$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft File: 9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft (raw, json) Hash identifier: 9uCb0CMuXfLg6NHnB1Ktc0MRdTMA6m6L2GEgCcxZhY0= Subject key identifier: 28:4E:CA:BF:D3:02:4B:10:80:F5:B3:FA:47:0F:60:5F:83:60:AE:F4 Authority key identifier: 9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF Certificate issuer: /CN=9B995ECA9CF77E66AB04370A6C3562ADCD7413EF Certificate serial: 5CD4E8E8BC2924A95DDF36550F9191612907806F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:11:58 +0000 Manifest this update: Tue 12 May 2026 17:06:58 +0000 Manifest next update: Wed 13 May 2026 18:42:58 +0000 Files and hashes: 1: 3130332e3133302e38322e302f32332d3233203d3e20313530393636.roa (hash: oYvVYAWqY5/XajF618G7pKQtRtEqOMlHPhGTTZeide8=) 2: 3130332e3133302e38332e302f32342d3234203d3e20313530393636.roa (hash: +yASWV2qPXNVH0dMs+ql82F9yTnpzpBrn8UO30QUNqI=) 3: 3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa (hash: 0GXiVqHET4FIeA3plxHWjQU7xk7vNPKZIk6ziqpvvGY=) 4: 9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl (hash: VEXcnva/Q2F1J6fVxfL4Tn/4cfRumJBFja9J3E/KKLg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d4:e8:e8:bc:29:24:a9:5d:df:36:55:0f:91:91:61:29:07:80:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B995ECA9CF77E66AB04370A6C3562ADCD7413EF Validity Not Before: May 12 17:06:58 2026 GMT Not After : May 13 18:42:58 2026 GMT Subject: CN=284ECABFD3024B1080F5B3FA470F605F8360AEF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:68:e2:f2:2a:20:b5:3a:48:ce:b7:c0:a4:3b: dc:3b:fc:51:09:6d:ea:70:98:59:85:c7:8c:a1:a5: 75:f7:85:ad:0b:1c:a2:22:c4:9b:0c:80:b0:e6:25: 8a:bf:38:88:df:07:26:e2:20:48:92:49:96:2e:7a: 8c:91:47:aa:47:35:91:e7:e1:93:94:75:3b:4b:eb: df:21:dd:f5:b6:fc:c0:17:1e:87:18:57:26:9e:a7: 0f:4a:03:52:c1:05:6d:91:52:b1:71:68:7d:4e:65: 5b:96:fa:9b:af:4f:4e:1d:7a:8e:c4:c9:c8:45:18: 98:28:4d:42:20:70:35:c4:51:13:82:0e:5b:4b:fb: d0:b0:68:c0:ac:f0:44:e1:17:fa:64:6d:0c:5e:f4: 9d:81:57:3b:9c:0d:18:8b:1a:9e:02:5c:db:4d:c7: f7:c3:09:e1:27:06:6b:16:72:c2:5c:b4:b6:a0:da: 4b:20:f7:dd:e7:a7:4e:07:1d:b3:3d:64:77:df:b6: f8:dc:81:1b:4d:a2:da:4a:82:dc:ee:8e:98:6a:d4: ae:7b:b0:7f:dc:83:38:45:9f:5a:a1:1e:ca:07:8e: dc:d5:9f:a0:12:33:4c:41:aa:1f:f0:cd:9b:53:f4: ae:16:38:4b:00:f7:d5:fc:1b:0e:b0:85:7e:69:18: 87:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4E:CA:BF:D3:02:4B:10:80:F5:B3:FA:47:0F:60:5F:83:60:AE:F4 X509v3 Authority Key Identifier: keyid:9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:bb:da:9c:e9:f3:43:44:ea:0f:b3:83:79:e3:4a:4f:9a:c9: 