$ rpki-client -vvf rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft File: 9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft (raw, json) Hash identifier: jk9czaNOrjpO6iyzpTd3bO1obIQWmJ8aEwtJicZDYTM= Subject key identifier: 99:3E:19:92:5E:CB:0B:A6:EC:D8:C9:A4:A1:89:1C:92:EB:3D:DB:5C Authority key identifier: 9F:FB:79:1C:09:C2:A2:BF:53:CF:54:17:4A:8C:A1:AD:67:7B:35:64 Certificate issuer: /CN=9FFB791C09C2A2BF53CF54174A8CA1AD677B3564 Certificate serial: 36B65A0ECAC8A7212C7705BB36CDECC6A06EF307 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:41:12 +0000 Manifest this update: Tue 12 May 2026 22:36:12 +0000 Manifest next update: Thu 14 May 2026 00:36:12 +0000 Files and hashes: 1: 9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl (hash: KRn/WHpSmgFA5r54JijpEKWjZH4YjNJNg5z88r3V2sQ=) 2: 3136302e32352e3234392e302f32342d3234203d3e20313336303939.roa (hash: U0YPo5BGNsV6sfhS2oiy7oPSHdSgcRKevuF2NKX91Xo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b6:5a:0e:ca:c8:a7:21:2c:77:05:bb:36:cd:ec:c6:a0:6e:f3:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFB791C09C2A2BF53CF54174A8CA1AD677B3564 Validity Not Before: May 12 22:36:12 2026 GMT Not After : May 14 00:36:12 2026 GMT Subject: CN=993E19925ECB0BA6ECD8C9A4A1891C92EB3DDB5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fc:23:9c:b3:20:d2:28:5f:08:02:4e:3b:39: 74:8b:bb:cb:16:a9:77:d2:70:7e:bc:c2:ee:2c:3c: 83:1c:f5:b4:a6:e0:d8:7c:17:af:93:a2:90:17:f1: db:38:0f:d9:27:91:40:7a:c6:68:43:9e:d0:ac:14: a4:41:27:59:a7:68:cd:4e:1b:7c:e9:96:b4:2f:41: dd:76:bd:58:69:12:ba:fb:e2:13:37:fb:06:f3:56: 36:e1:cd:e9:d7:19:53:91:55:d1:61:66:e8:1b:40: d1:e2:76:d9:99:b5:29:23:c1:e0:d8:e0:ec:52:32: ff:7c:83:41:6e:30:ba:3f:fd:07:60:15:3f:7e:19: 46:b8:db:47:f5:f3:23:3e:c6:85:47:5e:f7:59:94: f2:8e:2e:69:fd:8b:49:40:d4:43:cf:9c:53:18:d2: 14:49:88:6b:e5:03:23:7d:6f:97:a0:99:4c:79:10: 8a:2f:2f:e0:5c:ab:0c:0b:2a:06:64:34:49:8b:8e: 4f:97:c4:3d:20:4b:f2:2b:01:c5:dd:55:cb:e5:29: 99:fd:4e:5d:23:f0:07:a4:72:73:97:1a:c6:23:1e: f1:b0:34:f4:30:72:64:38:c2:1f:29:2f:aa:64:6b: be:c0:ef:17:8f:c4:13:23:50:2d:e5:4d:11:68:b9: e0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3E:19:92:5E:CB:0B:A6:EC:D8:C9:A4:A1:89:1C:92:EB:3D:DB:5C X509v3 Authority Key Identifier: keyid:9F:FB:79:1C:09:C2:A2:BF:53:CF:54:17:4A:8C:A1:AD:67:7B:35:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:37:32:96:8f:2f:83:c5:c9:98:4c:c7:73:64:7a:b5:0f:2a: 