$ rpki-client -vvf rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft File: B9306D640F988742BB1CB2B19AB9D729636922A3.mft (raw, json) Hash identifier: zuAmInWzYnjKRyW+lNIxG3vGBEo2npXjRLfts59Bt7s= Subject key identifier: 98:C7:3C:A8:C9:4C:3E:6B:7E:74:45:7A:61:2F:DD:A2:B2:D4:4B:B8 Authority key identifier: B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3 Certificate issuer: /CN=B9306D640F988742BB1CB2B19AB9D729636922A3 Certificate serial: 3C1FFF7F0E8EB2DA7AA5128954F229AAEE44A494 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:18:56 +0000 Manifest this update: Wed 13 May 2026 00:13:56 +0000 Manifest next update: Thu 14 May 2026 01:01:56 +0000 Files and hashes: 1: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: axp2eq8WjJ3oyW6DrRyrSevP2DkGuYbEvHXLlB0V2P0=) 2: B9306D640F988742BB1CB2B19AB9D729636922A3.crl (hash: nT0dPv1dVoYx1Tf1W6zRDohObQihFrLRqtWhR3fs7Mo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:1f:ff:7f:0e:8e:b2:da:7a:a5:12:89:54:f2:29:aa:ee:44:a4:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9306D640F988742BB1CB2B19AB9D729636922A3 Validity Not Before: May 13 00:13:56 2026 GMT Not After : May 14 01:01:56 2026 GMT Subject: CN=98C73CA8C94C3E6B7E74457A612FDDA2B2D44BB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:57:38:58:60:ed:32:a1:ac:31:02:c5:ea:b7: 84:ef:a8:5f:37:43:77:23:9a:4f:66:1a:e5:43:79: bd:29:61:cc:ef:8e:ad:ff:d5:e8:13:9c:a3:66:ff: 2c:60:4e:db:f4:46:f7:eb:a4:54:98:81:95:2b:49: ab:8a:76:9d:c1:8b:2d:a2:f2:79:12:3d:56:67:89: cb:13:58:c9:3c:36:d5:47:f8:00:b7:07:1b:bb:25: 06:fb:1e:13:0f:43:86:1c:49:d1:51:81:5c:99:c4: 2d:a1:2e:39:55:ee:11:8d:ee:d8:1f:11:c7:c5:d2: 95:46:21:97:87:56:0b:c0:57:03:2a:b9:8f:ed:e7: 27:a5:21:3b:70:7c:43:5a:47:0f:9a:4d:d6:f9:38: 10:d1:03:4e:b1:a6:5e:f5:ac:e0:65:48:52:cc:b7: 09:51:60:57:cf:6a:77:27:eb:a9:17:b1:df:3f:2d: 2a:c8:b9:12:c7:2f:19:63:a8:86:f8:44:de:37:04: 7b:5d:46:96:f6:42:0f:8b:04:53:6d:71:7c:02:27: a3:1e:62:0e:bb:f3:a0:b9:09:60:1e:aa:2a:f3:5c: a2:4c:56:0a:06:e8:c8:e8:c2:d1:e3:e9:89:9e:42: ad:6e:2a:41:88:4b:f2:4a:f9:73:6b:4d:fb:79:64: a0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C7:3C:A8:C9:4C:3E:6B:7E:74:45:7A:61:2F:DD:A2:B2:D4:4B:B8 X509v3 Authority Key Identifier: keyid:B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e2:33:a7:4b:07:35:2e:6e:4c:e8:13:4f:8d:17:b5:f7:c7: cc:23:7e:bd:2b:60:3e:31:5e:78:02:34:0c:1c:1f:bf:21:e2: