$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft File: 9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft (raw, json) Hash identifier: /MaxyeOkI+kWYXN34iqgLAn9bZR0xhSSMZkS2EogWxw= Subject key identifier: 01:5D:C2:77:D0:F5:C8:3E:64:6F:46:2E:64:E7:C2:EF:E5:47:76:77 Authority key identifier: 9B:AA:D5:D1:F3:6F:59:43:A3:5A:6E:E8:00:1A:5E:5F:C2:4D:9B:1E Certificate issuer: /CN=9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E Certificate serial: 3EB0C52DA9C8DB931DFEB153DEE1EF896C3693A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:17:03 +0000 Manifest this update: Tue 12 May 2026 06:12:03 +0000 Manifest next update: Wed 13 May 2026 09:56:03 +0000 Files and hashes: 1: 9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl (hash: B5wt3zcMoM/aEs2uKKxhBm7ZjC/hPyHkBJp8PVu/49I=) 2: 33362e35302e39362e302f32342d3234203d3e20313532333536.roa (hash: WdJUD9VymB093sIE0zYyqec++4X5oG27MXfWK367p8g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b0:c5:2d:a9:c8:db:93:1d:fe:b1:53:de:e1:ef:89:6c:36:93:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E Validity Not Before: May 12 06:12:03 2026 GMT Not After : May 13 09:56:03 2026 GMT Subject: CN=015DC277D0F5C83E646F462E64E7C2EFE5477677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:80:c0:d2:72:30:d1:25:78:58:42:0d:a6:a5: 54:5a:a8:d6:f5:22:ef:27:95:50:ae:a1:f3:af:c2: dc:60:d6:f7:6d:13:49:12:ff:30:6d:21:1f:02:01: 73:1f:b8:84:62:4f:26:08:d1:43:e3:01:29:0c:62: cb:e3:0e:72:db:a6:f3:d4:9b:66:e8:73:58:6c:02: e1:df:f3:95:39:64:53:0d:4c:4c:09:d9:e7:70:56: f3:19:51:b8:20:bb:31:91:e7:2b:00:be:8a:a1:2a: 37:45:3e:c5:04:e3:de:c3:83:01:5b:88:a2:62:98: fc:b1:92:c2:ff:3c:50:d3:7a:9c:be:8a:10:35:d0: 6a:bc:75:0e:ec:0b:fb:aa:6d:67:9e:b3:66:ab:51: 05:53:e1:c6:96:38:f9:04:aa:4f:6d:82:4a:63:78: e3:4c:bb:bf:cb:a5:d4:7c:94:34:bf:70:d7:5e:b8: e7:dd:79:df:4d:bf:c6:53:d1:df:33:c6:ec:0e:ae: 21:2c:4c:1b:1e:18:41:31:55:00:ef:a6:69:b9:81: 0e:ac:b7:2b:b4:cc:af:56:dd:bb:7a:96:13:fe:22: e9:ed:a4:b8:ec:ba:73:83:ee:6c:3d:58:6e:29:5c: b4:37:ed:a6:d0:28:ed:5b:18:25:93:2d:d8:28:eb: 84:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5D:C2:77:D0:F5:C8:3E:64:6F:46:2E:64:E7:C2:EF:E5:47:76:77 X509v3 Authority Key Identifier: keyid:9B:AA:D5:D1:F3:6F:59:43:A3:5A:6E:E8:00:1A:5E:5F:C2:4D:9B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:cd:08:1b:fd:54:0a:55:b0:e4:26:93:94:95:e7:3e:d5:7b: 1d:d8:da:48:b8:ee:b6:57:e4:55:65:83:a7:6c:98:ce:28:64: 