$ rpki-client -vvf rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft File: B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft (raw, json) Hash identifier: CcVhgggCNSLvg1aKWoXrccAkkptpkYTpR+d8cudANT0= Subject key identifier: 3D:E6:A6:97:DD:71:69:95:CB:7D:EB:56:AA:FE:BE:BF:8F:26:E3:51 Authority key identifier: B9:BC:CC:BE:89:27:A7:BA:B7:85:3C:7A:BB:0A:F3:95:CD:04:78:65 Certificate issuer: /CN=B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865 Certificate serial: 7CC82D0EBDB437B0FA6FACAFC60E4E08F50E3896 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:01:15 +0000 Manifest this update: Tue 12 May 2026 09:56:15 +0000 Manifest next update: Wed 13 May 2026 10:20:15 +0000 Files and hashes: 1: 3131362e35382e3139342e302f32342d3234203d3e203338313534.roa (hash: 4hL7+e18qobBBQHbTnmFkA+ZM9pKWiAv/aAZLelInyQ=) 2: 3131362e35382e3139322e302f32312d3234203d3e203338313534.roa (hash: +LPJ5wMBOnCiRiVVBw9/f075KEvSA/QkdJARXOeWxBI=) 3: B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl (hash: VMOOrw4ixsGL4uXdS0SIZa4VWL5WGO+bn7mlEVqnLbY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c8:2d:0e:bd:b4:37:b0:fa:6f:ac:af:c6:0e:4e:08:f5:0e:38:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865 Validity Not Before: May 12 09:56:15 2026 GMT Not After : May 13 10:20:15 2026 GMT Subject: CN=3DE6A697DD716995CB7DEB56AAFEBEBF8F26E351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8e:d7:0a:04:91:ca:fd:96:25:85:46:fb:4e: 52:67:bd:48:18:e8:f2:de:3c:c7:7d:5d:9f:c7:c0: 1c:7e:ed:2d:bf:f4:11:e2:7a:c3:a6:da:07:ab:de: 70:86:09:8b:54:59:59:12:f0:57:52:fa:f5:da:40: 3f:6f:5d:dc:24:7e:92:66:df:08:35:e1:47:61:71: 56:7f:3c:26:b0:ec:20:2c:3d:87:f5:09:9d:d6:35: 20:90:10:57:dc:c3:6d:2a:57:5b:e3:d2:68:3b:fa: 59:4e:7d:e9:7f:c2:21:c1:9f:97:3f:31:74:9b:eb: d4:59:f3:96:c3:52:ad:80:fe:c4:f1:e4:be:58:84: bb:8c:08:dd:e3:5a:13:37:f7:b6:3d:a0:b8:59:8d: 4d:ba:49:6b:e5:99:8d:78:97:1c:53:1f:a8:b8:31: a9:ff:ee:fe:cd:b9:f4:a2:d4:ea:45:4e:b2:96:c7: 33:9f:d9:c9:e1:6e:94:76:88:00:f3:54:5b:e9:78: 30:8e:cd:31:19:99:3c:79:95:ed:e3:8b:75:12:fe: d6:bd:e0:ff:9b:a7:de:2b:4f:ab:fa:f8:ac:44:e8: af:3b:ba:9a:d6:17:9b:e2:a2:49:98:54:32:85:7c: 7a:ee:d5:5f:62:9a:2a:92:44:f3:7a:a8:59:21:3f: 44:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E6:A6:97:DD:71:69:95:CB:7D:EB:56:AA:FE:BE:BF:8F:26:E3:51 X509v3 Authority Key Identifier: keyid:B9:BC:CC:BE:89:27:A7:BA:B7:85:3C:7A:BB:0A:F3:95:CD:04:78:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ed:c2:25:a8:0b:95:83:19:eb:dc:92:e0:05:91:0a:66:1b: 