$ rpki-client -vvf rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft File: 9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft (raw, json) Hash identifier: /QJYmbdHcJHs5VazYbiID9oH34B5roluDpkyHZQfeLs= Subject key identifier: 0C:31:BD:62:31:86:B7:FE:1A:84:80:57:56:FD:AC:59:1E:52:3A:04 Authority key identifier: 9E:9F:59:35:C6:5B:93:B0:70:73:0D:31:DC:3B:0B:94:A4:C3:EF:00 Certificate issuer: /CN=9E9F5935C65B93B070730D31DC3B0B94A4C3EF00 Certificate serial: 7389D15594631B2942EE93A7F50B3BB3404A0519 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft Manifest number: 0E Signing time: Tue 12 May 2026 12:48:02 +0000 Manifest this update: Tue 12 May 2026 12:43:02 +0000 Manifest next update: Wed 13 May 2026 13:46:02 +0000 Files and hashes: 1: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: naWUC2Rkww5G3UJh4eCfssT9Zr/V8p7wGu4ngZht9HU=) 2: 9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.crl (hash: NGxehvHYhobjQMo3Pbpt6dGyiUWXpsrtZ58cri5r0cQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.crl rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:89:d1:55:94:63:1b:29:42:ee:93:a7:f5:0b:3b:b3:40:4a:05:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E9F5935C65B93B070730D31DC3B0B94A4C3EF00 Validity Not Before: May 12 12:43:02 2026 GMT Not After : May 13 13:46:02 2026 GMT Subject: CN=0C31BD623186B7FE1A84805756FDAC591E523A04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d2:17:72:71:66:56:82:a8:01:5f:69:23:1c: e7:0b:4c:f3:cd:95:4d:39:63:19:8e:1d:a4:50:0d: 49:50:81:b2:04:cd:0d:2b:c4:98:33:7d:f2:69:28: 60:94:3a:b5:f7:54:58:69:a0:cf:7b:33:c6:88:7e: d7:40:e6:1f:b0:71:72:6b:c0:c8:60:53:c6:1a:01: 03:51:ce:c6:88:e9:fe:3e:51:f1:94:20:cb:fa:14: 5e:c2:22:d5:e9:8d:86:eb:b8:9d:06:b6:50:e6:cd: 8b:27:e5:06:b6:da:d2:f3:9e:5a:8f:40:66:27:06: 8c:58:4e:8b:08:71:9d:57:71:d5:79:a4:b7:fe:da: 74:5f:1e:74:53:7b:87:fb:9b:c2:5f:e9:08:19:bb: d0:b4:b3:8b:21:05:57:25:3e:0c:1f:f6:66:74:ac: f8:f5:1a:b0:27:be:29:d5:65:06:95:cf:8a:d6:00: ad:a5:1d:a3:18:5f:9c:c9:24:28:be:52:5b:ad:5b: 94:76:3d:45:bf:4a:93:87:5c:cd:e2:43:d1:d0:8c: 6c:ce:53:4e:a7:2f:6f:d2:04:36:16:c7:68:e0:ea: c5:35:e7:81:66:28:ed:ea:44:8f:39:08:8a:4f:56: 73:61:66:60:e0:70:4f:e8:d3:ae:c6:fd:99:6e:12: 06:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:31:BD:62:31:86:B7:FE:1A:84:80:57:56:FD:AC:59:1E:52:3A:04 X509v3 Authority Key Identifier: keyid:9E:9F:59:35:C6:5B:93:B0:70:73:0D:31:DC:3B:0B:94:A4:C3:EF:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c8:43:c7:41:68:c8:a0:30:83:77:96:f5:57:78:40:a3:9b: 