$ rpki-client -vvf rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft File: 9A9D4BDD4311519F6A96141040EA1E98B3363388.mft (raw, json) Hash identifier: KiYJBH73vtJbHpM31iSIj6RD+DimY1Umjdsbb8WzOks= Subject key identifier: E1:2A:A3:A3:AA:D9:46:09:AC:41:F9:B7:19:0A:95:56:42:9C:B2:D1 Authority key identifier: 9A:9D:4B:DD:43:11:51:9F:6A:96:14:10:40:EA:1E:98:B3:36:33:88 Certificate issuer: /CN=9A9D4BDD4311519F6A96141040EA1E98B3363388 Certificate serial: 6804ABAAD92EBED198FCB9BBC586E55621141CD6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:35:58 +0000 Manifest this update: Tue 12 May 2026 22:30:58 +0000 Manifest next update: Wed 13 May 2026 23:12:58 +0000 Files and hashes: 1: 9A9D4BDD4311519F6A96141040EA1E98B3363388.crl (hash: S0o8pe811461WgeqCuKu4bBnq4nqM9/h9JCRfsU5Blw=) 2: 3130332e3133342e36372e302f32342d3234203d3e203435333132.roa (hash: Rjd2vE2zGKftmY05BM4C0TjHIPA+ii1Rf27f+odCFqc=) 3: 3130332e3133342e36362e302f32342d3234203d3e203435333132.roa (hash: DKDIZFIIa7OPxQWCaUBiuhGDeGm6kz/UIChkAD3FgzA=) 4: 3130332e3133342e36362e302f32332d3234203d3e203435333132.roa (hash: jEIwfeqUw3Ty0aBUNoGyFFLgparqhCueZmPPzJmpnn8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.crl rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:04:ab:aa:d9:2e:be:d1:98:fc:b9:bb:c5:86:e5:56:21:14:1c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A9D4BDD4311519F6A96141040EA1E98B3363388 Validity Not Before: May 12 22:30:58 2026 GMT Not After : May 13 23:12:58 2026 GMT Subject: CN=E12AA3A3AAD94609AC41F9B7190A9556429CB2D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6e:c4:91:82:63:33:37:66:0b:e1:a8:1f:f7: 69:64:5b:31:c4:8f:5e:a6:e9:9b:8c:b2:c3:19:10: fc:77:35:80:2c:4f:a4:6b:79:52:25:5d:fe:5d:8e: 23:d6:9e:73:0d:a7:b6:b1:24:3e:31:58:94:c1:38: f7:ef:63:13:89:af:ab:45:5d:04:4c:6f:06:a7:ed: 60:06:97:39:86:4b:bd:d4:6e:99:63:29:4a:68:56: c9:f4:ec:f4:44:95:bb:e4:de:18:cc:50:86:ff:cc: e1:e0:b0:e4:8e:9f:47:83:d4:ef:9e:35:c6:6d:c0: f9:5f:95:8d:0d:42:be:cf:08:53:2d:db:8b:06:0e: d5:62:9c:1f:c3:37:ac:a4:01:11:32:7c:1c:1d:ec: af:b2:6a:03:2c:4d:b3:bc:7f:71:c7:d9:b6:fe:3c: f5:f7:9e:cf:69:f9:00:5c:e0:49:32:92:0b:27:40: ab:76:78:d4:33:4b:2e:02:ba:2e:8b:6d:9b:03:ff: 70:d6:b9:f3:88:d4:be:c5:02:4a:f3:67:5c:0b:fd: 12:e6:91:b4:ae:49:6d:45:ad:c7:22:28:28:d9:53: d3:9c:c7:c5:51:7a:33:5c:fb:ad:49:bf:f4:00:cc: b5:03:d2:c0:db:f8:8d:cb:00:0a:5e:db:bb:08:6f: a2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:2A:A3:A3:AA:D9:46:09:AC:41:F9:B7:19:0A:95:56:42:9C:B2:D1 X509v3 Authority Key Identifier: keyid:9A:9D:4B:DD:43:11:51:9F:6A:96:14:10:40:EA:1E:98:B3:36:33:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:d0:28:2c:98:29:94:80:62:19:9c:4b:bb:6a:6a:15:00:7c: 76:20:78:76:1f:ed:2a:f4:75:f4:ee:21:42:80:72:b9:bf:84: 33:e7:e1:7c:15:30:e9:a6:f7:41:81:b9:bc:51:98:53:2e:18: 0b:a1:3c:82:f5:c7:2b:df:5d:8e:70:70:a3:65:84:3d:89:ee: 8d:53:0e:9b:f4:63:a3:c7:07:7f:54:44:9d:fa:f9:f1:b2:4f: de:35:ab:b1:bd:3e:3b:16:8c:78:ae:bc:b2:f9:08:27:48:49: 7c:8e:64:54:72:6b:73:60:3c:11:25:47:ca:1c:2d:91:bd:f5: de:16:59:5c:b5:47:75:f3:6c:98:fa:50:55:7c:a3:6f:f2:86: 13:03:53:fe:0d:b2:53:68:b0:a0:bb:8f:f5:23:ff:ce:da:ae: ef:d4:7f:3b:3c:7a:48:03:98:a4:1d:84:3e:64:e1:5d:22:92: 5a:2d:76:a5:e2:f1:56:d3:70:c8:4c:eb:2a:1b:f6:36:1c:6c: db:09:c2:27:78:17:54:68:f1:77:fa:8c:a4:bd:28:f2:15:b9: 46:8d:44:94:e3:1f:58:46:e2:22:39:0d:4e:33:77:86:95:3a: 4b:a9:ac:09:7e:88:86:39:a6:b9:52:fb:7f:fd:72:7a:51:7a: 78:36:03:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaASrqtkuvtGY/Lm7xYblViEUHNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5RDRCREQ0MzExNTE5RjZBOTYxNDEwNDBFQTFFOThC MzM2MzM4ODAeFw0yNjA1MTIyMjMwNThaFw0yNjA1MTMyMzEyNThaMDMxMTAvBgNV BAMTKEUxMkFBM0EzQUFEOTQ2MDlBQzQxRjlCNzE5MEE5NTU2NDI5Q0IyRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpbsSRgmMzN2YL4agf92lkWzHE j16m6ZuMssMZEPx3NYAsT6RreVIlXf5djiPWnnMNp7axJD4xWJTBOPfvYxOJr6tF XQRMbwan7WAGlzmGS73UbpljKUpoVsn07PRElbvk3hjMUIb/zOHgsOSOn0eD1O+e NcZtwPlflY0NQr7PCFMt24sGDtVinB/DN6ykAREyfBwd7K+yagMsTbO8f3HH2bb+ PPX3ns9p+QBc4EkykgsnQKt2eNQzSy4Cui6LbZsD/3DWufOI1L7FAkrzZ1wL/RLm kbSuSW1FrcciKCjZU9Ocx8VRejNc+61Jv/QAzLUD0sDb+I3LAApe27sIb6JPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Sqjo6rZRgmsQfm3GQqVVkKcstEwHwYDVR0j BBgwFoAUmp1L3UMRUZ9qlhQQQOoemLM2M4gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmY2NmJmYTYtZGM0Yy00MTA4LTkzMmMtMjA0YjYyZTg2MjcyLzAvOUE5RDRCREQ0 MzExNTE5RjZBOTYxNDEwNDBFQTFFOThCMzM2MzM4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTlENEJERDQzMTE1MTlGNkE5NjE0MTA0MEVBMUU5OEIzMzYz Mzg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmY2NmJmYTYtZGM0Yy00MTA4LTkz MmMtMjA0YjYyZTg2MjcyLzAvOUE5RDRCREQ0MzExNTE5RjZBOTYxNDEwNDBFQTFF OThCMzM2MzM4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANPQKCyYKZSAYhmcS7tqahUAfHYgeHYf7Sr0 dfTuIUKAcrm/hDPn4XwVMOmm90GBubxRmFMuGAuhPIL1xyvfXY5wcKNlhD2J7o1T Dpv0Y6PHB39URJ36+fGyT941q7G9PjsWjHiuvLL5CCdISXyOZFRya3NgPBElR8oc LZG99d4WWVy1R3XzbJj6UFV8o2/yhhMDU/4NslNosKC7j/Uj/87aru/Ufzs8ekgD mKQdhD5k4V0iklotdqXi8VbTcMhM6yob9jYcbNsJwid4F1Ro8Xf6jKS9KPIVuUaN RJTjH1hG4iI5DU4zd4aVOkuprAl+iIY5prlS+3/9cnpReng2A6s= -----END CERTIFICATE-----Generated at Wed May 13 07:46:03 2026 by rpki-client