$ rpki-client -vvf rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft File: 9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft (raw, json) Hash identifier: aR+TCmzl63VoKbDzG5AlE5Ib9Bpw9UquLf7cHAtHhXs= Subject key identifier: BC:B5:84:B5:44:3B:3C:36:0A:61:78:DC:17:13:79:44:6F:4A:59:D0 Authority key identifier: 9F:2F:D5:F0:22:2A:23:10:19:36:82:C9:DC:2C:AB:6A:7F:4C:EE:F0 Certificate issuer: /CN=9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0 Certificate serial: 034B0E641F1A4693D49A1FA33A640BA49AF92E4B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:49:48 +0000 Manifest this update: Tue 12 May 2026 21:44:48 +0000 Manifest next update: Thu 14 May 2026 01:22:48 +0000 Files and hashes: 1: 3130332e3137342e36342e302f32342d3234203d3e20313437313236.roa (hash: ZGD3gvwBGhA/oYppfcua832gpcsap+01GHOd/NYuTUc=) 2: 3130332e3137342e36352e302f32342d3234203d3e20313437313236.roa (hash: wlJasn9sEpBfYIb16xYXhPNZ1TeKQ7fHYr3qJmH4nLE=) 3: 3130332e3137342e36342e302f32332d3234203d3e20313437313236.roa (hash: BwYpBlP3m28Tfj+hQxoec6R8e4UN5PECSBz/IAuPt0w=) 4: 9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.crl (hash: h0cwhF/o8Vz5LpflCUrAx4Gue4b5PEpKSinmdnHbyKg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.crl rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:4b:0e:64:1f:1a:46:93:d4:9a:1f:a3:3a:64:0b:a4:9a:f9:2e:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0 Validity Not Before: May 12 21:44:48 2026 GMT Not After : May 14 01:22:48 2026 GMT Subject: CN=BCB584B5443B3C360A6178DC171379446F4A59D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:68:66:a6:5d:71:78:79:e4:1c:b9:2b:ed:ab: 50:1b:df:45:c4:df:ce:23:82:9a:d6:a9:79:8f:7a: 74:1b:b9:17:88:04:5e:d7:07:ee:8d:8e:72:e5:47: 66:eb:dd:e3:aa:35:80:f6:1d:41:6a:b1:3a:10:11: 9e:f7:6c:0a:da:67:8e:ab:da:d9:12:02:30:86:9b: 3a:98:2a:ee:21:14:d6:42:c7:7b:32:54:75:48:6a: 1c:04:47:14:f5:d6:12:4d:7c:72:b2:e8:15:b7:25: cf:ff:07:4d:e1:27:45:50:21:7c:32:e1:b5:c3:8b: d1:11:a0:d0:a8:d4:a5:70:4a:01:6b:b3:62:5a:32: ae:50:e4:09:90:cb:e2:17:29:03:95:33:07:96:56: c6:78:a4:56:de:f1:74:2b:81:6c:20:73:36:95:71: d3:2d:48:61:13:b1:35:1d:c3:3a:6f:f7:40:4f:f7: 24:42:1f:8d:50:31:d3:74:f8:82:4d:f7:ac:2a:7c: 6c:4d:c4:06:60:29:ac:cf:7f:b6:a7:86:6b:3b:6a: b1:d1:a7:79:d8:ae:59:6f:50:0f:f6:0c:4b:aa:82: 4b:02:da:51:24:49:42:2a:f7:9f:7b:c0:aa:e3:06: 1f:aa:ca:55:72:09:80:e1:5a:81:2e:d7:a0:04:b5: ed:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B5:84:B5:44:3B:3C:36:0A:61:78:DC:17:13:79:44:6F:4A:59:D0 X509v3 Authority Key Identifier: