$ rpki-client -vvf rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft File: 9290697B92D08AFAAFB01253090BE0FE28871EA9.mft (raw, json) Hash identifier: HS7guQWo8xhg9JyJ83xnsEIvEdscADFGXSIbAEuqcw4= Subject key identifier: C0:AE:E9:6D:56:BB:23:46:DD:B0:82:04:2B:3D:2C:26:BC:1F:33:6C Authority key identifier: 92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9 Certificate issuer: /CN=9290697B92D08AFAAFB01253090BE0FE28871EA9 Certificate serial: 35B39B590D4A98AA4B94290E5CE4336479941CF4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft Manifest number: 0E Signing time: Tue 12 May 2026 01:18:29 +0000 Manifest this update: Tue 12 May 2026 01:13:29 +0000 Manifest next update: Wed 13 May 2026 04:01:29 +0000 Files and hashes: 1: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: hRuNQymA0Kqk7Awfu8/hFwiPFpevo38okveHDPwRfwI=) 2: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: ld7ZAKTrz/u5LDPP3+3DpOULg7oKh+lQm5wahDEcTNc=) 3: 323030313a6466373a376438303a3a2f34382d3438203d3e20313431393039.roa (hash: tw5oikVlx6lbDw0PXuWWK4JNZ7QDnCFmUnX8Ug8gws8=) 4: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: WJxpeyz7OfQNEVK9NO1sVdlmaQoTrq8jALq72l9BXpw=) 5: 9290697B92D08AFAAFB01253090BE0FE28871EA9.crl (hash: tnsq2EFgKVfsmxliNICMBJ7KSlej3id2BCeloIjVfuU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.crl rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 04:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b3:9b:59:0d:4a:98:aa:4b:94:29:0e:5c:e4:33:64:79:94:1c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9290697B92D08AFAAFB01253090BE0FE28871EA9 Validity Not Before: May 12 01:13:29 2026 GMT Not After : May 13 04:01:29 2026 GMT Subject: CN=C0AEE96D56BB2346DDB082042B3D2C26BC1F336C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2b:44:12:c3:0a:f5:c1:e7:65:f8:13:3f:31: 0d:da:ec:f0:65:66:86:0f:08:94:28:5e:63:52:a5: af:8a:5e:8c:d4:70:7a:89:f2:5c:90:7b:78:04:a6: c6:14:2c:fc:2d:4a:52:ec:d5:7f:93:7c:50:e9:c5: 1a:81:aa:98:9f:6b:c8:58:c6:f3:70:df:3c:d4:5e: 21:51:1b:d4:71:8b:d9:d8:bd:e5:8e:12:ef:9b:72: 29:ac:31:dc:5e:99:eb:2f:7e:13:d6:2b:74:2f:f7: 96:7f:29:21:fc:73:77:a5:f2:05:2a:9a:1a:12:e7: e4:d5:6f:6c:a9:4f:26:f6:15:d2:d5:16:56:6a:01: 3e:89:b6:ba:34:b9:be:e0:9e:27:3d:53:91:72:6d: b5:50:5c:b7:77:81:6f:a6:23:e4:1f:8e:63:69:aa: fe:a1:8d:47:5b:9a:59:f0:ca:ee:a6:64:5c:46:a4: 96:b6:7c:b6:bc:c4:c1:85:a8:1e:84:2c:0b:da:ff: fb:eb:ab:23:ed:3e:c6:eb:09:a6:82:5f:7b:8f:8c: 9c:a7:7a:d5:91:bd:88:87:2d:c1:8d:ca:04:e5:d1: af:f9:7b:be:fe:51:19:8a:6d:0a:4c:fc:16:f2:a5: 88:cd:fb:a2:41:24:d5:d5:b2:a1:63:90:73:f0:f6: a2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AE:E9:6D:56:BB:23:46:DD:B0:82:04:2B:3D:2C:26:BC:1F:33:6C