$ rpki-client -vvf rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft File: 9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft (raw, json) Hash identifier: FFHsqUQC3jsV/asTH4fXenlNrLAg2fMRHHJMcWGxThs= Subject key identifier: 09:57:D6:19:62:97:62:CC:EA:C5:EC:D7:A5:41:C7:60:3C:F5:92:59 Authority key identifier: 9C:47:04:20:4D:F8:9C:A1:B4:1C:1A:06:44:39:95:B3:CC:E3:86:CB Certificate issuer: /CN=9C4704204DF89CA1B41C1A06443995B3CCE386CB Certificate serial: 4B35C72D38FF7088B6A3BDF0500598B95A41C7E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:09:37 +0000 Manifest this update: Tue 12 May 2026 08:04:37 +0000 Manifest next update: Wed 13 May 2026 11:23:37 +0000 Files and hashes: 1: AS23693.roa (hash: MYMD6pbt4sKz7OvRtkhiGBT2mMS6OgawmPYOhNxznnw=) 2: 9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl (hash: tL4AIGhnk4lFtcca7pphoTVTF9GvSvB+gitYSof9xf4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:35:c7:2d:38:ff:70:88:b6:a3:bd:f0:50:05:98:b9:5a:41:c7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C4704204DF89CA1B41C1A06443995B3CCE386CB Validity Not Before: May 12 08:04:37 2026 GMT Not After : May 13 11:23:37 2026 GMT Subject: CN=0957D619629762CCEAC5ECD7A541C7603CF59259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fe:4d:01:c6:57:34:67:04:61:c9:b1:d7:8b: f6:b2:5b:f0:fa:93:79:bd:21:64:26:20:24:3c:03: 04:f9:b7:4e:84:81:12:5e:e9:97:69:bc:25:a1:30: 90:95:74:e3:d8:4a:78:fa:d8:cc:d5:94:27:72:91: 3f:52:de:ae:f3:3e:93:2a:44:73:b2:f8:3c:d7:b0: 37:8c:a8:50:c8:b1:b0:27:fd:c2:c4:d1:f4:9c:6f: e5:ac:b4:2a:4e:af:6a:c5:8e:86:e2:6d:d6:9d:a0: 64:7a:cb:2e:dc:8d:2e:3b:2c:07:50:9f:24:20:4c: 1a:8e:ca:90:2f:9e:19:50:f2:01:c8:4f:5a:07:0a: 24:5e:48:b5:f0:2b:06:c1:fd:2f:32:4c:da:32:ce: e7:13:bb:c8:70:aa:b8:d5:f5:ac:d4:d3:22:fd:c0: 18:fb:5b:95:30:26:b7:75:64:14:7d:b2:13:96:7c: f1:2e:65:04:37:a7:69:e2:b5:11:d5:b0:2c:b4:67: 54:48:f2:09:59:1c:7f:19:04:de:95:9a:08:7b:fe: 58:e7:d7:6b:70:78:f1:50:55:90:f7:00:fe:fd:fe: 9d:c9:83:24:2b:35:d0:b2:7b:9f:ac:6d:08:23:d1: b2:50:30:60:2d:f0:53:1a:f3:b6:28:53:31:15:a6: 65:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:57:D6:19:62:97:62:CC:EA:C5:EC:D7:A5:41:C7:60:3C:F5:92:59 X509v3 Authority Key Identifier: keyid:9C:47:04:20:4D:F8:9C:A1:B4:1C:1A:06:44:39:95:B3:CC:E3:86:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:fd:f1:10:d0:b8:18:11:15:d6:32:ee:fe:08:c1:2a:12:55: 