$ rpki-client -vvf rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft File: 9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft (raw, json) Hash identifier: tRHVyuwHtVjKQ1DZccY6MCCQq5XallDBKfrLJ578jPA= Subject key identifier: BB:1D:09:8D:6B:66:BA:E5:5D:00:D4:50:C1:48:ED:BE:D1:D3:1E:D0 Authority key identifier: 9D:4D:B6:9E:1B:34:49:3D:B5:07:7A:AB:18:31:EA:08:E6:94:62:D1 Certificate issuer: /CN=9D4DB69E1B34493DB5077AAB1831EA08E69462D1 Certificate serial: 594877689A1C396725CF4A1209871C788086728E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:39:05 +0000 Manifest this update: Tue 12 May 2026 18:34:05 +0000 Manifest next update: Wed 13 May 2026 19:29:05 +0000 Files and hashes: 1: 9D4DB69E1B34493DB5077AAB1831EA08E69462D1.crl (hash: lN/XgH1J5aasPIzkmyaGyJMpnspLSU0JsgH7J/OTdG4=) 2: 3231302e38372e3132342e302f32332d3234203d3e20313532303539.roa (hash: F1D8qXB1kPa12d9QgeEIlBgwwS/bqZZ5YMaSMkPMuvU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.crl rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:48:77:68:9a:1c:39:67:25:cf:4a:12:09:87:1c:78:80:86:72:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D4DB69E1B34493DB5077AAB1831EA08E69462D1 Validity Not Before: May 12 18:34:05 2026 GMT Not After : May 13 19:29:05 2026 GMT Subject: CN=BB1D098D6B66BAE55D00D450C148EDBED1D31ED0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:12:ce:3d:b5:18:ef:fd:11:1c:ff:ae:09:d2: 57:a3:c2:24:c2:e3:45:4f:32:44:44:89:ab:c7:59: ca:13:ed:23:c8:8d:4f:4a:8e:55:d8:5a:18:40:09: d7:76:11:d4:35:84:d0:29:9d:59:29:72:d2:fc:e2: fd:c9:01:1f:77:25:f3:ae:58:b8:2f:eb:24:0b:07: eb:97:68:ff:3f:76:8e:b4:6d:b7:15:43:4d:1d:c4: 4d:13:50:01:3b:70:ec:99:b8:83:5c:f6:87:79:9c: 60:7a:76:32:e6:24:9a:2f:ea:3e:ab:dc:be:e5:0d: 9e:5d:eb:51:eb:a5:41:74:8d:59:1e:dd:e6:b7:f7: 28:08:f1:c4:c2:25:80:95:ee:a1:b3:8e:9e:bf:85: 4c:90:79:36:d6:4d:a4:30:66:39:49:29:aa:06:e2: 5e:22:d5:94:b4:e5:36:b3:c2:be:76:46:1d:28:40: b4:f2:3a:4c:ce:dc:66:d5:a4:ad:ac:9c:e9:a8:99: 45:50:5d:89:c4:69:5b:ac:bb:41:4b:46:6c:d4:07: b2:95:13:fa:93:11:08:b8:52:3b:29:f1:dc:b0:14: 35:4e:11:a5:1a:60:72:04:22:2a:56:a2:e0:80:1a: 4f:d9:fc:dc:84:95:20:cf:ba:09:e1:3d:ae:99:a5: dc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1D:09:8D:6B:66:BA:E5:5D:00:D4:50:C1:48:ED:BE:D1:D3:1E:D0 X509v3 Authority Key Identifier: keyid:9D:4D:B6:9E:1B:34:49:3D:B5:07:7A:AB:18:31:EA:08:E6:94:62:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:15:7b:de:53:ac:a2:65:34:fc:47:9e:2f:3e:a4:99:ca:ac: 