b4:8f:ea:33:85:fa:23:55:a6:dc:80:f3:74:c3:cf:15:a8:e6: a0:ec:66:4f:f5:ed:bd:01:60:83:0b:c3:a7:4b:43:eb:89:c7: 37:0e:61:98:cb:5f:75:6d:69:2a:0f:d6:e9:26:08:77:a4:3a: e6:dc:91:f2:7f:94:db:2e:25:7a:f3:38:67:90:cc:6b:56:04: 23:ec:3c:25:89:d7:9d:6b:b7:02:84:bd:52:eb:6d:90:aa:b0: ce:a1:26:ba:f0:93:1e:d3:ea:7f:cf:1a:f3:6c:c2:dd:5e:8e: 80:d3:21:a2:6c:66:91:cf:62:68:d7:17:8d:1a:09:b9:81:a6: bc:83:da:f1:a8:0e:05:bb:c8:f1:df:64:f9:97:8d:d7:84:0a: ff:b6:6b:80:54:e7:fb:ae:4d:93:51:94:28:f8:7d:f1:60:a5: 64:8c:32:bf:91:4e:00:82:3d:5d:77:0b:b8:5d:ba:83:fb:ee: ac:0e:f1:3c:c8:20:05:b3:aa:ec:8b:db:5b:cf:9b:01:e4:52: ae:ad:45:ed:c2:97:87:ef:42:d7:07:0b:5a:2e:7c:45:83:1f: a9:38:b5:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPB//fw6Ostp6pRKJVPIpqu5EpJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkzMDZENjQwRjk4ODc0MkJCMUNCMkIxOUFCOUQ3Mjk2 MzY5MjJBMzAeFw0yNjA1MTMwMDEzNTZaFw0yNjA1MTQwMTAxNTZaMDMxMTAvBgNV BAMTKDk4QzczQ0E4Qzk0QzNFNkI3RTc0NDU3QTYxMkZEREEyQjJENDRCQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXVzhYYO0yoawxAsXqt4TvqF83 Q3cjmk9mGuVDeb0pYczvjq3/1egTnKNm/yxgTtv0RvfrpFSYgZUrSauKdp3Biy2i 8nkSPVZnicsTWMk8NtVH+AC3Bxu7JQb7HhMPQ4YcSdFRgVyZxC2hLjlV7hGN7tgf EcfF0pVGIZeHVgvAVwMquY/t5yelITtwfENaRw+aTdb5OBDRA06xpl71rOBlSFLM twlRYFfPancn66kXsd8/LSrIuRLHLxljqIb4RN43BHtdRpb2Qg+LBFNtcXwCJ6Me Yg6786C5CWAeqirzXKJMVgoG6MjowtHj6YmeQq1uKkGIS/JK+XNrTft5ZKBPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmMc8qMlMPmt+dEV6YS/dorLUS7gwHwYDVR0j BBgwFoAUuTBtZA+Yh0K7HLKxmrnXKWNpIqMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNiMmVlNzQtOGMzYy00YmMzLWI2ZmItZjM1YjIwMGEyMGViLzAvQjkzMDZENjQw Rjk4ODc0MkJCMUNCMkIxOUFCOUQ3Mjk2MzY5MjJBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTMwNkQ2NDBGOTg4NzQyQkIxQ0IyQjE5QUI5RDcyOTYzNjky MkEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNiMmVlNzQtOGMzYy00YmMzLWI2 ZmItZjM1YjIwMGEyMGViLzAvQjkzMDZENjQwRjk4ODc0MkJCMUNCMkIxOUFCOUQ3 Mjk2MzY5MjJBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAniM6dLBzUubkzoE0+NF7X3x8wjfr0rYD4x XngCNAwcH78h4rSP6jOF+iNVptyA83TDzxWo5qDsZk/17b0BYIMLw6dLQ+uJxzcO YZjLX3VtaSoP1ukmCHekOubckfJ/lNsuJXrzOGeQzGtWBCPsPCWJ151rtwKEvVLr bZCqsM6hJrrwkx7T6n/PGvNswt1ejoDTIaJsZpHPYmjXF40aCbmBpryD2vGoDgW7 yPHfZPmXjdeECv+2a4BU5/uuTZNRlCj4ffFgpWSMMr+RTgCCPV13C7hduoP77qwO 8TzIIAWzquyL21vPmwHkUq6tRe3Cl4fvQtcHC1oufEWDH6k4tcM= -----END CERTIFICATE-----Generated at Wed May 13 09:27:39 2026 by rpki-client