$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft File: C9C56B3341FC31139F57F78A815CF9851E91375E.mft (raw, json) Hash identifier: J7+KFGLor3xQNEoTIOgzIR6vySZXqkCTkYRoUt9ud78= Subject key identifier: FC:00:B7:E0:64:FF:90:E5:0F:67:DF:F1:DB:95:C1:F6:03:21:7D:C7 Authority key identifier: C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E Certificate issuer: /CN=C9C56B3341FC31139F57F78A815CF9851E91375E Certificate serial: 4F58B6C07E00392039094B0A0365A1D7DA66B123 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft Manifest number: 0E Signing time: Tue 12 May 2026 11:12:00 +0000 Manifest this update: Tue 12 May 2026 11:07:00 +0000 Manifest next update: Wed 13 May 2026 12:21:00 +0000 Files and hashes: 1: C9C56B3341FC31139F57F78A815CF9851E91375E.crl (hash: xXSePcWaxKCSVzANhHn/J7PbvNAprX/jnZex+YsRazs=) 2: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: UvvLQHaYsHEf6H/EOqibK//gY5katYyU5vu1/kohXeI=) 3: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: YDyhEGDnWg4aoTzQ4Kj70ioCxeiG+fWs6BKdMJUBP40=) 4: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: ++K50lF9/3pIjVc4GT4lTLKYd8Uj+kdHUPhBXnfZ3JA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:58:b6:c0:7e:00:39:20:39:09:4b:0a:03:65:a1:d7:da:66:b1:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9C56B3341FC31139F57F78A815CF9851E91375E Validity Not Before: May 12 11:07:00 2026 GMT Not After : May 13 12:21:00 2026 GMT Subject: CN=FC00B7E064FF90E50F67DFF1DB95C1F603217DC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9d:10:d5:6a:0a:99:3d:01:e9:92:fc:d8:11: ee:45:e6:6f:27:9b:d0:32:12:eb:6a:17:d9:37:5f: f0:bd:7f:bb:cb:39:a6:49:72:d7:e1:42:ec:24:2d: c3:cc:47:f5:5f:d9:5b:17:1a:a2:25:18:9d:73:12: b8:e4:73:75:b0:9e:ad:83:77:cf:6f:99:35:43:81: 10:61:92:e6:37:0d:3c:12:a4:91:a5:59:69:61:53: 72:87:ca:f9:c3:a2:ad:5a:c1:7d:26:92:98:58:59: 4e:de:79:23:97:ea:b3:2e:e7:8c:88:14:77:f9:e9: 3e:20:60:5d:7a:00:d9:ea:be:06:f9:7d:cc:39:88: 1c:41:ad:b1:69:4f:7a:9a:44:df:c0:8d:bd:f3:95: 72:a9:a1:8c:e6:67:31:07:e9:ea:ec:00:ec:98:bf: 4a:63:8c:ba:29:fc:0f:26:ce:ee:6f:31:bf:17:08: bc:51:44:8a:bb:9e:f4:a5:be:76:d9:cb:b2:09:30: 6d:78:0f:5c:ea:9c:2a:b3:22:07:00:f5:33:f9:37: 0e:39:ab:06:a0:c7:a3:0e:cf:a0:9a:c3:4e:5a:75: dd:1c:3a:3a:fe:13:16:d1:40:85:32:33:80:34:98: 3d:6f:3b:44:05:7d:13:85:8b:df:6d:d7:d9:5b:64: 00:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:00:B7:E0:64:FF:90:E5:0F:67:DF:F1:DB:95:C1:F6:03:21:7D:C7 X509v3 Authority Key Identifier: keyid:C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:94:43:e5:5b:58:93:0f:51:a1:f4:ef:27:31:aa:fb:38:bc: 9d:a4:0a:d4:f5:c7:da:f5:52:5f:70:3e:c6:82:26:ed:95:36: 26:98:ee:56:43:0e:ce:cd:f1:99:6f:20:e5:47:6c:f8:e5:04: 96:91:e8:f5:15:7b:be:73:16:24:ea:0d:a6:97:1d:bd:5a:84: 46:1a:ca:95:03:05:35:a0:17:90:a6:50:f8:0a:c9:90:4f:76: f6:f9:08:c9:19:93:50:16:f0:55:a5:96:74:8d:d9:20:fb:d3: c4:5c:d5:bf:e7:88:30:6f:d9:9b:a8:09:89:6a:c7:bb:4c:97: 77:c4:74:a5:54:45:2d:af:f0:90:c5:56:7c:aa:9a:e3:93:57: dd:88:65:5b:55:1d:6a:a1:93:82:6f:5d:c3:88:7a:3e:0b:d3: a0:4b:a9:4e:45:f6:a4:12:ab:7a:d1:da:2d:16:48:b4:c2:0d: 46:97:b6:e9:7c:f9:30:a7:11:36:ae:bc:b0:98:29:38:eb:46: 70:9e:93:3d:6a:64:ca:1e:09:57:9c:13:83:ae:77:40:0a:53: 2d:9c:54:50:6e:16:e1:0f:7c:3c:e3:99:91:b0:76:d5:e6:d5: ae:3f:c4:f1:6c:c4:db:1a:6c:f4:cc:13:cf:bb:8c:5b:9c:58: df:9f:f6:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT1i2wH4AOSA5CUsKA2Wh19pmsSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlDNTZCMzM0MUZDMzExMzlGNTdGNzhBODE1Q0Y5ODUx RTkxMzc1RTAeFw0yNjA1MTIxMTA3MDBaFw0yNjA1MTMxMjIxMDBaMDMxMTAvBgNV BAMTKEZDMDBCN0UwNjRGRjkwRTUwRjY3REZGMURCOTVDMUY2MDMyMTdEQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmnRDVagqZPQHpkvzYEe5F5m8n m9AyEutqF9k3X/C9f7vLOaZJctfhQuwkLcPMR/Vf2VsXGqIlGJ1zErjkc3Wwnq2D d89vmTVDgRBhkuY3DTwSpJGlWWlhU3KHyvnDoq1awX0mkphYWU7eeSOX6rMu54yI FHf56T4gYF16ANnqvgb5fcw5iBxBrbFpT3qaRN/Ajb3zlXKpoYzmZzEH6ersAOyY v0pjjLop/A8mzu5vMb8XCLxRRIq7nvSlvnbZy7IJMG14D1zqnCqzIgcA9TP5Nw45 qwagx6MOz6Caw05add0cOjr+ExbRQIUyM4A0mD1vO0QFfROFi99t19lbZAArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/AC34GT/kOUPZ9/x25XB9gMhfccwHwYDVR0j BBgwFoAUycVrM0H8MROfV/eKgVz5hR6RN14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI4YTdmYTUtZmRhMy00YTNlLTkyZjctZmFiZmVkMDVhOTVjLzAvQzlDNTZCMzM0 MUZDMzExMzlGNTdGNzhBODE1Q0Y5ODUxRTkxMzc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUM1NkIzMzQxRkMzMTEzOUY1N0Y3OEE4MTVDRjk4NTFFOTEz NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvQzlDNTZCMzM0MUZDMzExMzlGNTdGNzhBODE1Q0Y5 ODUxRTkxMzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyUQ+VbWJMPUaH07ycxqvs4vJ2kCtT1x9r1 Ul9wPsaCJu2VNiaY7lZDDs7N8ZlvIOVHbPjlBJaR6PUVe75zFiTqDaaXHb1ahEYa ypUDBTWgF5CmUPgKyZBPdvb5CMkZk1AW8FWllnSN2SD708Rc1b/niDBv2ZuoCYlq x7tMl3fEdKVURS2v8JDFVnyqmuOTV92IZVtVHWqhk4JvXcOIej4L06BLqU5F9qQS q3rR2i0WSLTCDUaXtul8+TCnETauvLCYKTjrRnCekz1qZMoeCVecE4Oud0AKUy2c VFBuFuEPfDzjmZGwdtXm1a4/xPFsxNsabPTME8+7jFucWN+f9hk= -----END CERTIFICATE-----Generated at Wed May 13 02:26:21 2026 by rpki-client