9d:f2:36:10:4e:cc:90:d4:31:98:4b:aa:19:e3:96:5d:59:a6: 74:75:25:6c:9f:a4:55:9e:a3:db:a2:0f:5b:a3:a3:32:8a:e9: 14:0a:3d:7e:81:43:42:cb:17:7d:f4:7d:2b:68:ce:2b:e5:b1: 06:9e:d8:9c:ad:3d:e4:35:9b:a5:64:53:f7:2d:2b:56:20:a1: 71:b5:71:67:cc:47:56:0f:21:93:59:c7:90:6d:99:02:31:c0: 67:c0:8f:4e:f8:c0:17:0d:3b:da:2a:0f:6c:07:d2:01:b9:8b: c9:b0:d3:50:9a:4a:c2:37:db:93:82:d4:a1:cd:a5:37:07:2c: 2d:7d:ef:7f:84:49:f2:85:ff:97:8c:67:df:89:56:36:7a:9b: 7c:5b:41:d8:a1:eb:30:e4:32:45:16:be:54:57:48:bc:39:a4: c3:1d:35:cd:0e:3d:96:44:3a:52:cb:ab:08:d6:fd:b1:92:69: 94:8a:a5:e0:8a:8c:d8:56:d2:dd:bd:19:cb:7e:0d:87:13:c0: 19:c8:d4:93:9c:df:28:3a:ce:a9:d2:4f:be:6e:9f:b0:f0:1b: 8c:fc:47:44:c2:af:fe:03:2d:82:85:a9:82:cb:fa:af:af:d2: f4:40:70:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWUh3aJocOWclz0oSCYcceICGco4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ0REI2OUUxQjM0NDkzREI1MDc3QUFCMTgzMUVBMDhF Njk0NjJEMTAeFw0yNjA1MTIxODM0MDVaFw0yNjA1MTMxOTI5MDVaMDMxMTAvBgNV BAMTKEJCMUQwOThENkI2NkJBRTU1RDAwRDQ1MEMxNDhFREJFRDFEMzFFRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMEs49tRjv/REc/64J0lejwiTC 40VPMkREiavHWcoT7SPIjU9KjlXYWhhACdd2EdQ1hNApnVkpctL84v3JAR93JfOu WLgv6yQLB+uXaP8/do60bbcVQ00dxE0TUAE7cOyZuINc9od5nGB6djLmJJov6j6r 3L7lDZ5d61HrpUF0jVke3ea39ygI8cTCJYCV7qGzjp6/hUyQeTbWTaQwZjlJKaoG 4l4i1ZS05Tazwr52Rh0oQLTyOkzO3GbVpK2snOmomUVQXYnEaVusu0FLRmzUB7KV E/qTEQi4Ujsp8dywFDVOEaUaYHIEIipWouCAGk/Z/NyElSDPugnhPa6ZpdyrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUux0JjWtmuuVdANRQwUjtvtHTHtAwHwYDVR0j BBgwFoAUnU22nhs0ST21B3qrGDHqCOaUYtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdiZThiN2MtMjMyZi00N2U4LTljZGQtODgxN2QzOWI3MGVhLzAvOUQ0REI2OUUx QjM0NDkzREI1MDc3QUFCMTgzMUVBMDhFNjk0NjJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDREQjY5RTFCMzQ0OTNEQjUwNzdBQUIxODMxRUEwOEU2OTQ2 MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdiZThiN2MtMjMyZi00N2U4LTlj ZGQtODgxN2QzOWI3MGVhLzAvOUQ0REI2OUUxQjM0NDkzREI1MDc3QUFCMTgzMUVB MDhFNjk0NjJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGwVe95TrKJlNPxHni8+pJnKrJ3yNhBOzJDU MZhLqhnjll1ZpnR1JWyfpFWeo9uiD1ujozKK6RQKPX6BQ0LLF330fStozivlsQae 2JytPeQ1m6VkU/ctK1YgoXG1cWfMR1YPIZNZx5BtmQIxwGfAj074wBcNO9oqD2wH 0gG5i8mw01CaSsI325OC1KHNpTcHLC1973+ESfKF/5eMZ9+JVjZ6m3xbQdih6zDk MkUWvlRXSLw5pMMdNc0OPZZEOlLLqwjW/bGSaZSKpeCKjNhW0t29Gct+DYcTwBnI 1JOc3yg6zqnST75un7DwG4z8R0TCr/4DLYKFqYLL+q+v0vRAcCs= -----END CERTIFICATE-----Generated at Wed May 13 01:45:03 2026 by rpki-client