$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft File: B9FC538BFBE91D32C980E6C968C96604E388FD26.mft (raw, json) Hash identifier: RrfZqSUJ0cGLTMN100tIECnUtJEjc4DgVBdyrgEUsE8= Subject key identifier: 6D:FC:9E:67:3C:C2:C3:E9:C3:ED:B5:A8:FC:70:5F:D4:90:6F:0F:1A Authority key identifier: B9:FC:53:8B:FB:E9:1D:32:C9:80:E6:C9:68:C9:66:04:E3:88:FD:26 Certificate issuer: /CN=B9FC538BFBE91D32C980E6C968C96604E388FD26 Certificate serial: 57932FFF36C362CD8AF61EB83CCAA717D13CE2B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9FC538BFBE91D32C980E6C968C96604E388FD26.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:22:10 +0000 Manifest this update: Tue 12 May 2026 17:17:10 +0000 Manifest next update: Wed 13 May 2026 19:39:10 +0000 Files and hashes: 1: 3130332e3138392e3235342e302f32342d3234203d3e20313439393135.roa (hash: ucIu0OXRxfc1CywG+yYTICGHOqWxj9NSpYywYNEl67o=) 2: B9FC538BFBE91D32C980E6C968C96604E388FD26.crl (hash: m/b6w8FQQQOv7/z5u/jKpySyySnvjV1YOBc+XTiATM4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.crl rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9FC538BFBE91D32C980E6C968C96604E388FD26.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:93:2f:ff:36:c3:62:cd:8a:f6:1e:b8:3c:ca:a7:17:d1:3c:e2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9FC538BFBE91D32C980E6C968C96604E388FD26 Validity Not Before: May 12 17:17:10 2026 GMT Not After : May 13 19:39:10 2026 GMT Subject: CN=6DFC9E673CC2C3E9C3EDB5A8FC705FD4906F0F1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:65:01:a6:aa:bc:48:1a:03:7a:4e:4d:48: 12:e8:51:2d:59:bb:97:2f:5c:82:21:81:f4:a4:76: 22:3c:a2:8e:b1:b8:4c:ea:9f:01:96:01:25:f6:b8: 0b:d4:f0:01:a0:8f:25:07:9d:20:40:29:d9:e4:4d: 30:c6:52:94:59:3f:4a:aa:11:3c:78:7d:38:50:b1: bb:80:3c:54:b8:42:0d:2a:a2:66:ce:32:86:d3:05: 44:e6:92:93:c9:37:00:ed:2c:58:09:af:03:65:9d: 2a:95:1c:e6:08:b4:4e:18:49:3a:31:88:cf:92:f2: 19:dc:a7:a9:41:2d:9a:9c:e4:31:1c:35:6b:42:90: 94:03:03:c0:ef:04:fd:c8:55:a0:8d:7f:4e:a9:32: 95:f3:97:85:25:c0:e4:82:a3:c6:71:03:8a:a5:05: f1:44:7b:19:4e:0c:e7:dc:b0:2c:56:c6:de:f5:93: b4:58:a5:24:7b:a9:e7:2d:6e:50:d8:e0:a0:e7:2d: 4a:a8:bc:53:19:b7:60:da:e2:f2:ce:3d:8e:9b:d2: 3a:57:a9:89:a1:e3:8e:14:9f:d8:1e:b0:45:40:3d: 89:36:89:ec:2d:6d:16:74:6a:7e:d8:76:a3:e7:1b: e0:0d:63:85:6a:a0:28:9d:ed:9d:e5:84:bd:48:4d: 08:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FC:9E:67:3C:C2:C3:E9:C3:ED:B5:A8:FC:70:5F:D4:90:6F:0F:1A X509v3 Authority Key Identifier: keyid:B9:FC:53:8B:FB:E9:1D:32:C9:80:E6:C9:68:C9:66:04:E3:88:FD:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9FC538BFBE91D32C980E6C968C96604E388FD26.