keyid:9F:2F:D5:F0:22:2A:23:10:19:36:82:C9:DC:2C:AB:6A:7F:4C:EE:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f2:f9:fd:94:fc:6e:18:9a:5b:09:ee:1f:4e:2f:9d:9c:b9: e8:f0:32:92:eb:06:1c:73:0a:1b:71:d3:f0:2c:71:9a:ca:7f: e7:ef:99:34:64:0c:2b:96:31:af:6a:35:65:56:1f:23:47:05: 3f:1e:60:ed:6f:c9:91:5e:aa:46:dd:c0:41:34:f1:84:de:d3: 57:cf:e1:33:bd:95:81:a8:9c:bd:05:14:a4:03:6a:a2:d1:1e: 70:13:f0:f4:2b:b7:8c:28:61:0b:cf:c2:12:a7:f6:b8:c1:89: 3f:e9:cf:53:56:b0:99:ab:d1:a1:6d:95:12:3d:af:dd:9c:c2: 1a:0e:97:fd:1d:d3:f6:a3:df:fb:61:d8:56:f6:e8:e4:7c:56: c5:76:fb:e1:2a:54:22:e5:9a:8b:ea:c2:56:b2:ce:20:b6:ed: bc:96:10:27:c6:9e:be:32:99:86:2a:4f:0d:f7:6b:44:ee:2a: f9:60:b3:87:0e:92:00:ef:f6:e1:f4:6a:1d:89:b2:3f:e1:85: b7:48:a0:29:4b:c8:fe:96:8f:15:c0:5a:f3:28:ad:4f:01:26: e8:b6:62:6e:cc:90:19:b3:89:58:87:5c:5f:53:5e:1a:6d:31: 2e:c0:b1:01:45:89:c1:a1:f8:8e:63:9a:ea:a3:5a:f4:ac:06: 93:a0:4c:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA0sOZB8aRpPUmh+jOmQLpJr5LkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYyRkQ1RjAyMjJBMjMxMDE5MzY4MkM5REMyQ0FCNkE3 RjRDRUVGMDAeFw0yNjA1MTIyMTQ0NDhaFw0yNjA1MTQwMTIyNDhaMDMxMTAvBgNV BAMTKEJDQjU4NEI1NDQzQjNDMzYwQTYxNzhEQzE3MTM3OTQ0NkY0QTU5RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmaGamXXF4eeQcuSvtq1Ab30XE 384jgprWqXmPenQbuReIBF7XB+6NjnLlR2br3eOqNYD2HUFqsToQEZ73bAraZ46r 2tkSAjCGmzqYKu4hFNZCx3syVHVIahwERxT11hJNfHKy6BW3Jc//B03hJ0VQIXwy 4bXDi9ERoNCo1KVwSgFrs2JaMq5Q5AmQy+IXKQOVMweWVsZ4pFbe8XQrgWwgczaV cdMtSGETsTUdwzpv90BP9yRCH41QMdN0+IJN96wqfGxNxAZgKazPf7anhms7arHR p3nYrllvUA/2DEuqgksC2lEkSUIq9597wKrjBh+qylVyCYDhWoEu16AEte13AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvLWEtUQ7PDYKYXjcFxN5RG9KWdAwHwYDVR0j BBgwFoAUny/V8CIqIxAZNoLJ3Cyran9M7vAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFmNGFiYmUtOGI1ZC00MDJiLTkwNTMtNTBiNzg1Yzc3MzUyLzAvOUYyRkQ1RjAy MjJBMjMxMDE5MzY4MkM5REMyQ0FCNkE3RjRDRUVGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjJGRDVGMDIyMkEyMzEwMTkzNjgyQzlEQzJDQUI2QTdGNENF RUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFmNGFiYmUtOGI1ZC00MDJiLTkw NTMtNTBiNzg1Yzc3MzUyLzAvOUYyRkQ1RjAyMjJBMjMxMDE5MzY4MkM5REMyQ0FC NkE3RjRDRUVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjy+f2U/G4YmlsJ7h9OL52cuejwMpLrBhxz Chtx0/AscZrKf+fvmTRkDCuWMa9qNWVWHyNHBT8eYO1vyZFeqkbdwEE08YTe01fP 4TO9lYGonL0FFKQDaqLRHnAT8PQrt4woYQvPwhKn9rjBiT/pz1NWsJmr0aFtlRI9 r92cwhoOl/0d0/aj3/th2Fb26OR8VsV2++EqVCLlmovqwlayziC27byWECfGnr4y mYYqTw33a0TuKvlgs4cOkgDv9uH0ah2Jsj/hhbdIoClLyP6WjxXAWvMorU8BJui2 Ym7MkBmziViHXF9TXhptMS7AsQFFicGh+I5jmuqjWvSsBpOgTOY= -----END CERTIFICATE-----Generated at Wed May 13 00:21:45 2026 by rpki-client