:6d:11:21:12:b8:fb:ef: 86:0e:81:60:f2:7f:67:2a:1a:5e:ed:9a:00:60:40: 9d:66:79:16:e8:bb:be:b9:1f:a9:2b:18:14:e1:47: 27:d4:1e:94:23:81:1b:a7:a2:13:66:5f:bc:8c:73: 57:e3:89:f2:0c:6e:2d:ca:79:3e:3f:06:6a:a5:40: 4a:9f:d6:74:8e:bf:37:20:78:e5:c9:2f:3a:ec:44: 1a:9a:5e:66:bf:6f:fc:9b:77:58:55:5e:69:5f:99: 66:21:77:3f:3a:35:bf:ab:47:e0:ec:1b:9e:49:60: 7a:04:c8:28:d6:cf:82:82:7e:ab:a2:18:41:7e:35: ab:bc:59:9d:c2:c0:ac:a0:2d:06:b8:48:33:ba:d0: e8:88:a6:cd:1e:96:3f:c6:dd:70:bc:27:8a:58:32: a5:19:8c:6c:70:9f:70:34:e5:23:14:3b:1d:20:c8: 91:fa:d0:50:94:4c:fe:2f:b5:27:11:24:cf:01:e5: 08:82:9a:3b:3c:f5:fb:ec:cf:14:00:4a:bc:a7:8a: 87:f0:dd:cc:c1:a0:1a:79:ce:de:fa:2a:87:f2:cc: bb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7D:79:61:A7:8C:F9:4D:CB:93:9D:DD:36:C9:D9:24:A1:3A:07:3C X509v3 Authority Key Identifier: keyid:9D:92:E9:3E:B1:58:0E:3C:D4:0F:F3:4C:FA:B3:04:AD:DB:06:81:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:2f:b7:02:c2:38:df:30:f2:a0:9a:95:20:ce:73:bb:55:7e: 4f:af:2b:32:60:0b:d8:02:9e:8a:09:8a:c0:45:4d:e7:76:86: b0:6e:51:a0:38:18:62:95:0b:8a:9c:a9:69:2a:4c:e9:d2:f0: af:15:d9:75:56:3b:dd:c2:66:9f:a5:4a:6c:f6:8f:35:a4:3f: bf:d4:02:12:f6:a3:4d:0b:c2:82:d5:a1:4d:27:8c:56:29:68: 4e:9d:18:cd:cb:91:8c:a3:a1:d3:7a:59:05:dd:b7:48:14:1d: 52:96:85:ef:af:a2:55:f2:f3:1a:d9:1b:ab:73:34:15:8f:3e: 49:a6:1a:55:7f:aa:50:83:b4:70:93:c8:22:e7:b3:5c:cf:09: 95:94:65:b1:15:2c:e2:7e:85:10:8c:06:0d:b9:a3:8d:d5:13: 8b:53:12:57:37:27:da:ca:3a:75:d1:92:cd:ba:74:7e:70:0c: 2a:d9:0c:3e:48:16:f4:c3:c6:96:88:e5:25:ae:bc:1c:ad:a1: 35:ab:fe:a3:4b:de:73:11:95:60:10:a3:5d:e2:bf:fb:b6:9f: 82:20:57:83:b6:3e:79:e8:9c:1c:80:9a:24:1e:02:3e:c3:08: d1:05:b8:22:bd:80:4f:ca:d6:ca:a9:a2:b2:ae:ab:83:a3:80: 47:21:be:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfEAZkgI5p+HwSdeEFO79NgPT1LcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5MkU5M0VCMTU4MEUzQ0Q0MEZGMzRDRkFCMzA0QURE QjA2ODE4NzAeFw0yNjA1MTIwODA5NDJaFw0yNjA1MTMwOTA5NDJaMDMxMTAvBgNV BAMTKDE3N0Q3OTYxQTc4Q0Y5NERDQjkzOURERDM2QzlEOTI0QTEzQTA3M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrBsmPa9T5ZVmng0QlMVuaeANq D472jpNgbIdsD00j5XZ1DYr/bREhErj774YOgWDyf2cqGl7tmgBgQJ1meRbou765 H6krGBThRyfUHpQjgRunohNmX7yMc1fjifIMbi3KeT4/BmqlQEqf1nSOvzcgeOXJ LzrsRBqaXma/b/ybd1hVXmlfmWYhdz86Nb+rR+DsG55JYHoEyCjWz4KCfquiGEF+ Nau8WZ3CwKygLQa4SDO60OiIps0elj/G3XC8J4pYMqUZjGxwn3A05SMUOx0gyJH6 0FCUTP4vtScRJM8B5QiCmjs89fvszxQASryniofw3czBoBp5zt76KofyzLvNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF315YaeM+U3Lk53dNsnZJKE6BzwwHwYDVR0j BBgwFoAUnZLpPrFYDjzUD/NM+rMErdsGgYcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTY1ZDg4ZjEtYjljMC00ODVlLTkxNmUtNTliN2UzNjk4ZGExLzAvOUQ5MkU5M0VC MTU4MEUzQ0Q0MEZGMzRDRkFCMzA0QUREQjA2ODE4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDkyRTkzRUIxNTgwRTNDRDQwRkYzNENGQUIzMDRBRERCMDY4 MTg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTY1ZDg4ZjEtYjljMC00ODVlLTkx NmUtNTliN2UzNjk4ZGExLzAvOUQ5MkU5M0VCMTU4MEUzQ0Q0MEZGMzRDRkFCMzA0 QUREQjA2ODE4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwvtwLCON8w8qCalSDOc7tVfk+vKzJgC9gC nooJisBFTed2hrBuUaA4GGKVC4qcqWkqTOnS8K8V2XVWO93CZp+lSmz2jzWkP7/U AhL2o00LwoLVoU0njFYpaE6dGM3LkYyjodN6WQXdt0gUHVKWhe+volXy8xrZG6tz NBWPPkmmGlV/qlCDtHCTyCLns1zPCZWUZbEVLOJ+hRCMBg25o43VE4tTElc3J9rK OnXRks26dH5wDCrZDD5IFvTDxpaI5SWuvBytoTWr/qNL3nMRlWAQo13iv/u2n4Ig V4O2PnnonByAmiQeAj7DCNEFuCK9gE/K1sqporKuq4OjgEchvsY= -----END CERTIFICATE-----Generated at Tue May 12 22:47:01 2026 by rpki-client