$ rpki-client -vvf rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft File: 09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft (raw, json) Hash identifier: zC9Jzb+Z80cblQpWJqMvTX5NqV7unHY9nfdZxoleGCw= Subject key identifier: 37:84:42:66:FB:27:1F:53:B9:CF:C1:48:C1:F7:FF:C6:BB:40:15:85 Authority key identifier: 09:C4:BA:8A:F7:41:A5:1F:DD:8C:55:09:17:C9:6D:39:5C:BE:0F:FD Certificate issuer: /CN=09C4BA8AF741A51FDD8C550917C96D395CBE0FFD Certificate serial: 3AC32C049A0B92F0C8446548CA323D03DA529458 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:17:04 +0000 Manifest this update: Tue 12 May 2026 20:12:04 +0000 Manifest next update: Wed 13 May 2026 23:15:04 +0000 Files and hashes: 1: 09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.crl (hash: VZbSO+e+0r3wyYS9hukFnvTVHIyaKpbwn6pCAQySI3k=) 2: 3131332e32302e3133362e302f32312d3234203d3e203435373136.roa (hash: 9Dp0sbY0tRdXCsPfX1Bi/rh765yhn92aMlIVBuucvDU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.crl rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c3:2c:04:9a:0b:92:f0:c8:44:65:48:ca:32:3d:03:da:52:94:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09C4BA8AF741A51FDD8C550917C96D395CBE0FFD Validity Not Before: May 12 20:12:04 2026 GMT Not After : May 13 23:15:04 2026 GMT Subject: CN=37844266FB271F53B9CFC148C1F7FFC6BB401585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:03:bf:4d:95:a3:9b:32:78:99:32:9e:55:bb: ae:28:58:66:f5:67:42:31:3f:f2:75:99:e6:fb:83: 02:7e:2c:79:46:4a:fe:a3:b5:6e:2b:b8:e9:8a:4c: 5c:cf:73:28:6d:8d:36:af:48:98:46:2c:d3:6f:5c: 69:8c:75:fb:ae:18:da:08:74:d8:8f:f1:53:90:19: 42:e3:b1:4c:ec:bd:88:69:56:0b:8d:89:ff:17:76: 1f:46:b2:ad:33:57:49:fa:e2:5e:d7:a2:1e:fe:f5: a6:c9:37:41:43:50:74:d1:a7:53:5a:66:a4:5e:43: 89:ec:fb:25:d7:58:f1:e7:97:b8:4e:2e:5e:9a:cc: ff:df:83:02:57:ad:97:4d:22:b8:cd:9e:8e:a8:cb: 32:7d:7e:75:79:79:2e:36:41:59:aa:8c:61:d6:21: 2f:f3:a9:4e:5e:32:16:23:6b:e5:26:55:cf:c7:c2: a7:67:6e:c2:33:ee:8c:bd:61:71:50:51:5b:5d:94: ef:1e:d9:aa:52:0a:91:3c:37:3f:8e:18:30:a3:d4: 23:64:35:04:20:ac:ca:6e:ae:48:27:11:e7:41:67: de:dc:30:9f:09:58:c6:2e:36:3a:51:cb:4d:71:11: f8:7b:8c:ab:fc:b2:fd:f2:0b:ae:85:0d:a2:d3:48: cc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:84:42:66:FB:27:1F:53:B9:CF:C1:48:C1:F7:FF:C6:BB:40:15:85 X509v3 Authority Key Identifier: keyid:09:C4:BA:8A:F7:41:A5:1F:DD:8C:55:09:17:C9:6D:39:5C:BE:0F:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:73:01:b4:4b:b5:e5:23:d9:aa:e8:76:09:d9:8e:b9:a7:65: 