$ rpki-client -vvf rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft File: C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft (raw, json) Hash identifier: kDSq5iWkveZXRs76VM1e0SzOz8t5YGTSTFzgqUAWY8w= Subject key identifier: 1A:37:B3:F1:CE:A2:43:B2:0A:F9:4C:77:DE:16:56:8D:77:01:71:7C Authority key identifier: C9:BA:0F:8C:78:B3:A4:E5:D2:8E:CD:1C:51:7D:C9:84:38:50:87:CA Certificate issuer: /CN=C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA Certificate serial: 502CB5A5054855BE401606C2D42D535BA76FD494 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:18:29 +0000 Manifest this update: Tue 12 May 2026 18:13:29 +0000 Manifest next update: Wed 13 May 2026 20:43:29 +0000 Files and hashes: 1: 3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa (hash: 45s4cJ7R43K0N6OFbVA9LlP5PkcF712Aofyn3c/ko+0=) 2: 3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa (hash: qWv000ASHZPLikMYj8Wss1d2EPIqC0119NVLho36do8=) 3: 3130332e3136372e3136372e302f32342d3234203d3e20313431393834.roa (hash: Ivj60OCLGb1xn+8XUcVw7dceegfwRxZ/Fq0NrXLwLn4=) 4: C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl (hash: CzLyKV4wWbD2XvmGC3bRRKpqII2/S3ASBLIfi9Q8fDM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:2c:b5:a5:05:48:55:be:40:16:06:c2:d4:2d:53:5b:a7:6f:d4:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA Validity Not Before: May 12 18:13:29 2026 GMT Not After : May 13 20:43:29 2026 GMT Subject: CN=1A37B3F1CEA243B20AF94C77DE16568D7701717C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c1:a0:b7:1b:b2:98:b1:e7:fd:64:93:8a:eb: 37:cd:13:e9:ef:d3:85:90:ac:64:8a:35:b2:d0:be: 72:4d:87:94:ed:da:38:87:b3:a4:31:ce:f6:ce:fb: a0:ff:71:a9:7f:9e:e1:23:1b:98:0b:b9:ab:45:3a: c9:96:da:78:f0:0c:24:e4:4a:c6:6d:b8:5f:6a:86: 54:5a:2c:93:5c:ae:0c:1a:2f:d9:26:44:2b:d3:32: 90:4c:a7:b4:fa:ef:76:37:8b:b9:78:3e:07:d1:1e: 9f:df:80:50:fd:b2:49:83:36:5f:3d:d2:eb:f8:da: ed:08:75:47:0f:b9:90:86:52:a3:c7:2b:c3:b2:92: a3:dc:30:20:73:ec:28:7a:3d:c7:4f:cd:f1:cb:3d: 53:4f:c5:c7:c0:5a:47:5a:f2:04:e9:95:4a:a0:3e: 76:be:b8:d5:9a:41:9c:3c:a9:fb:7f:74:db:88:c3: 97:6c:d2:20:8a:58:46:c5:e5:9f:17:c9:0f:18:ab: ca:19:76:d5:39:24:b8:a8:df:90:be:3e:25:36:82: 48:10:53:2e:ca:65:7b:3d:10:b1:62:d3:3d:1b:92: 3f:32:8e:93:aa:f3:35:e4:3f:99:c4:cd:c1:c0:de: 37:25:c1:99:77:6e:12:9d:51:51:54:18:4d:2e:96: 71:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:37:B3:F1:CE:A2:43:B2:0A:F9:4C:77:DE:16:56:8D:77:01:71:7C X509v3 Authority Key Identifier: keyid:C9:BA:0F:8C:78:B3:A4:E5:D2:8E:CD:1C:51:7D:C9:84:38:50:87:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:e5:80:ae:18:6c:b5:cf:9e:91:f4:42:b2:15:a1:07:75:25: 