59:e3:69:f6:15:4b:36:28:f7:2d:ce:56:3c:ef:30:22:6f:60: 78:e4:9d:bc:e7:1f:f2:6c:1a:3f:fd:cc:87:eb:93:5d:ec:ee: 14:4b:c8:82:ea:a9:de:c1:38:a1:aa:e3:9a:d3:e9:35:0a:88: dc:5b:b7:2a:74:d6:7c:d8:c0:a8:bc:0f:bb:57:d1:69:d0:4e: 84:6f:3a:38:04:65:0c:40:ee:65:be:ea:3d:45:c0:08:38:6c: 04:bf:89:39:3c:53:c8:bb:e3:cc:74:a7:80:3e:8a:0d:e8:cb: 04:64:28:5a:9e:b3:55:23:71:96:9c:be:55:d4:d8:25:ce:67: 90:f6:57:61:f2:79:81:18:51:2a:08:99:ec:1f:14:5e:d1:aa: 90:3d:03:1d:8d:dd:2d:51:ab:b1:ed:f3:fc:40:9d:03:67:61: 32:d0:67:19:4e:0f:eb:84:3e:69:fe:f1:d8:95:9d:68:60:08: d6:8e:cc:96:b5:d7:e1:62:7d:22:98:13:37:e1:f9:65:e5:0a: 42:16:31:f3:22:4a:4b:87:49:a2:2f:8c:3a:c8:a0:6f:31:38: 34:8b:8b:a8:9c:4b:aa:69:50:43:5a:dc:03:fe:b2:8a:30:e9: eb:1d:bf:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXNTo6LwpJKld3zZVD5GRYSkHgG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI5OTVFQ0E5Q0Y3N0U2NkFCMDQzNzBBNkMzNTYyQURD RDc0MTNFRjAeFw0yNjA1MTIxNzA2NThaFw0yNjA1MTMxODQyNThaMDMxMTAvBgNV BAMTKDI4NEVDQUJGRDMwMjRCMTA4MEY1QjNGQTQ3MEY2MDVGODM2MEFFRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOaOLyKiC1OkjOt8CkO9w7/FEJ bepwmFmFx4yhpXX3ha0LHKIixJsMgLDmJYq/OIjfBybiIEiSSZYueoyRR6pHNZHn 4ZOUdTtL698h3fW2/MAXHocYVyaepw9KA1LBBW2RUrFxaH1OZVuW+puvT04deo7E ychFGJgoTUIgcDXEUROCDltL+9CwaMCs8EThF/pkbQxe9J2BVzucDRiLGp4CXNtN x/fDCeEnBmsWcsJctLag2ksg993np04HHbM9ZHfftvjcgRtNotpKgtzujphq1K57 sH/cgzhFn1qhHsoHjtzVn6ASM0xBqh/wzZtT9K4WOEsA99X8Gw6whX5pGIdhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKE7Kv9MCSxCA9bP6Rw9gX4NgrvQwHwYDVR0j BBgwFoAUm5leypz3fmarBDcKbDVirc10E+8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE4NzA2NGItNWYyNy00MjcwLTkwZTQtOTlmNDNhZTg0ZGI3LzAvOUI5OTVFQ0E5 Q0Y3N0U2NkFCMDQzNzBBNkMzNTYyQURDRDc0MTNFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85Qjk5NUVDQTlDRjc3RTY2QUIwNDM3MEE2QzM1NjJBRENENzQx M0VGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE4NzA2NGItNWYyNy00MjcwLTkw ZTQtOTlmNDNhZTg0ZGI3LzAvOUI5OTVFQ0E5Q0Y3N0U2NkFCMDQzNzBBNkMzNTYy QURDRDc0MTNFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABu72pzp80NE6g+zg3njSk+ayVnjafYVSzYo 9y3OVjzvMCJvYHjknbznH/JsGj/9zIfrk13s7hRLyILqqd7BOKGq45rT6TUKiNxb typ01nzYwKi8D7tX0WnQToRvOjgEZQxA7mW+6j1FwAg4bAS/iTk8U8i748x0p4A+ ig3oywRkKFqes1UjcZacvlXU2CXOZ5D2V2HyeYEYUSoImewfFF7RqpA9Ax2N3S1R q7Ht8/xAnQNnYTLQZxlOD+uEPmn+8diVnWhgCNaOzJa11+FifSKYEzfh+WXlCkIW MfMiSkuHSaIvjDrIoG8xODSLi6icS6ppUENa3AP+soow6esdv8I= -----END CERTIFICATE-----Generated at Wed May 13 03:48:31 2026 by rpki-client