X509v3 Authority Key Identifier: keyid:92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:cc:e4:fc:43:bd:88:f0:c7:9c:ba:6a:e7:49:b4:66:64:52: 91:34:58:d5:4b:7a:01:18:43:85:03:ba:45:66:fd:f4:47:39: 8e:2a:14:72:cf:24:bb:1a:d0:37:27:57:6e:50:65:b6:e2:03: 07:78:f4:3d:74:b4:89:ee:9b:0f:4c:bb:cf:85:20:19:2f:79: 50:f4:e6:f3:d1:a7:99:15:46:f7:86:54:aa:81:2e:4c:c0:7d: 7d:f6:78:18:53:29:86:47:48:82:fe:cd:87:1a:72:99:1b:29: 5a:75:16:85:d2:04:0d:f8:33:15:56:6d:c6:2a:c7:a4:a2:f2: ee:bf:21:e6:d6:66:30:aa:42:71:d1:a8:99:ca:92:e0:b9:ac: 54:df:6e:a2:11:68:ba:b3:1d:43:80:6e:99:f2:5e:3b:a2:aa: c7:b9:ce:b4:20:fa:57:b9:9a:4a:d0:32:99:82:97:2c:d2:3a: 85:50:61:16:ae:34:b5:c5:c7:da:cc:b3:0b:c3:87:e1:50:4d: c8:82:db:37:99:0e:b9:8b:15:eb:37:e3:bd:42:5e:21:5d:ee: 9a:59:a5:f2:84:82:6f:a3:85:f9:43:9c:d4:4b:89:b9:33:10: 29:56:db:ab:fe:e2:a7:54:18:98:fe:89:7c:50:82:5b:4a:d6: 09:62:20:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNbObWQ1KmKpLlCkOXOQzZHmUHPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI5MDY5N0I5MkQwOEFGQUFGQjAxMjUzMDkwQkUwRkUy ODg3MUVBOTAeFw0yNjA1MTIwMTEzMjlaFw0yNjA1MTMwNDAxMjlaMDMxMTAvBgNV BAMTKEMwQUVFOTZENTZCQjIzNDZEREIwODIwNDJCM0QyQzI2QkMxRjMzNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoK0QSwwr1wedl+BM/MQ3a7PBl ZoYPCJQoXmNSpa+KXozUcHqJ8lyQe3gEpsYULPwtSlLs1X+TfFDpxRqBqpifa8hY xvNw3zzUXiFRG9Rxi9nYveWOEu+bcimsMdxemesvfhPWK3Qv95Z/KSH8c3el8gUq mhoS5+TVb2ypTyb2FdLVFlZqAT6Jtro0ub7gnic9U5FybbVQXLd3gW+mI+QfjmNp qv6hjUdbmlnwyu6mZFxGpJa2fLa8xMGFqB6ELAva//vrqyPtPsbrCaaCX3uPjJyn etWRvYiHLcGNygTl0a/5e77+URmKbQpM/BbypYjN+6JBJNXVsqFjkHPw9qIvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwK7pbVa7I0bdsIIEKz0sJrwfM2wwHwYDVR0j BBgwFoAUkpBpe5LQivqvsBJTCQvg/iiHHqkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAxYzRkNjEtZGNlZi00YTIwLWJkNGMtYTI4MmEzN2FhNjllLzAvOTI5MDY5N0I5 MkQwOEFGQUFGQjAxMjUzMDkwQkUwRkUyODg3MUVBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjkwNjk3QjkyRDA4QUZBQUZCMDEyNTMwOTBCRTBGRTI4ODcx RUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAxYzRkNjEtZGNlZi00YTIwLWJk NGMtYTI4MmEzN2FhNjllLzAvOTI5MDY5N0I5MkQwOEFGQUFGQjAxMjUzMDkwQkUw RkUyODg3MUVBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3M5PxDvYjwx5y6audJtGZkUpE0WNVLegEY Q4UDukVm/fRHOY4qFHLPJLsa0DcnV25QZbbiAwd49D10tInumw9Mu8+FIBkveVD0 5vPRp5kVRveGVKqBLkzAfX32eBhTKYZHSIL+zYcacpkbKVp1FoXSBA34MxVWbcYq x6Si8u6/IebWZjCqQnHRqJnKkuC5rFTfbqIRaLqzHUOAbpnyXjuiqse5zrQg+le5 mkrQMpmClyzSOoVQYRauNLXFx9rMswvDh+FQTciC2zeZDrmLFes3471CXiFd7ppZ pfKEgm+jhflDnNRLibkzEClW26v+4qdUGJj+iXxQgltK1gliIHg= -----END CERTIFICATE-----Generated at Tue May 12 22:20:16 2026 by rpki-client