36:3c:a0:4e:d3:3c:1b:89:8a:f3:7d:e4:20:3c:28:b0:18:3a: ba:d9:95:ff:20:52:87:59:9c:2c:33:f1:71:a9:bb:b0:b6:8a: 34:21:2b:35:b4:b1:4d:fe:f1:45:41:4a:67:d9:1f:b7:80:64: 6a:c2:e6:67:d8:46:48:df:93:7f:8b:e4:10:1c:5e:2a:db:7f: 3c:5a:c2:6b:13:6e:d8:13:22:66:71:af:ac:d6:5e:92:47:9f: fd:6b:dd:ae:8b:5e:77:9e:c5:76:85:93:ca:ae:5c:34:de:6a: 19:2d:fa:66:d2:3a:f4:ae:55:bf:6c:92:eb:23:56:90:6b:df: 62:a9:78:cf:f8:78:42:2f:70:d8:7e:b6:1f:51:3e:c1:77:ba: 3d:6a:65:f1:92:87:6f:5a:0e:02:e2:c3:d6:c9:d4:5e:a8:c5: 3b:87:c7:ed:75:7d:e1:eb:4b:35:4e:00:dd:cb:e1:d5:cc:a3: 42:02:94:95:98:7a:30:e4:f6:69:58:91:a7:07:a2:db:7c:b4: 54:c1:b0:fc:22:6e:fb:1b:ef:55:cb:df:b1:55:e6:eb:f5:ff: 37:e1:6b:ba:f1:fe:d1:b6:61:6e:00:2f:52:ee:6c:72:6d:44: f5:36:52:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNrZaDsrIpyEsdwW7Ns3sxqBu8wcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQjc5MUMwOUMyQTJCRjUzQ0Y1NDE3NEE4Q0ExQUQ2 NzdCMzU2NDAeFw0yNjA1MTIyMjM2MTJaFw0yNjA1MTQwMDM2MTJaMDMxMTAvBgNV BAMTKDk5M0UxOTkyNUVDQjBCQTZFQ0Q4QzlBNEExODkxQzkyRUIzRERCNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/COcsyDSKF8IAk47OXSLu8sW qXfScH68wu4sPIMc9bSm4Nh8F6+TopAX8ds4D9knkUB6xmhDntCsFKRBJ1mnaM1O G3zplrQvQd12vVhpErr74hM3+wbzVjbhzenXGVORVdFhZugbQNHidtmZtSkjweDY 4OxSMv98g0FuMLo//QdgFT9+GUa420f18yM+xoVHXvdZlPKOLmn9i0lA1EPPnFMY 0hRJiGvlAyN9b5egmUx5EIovL+BcqwwLKgZkNEmLjk+XxD0gS/IrAcXdVcvlKZn9 Tl0j8AekcnOXGsYjHvGwNPQwcmQ4wh8pL6pka77A7xePxBMjUC3lTRFoueDxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmT4Zkl7LC6bs2MmkoYkckus921wwHwYDVR0j BBgwFoAUn/t5HAnCor9Tz1QXSoyhrWd7NWQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDE0MDU1NDUtYzM1ZC00ZGUxLTk2MTgtNDRiNWY0MTdhMzAzLzAvOUZGQjc5MUMw OUMyQTJCRjUzQ0Y1NDE3NEE4Q0ExQUQ2NzdCMzU2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85RkZCNzkxQzA5QzJBMkJGNTNDRjU0MTc0QThDQTFBRDY3N0Iz NTY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzAvOUZGQjc5MUMwOUMyQTJCRjUzQ0Y1NDE3NEE4Q0Ex QUQ2NzdCMzU2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQ3MpaPL4PFyZhMx3NkerUPKjY8oE7TPBuJ ivN95CA8KLAYOrrZlf8gUodZnCwz8XGpu7C2ijQhKzW0sU3+8UVBSmfZH7eAZGrC 5mfYRkjfk3+L5BAcXirbfzxawmsTbtgTImZxr6zWXpJHn/1r3a6LXneexXaFk8qu XDTeahkt+mbSOvSuVb9skusjVpBr32KpeM/4eEIvcNh+th9RPsF3uj1qZfGSh29a DgLiw9bJ1F6oxTuHx+11feHrSzVOAN3L4dXMo0IClJWYejDk9mlYkacHott8tFTB sPwibvsb71XL37FV5uv1/zfha7rx/tG2YW4AL1LubHJtRPU2Uh8= -----END CERTIFICATE-----Generated at Wed May 13 04:47:25 2026 by rpki-client