$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft File: 9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft (raw, json) Hash identifier: 1BGzA/gDYLmkLt+UU752fvbeCl5yT3mDW9TLz5FYcGg= Subject key identifier: 74:92:21:89:5C:5E:7B:2D:C1:C3:B2:33:2E:E9:5F:EA:DB:64:32:DC Authority key identifier: 9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13 Certificate issuer: /CN=9A347241E9DA18B0BB748E5558F85DFA6AD14F13 Certificate serial: 19A4A4A1D10736EA4615A2B0F998061E24727256 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:31:06 +0000 Manifest this update: Tue 12 May 2026 16:26:06 +0000 Manifest next update: Wed 13 May 2026 18:00:06 +0000 Files and hashes: 1: 9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl (hash: 8Zzxn2vkvIAxe5ZLX5nb2pDeVN0XURp415EM3GYv+TQ=) 2: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: PjTS4Hn+0nQcRzsQo6Ms0LRYKKTZlFXIqpYw+ixRnkk=) 3: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: vdwdHoa0dxzBT4qxWDgRcyQiniSgsgBOI6Tm2dJ4lDY=) 4: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: wInMUXHOP8RJI5eoz/+Dc4x331OyQaS/P4AI/7E+Chw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a4:a4:a1:d1:07:36:ea:46:15:a2:b0:f9:98:06:1e:24:72:72:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A347241E9DA18B0BB748E5558F85DFA6AD14F13 Validity Not Before: May 12 16:26:06 2026 GMT Not After : May 13 18:00:06 2026 GMT Subject: CN=749221895C5E7B2DC1C3B2332EE95FEADB6432DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:06:c0:a5:67:10:9d:2f:8a:0d:15:2e:dd:cf: 05:6b:ec:b1:c5:90:e6:8c:4e:fb:a6:e9:26:39:fd: 21:2f:a1:5d:41:d5:3b:f4:08:f9:0b:c0:d1:3e:43: bc:3f:7d:99:a3:53:79:89:6b:ef:09:dc:33:5b:61: 9f:ac:8f:1d:f0:39:e1:cd:c6:d1:17:ec:05:49:48: 3c:f9:b0:0c:ed:f1:bf:d9:49:b0:13:c0:0f:54:2a: 3e:ea:0f:76:6f:f1:e1:ed:4a:06:bf:5b:a5:49:6f: 87:2b:73:14:52:4e:02:16:fa:22:1e:87:80:ed:56: 54:97:e7:5b:e8:99:4c:a1:cf:09:c5:0c:74:d4:fc: f0:9b:79:73:c6:00:cd:77:fe:30:64:8b:b1:48:48: 6c:c7:c1:b9:2a:c3:5a:d4:4b:50:91:71:b7:88:89: 93:2b:98:74:22:51:93:64:52:6a:7d:d3:72:42:ab: 4f:08:5a:82:c4:04:b3:59:b8:d8:04:1c:65:19:b8: 60:3e:b9:8b:97:a0:74:dd:11:a4:bd:85:11:d7:03: 9b:c9:6a:e0:31:09:bf:04:6d:69:cb:65:94:67:f2: 91:1c:e2:d9:da:58:a1:7e:54:36:99:22:0a:a4:10: 84:1b:da:13:e2:51:ca:cd:b5:da:a6:fd:9f:ef:be: 3c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:92:21:89:5C:5E:7B:2D:C1:C3:B2:33:2E:E9:5F:EA:DB:64:32:DC X509v3 Authority Key Identifier: keyid:9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:1f:85:b7:72:d0:e0:25:dc:5f:7d:30:74:40:51:68:fa:4f: 