$ rpki-client -vvf rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft File: 9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft (raw, json) Hash identifier: x3XksQJ49N06DFV9FCtE94FhcrKhdb2w47FSHM63TPA= Subject key identifier: 20:0E:38:89:05:FB:CF:8E:B0:F2:B9:47:0C:D2:DD:EF:89:14:73:A3 Authority key identifier: 9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D Certificate issuer: /CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D Certificate serial: 2C740D6331D5CE67C9DB0EDFCA1CBCABC0DE8C57 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:42:48 +0000 Manifest this update: Tue 12 May 2026 06:37:48 +0000 Manifest next update: Wed 13 May 2026 10:12:48 +0000 Files and hashes: 1: 9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl (hash: /sc/Z7v/qME9mcGaUnUr9jctWhyueEi6sG3Jcm4Srhs=) 2: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: H+4huOKuCZJDgCcIRHG5F336v2zTL76hXwSaEF33ZKg=) 3: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: JPXdi6WPGd4vFTIpgnAdhhx+7oMRZdsbWTFXkRgyRnk=) 4: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: 2hLM0mgbr0R6ifa3vNzIdaR5NaWhmXwQFTpATyRbVPI=) 5: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: BTFNI8KSCzEVQjrkzQTwBs7yIRfL1AV/7o2X6tYhvoE=) 6: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: Pbg7HMIUocxPePd7OOnLCPLrq3CDhKhitltGyutZn2w=) 7: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: npHUpI+a7i9Ge4o0vqbUWZs/Np3+nJB1Rs4IQBwLbvY=) 8: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: zmwA1y/xC2vL0cjTkZM+ObOlDKLV7xKiwSOMXdyAr5Q=) 9: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: JZInvaWprZojdT0ogHnGT0fyYlzFziTH86i1Q0tvWkY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:74:0d:63:31:d5:ce:67:c9:db:0e:df:ca:1c:bc:ab:c0:de:8c:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D Validity Not Before: May 12 06:37:48 2026 GMT Not After : May 13 10:12:48 2026 GMT Subject: CN=200E388905FBCF8EB0F2B9470CD2DDEF891473A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:15:f4:78:37:bc:11:27:f7:bc:c5:bd:cc:43: e2:2b:75:79:54:be:3f:be:c1:16:5d:b2:e5:09:d3: 80:cb:fa:59:42:40:84:c7:4d:45:3a:d7:38:28:a8: 3d:0c:07:6b:a2:c4:47:e5:a3:c2:0f:ef:d5:b1:22: d8:e8:39:e7:fc:d7:33:e0:ad:50:c7:b3:8d:03:12: 95:e7:3e:db:72:b6:b4:aa:f5:0a:6f:8c:08:97:4e: d3:fa:07:5b:1a:b4:da:f5:c9:db:2a:fd:3b:9b:88: ac:ba:e4:5b:d3:e1:0e:15:43:a9:44:ed:19:29:4c: ce:7c:cd:a0:59:9b:27:83:0d:e9:73:59:75:5f:25: 2a:f0:81:2a:c9:a5:76:6a:e2:e9:68:a7:8c:02:62: 97:8b:d7:55:6e:33:71:40:29:3f:e9:f6:ba:c4:65: 5c:f1:cf:0d:8a:37:12:b7:5c:9c:62:71:e2:77:d1: b5:4e:ff:4b:a3:be:70:f7:28:f4:56:a3:5d:35:c9: ac:68:b5:6e:0e:db:04:ef:40:fc:d5:b1:e4:e5:fa: 7d:35:8e:f6:52:02:43:f8:5c:42:95:e5:39:e9:5e: 18:04:d3:db:3e:4b:f8:9d:6d:67:d4:5d:95:cd:71: 