$ rpki-client -vvf rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft File: 9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft (raw, json) Hash identifier: wzTe9rDOjK9JTB0n4K7+ivqHWiTeOjPxaJcuZVYX/QM= Subject key identifier: A9:86:24:CB:38:3E:C4:BB:72:11:CD:25:83:FD:53:FA:7A:8A:22:46 Authority key identifier: 9D:8E:FC:0D:64:AA:98:41:BE:1E:38:43:21:BB:2C:12:15:3F:F1:D9 Certificate issuer: /CN=9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9 Certificate serial: 656530D28D10118142BCD58639D3C19EFAE2C4E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:47:57 +0000 Manifest this update: Tue 12 May 2026 23:42:57 +0000 Manifest next update: Thu 14 May 2026 03:37:57 +0000 Files and hashes: 1: 9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl (hash: 9+4+OJQLFxI0D/WOCPyhcXdoHeUBWdJg12jeYhWD7vo=) 2: 3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa (hash: 1YCliMmBjyp95uqeBYgoOHcVWy+xU/Vfr+PcnyYk678=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:65:30:d2:8d:10:11:81:42:bc:d5:86:39:d3:c1:9e:fa:e2:c4:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9 Validity Not Before: May 12 23:42:57 2026 GMT Not After : May 14 03:37:57 2026 GMT Subject: CN=A98624CB383EC4BB7211CD2583FD53FA7A8A2246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:91:9f:02:02:59:e5:ab:a5:e0:f0:c9:a2:1d: bc:3a:b3:9f:f3:e7:da:a5:69:84:5d:33:4e:b7:80: a9:25:98:91:d8:d9:ae:21:ce:b0:10:40:2e:4d:b7: de:75:61:5a:35:6a:67:d8:50:92:83:fe:65:ee:39: 4d:41:d7:90:b0:48:ca:03:e2:b9:77:69:af:0c:df: c0:38:92:ea:d7:68:31:7e:ce:8e:06:27:df:eb:2f: e5:36:bb:8a:97:3f:e0:e2:8f:47:8c:95:6f:0a:e0: 62:d8:a2:60:c7:c4:00:e4:ba:e4:72:10:0d:ad:4f: c9:0a:e4:be:45:3b:70:04:ce:5c:26:11:98:ac:cd: cb:ca:38:19:fd:47:39:5f:82:91:41:27:a8:6d:d7: 33:bc:c0:75:4b:91:08:a4:7b:24:6b:f0:70:6a:3f: 0e:4e:28:2a:61:d1:25:41:50:e8:7e:79:c8:ef:4a: 2b:b3:97:75:26:42:68:e7:bd:82:86:eb:f6:7e:b3: 43:bf:b8:4a:a6:14:3c:e2:06:c7:b2:57:3f:12:72: 55:85:90:7b:b2:e8:bc:54:57:5d:f8:fb:81:13:66: 63:54:b8:e2:15:e9:57:43:42:19:80:ff:fe:98:d5: f9:42:3e:2e:c4:a3:77:86:5f:89:f2:48:ff:d9:58: 0b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:86:24:CB:38:3E:C4:BB:72:11:CD:25:83:FD:53:FA:7A:8A:22:46 X509v3 Authority Key Identifier: keyid:9D:8E:FC:0D:64:AA:98:41:BE:1E:38:43:21:BB:2C:12:15:3F:F1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:fe:f9:48:ce:18:4f:79:94:bb:6a:70:a2:e3:e2:5a:1f:dd: 6e:ab:d5:01:5b:37:b9:f1:3f:4c:ac:99:35:f8:a0:59:32:a8: 