$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft File: 9FA20A14AF60219662C9668DE75D25F0C8B84220.mft (raw, json) Hash identifier: lPEw+aU6n8JQe3Dg1NtrfGPgjWXvUfkZWqMfDxT7ybY= Subject key identifier: 1F:50:30:8D:25:6A:CB:52:47:D8:75:66:F4:8D:3D:CA:AB:31:D7:12 Authority key identifier: 9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20 Certificate issuer: /CN=9FA20A14AF60219662C9668DE75D25F0C8B84220 Certificate serial: 71C1636832CCA72CB811D759243D9FA40E889A2D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:42:48 +0000 Manifest this update: Tue 12 May 2026 23:37:48 +0000 Manifest next update: Thu 14 May 2026 01:30:48 +0000 Files and hashes: 1: 9FA20A14AF60219662C9668DE75D25F0C8B84220.crl (hash: TCGhGJzAd25baSYbwXaawZ6yRb9B0vc/Gn+0uVDyyrw=) 2: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: YS2T4alON/4lMEWof38ueY05KIoXFInJbn/EVbWzFdU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c1:63:68:32:cc:a7:2c:b8:11:d7:59:24:3d:9f:a4:0e:88:9a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FA20A14AF60219662C9668DE75D25F0C8B84220 Validity Not Before: May 12 23:37:48 2026 GMT Not After : May 14 01:30:48 2026 GMT Subject: CN=1F50308D256ACB5247D87566F48D3DCAAB31D712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:4a:58:78:3f:a0:7f:7b:80:fe:d2:24:ba:de: b9:11:15:9b:28:d1:2a:3d:c5:66:fa:66:3b:f5:52: 88:d9:27:7e:d7:81:07:fa:7c:34:91:7e:c2:17:63: 7b:b7:6e:ca:7c:39:44:41:30:ff:b1:1a:34:14:c2: f4:27:0b:2a:d3:3e:ca:83:f6:8c:9b:99:ae:92:bd: fd:19:69:15:3c:c4:b1:38:48:a8:ed:d0:22:41:18: 9e:fd:33:b0:37:94:d4:14:91:60:27:f0:7f:f5:93: 8c:13:5f:76:20:9b:bb:ab:ed:a6:91:5b:ff:9e:26: 3f:4b:06:2f:14:d4:61:24:42:eb:26:00:ba:d4:e0: 47:67:1e:04:e3:6c:0c:0a:31:18:15:8f:00:de:70: f1:db:68:99:c9:fe:57:28:28:ab:00:70:5f:75:ea: 62:f9:40:ec:4a:29:25:03:46:6e:a6:42:09:e8:b1: 82:21:47:85:90:14:c1:7d:ad:95:cc:59:2e:36:b5: 85:0b:f6:58:77:bd:3c:20:e7:d6:d0:21:5b:3b:91: 52:eb:db:3b:51:94:23:bc:21:88:a2:9e:49:ee:cd: 97:cf:96:40:a5:a4:bd:8b:3f:74:09:d1:3a:a6:2a: a0:14:cf:a0:23:68:ec:81:d4:bd:01:be:62:d0:01: 67:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:50:30:8D:25:6A:CB:52:47:D8:75:66:F4:8D:3D:CA:AB:31:D7:12 X509v3 Authority Key Identifier: keyid:9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:3a:49:9e:8d:f3:60:6a:1d:f7:9c:14:6e:71:99:e2:94:e4: 31:be:2f:da:e9:c2:ef:8d:6e:ff:98:da:2c:42:9b:e9:9b:ea: d4:1b:20:ad:2e:e2:05:e3:5a:43:a0:61:42:58:80:38:27:2d: 4c:8c:b4:00:11:8a:f3:89:05:6d:e4:99:1f:35:e4:f2:ec:00: fc:5a:af:1e:1e:11:ca:c8:2d:42:d6:7f:dc:8d:15:20:b9:ef: 9f:a5:f0:db:b4:b9:98:33:e6:dd:60:38:c7:3a:23:8b:f9:4d: ce:fa:4a:41:19:77:c2:87:d2:9d:de:73:26:73:ca:af:95:ca: 77:dd:80:76:1b:64:b7:86:25:41:f0:15:ad:eb:4a:bd:e4:54: a2:14:1b:a6:f5:10:8d:9d:b4:30:60:cf:21:3b:8a:cf:78:86: 35:e2:7f:93:a8:41:6e:87:2c:ee:8e:4b:e9:6f:66:c9:1b:1d: 59:ab:bf:52:6f:23:5a:21:cd:d2:22:39:31:36:f5:6d:b7:9b: 11:b5:26:58:12:49:98:c8:53:69:8b:59:68:d1:d6:a3:4d:a3: 6d:20:e2:06:1c:d3:38:cc:23:d6:ca:d9:6f:ea:20:ff:9b:c2: 57:43:3a:35:67:c2:01:10:1b:5d:d6:a4:c8:71:f7:86:f9:3e: 8d:8f:c8:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUccFjaDLMpyy4EddZJD2fpA6Imi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBMjBBMTRBRjYwMjE5NjYyQzk2NjhERTc1RDI1RjBD OEI4NDIyMDAeFw0yNjA1MTIyMzM3NDhaFw0yNjA1MTQwMTMwNDhaMDMxMTAvBgNV BAMTKDFGNTAzMDhEMjU2QUNCNTI0N0Q4NzU2NkY0OEQzRENBQUIzMUQ3MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1Slh4P6B/e4D+0iS63rkRFZso 0So9xWb6Zjv1UojZJ37XgQf6fDSRfsIXY3u3bsp8OURBMP+xGjQUwvQnCyrTPsqD 9oybma6Svf0ZaRU8xLE4SKjt0CJBGJ79M7A3lNQUkWAn8H/1k4wTX3Ygm7ur7aaR W/+eJj9LBi8U1GEkQusmALrU4EdnHgTjbAwKMRgVjwDecPHbaJnJ/lcoKKsAcF91 6mL5QOxKKSUDRm6mQgnosYIhR4WQFMF9rZXMWS42tYUL9lh3vTwg59bQIVs7kVLr 2ztRlCO8IYiinknuzZfPlkClpL2LP3QJ0TqmKqAUz6AjaOyB1L0BvmLQAWcFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH1AwjSVqy1JH2HVm9I09yqsx1xIwHwYDVR0j BBgwFoAUn6IKFK9gIZZiyWaN510l8Mi4QiAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzVlNTQ2OGMtMGFjNy00NGE5LTg4MjEtMjgyNTdjNWE4NjA3LzAvOUZBMjBBMTRB RjYwMjE5NjYyQzk2NjhERTc1RDI1RjBDOEI4NDIyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkEyMEExNEFGNjAyMTk2NjJDOTY2OERFNzVEMjVGMEM4Qjg0 MjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvOUZBMjBBMTRBRjYwMjE5NjYyQzk2NjhERTc1RDI1 RjBDOEI4NDIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJo6SZ6N82BqHfecFG5xmeKU5DG+L9rpwu+N bv+Y2ixCm+mb6tQbIK0u4gXjWkOgYUJYgDgnLUyMtAARivOJBW3kmR815PLsAPxa rx4eEcrILULWf9yNFSC575+l8Nu0uZgz5t1gOMc6I4v5Tc76SkEZd8KH0p3ecyZz yq+VynfdgHYbZLeGJUHwFa3rSr3kVKIUG6b1EI2dtDBgzyE7is94hjXif5OoQW6H LO6OS+lvZskbHVmrv1JvI1ohzdIiOTE29W23mxG1JlgSSZjIU2mLWWjR1qNNo20g 4gYc0zjMI9bK2W/qIP+bwldDOjVnwgEQG13WpMhx94b5Po2PyNs= -----END CERTIFICATE-----Generated at Wed May 13 02:51:18 2026 by rpki-client