37:72:70:c4:d1:2d:a1:56:b3:e6:05:e1:56:bf:e8: 02:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0E:38:89:05:FB:CF:8E:B0:F2:B9:47:0C:D2:DD:EF:89:14:73:A3 X509v3 Authority Key Identifier: keyid:9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:a0:ea:e1:59:c7:0a:35:df:1c:de:08:c5:a8:41:a1:75:5e: 5f:d6:b9:86:3b:1d:4b:b3:09:e9:63:f3:ad:1a:f4:08:4c:04: a8:c9:50:98:19:94:d2:10:e2:2f:09:fd:48:34:df:7f:9c:bb: 38:fc:37:0c:16:aa:e4:e4:d5:b8:9f:2a:cc:83:22:58:c1:c6: 87:99:a3:01:ef:61:16:82:05:1c:9c:6b:0f:f8:f2:db:72:8c: a5:9d:10:ff:b4:79:ad:4d:65:03:0d:dc:eb:a6:e7:0d:b0:68: d7:1e:34:7b:92:9d:ff:6a:df:fe:e8:95:82:39:29:14:e8:61: 16:80:21:55:a9:49:bb:20:2a:db:a9:22:69:a3:18:15:b0:57: 26:f1:70:4d:22:15:a0:2f:3e:7f:d3:e5:92:0b:b1:89:c9:23: 8b:68:c0:1e:f5:7b:51:0e:51:83:9d:57:93:68:36:a1:bf:84: a0:3a:97:0e:9f:a4:a9:e7:19:77:3d:3d:a1:69:07:00:45:01: 42:82:8b:e0:e6:c1:43:e5:f3:e9:09:81:04:66:e1:16:a6:89: fc:95:a0:f5:18:6d:d4:75:27:4f:5c:09:de:8f:a9:e2:ab:61: 97:ef:22:cf:23:95:fe:bc:46:04:85:54:56:d8:fa:72:44:db: e8:74:b2:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULHQNYzHVzmfJ2w7fyhy8q8DejFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUREN0ZEMUMwQTc0RkUzMTdFREE0MUU0RDFDREM4NTdB RkMxNzc5RDAeFw0yNjA1MTIwNjM3NDhaFw0yNjA1MTMxMDEyNDhaMDMxMTAvBgNV BAMTKDIwMEUzODg5MDVGQkNGOEVCMEYyQjk0NzBDRDJEREVGODkxNDczQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYFfR4N7wRJ/e8xb3MQ+IrdXlU vj++wRZdsuUJ04DL+llCQITHTUU61zgoqD0MB2uixEflo8IP79WxItjoOef81zPg rVDHs40DEpXnPttytrSq9QpvjAiXTtP6B1satNr1ydsq/TubiKy65FvT4Q4VQ6lE 7RkpTM58zaBZmyeDDelzWXVfJSrwgSrJpXZq4ulop4wCYpeL11VuM3FAKT/p9rrE ZVzxzw2KNxK3XJxiceJ30bVO/0ujvnD3KPRWo101yaxotW4O2wTvQPzVseTl+n01 jvZSAkP4XEKV5TnpXhgE09s+S/idbWfUXZXNcTdycMTRLaFWs+YF4Va/6AKzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIA44iQX7z46w8rlHDNLd74kUc6MwHwYDVR0j BBgwFoAUndf9HAp0/jF+2kHk0c3IV6/Bd50wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjkwYzkwMDktYWQ1My00ZmE2LWExODMtMzRiMzQ1N2JlYTAzLzAvOUREN0ZEMUMw QTc0RkUzMTdFREE0MUU0RDFDREM4NTdBRkMxNzc5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REQ3RkQxQzBBNzRGRTMxN0VEQTQxRTREMUNEQzg1N0FGQzE3 NzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvOUREN0ZEMUMwQTc0RkUzMTdFREE0MUU0RDFDREM4 NTdBRkMxNzc5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKg6uFZxwo13xzeCMWoQaF1Xl/WuYY7HUuz Celj860a9AhMBKjJUJgZlNIQ4i8J/Ug033+cuzj8NwwWquTk1bifKsyDIljBxoeZ owHvYRaCBRycaw/48ttyjKWdEP+0ea1NZQMN3Oum5w2waNceNHuSnf9q3/7olYI5 KRToYRaAIVWpSbsgKtupImmjGBWwVybxcE0iFaAvPn/T5ZILsYnJI4towB71e1EO UYOdV5NoNqG/hKA6lw6fpKnnGXc9PaFpBwBFAUKCi+DmwUPl8+kJgQRm4RamifyV oPUYbdR1J09cCd6PqeKrYZfvIs8jlf68RgSFVFbY+nJE2+h0sr0= -----END CERTIFICATE-----Generated at Wed May 13 02:12:34 2026 by rpki-client