$ rpki-client -vvf rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft File: 9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft (raw, json) Hash identifier: t+0z0dTHfQ1l7MJZk9HjHP5Uw3kU13qiErCypYQcs5A= Subject key identifier: 8A:40:0C:19:10:60:66:24:95:C4:80:8D:C0:C9:10:8B:A0:90:B4:A1 Authority key identifier: 9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C Certificate issuer: /CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C Certificate serial: 5E4D888B41BEF0B501FED26E0D3E8E52470E291D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:18:30 +0000 Manifest this update: Tue 12 May 2026 07:13:30 +0000 Manifest next update: Wed 13 May 2026 07:48:30 +0000 Files and hashes: 1: 9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl (hash: iDs8OU9wSPhwo6MaIXRh6F9GiSw5E8wMZ/Y2hZNLVKI=) 2: 323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa (hash: OPLg91e3QDUz0oxlHDtfye2YYgsL8tJKKqHtqB32VO0=) 3: 3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (hash: /Ar9BLD37pzpWiMramvnEnpVLlVnDEgU4xEdcB/AMOA=) 4: 3130332e32332e39382e302f32332d3233203d3e20313530323435.roa (hash: 7xqE0F9v+EXRL9dCkePN1NHTFDTfqFm2QwKgbcBy4ao=) 5: 3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (hash: w0+5fhmaBdxaqda6UhvTmcPuYEdSCtqjLZVClfvW/98=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:4d:88:8b:41:be:f0:b5:01:fe:d2:6e:0d:3e:8e:52:47:0e:29:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C Validity Not Before: May 12 07:13:30 2026 GMT Not After : May 13 07:48:30 2026 GMT Subject: CN=8A400C191060662495C4808DC0C9108BA090B4A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:97:47:fc:7d:9d:5e:78:44:47:6b:ea:45:ab: 3e:65:f9:d1:48:93:bd:49:87:4a:3f:5e:0c:7b:7c: 09:3c:6d:fe:3a:4d:4a:46:a7:ee:2a:a6:34:d9:c8: c8:fe:b6:78:65:95:47:1e:e4:83:d6:d5:c2:af:81: 2b:d6:ef:bc:c4:99:30:2f:09:6a:a8:a9:e4:57:9b: 37:4c:95:e0:ac:af:c4:f7:c5:a4:22:88:82:33:3c: 59:b0:ce:90:e1:21:e8:e4:24:8e:cc:b7:d4:5f:2b: a5:d1:a9:6f:f0:d6:54:78:06:22:0c:cf:06:0e:98: 51:9a:12:fa:dd:27:a1:4e:9c:c2:72:3a:65:2e:77: 36:75:fc:fb:fd:ea:b5:1c:de:9d:14:70:f7:80:15: fb:0c:88:5d:ff:74:09:ce:7f:b7:e2:76:bb:11:eb: 05:9d:4c:3e:66:b0:1d:2a:e1:ed:82:0a:0c:56:60: 45:ec:05:0b:48:97:67:d0:dd:8f:49:68:e9:74:b8: 99:77:ad:15:d6:3a:80:4b:c4:f1:56:bb:11:d8:60: 80:14:a0:7c:7b:fd:4f:5d:d4:0d:e6:86:5f:c6:37: 57:d1:63:46:75:2a:cd:57:90:a3:5e:36:71:25:68: 5b:9c:64:bd:2c:8e:84:19:06:91:30:73:ce:5e:1b: 52:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:40:0C:19:10:60:66:24:95:C4:80:8D:C0:C9:10:8B:A0:90:B4:A1 X509v3 Authority Key Identifier: keyid:9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6c:c4:9c:96:e7:42:b1:44:0d:b3:41:8d:95:ad:8c:aa:87: 99:3e:c4:28:7c:f6:10:09:4b:bc:cb:17:86:a9:e2:fc:ac:5f: e6:6e:58:0c:92:34:db:02:ac:e1:97:27:a5:71:01:9b:ed:f9: c8:7b:66:eb:41:4c:23:f0:0c:8d:ff:38:f6:89:1f:2c:e1:70: d5:3a:ed:68:92:a0:44:ca:2d:8b:fa:7a:46:48:5e:38:e9:54: 09:8b:fe:a7:1c:0a:5b:24:a4:d5:6d:33:bc:38:19:17:3c:70: 07:c9:53:34:5b:f5:c3:64:c6:20:ac:5b:66:28:f5:0c:8d:ef: a3:83:0d:27:e3:29:18:37:7e:d0:44:4a:b3:bb:d8:64:f5:3e: b8:3a:bc:98:fd:e9:8c:9d:42:9c:cd:3e:fd:3d:91:6f:de:f3: b9:00:a9:4f:fa:a9:2b:74:4f:8c:4d:b7:00:64:5d:fd:57:74: a5:eb:52:74:0c:a8:72:12:1c:b2:57:3d:cf:d9:f5:78:c5:cd: 9a:5c:57:4b:29:5e:7d:b3:66:83:a2:bc:53:e8:5f:c2:5d:56: dc:54:82:38:33:97:b2:7a:44:16:cd:f3:b2:f0:f0:b8:0c:21: 70:3b:21:21:10:87:bb:b5:1f:c3:26:ab:13:23:66:b4:5b:e5: 26:ad:2d:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXk2Ii0G+8LUB/tJuDT6OUkcOKR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURGQzdBNTE0OUQzRkNDMEFDRDlCQkVENTVDNENFOEVB ODJBMDM4QzAeFw0yNjA1MTIwNzEzMzBaFw0yNjA1MTMwNzQ4MzBaMDMxMTAvBgNV BAMTKDhBNDAwQzE5MTA2MDY2MjQ5NUM0ODA4REMwQzkxMDhCQTA5MEI0QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkl0f8fZ1eeERHa+pFqz5l+dFI k71Jh0o/Xgx7fAk8bf46TUpGp+4qpjTZyMj+tnhllUce5IPW1cKvgSvW77zEmTAv CWqoqeRXmzdMleCsr8T3xaQiiIIzPFmwzpDhIejkJI7Mt9RfK6XRqW/w1lR4BiIM zwYOmFGaEvrdJ6FOnMJyOmUudzZ1/Pv96rUc3p0UcPeAFfsMiF3/dAnOf7fidrsR 6wWdTD5msB0q4e2CCgxWYEXsBQtIl2fQ3Y9JaOl0uJl3rRXWOoBLxPFWuxHYYIAU oHx7/U9d1A3mhl/GN1fRY0Z1Ks1XkKNeNnElaFucZL0sjoQZBpEwc85eG1KfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUikAMGRBgZiSVxICNwMkQi6CQtKEwHwYDVR0j BBgwFoAUnfx6UUnT/MCs2bvtVcTOjqgqA4wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg0NmY0MjItYzMwMi00NDYyLWI1ODQtNzAwZTkzNDZjYTA5LzAvOURGQzdBNTE0 OUQzRkNDMEFDRDlCQkVENTVDNENFOEVBODJBMDM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REZDN0E1MTQ5RDNGQ0MwQUNEOUJCRUQ1NUM0Q0U4RUE4MkEw MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg0NmY0MjItYzMwMi00NDYyLWI1 ODQtNzAwZTkzNDZjYTA5LzAvOURGQzdBNTE0OUQzRkNDMEFDRDlCQkVENTVDNENF OEVBODJBMDM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9sxJyW50KxRA2zQY2VrYyqh5k+xCh89hAJ S7zLF4ap4vysX+ZuWAySNNsCrOGXJ6VxAZvt+ch7ZutBTCPwDI3/OPaJHyzhcNU6 7WiSoETKLYv6ekZIXjjpVAmL/qccClskpNVtM7w4GRc8cAfJUzRb9cNkxiCsW2Yo 9QyN76ODDSfjKRg3ftBESrO72GT1Prg6vJj96YydQpzNPv09kW/e87kAqU/6qSt0 T4xNtwBkXf1XdKXrUnQMqHISHLJXPc/Z9XjFzZpcV0spXn2zZoOivFPoX8JdVtxU gjgzl7J6RBbN87Lw8LgMIXA7ISEQh7u1H8MmqxMjZrRb5SatLUU= -----END CERTIFICATE-----Generated at Wed May 13 01:45:34 2026 by rpki-client