88:f7:09:89:ed:a6:90:8a:21:29:c1:54:d2:3f:45:ef:d3:66: 35:7f:d2:2e:b3:87:b4:ba:7a:69:ed:dd:95:fe:7e:fc:bf:50: 4b:b4:52:f3:47:ec:80:cb:cf:1a:c1:1f:fe:fc:39:a9:15:09: 38:ea:d9:93:b3:c0:d6:a7:66:88:75:17:81:d1:00:9e:89:ad: ce:fc:fa:52:86:24:d5:14:b6:ff:32:c7:ed:cc:ab:b7:67:7a: 41:04:f7:78:83:6c:a4:f9:42:6a:9f:d0:52:d6:bd:55:aa:17: 1e:39:ab:86:87:51:96:27:2a:ac:9f:77:45:7e:f0:6e:26:ea: b1:3f:21:33:18:b7:3d:01:71:d8:72:4a:63:dc:7c:70:d4:a2: 50:59:16:f6:9d:da:c4:28:54:03:2b:b8:bf:9e:ae:4e:70:48: 80:33:20:8e:79:2a:33:2d:3a:95:53:75:f9:91:1d:94:51:c6: 71:0f:36:a4:71:e5:4f:49:49:88:7a:a1:5e:0d:2a:a3:1e:46: a7:2c:00:e9:dd:55:18:d1:92:97:e4:9a:92:58:73:1a:47:6f: 4f:55:38:2e:cc:cd:43:8b:07:56:2f:4a:df:7b:57:d8:5e:79: 77:f8:db:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSzXHLTj/cIi2o73wUAWYuVpBx+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM0NzA0MjA0REY4OUNBMUI0MUMxQTA2NDQzOTk1QjND Q0UzODZDQjAeFw0yNjA1MTIwODA0MzdaFw0yNjA1MTMxMTIzMzdaMDMxMTAvBgNV BAMTKDA5NTdENjE5NjI5NzYyQ0NFQUM1RUNEN0E1NDFDNzYwM0NGNTkyNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe/k0Bxlc0ZwRhybHXi/ayW/D6 k3m9IWQmICQ8AwT5t06EgRJe6ZdpvCWhMJCVdOPYSnj62MzVlCdykT9S3q7zPpMq RHOy+DzXsDeMqFDIsbAn/cLE0fScb+WstCpOr2rFjobibdadoGR6yy7cjS47LAdQ nyQgTBqOypAvnhlQ8gHIT1oHCiReSLXwKwbB/S8yTNoyzucTu8hwqrjV9azU0yL9 wBj7W5UwJrd1ZBR9shOWfPEuZQQ3p2nitRHVsCy0Z1RI8glZHH8ZBN6Vmgh7/ljn 12twePFQVZD3AP79/p3JgyQrNdCye5+sbQgj0bJQMGAt8FMa87YoUzEVpmU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCVfWGWKXYszqxezXpUHHYDz1klkwHwYDVR0j BBgwFoAUnEcEIE34nKG0HBoGRDmVs8zjhsswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzMyOGYyNGUtZGM3Zi00NTYyLWE1MWQtZTJlMzhjMzY3N2QxLzAvOUM0NzA0MjA0 REY4OUNBMUI0MUMxQTA2NDQzOTk1QjNDQ0UzODZDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QzQ3MDQyMDRERjg5Q0ExQjQxQzFBMDY0NDM5OTVCM0NDRTM4 NkNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvOUM0NzA0MjA0REY4OUNBMUI0MUMxQTA2NDQzOTk1 QjNDQ0UzODZDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHD98RDQuBgRFdYy7v4IwSoSVYj3CYntppCK ISnBVNI/Re/TZjV/0i6zh7S6emnt3ZX+fvy/UEu0UvNH7IDLzxrBH/78OakVCTjq 2ZOzwNanZoh1F4HRAJ6Jrc78+lKGJNUUtv8yx+3Mq7dnekEE93iDbKT5Qmqf0FLW vVWqFx45q4aHUZYnKqyfd0V+8G4m6rE/ITMYtz0BcdhySmPcfHDUolBZFvad2sQo VAMruL+erk5wSIAzII55KjMtOpVTdfmRHZRRxnEPNqRx5U9JSYh6oV4NKqMeRqcs AOndVRjRkpfkmpJYcxpHb09VOC7MzUOLB1YvSt97V9heeXf427s= -----END CERTIFICATE-----Generated at Wed May 13 00:21:32 2026 by rpki-client