$ rpki-client -vvf rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft File: 9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft (raw, json) Hash identifier: BP3LcONqDB5C3QvEFfYVc+Hm/PjgVOhz88sE0kgYhFU= Subject key identifier: 72:71:47:A9:9F:2A:7C:F2:31:AC:DC:79:77:AE:0F:8B:7E:50:1F:C9 Authority key identifier: 9B:61:7E:3E:89:75:C5:E8:37:FD:E8:E7:E3:A6:F7:F2:B0:7D:F2:FA Certificate issuer: /CN=9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA Certificate serial: 6888282673521C63064A3E604D7752042E0CBCD2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:00:08 +0000 Manifest this update: Tue 12 May 2026 21:55:08 +0000 Manifest next update: Thu 14 May 2026 01:53:08 +0000 Files and hashes: 1: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (hash: Y6VzFaG2FbyNdRwLMR4BvXhR1/TPWS0MIZ86oCceOfk=) 2: 9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl (hash: LeKm4Xz24oIe9nM6LrwpOGPfSnqnw+8CcYJN2Lo2Rqs=) 3: 3130332e34332e32352e302f32342d3234203d3e20313339343139.roa (hash: jbUXyMJGAUe8ArHS1H74yui1bmkFdiNku010i13gDLM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:88:28:26:73:52:1c:63:06:4a:3e:60:4d:77:52:04:2e:0c:bc:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA Validity Not Before: May 12 21:55:08 2026 GMT Not After : May 14 01:53:08 2026 GMT Subject: CN=727147A99F2A7CF231ACDC7977AE0F8B7E501FC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a4:59:63:d8:56:00:56:56:6c:78:8e:e3:95: 66:72:ae:0e:69:74:88:71:f9:46:7e:b2:62:0c:c2: b4:ef:60:77:c4:34:04:60:f2:4b:b3:27:fa:1c:3a: 70:4c:c8:66:df:19:19:fa:2b:1b:41:64:95:7a:a9: ff:22:de:d9:4d:05:53:71:f7:df:b4:91:39:3b:44: a1:17:e0:97:cf:12:c7:31:93:4a:af:6c:a1:87:93: f0:06:fc:d7:fd:8d:a7:4c:f5:99:a2:84:ed:da:4d: 7f:93:6e:e1:d5:09:6f:99:48:a2:ab:08:a4:b5:2d: 36:d0:9c:b2:62:a0:fb:78:6a:99:12:d1:86:ae:b6: 8f:4b:46:70:9d:7b:90:33:16:50:bf:9e:c3:8b:f7: c8:33:01:24:b1:69:18:87:ae:ab:79:c8:28:fa:2d: 87:8e:87:32:1d:13:6f:a2:10:94:70:a0:b5:d5:c1: 2c:cc:9f:6f:ca:77:71:25:c2:91:29:6f:58:09:8e: cd:c3:fc:d3:ae:f0:25:85:da:ad:2c:d6:d9:d4:1f: 86:ef:7f:c3:da:d8:fe:46:52:ff:ed:35:cf:8a:5f: 0d:7f:c5:ad:f6:c9:99:33:2a:e1:92:7f:4b:6e:1a: 71:66:4f:1b:7e:5b:76:ae:fd:ac:72:22:cb:41:98: 71:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:71:47:A9:9F:2A:7C:F2:31:AC:DC:79:77:AE:0F:8B:7E:50:1F:C9 X509v3 Authority Key Identifier: keyid:9B:61:7E:3E:89:75:C5:E8:37:FD:E8:E7:E3:A6:F7:F2:B0:7D:F2:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:58:7b:2f:9d:59:17:d2:31:be:4e:9c:2c:8c:f7:e5:bd:07: f3:c7:c3:5a:c2:02:ed:dd:b6:ef:3a:4a:50:77:72:f2:b3:d0: b5:3d:ba:5f:32:27:19:1f:da:ab:71:ac:2d:3a:57:27:c6:0f: 8b:3b:4e:49:72:a5:30:7b:a2:a7:53:b6:e7:f7:a1:df:02:a7: e1:66:69:4a:ab:a9:58:8f:a8:cb:4d:3f:10:bf:8e:94:41:c9: 96:06:9e:42:55:26:17:1a:8c:28:fa:a4:a7:c5:cd:63:99:fe: c0:04:c8:29:ea:53:a9:fd:eb:89:54:3c:56:79:54:d8:3d:42: 0c:71:33:e6:e8:06:22:78:f5:4e:0a:4f:8b:7c:93:2a:e6:93: e3:0c:2f:30:c2:0e:28:49:3f:54:98:b3:58:72:eb:8b:2d:19: f9:dc:f5:d9:5e:33:1d:d2:f0:b0:bb:62:b3:80:35:46:b1:92: e1:87:24:42:f2:46:b2:3e:ba:d8:2b:88:b6:03:2f:c8:9f:bc: cb:99:36:b1:93:f9:2a:60:88:66:34:ce:72:a5:a4:ad:2a:a6: 46:ed:26:26:9b:05:3a:e3:67:1d:fa:a3:b4:91:d6:55:07:ae: 77:9d:60:31:d9:e7:9c:19:be:57:f8:17:3e:2d:1b:c6:8c:ef: be:44:a7:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaIgoJnNSHGMGSj5gTXdSBC4MvNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI2MTdFM0U4OTc1QzVFODM3RkRFOEU3RTNBNkY3RjJC MDdERjJGQTAeFw0yNjA1MTIyMTU1MDhaFw0yNjA1MTQwMTUzMDhaMDMxMTAvBgNV BAMTKDcyNzE0N0E5OUYyQTdDRjIzMUFDREM3OTc3QUUwRjhCN0U1MDFGQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPpFlj2FYAVlZseI7jlWZyrg5p dIhx+UZ+smIMwrTvYHfENARg8kuzJ/ocOnBMyGbfGRn6KxtBZJV6qf8i3tlNBVNx 99+0kTk7RKEX4JfPEscxk0qvbKGHk/AG/Nf9jadM9ZmihO3aTX+TbuHVCW+ZSKKr CKS1LTbQnLJioPt4apkS0Yauto9LRnCde5AzFlC/nsOL98gzASSxaRiHrqt5yCj6 LYeOhzIdE2+iEJRwoLXVwSzMn2/Kd3ElwpEpb1gJjs3D/NOu8CWF2q0s1tnUH4bv f8Pa2P5GUv/tNc+KXw1/xa32yZkzKuGSf0tuGnFmTxt+W3au/axyIstBmHEtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcnFHqZ8qfPIxrNx5d64Pi35QH8kwHwYDVR0j BBgwFoAUm2F+Pol1xeg3/ejn46b38rB98vowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDIwODNkNDQtNzgzNS00NDNkLTg1M2EtMGE3OWNmMDBlOTUwLzAvOUI2MTdFM0U4 OTc1QzVFODM3RkRFOEU3RTNBNkY3RjJCMDdERjJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QjYxN0UzRTg5NzVDNUU4MzdGREU4RTdFM0E2RjdGMkIwN0RG MkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDIwODNkNDQtNzgzNS00NDNkLTg1 M2EtMGE3OWNmMDBlOTUwLzAvOUI2MTdFM0U4OTc1QzVFODM3RkRFOEU3RTNBNkY3 RjJCMDdERjJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlYey+dWRfSMb5OnCyM9+W9B/PHw1rCAu3d tu86SlB3cvKz0LU9ul8yJxkf2qtxrC06VyfGD4s7TklypTB7oqdTtuf3od8Cp+Fm aUqrqViPqMtNPxC/jpRByZYGnkJVJhcajCj6pKfFzWOZ/sAEyCnqU6n964lUPFZ5 VNg9QgxxM+boBiJ49U4KT4t8kyrmk+MMLzDCDihJP1SYs1hy64stGfnc9dleMx3S 8LC7YrOANUaxkuGHJELyRrI+utgriLYDL8ifvMuZNrGT+SpgiGY0znKlpK0qpkbt JiabBTrjZx36o7SR1lUHrnedYDHZ55wZvlf4Fz4tG8aM775Ep6w= -----END CERTIFICATE-----Generated at Wed May 13 03:55:17 2026 by rpki-client