$ rpki-client -vvf rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft File: 9AFC93CAEEA98CBFC0481089E308395A3234F158.mft (raw, json) Hash identifier: 7wOsW6nXMXcuAnxwjduJjtdXVA0v2cb04TEEGqbEjI8= Subject key identifier: 23:37:A5:FC:F0:B4:01:09:D6:57:A3:07:AD:B2:A7:16:4E:DC:11:11 Authority key identifier: 9A:FC:93:CA:EE:A9:8C:BF:C0:48:10:89:E3:08:39:5A:32:34:F1:58 Certificate issuer: /CN=9AFC93CAEEA98CBFC0481089E308395A3234F158 Certificate serial: 4595FD05A5330B38EDEE17FB43FE485843DC9285 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft Manifest number: 0E Signing time: Tue 12 May 2026 12:53:04 +0000 Manifest this update: Tue 12 May 2026 12:48:04 +0000 Manifest next update: Wed 13 May 2026 14:30:04 +0000 Files and hashes: 1: 9AFC93CAEEA98CBFC0481089E308395A3234F158.crl (hash: w9FXbdC51XlGweuQPNXkQclDXhx8JWjX6NEUuvy3qJw=) 2: 3130332e32312e3232382e302f32342d3234203d3e20313332363433.roa (hash: mWMxWItQIy6KIu1MttVIKoQEGs+uqMB7va6yxk2ZK/w=) 3: 3130332e3132332e3135382e302f32342d3234203d3e20313332363433.roa (hash: CJzRoBzW5EdikhLdqGZ7+quC12AshwM5y1ZUE0mtwGE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.crl rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:95:fd:05:a5:33:0b:38:ed:ee:17:fb:43:fe:48:58:43:dc:92:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFC93CAEEA98CBFC0481089E308395A3234F158 Validity Not Before: May 12 12:48:04 2026 GMT Not After : May 13 14:30:04 2026 GMT Subject: CN=2337A5FCF0B40109D657A307ADB2A7164EDC1111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:30:e7:5b:f3:84:f3:08:6f:4c:b4:6b:e4:13: 27:1e:16:69:05:80:25:2d:0b:0e:2c:ea:d0:ca:d2: 9d:ee:66:2a:b2:96:1f:55:7a:f4:24:a2:47:19:24: f8:50:49:c6:46:64:42:d0:8f:83:b1:23:64:08:9c: 65:38:78:43:00:10:cb:fe:e1:4b:e2:3e:b6:8f:ae: 41:82:0a:dc:ea:04:cf:0d:b5:18:7f:18:11:6b:c2: 3d:56:4d:72:a6:34:c2:4a:a7:23:6c:0c:72:78:da: 67:b2:53:5f:c0:a8:bc:7d:92:ef:5a:d9:4c:ea:72: 45:34:75:1c:b4:bc:23:7b:84:8d:d2:63:c8:29:57: 51:23:0a:28:fb:f5:aa:e1:eb:44:71:87:09:81:2b: 47:ba:dd:19:09:4d:87:06:2b:3a:f1:04:c1:e4:42: fa:97:4a:c8:68:8c:7a:0b:f0:e2:a9:37:4c:d7:34: b4:0e:4e:e4:9a:84:f3:14:f5:1f:21:75:58:e7:1f: 46:a6:06:f5:7f:ca:48:5e:98:de:2c:49:8c:14:bb: 5d:61:44:a9:a1:57:fb:a7:f8:e5:93:de:9f:17:fb: c5:ea:dd:ea:68:d1:0e:aa:e3:2f:65:39:86:c8:cf: c9:cb:0d:27:ac:ae:d9:a8:0b:ba:6e:d8:d8:b6:08: e5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:37:A5:FC:F0:B4:01:09:D6:57:A3:07:AD:B2:A7:16:4E:DC:11:11 X509v3 Authority Key Identifier: keyid:9A:FC:93:CA:EE:A9:8C:BF:C0:48:10:89:E3:08:39:5A:32:34:F1:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:7f:25:4f:4b:70:d5:65:ae:4f:ee:1a:c2:4a:01:3c:56:f0: d6:88:a8:14:9a:6c:64:23:fb:46:38:2e:df:33:9f:44:1f:6c: ac:3f:d7:ca:be:95:38:65:b1:c2:c9:75:f3:2c:0e:82:19:69: 78:06:92:63:af:55:cf:7d:3e:eb:86:84:69:d1:17:7a:ed:bc: 14:9c:ac:12:60:72:c9:6d:8d:66:fd:30:7e:8f:73:dc:68:32: 65:a3:43:d9:54:7f:2b:01:64:cd:71:b7:f0:c5:e8:8b:fe:33: 30:4c:55:19:a8:67:cc:f2:82:f2:bc:cd:dd:66:51:62:ae:6a: 6b:25:b7:6c:e1:d0:28:c0:da:31:d4:58:59:c1:09:52:6b:e1: 15:98:88:60:4b:34:8c:47:50:d5:03:b2:da:74:9d:34:1e:fc: bc:1b:12:b1:6e:61:d3:62:4a:e3:1b:72:d8:97:ea:4b:8f:21: 85:0d:80:96:15:17:93:6a:1f:ed:0e:c5:8e:78:25:01:62:dc: 37:57:a0:cf:8b:08:53:17:ad:99:8d:4f:c3:39:df:e4:bf:61: dc:f2:d5:00:0b:34:c3:00:5a:c3:47:48:b1:e7:7a:38:e9:43: 6a:7f:3e:40:15:c1:08:66:7f:26:63:89:5c:53:2b:f6:39:61: 60:5e:3a:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZX9BaUzCzjt7hf7Q/5IWEPckoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGQzkzQ0FFRUE5OENCRkMwNDgxMDg5RTMwODM5NUEz MjM0RjE1ODAeFw0yNjA1MTIxMjQ4MDRaFw0yNjA1MTMxNDMwMDRaMDMxMTAvBgNV BAMTKDIzMzdBNUZDRjBCNDAxMDlENjU3QTMwN0FEQjJBNzE2NEVEQzExMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiMOdb84TzCG9MtGvkEyceFmkF gCUtCw4s6tDK0p3uZiqylh9VevQkokcZJPhQScZGZELQj4OxI2QInGU4eEMAEMv+ 4UviPraPrkGCCtzqBM8NtRh/GBFrwj1WTXKmNMJKpyNsDHJ42meyU1/AqLx9ku9a 2UzqckU0dRy0vCN7hI3SY8gpV1EjCij79arh60RxhwmBK0e63RkJTYcGKzrxBMHk QvqXSshojHoL8OKpN0zXNLQOTuSahPMU9R8hdVjnH0amBvV/ykhemN4sSYwUu11h RKmhV/un+OWT3p8X+8Xq3epo0Q6q4y9lOYbIz8nLDSesrtmoC7pu2Ni2COWLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIzel/PC0AQnWV6MHrbKnFk7cEREwHwYDVR0j BBgwFoAUmvyTyu6pjL/ASBCJ4wg5WjI08VgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNhZjI3MWYtYzgzZC00NDFlLWJlYTktMThhMjQ0ZDBlMDBlLzAvOUFGQzkzQ0FF RUE5OENCRkMwNDgxMDg5RTMwODM5NUEzMjM0RjE1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QUZDOTNDQUVFQTk4Q0JGQzA0ODEwODlFMzA4Mzk1QTMyMzRG MTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNhZjI3MWYtYzgzZC00NDFlLWJl YTktMThhMjQ0ZDBlMDBlLzAvOUFGQzkzQ0FFRUE5OENCRkMwNDgxMDg5RTMwODM5 NUEzMjM0RjE1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZ/JU9LcNVlrk/uGsJKATxW8NaIqBSabGQj +0Y4Lt8zn0QfbKw/18q+lThlscLJdfMsDoIZaXgGkmOvVc99PuuGhGnRF3rtvBSc rBJgcsltjWb9MH6Pc9xoMmWjQ9lUfysBZM1xt/DF6Iv+MzBMVRmoZ8zygvK8zd1m UWKuamslt2zh0CjA2jHUWFnBCVJr4RWYiGBLNIxHUNUDstp0nTQe/LwbErFuYdNi SuMbctiX6kuPIYUNgJYVF5NqH+0OxY54JQFi3DdXoM+LCFMXrZmNT8M53+S/Ydzy 1QALNMMAWsNHSLHnejjpQ2p/PkAVwQhmfyZjiVxTK/Y5YWBeOv8= -----END CERTIFICATE-----Generated at Wed May 13 02:18:55 2026 by rpki-client