5c:1a:e9:5c:4e:ce:0f:cb:66:57:11:55:bd:a2:80:49:3b:ec: 76:bf:0d:fd:61:9b:13:70:74:2e:b7:8d:1f:80:c9:60:3e:0a: 60:98:de:04:79:77:f0:e5:81:e0:9d:19:d2:79:6b:58:85:19: b0:3b:99:d2:97:df:37:8e:bd:81:4d:f6:a5:15:c0:49:29:87: af:66:21:12:58:03:2f:a7:2f:3a:4f:f3:ed:f9:41:25:77:43: 44:9a:2a:63:8a:49:fc:3f:30:48:89:bd:62:77:da:58:f4:3b: 98:fa:08:cc:05:d9:c6:3f:c4:8d:ce:37:93:85:f6:07:16:8b: d8:40:fc:db:84:d5:85:33:9a:a3:d8:1e:c1:4b:2f:6a:ff:19: 59:25:a8:83:c4:68:95:17:04:e6:1e:48:55:19:b3:16:58:43: 4d:82:03:73:4a:f5:00:82:d6:ed:84:8d:e5:a3:5b:a2:4f:fa: cb:5f:b4:60:c5:15:23:6c:b4:b6:9a:09:4d:b4:76:9a:17:e5: e4:dc:25:f2:37:ba:80:98:43:87:a2:3b:3a:ff:50:c6:8e:94: 8c:a4:f8:08:e5:40:f7:86:da:8a:9b:71:af:26:ce:6f:67:7c: b5:b1:c0:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfMgtDr20N7D6b6yvxg5OCPUOOJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCQ0NDQkU4OTI3QTdCQUI3ODUzQzdBQkIwQUYzOTVD RDA0Nzg2NTAeFw0yNjA1MTIwOTU2MTVaFw0yNjA1MTMxMDIwMTVaMDMxMTAvBgNV BAMTKDNERTZBNjk3REQ3MTY5OTVDQjdERUI1NkFBRkVCRUJGOEYyNkUzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLjtcKBJHK/ZYlhUb7TlJnvUgY 6PLePMd9XZ/HwBx+7S2/9BHiesOm2ger3nCGCYtUWVkS8FdS+vXaQD9vXdwkfpJm 3wg14UdhcVZ/PCaw7CAsPYf1CZ3WNSCQEFfcw20qV1vj0mg7+llOfel/wiHBn5c/ MXSb69RZ85bDUq2A/sTx5L5YhLuMCN3jWhM397Y9oLhZjU26SWvlmY14lxxTH6i4 Man/7v7NufSi1OpFTrKWxzOf2cnhbpR2iADzVFvpeDCOzTEZmTx5le3ji3US/ta9 4P+bp94rT6v6+KxE6K87uprWF5viokmYVDKFfHru1V9imiqSRPN6qFkhP0RxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPeaml91xaZXLfetWqv6+v48m41EwHwYDVR0j BBgwFoAUubzMvoknp7q3hTx6uwrzlc0EeGUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmZlYmI2OGEtOGE1ZC00MTFjLThiYjMtODMzNDIzMTAwYjZlLzAvQjlCQ0NDQkU4 OTI3QTdCQUI3ODUzQzdBQkIwQUYzOTVDRDA0Nzg2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUJDQ0NCRTg5MjdBN0JBQjc4NTNDN0FCQjBBRjM5NUNEMDQ3 ODY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmZlYmI2OGEtOGE1ZC00MTFjLThi YjMtODMzNDIzMTAwYjZlLzAvQjlCQ0NDQkU4OTI3QTdCQUI3ODUzQzdBQkIwQUYz OTVDRDA0Nzg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3twiWoC5WDGevckuAFkQpmG1wa6VxOzg/L ZlcRVb2igEk77Ha/Df1hmxNwdC63jR+AyWA+CmCY3gR5d/DlgeCdGdJ5a1iFGbA7 mdKX3zeOvYFN9qUVwEkph69mIRJYAy+nLzpP8+35QSV3Q0SaKmOKSfw/MEiJvWJ3 2lj0O5j6CMwF2cY/xI3ON5OF9gcWi9hA/NuE1YUzmqPYHsFLL2r/GVklqIPEaJUX BOYeSFUZsxZYQ02CA3NK9QCC1u2EjeWjW6JP+stftGDFFSNstLaaCU20dpoX5eTc JfI3uoCYQ4eiOzr/UMaOlIyk+AjlQPeG2oqbca8mzm9nfLWxwA4= -----END CERTIFICATE-----Generated at Wed May 13 01:07:03 2026 by rpki-client