$ rpki-client -vvf rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft File: C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft (raw, json) Hash identifier: 9twreCodH5K0sn47ijd/udEQhxnT0EqFvbakv/UHeek= Subject key identifier: 8B:70:7F:42:4B:A8:DE:9D:0E:66:26:5B:9C:FF:32:6C:62:27:68:6A Authority key identifier: C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94 Certificate issuer: /CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894 Certificate serial: 0FCF72E9E8A2662106C0B39265D19CC5B5C46F28 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:27:20 +0000 Manifest this update: Tue 12 May 2026 20:22:20 +0000 Manifest next update: Wed 13 May 2026 21:15:20 +0000 Files and hashes: 1: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: occ5qoM9oAkKmzdKhCiXxb0YYDDzZw7eQPlVtS1+AXA=) 2: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: Pfe66TELIpbboDlTlvL4smle14adEmFMF0KS3kt6HYM=) 3: C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl (hash: PbMfYf1Nitr21kEhMvVAZhEdlMHOcNjzzoZzhGFlwgE=) 4: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: ZVZI5MXEYgq+QpFFWNL7lGXYAS9omg0P+vD6tywGpec=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:cf:72:e9:e8:a2:66:21:06:c0:b3:92:65:d1:9c:c5:b5:c4:6f:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894 Validity Not Before: May 12 20:22:20 2026 GMT Not After : May 13 21:15:20 2026 GMT Subject: CN=8B707F424BA8DE9D0E66265B9CFF326C6227686A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:63:aa:de:37:3b:ee:9b:3f:8c:87:0d:8a:75: 2a:aa:2d:04:c7:80:cc:87:e2:6b:1e:a8:6e:4b:95: 93:5d:23:23:80:59:31:3a:ed:2c:61:6b:f9:5e:c2: 80:a2:43:ba:4f:8d:ad:d4:b0:ab:d4:d9:2e:98:23: aa:d2:de:8b:a4:da:45:33:e1:e7:b7:0b:5e:44:d5: 93:39:30:12:09:94:74:be:3c:51:71:3c:30:70:62: 98:09:91:ea:c4:a1:b7:bd:d6:95:39:34:3f:47:80: d3:b0:68:d1:c2:6d:68:0c:c9:d9:eb:01:62:64:94: a0:bc:8b:2d:f0:d0:b2:f5:90:75:43:f1:4e:9d:d8: 66:1e:be:1c:d5:34:b7:2e:c7:70:1c:57:5b:b7:c8: 76:d6:5d:b1:61:b4:fa:13:e2:13:0a:ce:63:e4:d2: 7a:7e:c5:9c:b2:7a:10:75:9d:d7:aa:58:b3:f9:b3: 09:6f:27:16:80:c7:47:dc:7c:76:a3:b6:e3:64:24: 44:ee:c0:a3:1c:fb:0d:58:cd:ee:6f:a1:1f:65:68: 04:55:52:fb:11:7a:21:d1:39:1a:ab:a5:46:e8:80: 6f:60:da:03:c3:68:23:d9:75:cd:bf:98:7b:4f:9e: 39:2a:66:2d:d2:fa:89:5d:17:80:bf:3a:6a:11:3e: d6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:70:7F:42:4B:A8:DE:9D:0E:66:26:5B:9C:FF:32:6C:62:27:68:6A X509v3 Authority Key Identifier: keyid:C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:13:5f:c9:4b:1e:ef:d8:54:1e:8e:00:1e:1c:bd:a8:73:d3: 