$ rpki-client -vvf rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft File: 09F1FCE71540608DD361D20037B585CA6313B714.mft (raw, json) Hash identifier: vh82+Ys/xyLyvwcGQW6so8nmldx26vJCkAQtxvwUd5w= Subject key identifier: A1:22:95:D4:70:98:8B:F0:AB:FC:96:54:66:26:77:62:C8:3C:B9:FF Authority key identifier: 09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14 Certificate issuer: /CN=09F1FCE71540608DD361D20037B585CA6313B714 Certificate serial: 3D1DEDBEC48523F17DC69F909F2ABCFB5AF6A1D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:09:51 +0000 Manifest this update: Tue 12 May 2026 19:04:51 +0000 Manifest next update: Wed 13 May 2026 19:47:51 +0000 Files and hashes: 1: 323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (hash: lNRKhcmiZUAq3a5jFdaJmEqXMHj1lj+pscOEkjDxix0=) 2: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (hash: Tdrs/9MxQFRJ04JmOuNBrPQeJZxfkO1jdYAYtxuEviE=) 3: 09F1FCE71540608DD361D20037B585CA6313B714.crl (hash: 3rJ0c4juqAsm7wlcoldgittBcvaYsPye85zWdRJSt7w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:1d:ed:be:c4:85:23:f1:7d:c6:9f:90:9f:2a:bc:fb:5a:f6:a1:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F1FCE71540608DD361D20037B585CA6313B714 Validity Not Before: May 12 19:04:51 2026 GMT Not After : May 13 19:47:51 2026 GMT Subject: CN=A12295D470988BF0ABFC965466267762C83CB9FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:48:8d:bf:34:a5:b9:37:fc:00:11:85:95:5d: 7d:33:64:4e:df:5a:27:9c:d4:c9:b5:98:67:9d:ab: 5e:f4:af:af:42:4f:8d:ec:40:02:61:86:f8:bb:f8: 8f:cd:d6:c8:78:ca:2d:c2:ab:02:89:af:4e:bb:fd: 44:82:91:4c:6a:81:2f:d1:5d:a6:cf:1d:a2:35:7f: 81:98:ff:d1:a6:82:16:1f:56:d5:45:09:66:9d:33: 82:73:be:93:0b:ef:b6:bb:84:6f:28:d2:19:87:a9: 44:3f:24:13:1b:26:c6:4c:07:19:bb:d4:31:d3:91: 18:9b:7c:b5:0a:e9:36:e7:7e:c7:97:da:5d:97:75: d4:c9:e0:d6:23:cf:a9:26:d1:a2:52:a5:17:c0:12: dd:fe:11:bb:98:7e:83:6e:64:ee:2c:31:d9:92:5e: 1a:7b:02:28:e6:6c:81:75:e2:a9:03:8b:90:fb:51: b4:ad:ff:6e:71:2f:a7:3c:b0:69:03:85:58:82:72: 90:f6:48:53:81:97:84:13:ac:7c:c0:82:c5:f9:98: 85:7d:c1:8b:81:98:ff:c8:6f:79:05:f2:ea:f4:a4: 97:11:b2:99:77:54:34:0e:3c:51:31:46:b5:66:db: ac:ae:f7:b1:27:d0:84:57:f5:44:e3:60:d1:80:41: 44:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:22:95:D4:70:98:8B:F0:AB:FC:96:54:66:26:77:62:C8:3C:B9:FF X509v3 Authority Key Identifier: keyid:09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:96:2b:fd:25:c5:44:ca:8c:23:74:ae:28:de:b2:71:15:f9: e2:2d:65:f5:69:38:f8:df:53:7a:bc:54:31:46:0e:4d:f8:09: 7b:76:3b:8f:89:25:9e:f9:4e:d1:3a:52:11:58:26:83:e8:2a: 6b:af:e4:f9:26:8a:ca:c9:1d:48:b7:8f:41:51:5b:98:11:d6: c5:54:14:2d:d1:cd:a8:10:37:aa:2b:e1:8e:62:59:b9:8e:3d: 54:45:03:13:d9:b8:30:66:bb:e4:37:13:b9:22:b2:49:f2:29: fd:4a:91:21:bd:f0:78:ca:40:06:9c:1e:3d:7c:c4:7b:0e:36: bb:65:06:70:72:24:da:73:c7:3f:40:da:11:e6:16:de:49:8a: 43:54:1b:8e:e7:1f:88:9a:8d:45:c8:2b:bf:93:48:36:3c:38: 8e:21:b7:ac:0c:60:9e:b9:f4:e1:3d:e9:02:ea:d3:b3:b3:bd: be:5c:bb:97:ec:95:a1:10:49:4a:48:3c:b2:23:aa:95:3e:53: 3a:c4:a1:06:0c:69:49:6d:5e:8f:2e:5a:1b:a3:63:72:84:5b: 6e:9b:7d:87:83:ff:d8:10:c3:22:d2:b4:f4:e1:89:d7:dc:39: ca:e8:12:1e:a2:4e:a6:1f:18:33:46:ba:3a:84:f3:bb:1a:4f: 50:d8:69:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPR3tvsSFI/F9xp+Qnyq8+1r2odgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMUZDRTcxNTQwNjA4REQzNjFEMjAwMzdCNTg1Q0E2 MzEzQjcxNDAeFw0yNjA1MTIxOTA0NTFaFw0yNjA1MTMxOTQ3NTFaMDMxMTAvBgNV BAMTKEExMjI5NUQ0NzA5ODhCRjBBQkZDOTY1NDY2MjY3NzYyQzgzQ0I5RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBSI2/NKW5N/wAEYWVXX0zZE7f Wiec1Mm1mGedq170r69CT43sQAJhhvi7+I/N1sh4yi3CqwKJr067/USCkUxqgS/R XabPHaI1f4GY/9GmghYfVtVFCWadM4JzvpML77a7hG8o0hmHqUQ/JBMbJsZMBxm7 1DHTkRibfLUK6TbnfseX2l2XddTJ4NYjz6km0aJSpRfAEt3+EbuYfoNuZO4sMdmS Xhp7AijmbIF14qkDi5D7UbSt/25xL6c8sGkDhViCcpD2SFOBl4QTrHzAgsX5mIV9 wYuBmP/Ib3kF8ur0pJcRspl3VDQOPFExRrVm26yu97En0IRX9UTjYNGAQUQZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoSKV1HCYi/Cr/JZUZiZ3Ysg8uf8wHwYDVR0j BBgwFoAUCfH85xVAYI3TYdIAN7WFymMTtxQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU1YWE5M2QtNzg3Yi00YTE3LTg3ZDAtN2VmNDFiMGYyZGVmLzAvMDlGMUZDRTcx NTQwNjA4REQzNjFEMjAwMzdCNTg1Q0E2MzEzQjcxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOUYxRkNFNzE1NDA2MDhERDM2MUQyMDAzN0I1ODVDQTYzMTNC NzE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU1YWE5M2QtNzg3Yi00YTE3LTg3 ZDAtN2VmNDFiMGYyZGVmLzAvMDlGMUZDRTcxNTQwNjA4REQzNjFEMjAwMzdCNTg1 Q0E2MzEzQjcxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqWK/0lxUTKjCN0rijesnEV+eItZfVpOPjf U3q8VDFGDk34CXt2O4+JJZ75TtE6UhFYJoPoKmuv5PkmisrJHUi3j0FRW5gR1sVU FC3RzagQN6or4Y5iWbmOPVRFAxPZuDBmu+Q3E7kisknyKf1KkSG98HjKQAacHj18 xHsONrtlBnByJNpzxz9A2hHmFt5JikNUG47nH4iajUXIK7+TSDY8OI4ht6wMYJ65 9OE96QLq07Ozvb5cu5fslaEQSUpIPLIjqpU+UzrEoQYMaUltXo8uWhujY3KEW26b fYeD/9gQwyLStPThidfcOcroEh6iTqYfGDNGujqE87saT1DYabM= -----END CERTIFICATE-----Generated at Tue May 12 22:19:33 2026 by rpki-client