$ rpki-client -vvf rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft File: 9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft (raw, json) Hash identifier: 8hICDNTKythqnwYwCOB4uGgV37eFs2bii27/cRmzXrc= Subject key identifier: 9F:18:3E:FB:BD:A4:6A:CA:27:28:88:F9:D4:72:2F:BF:A4:FC:A0:AA Authority key identifier: 9E:E0:13:29:B0:8F:B2:3B:3B:84:0A:A8:0A:D1:66:E4:27:A1:2E:C8 Certificate issuer: /CN=9EE01329B08FB23B3B840AA80AD166E427A12EC8 Certificate serial: 4D53B4C1FBE814627495E2152333020789D29231 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:29:08 +0000 Manifest this update: Tue 12 May 2026 21:24:08 +0000 Manifest next update: Wed 13 May 2026 22:53:08 +0000 Files and hashes: 1: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (hash: baidtJB1I5sZbU9lybxXsdsHbmGXConPY+qLEFZYE2g=) 2: 3130332e3136312e3131302e302f32342d3234203d3e20313431363135.roa (hash: uoMkZJAPDBUsE5XNKk03G6DUQfsrgq24ZoSComGkHz4=) 3: 9EE01329B08FB23B3B840AA80AD166E427A12EC8.crl (hash: MZzfsltOoU1vuT/LwJuJlMo6IofmLg9SWmSLCYpF+9Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.crl rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:53:b4:c1:fb:e8:14:62:74:95:e2:15:23:33:02:07:89:d2:92:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EE01329B08FB23B3B840AA80AD166E427A12EC8 Validity Not Before: May 12 21:24:08 2026 GMT Not After : May 13 22:53:08 2026 GMT Subject: CN=9F183EFBBDA46ACA272888F9D4722FBFA4FCA0AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1e:2c:c6:1c:fb:f0:d1:51:b4:2b:60:ab:de: 23:59:b8:06:15:4e:cc:2e:1e:c5:54:10:84:58:cf: 22:e2:8c:5d:7c:8f:de:46:53:10:09:6d:9a:8b:3f: e0:8c:45:61:58:cd:f4:6e:c8:4d:64:f3:8e:d2:35: 72:bd:c2:3c:20:d7:70:cb:15:db:c1:8f:d0:ad:33: 1d:f3:40:88:47:dc:af:05:c0:53:8a:43:04:15:97: f0:ea:49:9b:d0:5f:b3:db:ef:fa:ae:9c:e1:13:16: 8a:b8:d5:e6:32:ae:a8:22:e8:ea:0d:b9:12:31:16: 5f:72:41:d1:dd:91:ee:d3:a3:6a:5c:d7:57:15:80: 70:48:9a:ed:1d:fb:4f:fd:61:77:7c:cc:17:7a:9d: e0:28:b2:5f:37:bd:1a:57:8e:e7:43:be:d0:bc:c8: 5e:0c:90:7c:7f:57:84:99:53:52:6e:8d:48:23:fd: c2:99:c4:94:6e:e1:a4:6b:bb:6a:ee:17:4a:49:fc: b5:df:5f:20:88:de:5c:03:02:4b:df:52:81:fc:cd: ba:5b:17:b3:09:28:fd:b2:dc:7f:86:b3:f1:28:ee: 9a:9b:91:f0:95:9e:16:be:78:9b:f5:c1:ad:23:2a: e0:42:be:8d:96:cb:b1:ad:38:43:fc:df:49:f0:fa: 39:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:18:3E:FB:BD:A4:6A:CA:27:28:88:F9:D4:72:2F:BF:A4:FC:A0:AA X509v3 Authority Key Identifier: keyid:9E:E0:13:29:B0:8F:B2:3B:3B:84:0A:A8:0A:D1:66:E4:27:A1:2E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8a:96:38:d6:36:8c:05:c4:5a:94:04:d2:36:71:1e:53:65: 