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:fc:8f:23:e2:23:eb:b1:d7:c8:d2:4f:db:9e:f5:bf:a9:c5: 5d:d1:10:8f:74:97:2a:cb:e7:4f:4c:0b:06:30:41:0d:73:98: 6a:fc:de:93:15:68:eb:8a:5d:e0:84:2f:28:bf:15:af:ae:de: c2:db:8f:35:cc:2d:6a:c8:28:44:fa:01:1e:9e:11:f7:d1:38: 55:81:da:1f:94:50:50:05:1d:c1:c0:20:35:c4:59:d3:4e:f6: 14:bb:1a:6f:44:00:82:4d:1d:de:2d:11:64:d9:b4:38:7e:7e: c4:ae:96:8f:a3:aa:f6:cc:69:45:1b:91:49:4f:bd:41:49:bc: b0:e2:8c:23:28:6b:3d:33:dd:d4:bb:4b:6f:0c:74:a8:b5:fa: e2:1b:d8:ac:01:90:1a:11:ce:b4:6b:c5:4d:82:b7:1f:68:42: 49:c3:9c:51:95:0a:57:47:f6:7e:b7:3c:c6:95:1b:df:45:8c: da:66:d9:7d:b2:17:43:37:d9:ea:e0:66:66:47:b0:8e:b4:31: 0a:0a:6f:33:ea:c7:de:a7:f6:80:6c:0d:d5:5a:ae:5d:c2:9d: 3b:97:94:53:f7:b2:ff:60:9b:cf:71:5a:79:29:91:9e:16:50: 28:b8:23:3d:c4:b7:27:9a:b9:69:f6:a2:cd:4d:c2:47:49:31: 2f:aa:e3:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV5Mv/zbDYs2K9h64PMqnF9E84rgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlGQzUzOEJGQkU5MUQzMkM5ODBFNkM5NjhDOTY2MDRF Mzg4RkQyNjAeFw0yNjA1MTIxNzE3MTBaFw0yNjA1MTMxOTM5MTBaMDMxMTAvBgNV BAMTKDZERkM5RTY3M0NDMkMzRTlDM0VEQjVBOEZDNzA1RkQ0OTA2RjBGMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nmUBpqq8SBoDek5NSBLoUS1Z u5cvXIIhgfSkdiI8oo6xuEzqnwGWASX2uAvU8AGgjyUHnSBAKdnkTTDGUpRZP0qq ETx4fThQsbuAPFS4Qg0qombOMobTBUTmkpPJNwDtLFgJrwNlnSqVHOYItE4YSTox iM+S8hncp6lBLZqc5DEcNWtCkJQDA8DvBP3IVaCNf06pMpXzl4UlwOSCo8ZxA4ql BfFEexlODOfcsCxWxt71k7RYpSR7qectblDY4KDnLUqovFMZt2Da4vLOPY6b0jpX qYmh444Un9gesEVAPYk2iewtbRZ0an7YdqPnG+ANY4VqoCid7Z3lhL1ITQitAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbfyeZzzCw+nD7bWo/HBf1JBvDxowHwYDVR0j BBgwFoAUufxTi/vpHTLJgObJaMlmBOOI/SYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMwMDU2YjQtZjAyNy00NGZhLTk3NGQtNGExZWQxOTFhZTU2LzAvQjlGQzUzOEJG QkU5MUQzMkM5ODBFNkM5NjhDOTY2MDRFMzg4RkQyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUZDNTM4QkZCRTkxRDMyQzk4MEU2Qzk2OEM5NjYwNEUzODhG RDI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMwMDU2YjQtZjAyNy00NGZhLTk3 NGQtNGExZWQxOTFhZTU2LzAvQjlGQzUzOEJGQkU5MUQzMkM5ODBFNkM5NjhDOTY2 MDRFMzg4RkQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEb8jyPiI+ux18jST9ue9b+pxV3REI90lyrL 509MCwYwQQ1zmGr83pMVaOuKXeCELyi/Fa+u3sLbjzXMLWrIKET6AR6eEffROFWB 2h+UUFAFHcHAIDXEWdNO9hS7Gm9EAIJNHd4tEWTZtDh+fsSulo+jqvbMaUUbkUlP vUFJvLDijCMoaz0z3dS7S28MdKi1+uIb2KwBkBoRzrRrxU2Ctx9oQknDnFGVCldH 9n63PMaVG99FjNpm2X2yF0M32ergZmZHsI60MQoKbzPqx96n9oBsDdVarl3CnTuX lFP3sv9gm89xWnkpkZ4WUCi4Iz3EtyeauWn2os1NwkdJMS+q45g= -----END CERTIFICATE-----Generated at Wed May 13 06:56:43 2026 by rpki-client