88:65:a3:b6:bc:06:eb:2a:c4:d8:65:ee:13:e2:7a:4e:6f:67: 95:c4:31:23:61:5e:25:90:46:ce:96:30:12:48:3b:60:a3:d1: bc:12:48:5f:99:07:8d:34:50:15:a0:33:a4:7b:6a:5b:bd:7e: 96:40:f7:f3:40:05:a4:ba:b0:5f:56:d2:7f:12:11:bd:61:dc: 60:2d:c1:0c:1f:c3:fa:99:7b:97:a7:5b:09:6d:fd:07:4a:91: ac:62:e1:8c:01:91:ed:2c:75:ce:16:71:d7:10:10:3b:63:ec: 96:76:54:77:e2:be:01:66:e3:97:a0:16:8b:ab:9b:d1:39:e4: f3:b4:b3:ab:ab:cb:63:28:ea:ee:1f:14:4c:3d:a6:b2:7b:af: 12:f7:ac:84:34:82:6f:88:31:4f:26:2b:5d:d7:c3:57:10:43: 28:c3:19:e4:47:10:2d:10:81:f5:1d:9f:be:8e:d9:1d:2f:fa: 1d:9b:77:f2:20:9c:7b:47:73:86:84:20:f0:60:5f:5c:8b:e6: 5f:88:f0:f6:13:98:43:22:00:03:8b:2e:1e:a7:a4:3d:65:0e: f5:9d:e5:86:6a:8e:01:93:8f:8f:49:f8:71:b8:fd:64:13:fe: d3:f7:04:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGaSkodEHNupGFaKw+ZgGHiRyclYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEzNDcyNDFFOURBMThCMEJCNzQ4RTU1NThGODVERkE2 QUQxNEYxMzAeFw0yNjA1MTIxNjI2MDZaFw0yNjA1MTMxODAwMDZaMDMxMTAvBgNV BAMTKDc0OTIyMTg5NUM1RTdCMkRDMUMzQjIzMzJFRTk1RkVBREI2NDMyREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBBsClZxCdL4oNFS7dzwVr7LHF kOaMTvum6SY5/SEvoV1B1Tv0CPkLwNE+Q7w/fZmjU3mJa+8J3DNbYZ+sjx3wOeHN xtEX7AVJSDz5sAzt8b/ZSbATwA9UKj7qD3Zv8eHtSga/W6VJb4crcxRSTgIW+iIe h4DtVlSX51vomUyhzwnFDHTU/PCbeXPGAM13/jBki7FISGzHwbkqw1rUS1CRcbeI iZMrmHQiUZNkUmp903JCq08IWoLEBLNZuNgEHGUZuGA+uYuXoHTdEaS9hRHXA5vJ auAxCb8EbWnLZZRn8pEc4tnaWKF+VDaZIgqkEIQb2hPiUcrNtdqm/Z/vvjxxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdJIhiVxeey3Bw7IzLulf6ttkMtwwHwYDVR0j BBgwFoAUmjRyQenaGLC7dI5VWPhd+mrRTxMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NkZDU3NzQtMzBkZC00YTAwLWIxYTktOWIxMjgyNjkzMGMyLzAvOUEzNDcyNDFF OURBMThCMEJCNzQ4RTU1NThGODVERkE2QUQxNEYxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTM0NzI0MUU5REExOEIwQkI3NDhFNTU1OEY4NURGQTZBRDE0 RjEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NkZDU3NzQtMzBkZC00YTAwLWIx YTktOWIxMjgyNjkzMGMyLzAvOUEzNDcyNDFFOURBMThCMEJCNzQ4RTU1NThGODVE RkE2QUQxNEYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEofhbdy0OAl3F99MHRAUWj6T4hlo7a8Busq xNhl7hPiek5vZ5XEMSNhXiWQRs6WMBJIO2Cj0bwSSF+ZB400UBWgM6R7alu9fpZA 9/NABaS6sF9W0n8SEb1h3GAtwQwfw/qZe5enWwlt/QdKkaxi4YwBke0sdc4WcdcQ EDtj7JZ2VHfivgFm45egFourm9E55PO0s6ury2Mo6u4fFEw9prJ7rxL3rIQ0gm+I MU8mK13Xw1cQQyjDGeRHEC0QgfUdn76O2R0v+h2bd/IgnHtHc4aEIPBgX1yL5l+I 8PYTmEMiAAOLLh6npD1lDvWd5YZqjgGTj49J+HG4/WQT/tP3BG4= -----END CERTIFICATE-----Generated at Wed May 13 02:47:37 2026 by rpki-client