71:b6:16:80:03:80:26:7a:e4:a6:29:38:0d:77:35:ca:d5:65: c0:48:26:27:22:92:35:e6:b3:53:f4:b9:04:0f:da:38:93:d9: 29:13:3f:0b:20:b4:c5:cf:d2:c4:4d:56:3d:67:97:32:cf:36: 12:0e:ac:61:7a:d8:09:e6:92:b5:89:de:21:c1:c9:5d:9a:56: 31:4a:67:9f:2c:63:62:69:51:d8:a1:13:d9:03:7f:62:be:44: df:1a:48:c4:5b:00:5b:95:c9:71:86:50:77:a0:a9:44:53:85: b1:57:cc:ab:8d:a6:cc:20:7d:76:35:08:a7:0a:b1:54:99:3f: 45:9d:3e:9a:3f:28:51:e3:02:5f:57:c6:d8:ed:f1:cc:ef:21: 3b:06:74:2c:41:5d:a3:10:fd:fe:44:5c:7d:5c:a9:71:d6:38: 01:0b:67:3a:f8:2a:67:19:45:e9:42:1e:ba:0e:44:68:7c:72: 9c:74:12:99:76:81:2d:c6:e1:09:07:2a:d4:99:d8:0f:0f:c0: 89:d3:d1:53:c7:df:c9:b0:31:e3:2c:39:4a:69:a6:d7:4a:be: 6e:88:13:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZWUw0o0QEYFCvNWGOdPBnvrixOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ4RUZDMEQ2NEFBOTg0MUJFMUUzODQzMjFCQjJDMTIx NTNGRjFEOTAeFw0yNjA1MTIyMzQyNTdaFw0yNjA1MTQwMzM3NTdaMDMxMTAvBgNV BAMTKEE5ODYyNENCMzgzRUM0QkI3MjExQ0QyNTgzRkQ1M0ZBN0E4QTIyNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnkZ8CAlnlq6Xg8MmiHbw6s5/z 59qlaYRdM063gKklmJHY2a4hzrAQQC5Nt951YVo1amfYUJKD/mXuOU1B15CwSMoD 4rl3aa8M38A4kurXaDF+zo4GJ9/rL+U2u4qXP+Dij0eMlW8K4GLYomDHxADkuuRy EA2tT8kK5L5FO3AEzlwmEZiszcvKOBn9RzlfgpFBJ6ht1zO8wHVLkQikeyRr8HBq Pw5OKCph0SVBUOh+ecjvSiuzl3UmQmjnvYKG6/Z+s0O/uEqmFDziBseyVz8SclWF kHuy6LxUV134+4ETZmNUuOIV6VdDQhmA//6Y1flCPi7Eo3eGX4nySP/ZWAuVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqYYkyzg+xLtyEc0lg/1T+nqKIkYwHwYDVR0j BBgwFoAUnY78DWSqmEG+HjhDIbssEhU/8dkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDFkNTFkNDEtYjZjYy00MjBhLWI1YTgtNjdjOGJkNmIwMmFmLzAvOUQ4RUZDMEQ2 NEFBOTg0MUJFMUUzODQzMjFCQjJDMTIxNTNGRjFEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDhFRkMwRDY0QUE5ODQxQkUxRTM4NDMyMUJCMkMxMjE1M0ZG MUQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDFkNTFkNDEtYjZjYy00MjBhLWI1 YTgtNjdjOGJkNmIwMmFmLzAvOUQ4RUZDMEQ2NEFBOTg0MUJFMUUzODQzMjFCQjJD MTIxNTNGRjFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAP++UjOGE95lLtqcKLj4lof3W6r1QFbN7nx P0ysmTX4oFkyqHG2FoADgCZ65KYpOA13NcrVZcBIJicikjXms1P0uQQP2jiT2SkT PwsgtMXP0sRNVj1nlzLPNhIOrGF62AnmkrWJ3iHByV2aVjFKZ58sY2JpUdihE9kD f2K+RN8aSMRbAFuVyXGGUHegqURThbFXzKuNpswgfXY1CKcKsVSZP0WdPpo/KFHj Al9Xxtjt8czvITsGdCxBXaMQ/f5EXH1cqXHWOAELZzr4KmcZRelCHroORGh8cpx0 Epl2gS3G4QkHKtSZ2A8PwInT0VPH38mwMeMsOUppptdKvm6IE5A= -----END CERTIFICATE-----Generated at Wed May 13 04:47:12 2026 by rpki-client