55:fd:51:fb:18:8d:54:55:8b:fd:d6:b5:09:f8:0e:71:ae:7a: 2c:67:b4:7a:86:0a:1f:a5:60:4b:47:6b:81:e8:60:f6:5a:7d: c0:0a:a6:70:ac:2b:11:11:9e:16:e4:f4:91:7e:80:3c:14:d4: 94:6c:86:bc:75:ff:b5:83:15:59:1e:e0:31:0c:95:31:68:05: ab:03:cc:29:09:7f:13:77:ed:c8:87:68:cf:ae:e3:64:57:52: 1b:ee:a1:19:a7:77:b1:a8:49:de:42:a4:f4:3c:5d:5d:34:69: 9c:51:5b:53:99:54:25:3b:29:ba:91:a3:a2:e2:63:f6:2b:c5: ca:5b:79:e3:8b:81:b7:f9:dc:6f:13:d8:f6:9c:7a:76:cf:35: a8:a4:cd:88:b5:7c:df:37:64:14:c7:75:83:c6:05:2f:ab:d3: 43:50:19:c7:d9:1b:31:71:af:2d:8a:49:2d:ea:ac:56:85:3f: 91:a3:ff:17:e6:f4:6f:29:d0:d2:33:97:21:2f:f8:26:2b:81: 47:b2:f1:7f:19:23:52:e6:bd:02:33:bc:04:53:59:52:9c:d3: 1c:46:0c:6f:90:dd:30:1b:2c:74:34:d0:50:69:31:5c:28:e8: c6:94:c5:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD89y6eiiZiEGwLOSZdGcxbXEbygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQkRGMEVBMTRERERGMEM1NTFERjE4NjMzMkNCODU5 RUI5RDg5NDAeFw0yNjA1MTIyMDIyMjBaFw0yNjA1MTMyMTE1MjBaMDMxMTAvBgNV BAMTKDhCNzA3RjQyNEJBOERFOUQwRTY2MjY1QjlDRkYzMjZDNjIyNzY4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZY6reNzvumz+Mhw2KdSqqLQTH gMyH4mseqG5LlZNdIyOAWTE67Sxha/lewoCiQ7pPja3UsKvU2S6YI6rS3ouk2kUz 4ee3C15E1ZM5MBIJlHS+PFFxPDBwYpgJkerEobe91pU5ND9HgNOwaNHCbWgMydnr AWJklKC8iy3w0LL1kHVD8U6d2GYevhzVNLcux3AcV1u3yHbWXbFhtPoT4hMKzmPk 0np+xZyyehB1ndeqWLP5swlvJxaAx0fcfHajtuNkJETuwKMc+w1Yze5voR9laARV UvsReiHRORqrpUbogG9g2gPDaCPZdc2/mHtPnjkqZi3S+oldF4C/OmoRPtYnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi3B/Qkuo3p0OZiZbnP8ybGInaGowHwYDVR0j BBgwFoAUybvfDqFN3fDFUd8YYzLLhZ652JQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTk1OTAxY2MtMWI4ZS00ZjNmLWEzZDAtMzI2OWYwZTE2YzQxLzAvQzlCQkRGMEVB MTRERERGMEM1NTFERjE4NjMzMkNCODU5RUI5RDg5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUJCREYwRUExNEREREYwQzU1MURGMTg2MzMyQ0I4NTlFQjlE ODk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTk1OTAxY2MtMWI4ZS00ZjNmLWEz ZDAtMzI2OWYwZTE2YzQxLzAvQzlCQkRGMEVBMTRERERGMEM1NTFERjE4NjMzMkNC ODU5RUI5RDg5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0TX8lLHu/YVB6OAB4cvahz01X9UfsYjVRV i/3WtQn4DnGueixntHqGCh+lYEtHa4HoYPZafcAKpnCsKxERnhbk9JF+gDwU1JRs hrx1/7WDFVke4DEMlTFoBasDzCkJfxN37ciHaM+u42RXUhvuoRmnd7GoSd5CpPQ8 XV00aZxRW1OZVCU7KbqRo6LiY/YrxcpbeeOLgbf53G8T2PacenbPNaikzYi1fN83 ZBTHdYPGBS+r00NQGcfZGzFxry2KSS3qrFaFP5Gj/xfm9G8p0NIzlyEv+CYrgUey 8X8ZI1LmvQIzvARTWVKc0xxGDG+Q3TAbLHQ00FBpMVwo6MaUxa8= -----END CERTIFICATE-----Generated at Tue May 12 23:20:50 2026 by rpki-client