$ rpki-client -vvf rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft File: 9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft (raw, json) Hash identifier: 8+DSnzar50e4T3v00i9vS6kDJ0L379cP0+iX7SQ3f4g= Subject key identifier: 3E:1E:73:A0:49:8D:05:1D:7B:C3:1D:CD:9C:24:2D:AA:8E:8A:8E:77 Authority key identifier: 9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A Certificate issuer: /CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A Certificate serial: 52C7806CCE98A4DB07A6B52280217DC692A5B79A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:34:02 +0000 Manifest this update: Tue 12 May 2026 18:29:02 +0000 Manifest next update: Wed 13 May 2026 21:35:02 +0000 Files and hashes: 1: 3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa (hash: Dgai9I/TT4G/oQBQ3mEn1fS7dXTCrr7cZjoLYBavMXQ=) 2: 9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl (hash: o/SY+hRKhUVefPcJXIwNZOETr5NWdd3L8JJ5swmY6fA=) 3: 3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa (hash: rpX5Z9CNMyEUL+veiVsOhDnQwGzSm68cJVDfJbI5SIE=) 4: 3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (hash: y7jgS/ZISqQ0Ejz5jszYlUpeJRIijdmrHPSpWEnYBQg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c7:80:6c:ce:98:a4:db:07:a6:b5:22:80:21:7d:c6:92:a5:b7:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A Validity Not Before: May 12 18:29:02 2026 GMT Not After : May 13 21:35:02 2026 GMT Subject: CN=3E1E73A0498D051D7BC31DCD9C242DAA8E8A8E77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:19:cf:38:33:d7:96:14:34:8a:60:69:ea:80: f7:5b:98:c9:9d:1e:09:81:32:05:42:a8:74:e2:8c: 2b:c9:ba:7b:25:92:8f:26:81:db:d3:ca:3a:df:69: 42:69:c1:62:4c:76:6c:50:3e:5c:da:ac:2e:b5:ac: da:8f:d0:9a:5b:fe:0c:08:db:4c:18:01:9f:36:4a: 2f:17:e7:32:a4:f0:1e:cc:2a:e4:64:7d:de:c2:2b: 32:b7:2a:30:34:ec:1c:ab:4a:ba:2f:ae:7c:56:1f: 2b:34:7e:f0:1d:fe:80:8c:1b:77:9f:bb:63:0c:46: 5a:35:fb:02:9e:3d:5a:6d:ea:d2:4b:d2:f6:d3:ad: e1:b0:59:02:fe:b1:c0:74:7d:1f:d4:f0:12:d5:0c: e6:24:b7:8c:01:5e:f3:84:ad:94:70:1d:91:e1:b4: 76:64:05:0d:07:9e:1f:f8:8c:c3:09:b4:4d:df:9c: 52:d8:e5:69:df:6f:0c:69:f9:cb:c7:03:73:2d:05: 1d:a7:98:b3:93:76:dd:ad:0d:a9:94:45:2c:56:11: c2:29:71:82:06:fd:08:32:ad:e6:04:77:04:c1:15: b1:a5:7a:64:5d:7c:44:f0:8d:5f:77:03:2f:e4:56: 2c:c0:24:04:b3:f5:03:aa:f5:fa:6f:4e:93:b0:e4: 94:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1E:73:A0:49:8D:05:1D:7B:C3:1D:CD:9C:24:2D:AA:8E:8A:8E:77 X509v3 Authority Key Identifier: keyid:9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:36:bd:be:18:70:ab:5e:a5:6f:9a:f7:9f:56:a8:0e:fd:d1: 