$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft File: B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft (raw, json) Hash identifier: 9sb0Yb+yKmjUc4EChUzn66d9XUk/sMwdWhTJz8wO84E= Subject key identifier: 3F:6D:72:D8:CA:B9:11:24:D1:99:46:F3:3D:78:9D:BA:26:2E:40:B6 Authority key identifier: B9:A5:C7:ED:38:66:D3:CA:D2:44:DA:B3:64:D5:DE:AB:01:B4:1B:27 Certificate issuer: /CN=B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27 Certificate serial: 0CCAFA90EFE4166CA81062B5E93DA9AE16E2121B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft Manifest number: 0F Signing time: Tue 12 May 2026 12:12:39 +0000 Manifest this update: Tue 12 May 2026 12:07:39 +0000 Manifest next update: Wed 13 May 2026 14:22:39 +0000 Files and hashes: 1: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: 4Y1mZB2qJy+rnsbtqPt0mJQCafCDh7l369bEnaFDUds=) 2: B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl (hash: hWdpjESsjZyydL8awrVrhMYA3lLYxNsqlYFuVbexcQY=) 3: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: 0dA2mfgVhJxUx/fjGY3+Dm6GSQVEEUHFqlvFJHB2B4M=) 4: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: fnDhoiL+V7XHrTgcb34geX86ATfCep/ePS+vjKoYts4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ca:fa:90:ef:e4:16:6c:a8:10:62:b5:e9:3d:a9:ae:16:e2:12:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27 Validity Not Before: May 12 12:07:39 2026 GMT Not After : May 13 14:22:39 2026 GMT Subject: CN=3F6D72D8CAB91124D19946F33D789DBA262E40B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5e:96:9f:54:23:da:4a:76:7b:f7:9b:72:d5: f5:62:35:f5:56:fc:aa:17:27:5e:ad:30:f1:88:81: 1f:37:e4:6a:01:70:f6:53:0d:ae:5d:4e:da:26:04: c0:a5:1a:f6:e6:c6:a9:7e:78:4e:fd:e7:bc:26:77: 54:e5:73:d0:1c:17:98:8d:28:19:b1:4e:6b:d8:ce: 04:ba:56:d2:42:31:5f:ef:aa:f4:62:97:31:39:09: 7f:2a:bc:c3:5c:d9:89:38:f0:86:dc:68:5a:ce:fd: 33:8e:5a:6f:b4:45:c2:63:de:ac:3f:ae:aa:13:1e: 87:51:3c:2b:a1:83:2c:66:a5:48:d7:9b:6d:16:57: ea:b5:67:6e:81:b0:c7:44:8d:a5:94:0f:f6:06:a5: 6a:e6:c7:81:eb:74:44:95:ff:4a:af:89:0c:5b:fc: a6:c6:95:c4:b5:87:7a:f8:3a:ba:33:f6:49:a9:f5: 1c:11:e3:51:47:cb:5a:99:5e:2e:b5:8a:3d:80:1e: ef:ed:8a:c0:06:39:4b:c5:6f:45:7d:20:11:44:1f: 56:46:d6:86:12:36:38:65:db:31:77:17:e2:55:67: 81:46:0b:09:ff:76:57:f9:3d:84:7a:7b:68:77:2a: 85:ab:62:39:3b:73:44:b7:fb:04:d1:50:54:07:86: c8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6D:72:D8:CA:B9:11:24:D1:99:46:F3:3D:78:9D:BA:26:2E:40:B6 X509v3 Authority Key Identifier: