$ rpki-client -vvf rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft File: B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft (raw, json) Hash identifier: dg28dwtO7EKt4F5S46AF9whvM9sqnPvTtpBC05FOHzM= Subject key identifier: 06:49:A5:E8:14:FE:B0:A6:70:99:C9:6A:D6:51:9C:A9:B6:A5:FF:8A Authority key identifier: B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC Certificate issuer: /CN=B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC Certificate serial: 17D4A9E44D91D16206136D347EBD60C854CE234D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:40:51 +0000 Manifest this update: Tue 12 May 2026 19:35:51 +0000 Manifest next update: Wed 13 May 2026 22:52:51 +0000 Files and hashes: 1: 3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (hash: DOdXqvIf8YC77FzkFbP1ZhH9lDDTTUCUrQuHHws44kQ=) 2: B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl (hash: +FrEnl1cAr4PjU7OvAt+DuO0QJbzxoLky09NQ2JouzM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d4:a9:e4:4d:91:d1:62:06:13:6d:34:7e:bd:60:c8:54:ce:23:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC Validity Not Before: May 12 19:35:51 2026 GMT Not After : May 13 22:52:51 2026 GMT Subject: CN=0649A5E814FEB0A67099C96AD6519CA9B6A5FF8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:76:d1:09:bb:35:19:e4:2b:44:6d:43:e2:cf: d8:94:68:66:14:e3:19:17:ea:d6:5a:9b:b5:32:49: bb:5a:5b:4c:7f:20:26:ea:b2:fc:95:90:ef:e4:32: 6e:bb:11:cc:e6:c7:dc:44:04:9a:58:ea:9e:00:e7: 49:8f:99:34:f6:55:48:e9:0a:44:c4:ec:b7:cd:f9: 65:84:0f:bb:21:39:78:a5:e0:43:a2:4e:7f:5c:be: 79:7c:50:9b:1e:bb:aa:1b:61:8b:c5:63:55:d2:c5: b2:68:1d:2b:96:83:0f:16:71:67:d0:8e:1b:ad:b2: 59:a3:d3:b5:f7:0f:94:57:9d:27:b5:40:50:92:3f: c5:ae:41:21:14:c5:06:7a:f6:55:b5:8b:59:6d:6a: 06:72:b6:e2:d6:c0:b7:c6:44:b5:bc:81:da:bf:a2: 4b:8b:c2:a9:c1:a0:5f:89:b1:29:3b:a3:4a:00:b1: ff:91:d5:fd:93:03:a6:70:f3:6e:43:2f:c4:42:b7: 3d:71:ff:c0:ac:09:49:a8:4d:76:ae:64:7a:db:34: 26:a7:26:ee:43:13:08:25:4d:fe:d7:4a:57:b2:f1: d8:2e:b5:0e:f2:32:e2:98:7c:ab:47:bc:90:bc:6e: fb:45:17:f9:e5:bb:5f:5d:41:12:fd:c9:e5:fd:7f: 02:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:49:A5:E8:14:FE:B0:A6:70:99:C9:6A:D6:51:9C:A9:B6:A5:FF:8A X509v3 Authority Key Identifier: keyid:B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:12:bb:db:42:a4:4d:52:d2:73:63:8a:14:45:2f:c4:08:08: c8:ad:96:dc:73:49:6c:6b:dc:0d:b0:a7:b0:f3:08:af:18:2d: 