8f:cb:26:98:e6:62:a2:76:a6:d1:4a:12:ce:c8:c5:e2:35:39: 4f:97:be:2c:4b:98:f6:a0:b0:42:17:6c:f1:02:24:39:f8:47: 44:85:87:f5:83:8e:59:91:19:14:5a:48:d8:6d:ed:74:63:14: 07:6e:e6:65:98:45:84:e4:5c:11:c7:7f:41:59:e2:3e:89:5a: b1:62:01:25:0e:de:51:ef:24:24:f2:c5:20:7d:0d:53:68:0c: 9f:94:57:5f:72:43:ec:34:e9:e6:2f:22:7f:82:a5:c9:df:9d: 13:72:28:59:23:cb:13:d0:de:ad:ce:d7:92:5d:5c:6b:63:3d: 5a:fb:f2:69:b8:e6:03:6c:b4:53:84:10:f1:79:64:67:59:68: 48:36:92:c5:aa:9e:17:e8:3f:b7:a5:99:19:c2:82:51:d0:fc: 23:0a:61:ba:eb:ee:ff:d5:90:3f:8f:dd:0d:7b:7f:be:e0:6b: 17:d1:67:14:4b:51:6e:e6:05:c2:fe:7e:8b:49:6a:be:98:da: 2c:fd:16:f8:5f:fa:41:ef:d0:1d:4d:c2:dd:e0:73:c7:92:42: ca:7d:c0:47:49:77:c1:99:51:d7:82:7c:00:a3:48:d3:ca:bb: 00:e3:94:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUseAbM6YpNsHprUigCF9xpKlt5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBODgwMDU2RENGOUFEQjdBNzBENDYxRkY4MzA4NkQ4 RkU4ODk3QTAeFw0yNjA1MTIxODI5MDJaFw0yNjA1MTMyMTM1MDJaMDMxMTAvBgNV BAMTKDNFMUU3M0EwNDk4RDA1MUQ3QkMzMURDRDlDMjQyREFBOEU4QThFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmGc84M9eWFDSKYGnqgPdbmMmd HgmBMgVCqHTijCvJunslko8mgdvTyjrfaUJpwWJMdmxQPlzarC61rNqP0Jpb/gwI 20wYAZ82Si8X5zKk8B7MKuRkfd7CKzK3KjA07ByrSrovrnxWHys0fvAd/oCMG3ef u2MMRlo1+wKePVpt6tJL0vbTreGwWQL+scB0fR/U8BLVDOYkt4wBXvOErZRwHZHh tHZkBQ0Hnh/4jMMJtE3fnFLY5Wnfbwxp+cvHA3MtBR2nmLOTdt2tDamURSxWEcIp cYIG/QgyreYEdwTBFbGlemRdfETwjV93Ay/kVizAJASz9QOq9fpvTpOw5JSPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPh5zoEmNBR17wx3NnCQtqo6KjncwHwYDVR0j BBgwFoAUn6iABW3Pmtt6cNRh/4MIbY/oiXowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0NDI1MmItZDMwZS00YmRjLTgzMmYtYjM4YjA1YzdhMDM1LzAvOUZBODgwMDU2 RENGOUFEQjdBNzBENDYxRkY4MzA4NkQ4RkU4ODk3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkE4ODAwNTZEQ0Y5QURCN0E3MEQ0NjFGRjgzMDg2RDhGRTg4 OTdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0NDI1MmItZDMwZS00YmRjLTgz MmYtYjM4YjA1YzdhMDM1LzAvOUZBODgwMDU2RENGOUFEQjdBNzBENDYxRkY4MzA4 NkQ4RkU4ODk3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMY2vb4YcKtepW+a959WqA790Y/LJpjmYqJ2 ptFKEs7IxeI1OU+XvixLmPagsEIXbPECJDn4R0SFh/WDjlmRGRRaSNht7XRjFAdu 5mWYRYTkXBHHf0FZ4j6JWrFiASUO3lHvJCTyxSB9DVNoDJ+UV19yQ+w06eYvIn+C pcnfnRNyKFkjyxPQ3q3O15JdXGtjPVr78mm45gNstFOEEPF5ZGdZaEg2ksWqnhfo P7elmRnCglHQ/CMKYbrr7v/VkD+P3Q17f77gaxfRZxRLUW7mBcL+fotJar6Y2iz9 Fvhf+kHv0B1Nwt3gc8eSQsp9wEdJd8GZUdeCfACjSNPKuwDjlIs= -----END CERTIFICATE-----Generated at Wed May 13 00:44:49 2026 by rpki-client