6a:24:b4:95:2c:2b:b1:61:c1:b0:b0:83:36:3a:ce:61:59:04: e0:5a:ca:a2:71:79:91:0e:3b:39:a0:91:83:e5:8e:34:68:ad: dc:7b:e2:9c:f1:1d:5b:8d:dd:63:64:71:af:3c:e7:1b:bf:03: 01:87:22:58:80:5b:b0:c1:7c:0c:77:b8:13:69:58:de:45:1e: 21:1f:e6:54:52:c0:5d:ee:1b:a1:67:5a:3b:be:ca:1b:58:ca: a9:70:fa:b0:b2:5d:1f:c7:f2:3a:60:82:cb:d3:f0:46:e8:62: 2e:ce:67:01:30:fb:0a:bd:69:50:46:f2:ce:75:44:ec:3c:05: 46:a0:5f:84:b9:81:53:f5:25:24:d6:c6:09:91:7a:96:ee:72: 9e:71:87:d3:79:09:3b:69:9c:cb:a8:80:82:81:44:3f:49:01: 38:1a:17:75:52:7f:cc:c8:c9:67:38:93:47:d5:c0:fe:94:fe: b0:c5:b2:6f:72:f6:87:ef:26:ca:05:a3:9f:13:aa:bd:9b:e1: 58:d3:e5:56:eb:bc:c8:a7:99:35:48:7d:39:d8:4c:d4:cb:16: 1d:8f:3a:73:35:7a:c8:51:1e:26:b9:09:f9:e0:87:d9:bc:30: 95:46:90:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUCy1pQVIVb5AFgbC1C1TW6dv1JQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTBGOEM3OEIzQTRFNUQyOEVDRDFDNTE3REM5ODQz ODUwODdDQTAeFw0yNjA1MTIxODEzMjlaFw0yNjA1MTMyMDQzMjlaMDMxMTAvBgNV BAMTKDFBMzdCM0YxQ0VBMjQzQjIwQUY5NEM3N0RFMTY1NjhENzcwMTcxN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtwaC3G7KYsef9ZJOK6zfNE+nv 04WQrGSKNbLQvnJNh5Tt2jiHs6QxzvbO+6D/cal/nuEjG5gLuatFOsmW2njwDCTk SsZtuF9qhlRaLJNcrgwaL9kmRCvTMpBMp7T673Y3i7l4PgfRHp/fgFD9skmDNl89 0uv42u0IdUcPuZCGUqPHK8OykqPcMCBz7Ch6PcdPzfHLPVNPxcfAWkda8gTplUqg Pna+uNWaQZw8qft/dNuIw5ds0iCKWEbF5Z8XyQ8Yq8oZdtU5JLio35C+PiU2gkgQ Uy7KZXs9ELFi0z0bkj8yjpOq8zXkP5nEzcHA3jclwZl3bhKdUVFUGE0ulnETAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGjez8c6iQ7IK+Ux33hZWjXcBcXwwHwYDVR0j BBgwFoAUyboPjHizpOXSjs0cUX3JhDhQh8owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU0MGNmODAtOTMxNS00MmMxLTg0NGUtYmIwMzYyMmEwNWMxLzAvQzlCQTBGOEM3 OEIzQTRFNUQyOEVDRDFDNTE3REM5ODQzODUwODdDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUJBMEY4Qzc4QjNBNEU1RDI4RUNEMUM1MTdEQzk4NDM4NTA4 N0NBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU0MGNmODAtOTMxNS00MmMxLTg0 NGUtYmIwMzYyMmEwNWMxLzAvQzlCQTBGOEM3OEIzQTRFNUQyOEVDRDFDNTE3REM5 ODQzODUwODdDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXlgK4YbLXPnpH0QrIVoQd1JWoktJUsK7Fh wbCwgzY6zmFZBOBayqJxeZEOOzmgkYPljjRordx74pzxHVuN3WNkca885xu/AwGH IliAW7DBfAx3uBNpWN5FHiEf5lRSwF3uG6FnWju+yhtYyqlw+rCyXR/H8jpggsvT 8EboYi7OZwEw+wq9aVBG8s51ROw8BUagX4S5gVP1JSTWxgmRepbucp5xh9N5CTtp nMuogIKBRD9JATgaF3VSf8zIyWc4k0fVwP6U/rDFsm9y9ofvJsoFo58Tqr2b4VjT 5VbrvMinmTVIfTnYTNTLFh2POnM1eshRHia5Cfngh9m8MJVGkO0= -----END CERTIFICATE-----Generated at Wed May 13 03:48:15 2026 by rpki-client