8f:a2:8c:7d:08:de:ca:95:db:cc:65:77:95:b2:97:30:e2:d7: e1:df:ea:15:c1:ea:77:06:99:96:78:12:58:24:12:87:f8:a6: 4d:09:93:90:83:53:c7:aa:0e:a5:61:d0:dc:04:89:b9:96:45: f4:b8:27:da:5e:f5:c0:c1:4d:8f:62:e2:43:a5:41:96:bf:f2: b2:b0:3c:7f:ae:b9:85:87:5d:70:e0:06:52:50:96:cd:13:f1: 06:d5:1f:a8:f0:4f:7f:94:cb:53:8b:d2:53:2b:ff:f3:81:e8: 3c:eb:51:5c:3a:7b:b4:cf:ec:a8:b0:8c:84:29:86:e3:1e:95: 79:8e:30:b1:c2:be:79:79:0c:d4:63:bd:5e:64:0d:a7:f2:10: 72:a2:61:aa:4e:f1:dc:f9:82:7d:f9:90:c5:74:eb:0d:49:6f: be:75:2b:e6:40:9a:c5:c2:45:b4:49:76:7c:97:11:e5:51:aa: c5:72:7d:be:0f:59:3d:52:0e:ab:cc:44:ec:40:e3:44:03:fa: d6:5a:4f:44:7f:b4:dd:2b:69:1c:3d:e9:ce:e8:d1:9c:2a:39: 82:16:ea:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF9Sp5E2R0WIGE200fr1gyFTOI00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk5MDhGNTk0RTYzMEJFQTFFRUEwRERCRjRBMzBEQzhD RjEyN0NBQzAeFw0yNjA1MTIxOTM1NTFaFw0yNjA1MTMyMjUyNTFaMDMxMTAvBgNV BAMTKDA2NDlBNUU4MTRGRUIwQTY3MDk5Qzk2QUQ2NTE5Q0E5QjZBNUZGOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYdtEJuzUZ5CtEbUPiz9iUaGYU 4xkX6tZam7UySbtaW0x/ICbqsvyVkO/kMm67Eczmx9xEBJpY6p4A50mPmTT2VUjp CkTE7LfN+WWED7shOXil4EOiTn9cvnl8UJseu6obYYvFY1XSxbJoHSuWgw8WcWfQ jhutslmj07X3D5RXnSe1QFCSP8WuQSEUxQZ69lW1i1ltagZytuLWwLfGRLW8gdq/ okuLwqnBoF+JsSk7o0oAsf+R1f2TA6Zw825DL8RCtz1x/8CsCUmoTXauZHrbNCan Ju5DEwglTf7XSley8dgutQ7yMuKYfKtHvJC8bvtFF/nlu19dQRL9yeX9fwJ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBkml6BT+sKZwmclq1lGcqbal/4owHwYDVR0j BBgwFoAUuZCPWU5jC+oe6g3b9KMNyM8SfKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZlY2M3MmEtZTk1NC00MzAyLTkyYzQtZjRmMjMwNzBiOTk3LzAvQjk5MDhGNTk0 RTYzMEJFQTFFRUEwRERCRjRBMzBEQzhDRjEyN0NBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTkwOEY1OTRFNjMwQkVBMUVFQTBEREJGNEEzMERDOENGMTI3 Q0FDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZlY2M3MmEtZTk1NC00MzAyLTky YzQtZjRmMjMwNzBiOTk3LzAvQjk5MDhGNTk0RTYzMEJFQTFFRUEwRERCRjRBMzBE QzhDRjEyN0NBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcSu9tCpE1S0nNjihRFL8QICMitltxzSWxr 3A2wp7DzCK8YLY+ijH0I3sqV28xld5WylzDi1+Hf6hXB6ncGmZZ4ElgkEof4pk0J k5CDU8eqDqVh0NwEibmWRfS4J9pe9cDBTY9i4kOlQZa/8rKwPH+uuYWHXXDgBlJQ ls0T8QbVH6jwT3+Uy1OL0lMr//OB6DzrUVw6e7TP7KiwjIQphuMelXmOMLHCvnl5 DNRjvV5kDafyEHKiYapO8dz5gn35kMV06w1Jb751K+ZAmsXCRbRJdnyXEeVRqsVy fb4PWT1SDqvMROxA40QD+tZaT0R/tN0raRw96c7o0ZwqOYIW6nE= -----END CERTIFICATE-----Generated at Wed May 13 00:43:42 2026 by rpki-client