34:93:ff:ff:f0:a6:d0:a9:89:dd:4b:d4:b5:af:82:ba:67:0d: 0f:0e:26:49:3a:29:bd:cf:33:88:20:2c:90:1b:89:a0:35:81: 70:e2:d6:57:db:9d:71:87:7e:f6:1b:98:1b:1b:c4:5f:d5:1e: e1:e2:53:49:95:33:d5:32:7e:26:8c:77:6d:9b:99:10:18:b9: 12:0f:dd:5a:a5:f0:da:6b:a1:49:25:bc:e0:ff:45:72:a3:6a: ed:83:6d:0f:f2:c0:7e:c6:2f:68:4d:f3:00:3e:6f:49:9f:b0: 87:35:24:b3:45:67:35:9c:86:56:07:36:80:49:f5:5f:75:64: 1e:c6:53:66:99:8b:b9:4a:8c:87:0a:b7:19:f7:8f:6e:65:f1: a4:73:e3:15:b6:86:75:fc:16:8e:da:22:cf:e0:c6:31:52:8f: 3a:de:2d:2e:e5:15:5e:73:24:c3:55:5a:55:e5:61:19:56:07: c7:6e:44:ba:e2:f3:e9:8d:f6:66:4f:2f:49:a6:e5:8f:d9:41: 63:96:e4:50:c2:77:b5:17:56:38:9b:5d:73:14:1a:2c:12:22: 06:02:3a:1f:e8:4f:f1:05:83:c3:8d:b7:3f:f6:16:0a:b1:0e: 97:6b:f6:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTVO0wfvoFGJ0leIVIzMCB4nSkjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVFMDEzMjlCMDhGQjIzQjNCODQwQUE4MEFEMTY2RTQy N0ExMkVDODAeFw0yNjA1MTIyMTI0MDhaFw0yNjA1MTMyMjUzMDhaMDMxMTAvBgNV BAMTKDlGMTgzRUZCQkRBNDZBQ0EyNzI4ODhGOUQ0NzIyRkJGQTRGQ0EwQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXHizGHPvw0VG0K2Cr3iNZuAYV TswuHsVUEIRYzyLijF18j95GUxAJbZqLP+CMRWFYzfRuyE1k847SNXK9wjwg13DL FdvBj9CtMx3zQIhH3K8FwFOKQwQVl/DqSZvQX7Pb7/qunOETFoq41eYyrqgi6OoN uRIxFl9yQdHdke7To2pc11cVgHBImu0d+0/9YXd8zBd6neAosl83vRpXjudDvtC8 yF4MkHx/V4SZU1JujUgj/cKZxJRu4aRru2ruF0pJ/LXfXyCI3lwDAkvfUoH8zbpb F7MJKP2y3H+Gs/Eo7pqbkfCVnha+eJv1wa0jKuBCvo2Wy7GtOEP830nw+jlNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnxg++72kasonKIj51HIvv6T8oKowHwYDVR0j BBgwFoAUnuATKbCPsjs7hAqoCtFm5CehLsgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2Y0MDhlNDQtM2U5Yy00NWU1LWJjYTQtNWRmYmQ0YjI3MTMwLzAvOUVFMDEzMjlC MDhGQjIzQjNCODQwQUE4MEFEMTY2RTQyN0ExMkVDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RUUwMTMyOUIwOEZCMjNCM0I4NDBBQTgwQUQxNjZFNDI3QTEy RUM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2Y0MDhlNDQtM2U5Yy00NWU1LWJj YTQtNWRmYmQ0YjI3MTMwLzAvOUVFMDEzMjlCMDhGQjIzQjNCODQwQUE4MEFEMTY2 RTQyN0ExMkVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqKljjWNowFxFqUBNI2cR5TZTST///wptCp id1L1LWvgrpnDQ8OJkk6Kb3PM4ggLJAbiaA1gXDi1lfbnXGHfvYbmBsbxF/VHuHi U0mVM9UyfiaMd22bmRAYuRIP3Vql8NproUklvOD/RXKjau2DbQ/ywH7GL2hN8wA+ b0mfsIc1JLNFZzWchlYHNoBJ9V91ZB7GU2aZi7lKjIcKtxn3j25l8aRz4xW2hnX8 Fo7aIs/gxjFSjzreLS7lFV5zJMNVWlXlYRlWB8duRLri8+mN9mZPL0mm5Y/ZQWOW 5FDCd7UXVjibXXMUGiwSIgYCOh/oT/EFg8ONtz/2FgqxDpdr9mA= -----END CERTIFICATE-----Generated at Wed May 13 00:21:41 2026 by rpki-client