6b:39:f6:43:35:ed:52:69:8b:18:74:99:3d:41:dc:75:f5:1a: c2:d4:12:16:67:52:8f:b4:92:f5:01:da:5f:2e:34:ca:ed:61: 0b:34:ce:07:6d:6c:bd:ae:3b:76:a8:21:40:b5:40:18:60:5f: 9c:cc:df:5d:71:84:c9:46:56:32:87:09:3b:5c:be:c2:c4:fa: d5:ff:0d:60:d1:13:43:d6:e9:26:59:91:27:ec:4a:b6:1a:42: 31:da:11:8a:90:98:67:63:63:76:ba:52:45:56:58:2a:0d:0e: b2:8b:24:c0:ef:ce:98:80:d9:3e:e9:03:6a:07:cb:e7:2a:77: 24:64:da:5b:e7:48:31:04:ea:a3:69:5c:13:37:d8:ee:14:61: 4a:25:27:a9:5c:7a:09:85:fe:85:e0:a1:1c:44:f8:62:ba:97: 14:09:dd:6f:42:b3:22:3f:7a:ab:d6:cd:3e:35:f4:fd:1e:ac: 88:5a:30:e3:3a:dc:e8:9c:1f:a7:7d:84:01:2f:b2:91:bc:e3: 66:8c:1b:31:86:78:32:f3:fb:ea:c8:be:c6:0b:e0:83:50:d3: a5:8b:7f:59:e7:a6:2f:91:77:cc:41:10:c4:e7:68:a2:dc:3d: 7b:84:01:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc4nRVZRjGylC7pOn9Qs7s0BKBRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU5RjU5MzVDNjVCOTNCMDcwNzMwRDMxREMzQjBCOTRB NEMzRUYwMDAeFw0yNjA1MTIxMjQzMDJaFw0yNjA1MTMxMzQ2MDJaMDMxMTAvBgNV BAMTKDBDMzFCRDYyMzE4NkI3RkUxQTg0ODA1NzU2RkRBQzU5MUU1MjNBMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO0hdycWZWgqgBX2kjHOcLTPPN lU05YxmOHaRQDUlQgbIEzQ0rxJgzffJpKGCUOrX3VFhpoM97M8aIftdA5h+wcXJr wMhgU8YaAQNRzsaI6f4+UfGUIMv6FF7CItXpjYbruJ0GtlDmzYsn5Qa22tLznlqP QGYnBoxYTosIcZ1XcdV5pLf+2nRfHnRTe4f7m8Jf6QgZu9C0s4shBVclPgwf9mZ0 rPj1GrAnvinVZQaVz4rWAK2lHaMYX5zJJCi+UlutW5R2PUW/SpOHXM3iQ9HQjGzO U06nL2/SBDYWx2jg6sU154FmKO3qRI85CIpPVnNhZmDgcE/o067G/ZluEgabAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDDG9YjGGt/4ahIBXVv2sWR5SOgQwHwYDVR0j BBgwFoAUnp9ZNcZbk7Bwcw0x3DsLlKTD7wAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Q3YzdhYzItNWE5Yi00OTJhLWE0YzUtMWYxMzU5MGRhZTA2LzAvOUU5RjU5MzVD NjVCOTNCMDcwNzMwRDMxREMzQjBCOTRBNEMzRUYwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RTlGNTkzNUM2NUI5M0IwNzA3MzBEMzFEQzNCMEI5NEE0QzNF RjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Q3YzdhYzItNWE5Yi00OTJhLWE0 YzUtMWYxMzU5MGRhZTA2LzAvOUU5RjU5MzVDNjVCOTNCMDcwNzMwRDMxREMzQjBC OTRBNEMzRUYwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHIQ8dBaMigMIN3lvVXeECjm2s59kM17VJp ixh0mT1B3HX1GsLUEhZnUo+0kvUB2l8uNMrtYQs0zgdtbL2uO3aoIUC1QBhgX5zM 311xhMlGVjKHCTtcvsLE+tX/DWDRE0PW6SZZkSfsSrYaQjHaEYqQmGdjY3a6UkVW WCoNDrKLJMDvzpiA2T7pA2oHy+cqdyRk2lvnSDEE6qNpXBM32O4UYUolJ6lcegmF /oXgoRxE+GK6lxQJ3W9CsyI/eqvWzT419P0erIhaMOM63OicH6d9hAEvspG842aM GzGGeDLz++rIvsYL4INQ06WLf1nnpi+Rd8xBEMTnaKLcPXuEAT0= -----END CERTIFICATE-----Generated at Wed May 13 04:20:00 2026 by rpki-client