keyid:B9:A5:C7:ED:38:66:D3:CA:D2:44:DA:B3:64:D5:DE:AB:01:B4:1B:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f4:67:e8:41:98:3b:4c:d5:73:0b:04:c7:ab:11:15:7f:bd: 31:e5:f7:ba:9a:fe:7c:84:70:45:09:ba:24:bc:a3:6b:20:cc: d5:41:40:a0:43:59:fe:3d:06:21:04:0d:92:b4:34:29:d2:19: 00:78:40:c3:40:50:da:ae:a4:cb:02:75:ba:d9:ba:7e:02:87: 5d:74:dd:01:c6:93:61:0f:cb:16:80:d1:84:17:01:f1:b5:e0: a0:7a:7a:cb:3c:57:dd:1a:49:12:3a:e3:79:bf:37:7f:01:77: 38:51:dc:65:c8:70:e0:7e:af:fb:de:5d:80:49:54:34:37:e1: c8:7d:d0:c7:be:c4:99:5a:b7:e1:51:58:be:3b:22:d9:73:1d: fd:a9:09:69:ac:cb:c9:d2:81:4e:c7:5d:74:d8:eb:da:e8:88: 59:18:ce:b7:90:51:32:ba:da:ea:7f:3a:17:93:bd:6c:a3:18: 9b:97:52:b1:31:d1:f4:54:90:60:e5:e5:0d:aa:4e:f4:43:23: 7a:2e:12:3e:d8:b4:07:f2:b2:66:78:38:0a:12:88:00:12:4e: 06:c9:30:a6:c9:50:1c:4f:06:b6:2b:53:20:76:e0:e5:b3:65: 1d:3e:6a:24:bc:45:28:e1:9b:bf:cf:90:dd:b7:dc:6c:91:59: 97:78:d0:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDMr6kO/kFmyoEGK16T2prhbiEhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNUM3RUQzODY2RDNDQUQyNDREQUIzNjRENURFQUIw MUI0MUIyNzAeFw0yNjA1MTIxMjA3MzlaFw0yNjA1MTMxNDIyMzlaMDMxMTAvBgNV BAMTKDNGNkQ3MkQ4Q0FCOTExMjREMTk5NDZGMzNENzg5REJBMjYyRTQwQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfXpafVCPaSnZ795ty1fViNfVW /KoXJ16tMPGIgR835GoBcPZTDa5dTtomBMClGvbmxql+eE7957wmd1Tlc9AcF5iN KBmxTmvYzgS6VtJCMV/vqvRilzE5CX8qvMNc2Yk48IbcaFrO/TOOWm+0RcJj3qw/ rqoTHodRPCuhgyxmpUjXm20WV+q1Z26BsMdEjaWUD/YGpWrmx4HrdESV/0qviQxb /KbGlcS1h3r4Oroz9kmp9RwR41FHy1qZXi61ij2AHu/tisAGOUvFb0V9IBFEH1ZG 1oYSNjhl2zF3F+JVZ4FGCwn/dlf5PYR6e2h3KoWrYjk7c0S3+wTRUFQHhsgNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP21y2Mq5ESTRmUbzPXiduiYuQLYwHwYDVR0j BBgwFoAUuaXH7Thm08rSRNqzZNXeqwG0GycwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkxMDY4MjctODY2ZS00YWMzLThmNzktYTZlMzIwYjIwZGU3LzAvQjlBNUM3RUQz ODY2RDNDQUQyNDREQUIzNjRENURFQUIwMUI0MUIyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUE1QzdFRDM4NjZEM0NBRDI0NERBQjM2NEQ1REVBQjAxQjQx QjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkxMDY4MjctODY2ZS00YWMzLThm NzktYTZlMzIwYjIwZGU3LzAvQjlBNUM3RUQzODY2RDNDQUQyNDREQUIzNjRENURF QUIwMUI0MUIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD70Z+hBmDtM1XMLBMerERV/vTHl97qa/nyE cEUJuiS8o2sgzNVBQKBDWf49BiEEDZK0NCnSGQB4QMNAUNqupMsCdbrZun4Ch110 3QHGk2EPyxaA0YQXAfG14KB6ess8V90aSRI643m/N38BdzhR3GXIcOB+r/veXYBJ VDQ34ch90Me+xJlat+FRWL47ItlzHf2pCWmsy8nSgU7HXXTY69roiFkYzreQUTK6 2up/OheTvWyjGJuXUrEx0fRUkGDl5Q2qTvRDI3ouEj7YtAfysmZ4OAoSiAASTgbJ MKbJUBxPBrYrUyB24OWzZR0+aiS8RSjhm7/PkN233GyRWZd40Kk= -----END CERTIFICATE-----Generated at Wed May 13 02:50:25 2026 by rpki-client