72:ea:e2:95:4c:b7:5c:88:71:32:71:1b:45:a2:49:91:e9:03: 83:54:7e:b9:6f:c9:70:5c:c0:5d:49:3d:94:67:0d:e2:0d:b8: 3f:cd:f0:2b:06:5c:16:a1:c3:42:f4:ac:a8:96:62:d9:27:b8: 8a:82:cf:55:5e:92:4d:89:36:62:d7:7a:dc:1d:98:4c:5d:ba: c2:44:f5:ae:ce:29:f7:f1:75:cf:bf:be:a7:62:ab:a3:79:a0: bb:45:87:a3:96:3b:91:68:22:c4:fc:d9:b2:69:81:8c:53:3d: c0:de:2e:80:10:84:9e:fa:5a:25:79:45:78:d3:36:74:e4:bd: 8e:5e:c6:d2:d2:79:b2:5d:7b:56:4b:5e:45:57:c5:00:79:a8: 17:51:7b:f6:68:ba:2d:11:ad:0e:a4:b0:13:6c:15:2b:fe:92: 0a:49:a1:fd:4a:54:2f:93:d4:f1:37:39:40:d0:ca:ab:b5:ec: 3b:e5:7d:b3:68:e2:f3:2e:a4:38:fb:36:4f:71:81:d7:58:ab: 90:8a:eb:98:1a:f7:59:ad:e3:4a:01:32:26:03:0a:61:5b:48: e5:b9:3b:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPrDFLanI25Md/rFT3uHviWw2k6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJBQUQ1RDFGMzZGNTk0M0EzNUE2RUU4MDAxQTVFNUZD MjREOUIxRTAeFw0yNjA1MTIwNjEyMDNaFw0yNjA1MTMwOTU2MDNaMDMxMTAvBgNV BAMTKDAxNURDMjc3RDBGNUM4M0U2NDZGNDYyRTY0RTdDMkVGRTU0Nzc2NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3gMDScjDRJXhYQg2mpVRaqNb1 Iu8nlVCuofOvwtxg1vdtE0kS/zBtIR8CAXMfuIRiTyYI0UPjASkMYsvjDnLbpvPU m2boc1hsAuHf85U5ZFMNTEwJ2edwVvMZUbgguzGR5ysAvoqhKjdFPsUE497DgwFb iKJimPyxksL/PFDTepy+ihA10Gq8dQ7sC/uqbWees2arUQVT4caWOPkEqk9tgkpj eONMu7/LpdR8lDS/cNdeuOfded9Nv8ZT0d8zxuwOriEsTBseGEExVQDvpmm5gQ6s tyu0zK9W3bt6lhP+IuntpLjsunOD7mw9WG4pXLQ37abQKO1bGCWTLdgo64TNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAV3Cd9D1yD5kb0YuZOfC7+VHdncwHwYDVR0j BBgwFoAUm6rV0fNvWUOjWm7oABpeX8JNmx4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ5MGQ4NmItMGIwZC00NTZmLTg0MWEtYmZkYjlkODA3ZmI3LzAvOUJBQUQ1RDFG MzZGNTk0M0EzNUE2RUU4MDAxQTVFNUZDMjREOUIxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkFBRDVEMUYzNkY1OTQzQTM1QTZFRTgwMDFBNUU1RkMyNEQ5 QjFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ5MGQ4NmItMGIwZC00NTZmLTg0 MWEtYmZkYjlkODA3ZmI3LzAvOUJBQUQ1RDFGMzZGNTk0M0EzNUE2RUU4MDAxQTVF NUZDMjREOUIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTNCBv9VApVsOQmk5SV5z7Vex3Y2ki47rZX 5FVlg6dsmM4oZHLq4pVMt1yIcTJxG0WiSZHpA4NUfrlvyXBcwF1JPZRnDeINuD/N 8CsGXBahw0L0rKiWYtknuIqCz1Vekk2JNmLXetwdmExdusJE9a7OKffxdc+/vqdi q6N5oLtFh6OWO5FoIsT82bJpgYxTPcDeLoAQhJ76WiV5RXjTNnTkvY5extLSebJd e1ZLXkVXxQB5qBdRe/Zoui0RrQ6ksBNsFSv+kgpJof1KVC+T1PE3OUDQyqu17Dvl fbNo4vMupDj7Nk9xgddYq5CK65ga91mt40oBMiYDCmFbSOW5O4Y= -----END CERTIFICATE-----Generated at Wed May 13 01:14:33 2026 by rpki-client