$ rpki-client -vvf rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft File: 9B2D9946FF043D1081C26FD38F0817310077BFC7.mft (raw, json) Hash identifier: 7JDXl3StBAV/Vz1UT5TS6teK+UBkt7zRgVG/N2BlnzM= Subject key identifier: 9A:16:D1:A8:8F:9D:46:63:52:0A:E0:19:AA:9C:6B:BE:A6:48:7D:1C Authority key identifier: 9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7 Certificate issuer: /CN=9B2D9946FF043D1081C26FD38F0817310077BFC7 Certificate serial: 0FEDB3CA0EBEB108A17C0B015CA5420CB3F83311 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:09:36 +0000 Manifest this update: Tue 12 May 2026 08:04:36 +0000 Manifest next update: Wed 13 May 2026 12:07:36 +0000 Files and hashes: 1: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (hash: nWvsjEg3FhCbHhiH6HxunuDCxB9lgrvkKOpoSSa7E9Q=) 2: 9B2D9946FF043D1081C26FD38F0817310077BFC7.crl (hash: K4tKDCTQz2WMI3SnOdqSjigWj+a3Yqd4DXxdIg8HkRU=) 3: 3136302e32322e39322e302f32342d3234203d3e20313532383335.roa (hash: oePR/73r7MSIzHQUks2lMsK7CVUF0CNaDFGyG/xqYVQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.crl rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ed:b3:ca:0e:be:b1:08:a1:7c:0b:01:5c:a5:42:0c:b3:f8:33:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2D9946FF043D1081C26FD38F0817310077BFC7 Validity Not Before: May 12 08:04:36 2026 GMT Not After : May 13 12:07:36 2026 GMT Subject: CN=9A16D1A88F9D4663520AE019AA9C6BBEA6487D1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:12:c7:4c:e0:78:ec:b7:da:30:8b:dd:9a:57: 19:ef:40:ef:f2:a7:ff:59:df:f9:a7:11:93:6e:ed: af:ff:25:ca:5e:38:4d:39:ae:7b:55:62:30:19:eb: 8d:8e:4f:af:a2:b2:52:c2:50:1b:87:c5:13:42:0b: 5a:5c:10:ce:ac:1b:ba:81:fa:4d:47:96:85:85:f6: 4c:b2:44:5c:d8:c3:d9:f8:b6:c3:64:01:3e:4b:9e: 60:9d:18:d7:ee:42:13:d5:11:09:5c:2f:b1:85:dd: 35:9b:03:94:dd:d8:c1:9e:26:da:38:a7:89:fd:ea: 41:2d:ed:06:99:d3:a2:a2:87:23:4f:71:08:c5:be: b6:bd:98:1b:71:a1:0d:41:31:31:72:b8:a5:e0:5e: fc:c9:6d:b5:0d:3c:e1:8c:bd:43:52:93:61:f1:19: c0:02:f7:c3:a3:bf:cd:97:59:39:45:95:61:40:72: 06:e1:ea:9c:c4:27:81:94:51:6c:aa:21:d4:94:4a: e3:fe:17:31:e3:6b:f4:4d:18:2b:1f:75:2b:de:d6: b4:f9:e0:52:32:d8:d9:62:2f:01:c3:75:cf:36:9a: 3e:c4:54:fa:32:82:6b:22:12:96:01:0e:4a:a5:79: a4:2b:97:74:b6:63:a7:86:10:20:b0:f6:ff:79:8c: e9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:16:D1:A8:8F:9D:46:63:52:0A:E0:19:AA:9C:6B:BE:A6:48:7D:1C X509v3 Authority Key Identifier: keyid:9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:0e:f8:29:d7:1b:e6:88:44:ea:19:6d:ec:56:71:3c:9d:d8: fc:ce:60:f2:42:48:3e:7c:97:11:99:5e:ef:93:30:2e:45:bc: a3:89:f7:11:62:0f:64:7e:85:8a:87:52:9a:5a:db:4d:34:68: c1:c9:53:97:0c:0d:10:3b:a5:73:1b:9a:f4:13:e8:de:db:56: ce:76:19:34:21:69:f2:05:ac:45:af:b4:21:70:2d:09:23:88: ad:54:45:53:5e:bd:c0:3d:4e:ec:1c:e8:9b:ff:1a:81:24:fb: 14:fd:d2:e6:7b:82:d4:4b:ee:8e:02:0e:f2:f7:c3:0b:2a:64: e2:28:ed:a6:01:84:bf:e3:2a:e5:bb:09:38:4c:6d:b5:35:02: 30:db:8c:a4:79:dc:fb:63:36:ed:f2:b7:2c:9c:a8:26:56:58: 8c:60:f3:0a:4e:a2:bb:fd:23:11:5a:12:a4:89:bf:25:be:9b: a1:ff:22:f2:43:e3:6c:e3:f4:49:51:85:cb:69:56:7f:71:aa: 35:16:3c:3d:57:d2:84:14:c7:61:0a:ac:56:60:ac:6e:fa:8d: 5e:c0:ea:e8:64:13:3f:5d:61:a9:90:50:d5:e5:c8:57:2e:d9: 56:ef:bd:28:a3:20:c1:2c:d2:9a:2a:c4:11:dc:98:24:30:c0: 53:74:1b:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+2zyg6+sQihfAsBXKVCDLP4MxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyRDk5NDZGRjA0M0QxMDgxQzI2RkQzOEYwODE3MzEw MDc3QkZDNzAeFw0yNjA1MTIwODA0MzZaFw0yNjA1MTMxMjA3MzZaMDMxMTAvBgNV BAMTKDlBMTZEMUE4OEY5RDQ2NjM1MjBBRTAxOUFBOUM2QkJFQTY0ODdEMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrEsdM4Hjst9owi92aVxnvQO/y p/9Z3/mnEZNu7a//JcpeOE05rntVYjAZ642OT6+islLCUBuHxRNCC1pcEM6sG7qB +k1HloWF9kyyRFzYw9n4tsNkAT5LnmCdGNfuQhPVEQlcL7GF3TWbA5Td2MGeJto4 p4n96kEt7QaZ06KihyNPcQjFvra9mBtxoQ1BMTFyuKXgXvzJbbUNPOGMvUNSk2Hx GcAC98Ojv82XWTlFlWFAcgbh6pzEJ4GUUWyqIdSUSuP+FzHja/RNGCsfdSve1rT5 4FIy2NliLwHDdc82mj7EVPoygmsiEpYBDkqleaQrl3S2Y6eGECCw9v95jOnbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmhbRqI+dRmNSCuAZqpxrvqZIfRwwHwYDVR0j BBgwFoAUmy2ZRv8EPRCBwm/TjwgXMQB3v8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJkMjliMzItM2EyOS00YTE0LWJjOWItYzc2YTAwN2NhMDMyLzAvOUIyRDk5NDZG RjA0M0QxMDgxQzI2RkQzOEYwODE3MzEwMDc3QkZDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85QjJEOTk0NkZGMDQzRDEwODFDMjZGRDM4RjA4MTczMTAwNzdC RkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJkMjliMzItM2EyOS00YTE0LWJj OWItYzc2YTAwN2NhMDMyLzAvOUIyRDk5NDZGRjA0M0QxMDgxQzI2RkQzOEYwODE3 MzEwMDc3QkZDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOAO+CnXG+aIROoZbexWcTyd2PzOYPJCSD58 lxGZXu+TMC5FvKOJ9xFiD2R+hYqHUppa2000aMHJU5cMDRA7pXMbmvQT6N7bVs52 GTQhafIFrEWvtCFwLQkjiK1URVNevcA9Tuwc6Jv/GoEk+xT90uZ7gtRL7o4CDvL3 wwsqZOIo7aYBhL/jKuW7CThMbbU1AjDbjKR53PtjNu3ytyycqCZWWIxg8wpOorv9 IxFaEqSJvyW+m6H/IvJD42zj9ElRhctpVn9xqjUWPD1X0oQUx2EKrFZgrG76jV7A 6uhkEz9dYamQUNXlyFcu2VbvvSijIMEs0poqxBHcmCQwwFN0Gw8= -----END CERTIFICATE-----Generated at Tue May 12 22:47:21 2026 by rpki-client