2e:53:cd:6e:78:f5:2c:6c:ab:69:85:d0:d1:70:e3:a8:1d:1d: 7a:50:60:f2:fa:46:e9:dc:6d:60:99:ac:18:5b:0e:6d:a7:18: 39:c5:43:34:bd:21:a6:99:58:a6:9f:55:83:ec:a4:a6:21:04: d2:c6:95:68:27:05:02:c5:81:85:91:11:de:47:34:f3:2a:b3: ef:71:51:8f:9c:cd:ca:63:1a:5e:a1:37:f0:f3:e5:b9:55:38: 36:b4:db:f7:b1:03:55:e4:16:3a:48:c1:d0:65:46:e2:6b:7f: 3f:3a:42:f9:59:07:9e:12:75:06:b7:e9:32:fa:74:ed:21:72: 8e:a6:e9:a4:e5:fa:37:56:ee:c1:38:97:c4:26:5e:ad:26:31: 13:69:21:2e:df:aa:98:97:2d:e2:da:e2:54:bb:5d:20:db:4c: 2b:c0:27:85:fb:d8:7a:ce:95:32:35:2d:fc:4c:20:60:b6:20: 9c:64:c9:78:a2:45:1e:b9:d2:ae:14:56:1c:84:dd:e0:c0:41: 6e:c5:24:fd:ee:74:91:04:4a:4a:36:05:3d:54:40:28:b7:d5: 86:4a:7b:51:43:43:b8:44:b4:af:2f:7d:f1:2c:96:a5:17:e8: 6c:af:78:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOsMsBJoLkvDIRGVIyjI9A9pSlFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlDNEJBOEFGNzQxQTUxRkREOEM1NTA5MTdDOTZEMzk1 Q0JFMEZGRDAeFw0yNjA1MTIyMDEyMDRaFw0yNjA1MTMyMzE1MDRaMDMxMTAvBgNV BAMTKDM3ODQ0MjY2RkIyNzFGNTNCOUNGQzE0OEMxRjdGRkM2QkI0MDE1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuA79NlaObMniZMp5Vu64oWGb1 Z0IxP/J1meb7gwJ+LHlGSv6jtW4ruOmKTFzPcyhtjTavSJhGLNNvXGmMdfuuGNoI dNiP8VOQGULjsUzsvYhpVguNif8Xdh9Gsq0zV0n64l7Xoh7+9abJN0FDUHTRp1Na ZqReQ4ns+yXXWPHnl7hOLl6azP/fgwJXrZdNIrjNno6oyzJ9fnV5eS42QVmqjGHW IS/zqU5eMhYja+UmVc/HwqdnbsIz7oy9YXFQUVtdlO8e2apSCpE8Nz+OGDCj1CNk NQQgrMpurkgnEedBZ97cMJ8JWMYuNjpRy01xEfh7jKv8sv3yC66FDaLTSMwLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN4RCZvsnH1O5z8FIwff/xrtAFYUwHwYDVR0j BBgwFoAUCcS6ivdBpR/djFUJF8ltOVy+D/0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhZjAwZWMtZDA4My00YTlmLTgyMWYtN2RhMThmODE1NDE3LzAvMDlDNEJBOEFG NzQxQTUxRkREOEM1NTA5MTdDOTZEMzk1Q0JFMEZGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOUM0QkE4QUY3NDFBNTFGREQ4QzU1MDkxN0M5NkQzOTVDQkUw RkZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhZjAwZWMtZDA4My00YTlmLTgy MWYtN2RhMThmODE1NDE3LzAvMDlDNEJBOEFGNzQxQTUxRkREOEM1NTA5MTdDOTZE Mzk1Q0JFMEZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBzAbRLteUj2arodgnZjrmnZS5TzW549Sxs q2mF0NFw46gdHXpQYPL6RuncbWCZrBhbDm2nGDnFQzS9IaaZWKafVYPspKYhBNLG lWgnBQLFgYWREd5HNPMqs+9xUY+czcpjGl6hN/Dz5blVODa02/exA1XkFjpIwdBl RuJrfz86QvlZB54SdQa36TL6dO0hco6m6aTl+jdW7sE4l8QmXq0mMRNpIS7fqpiX LeLa4lS7XSDbTCvAJ4X72HrOlTI1LfxMIGC2IJxkyXiiRR650q4UVhyE3eDAQW7F JP3udJEESko2BT1UQCi31YZKe1FDQ7hEtK8vffEslqUX6GyveJg= -----END CERTIFICATE-----Generated at Wed May 13 01:44:57 2026 by rpki-client