$ rpki-client -vvf rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft File: 9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft (raw, json) Hash identifier: +FiWjWyLqraxm74pxm3qoA6LMHL1FsWDSMJ7S9XqV4c= Subject key identifier: F1:7E:97:EA:4E:9A:24:CA:E0:22:BC:C5:5B:58:B8:F4:78:1B:78:5D Authority key identifier: 93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C Certificate issuer: /CN=9370AF17CF894C561A727E816DE3B11D5D8AAD9C Certificate serial: 76A5CEF739823141DC76E336DD8618BF82136AFD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:34:16 +0000 Manifest this update: Tue 12 May 2026 21:29:16 +0000 Manifest next update: Wed 13 May 2026 22:04:16 +0000 Files and hashes: 1: 9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl (hash: tdlQj6GGOSp/ace/iezlTfxrlNytmlGVu6huR7E9QlU=) 2: 3130332e3138362e33332e302f32342d3234203d3e20313439363930.roa (hash: 66uNmMCT6fkEdO81aZRWkTBSkfQiCejM3k2UxZQSC6k=) 3: 3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa (hash: rp1e1zzn4/8hrijf1AXdkJbP5FeTjYw1wnI20jUxS/k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:a5:ce:f7:39:82:31:41:dc:76:e3:36:dd:86:18:bf:82:13:6a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9370AF17CF894C561A727E816DE3B11D5D8AAD9C Validity Not Before: May 12 21:29:16 2026 GMT Not After : May 13 22:04:16 2026 GMT Subject: CN=F17E97EA4E9A24CAE022BCC55B58B8F4781B785D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9f:59:0e:1d:4d:e6:3c:70:23:fc:24:6b:4d: 28:48:f1:2c:0a:bb:a1:af:63:85:a2:3e:f9:a0:51: ec:a9:57:84:3c:29:f0:d4:04:36:f4:bf:77:4a:6f: 3f:09:fa:1f:4f:fa:5c:88:b3:2d:71:e9:a9:92:62: 5b:bf:ba:aa:56:8e:c6:c3:d6:9c:5e:07:d3:e5:5e: da:ef:b1:6a:50:6f:87:25:14:c0:29:94:3a:0a:d1: e4:c1:42:02:36:b8:ef:81:e8:fe:0d:ec:9b:ee:d3: 0d:27:c5:18:67:f6:08:96:b6:96:eb:64:26:c2:08: fd:80:fe:d5:87:c0:d3:fd:59:1d:6e:6e:ce:2e:6e: 1b:62:77:ea:1f:48:a0:64:49:83:0f:57:72:07:64: 74:35:21:4d:e2:e4:60:34:5a:e5:8d:c7:c2:dd:b8: 8b:c4:55:7e:93:ea:ef:03:f2:68:04:98:3e:03:91: 53:19:06:62:71:62:83:c1:d3:c3:bf:b1:27:23:bb: 52:2a:17:12:87:39:ab:a4:1e:0b:f2:f2:87:0b:5b: 23:a1:2d:25:cd:09:80:72:e1:e7:93:26:aa:29:af: 25:ac:15:34:97:fb:d4:83:31:6a:9d:d2:20:0d:7a: 3f:cc:88:79:c9:10:21:61:b1:dd:9e:2a:0f:be:74: 27:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7E:97:EA:4E:9A:24:CA:E0:22:BC:C5:5B:58:B8:F4:78:1B:78:5D X509v3 Authority Key Identifier: keyid:93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:4e:26:d8:ce:04:8b:40:e6:61:79:c2:e7:91:fb:94:bc:74: 7d:f0:08:cb:50:4e:9f:0b:97:88:5a:05:67:f6:9e:11:32:83: c4:95:19:a6:48:c2:a1:7b:31:61:bb:b1:71:c6:73:b5:9c:51: d9:70:4f:b0:e2:86:d1:bf:73:9c:2c:b3:0b:7a:cb:3f:b3:54: 0f:cf:ce:91:19:3a:ac:2d:9c:ca:f9:5f:ba:63:17:e9:fd:4d: ce:64:a1:4f:35:e3:c0:88:0b:ac:f0:f4:36:fb:57:2b:44:f8: ea:2b:3f:87:96:7d:2b:1f:73:e3:72:7c:3a:28:39:6b:09:69: 98:fc:79:40:32:68:17:32:20:13:a6:2c:ea:63:1f:f1:00:40: 76:42:f7:d2:61:31:5a:70:a4:cd:f9:39:c5:9a:50:89:fb:f8: 69:d7:53:36:67:e8:ab:f5:58:f9:ff:bc:bb:c9:5b:95:76:64: d0:32:31:64:a1:05:70:1b:57:69:7f:03:2c:db:19:24:49:74: 57:2b:2f:b8:63:ba:ea:f0:92:4c:2c:2d:1c:d7:82:55:0e:82: 14:08:b7:b1:9d:bc:e7:20:6e:07:53:6d:37:09:f0:e7:00:c1: 0a:af:9a:83:8a:e7:d6:6d:1f:90:3c:65:10:76:23:18:17:ca: 5b:22:ef:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdqXO9zmCMUHcduM23YYYv4ITav0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM3MEFGMTdDRjg5NEM1NjFBNzI3RTgxNkRFM0IxMUQ1 RDhBQUQ5QzAeFw0yNjA1MTIyMTI5MTZaFw0yNjA1MTMyMjA0MTZaMDMxMTAvBgNV BAMTKEYxN0U5N0VBNEU5QTI0Q0FFMDIyQkNDNTVCNThCOEY0NzgxQjc4NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDn1kOHU3mPHAj/CRrTShI8SwK u6GvY4WiPvmgUeypV4Q8KfDUBDb0v3dKbz8J+h9P+lyIsy1x6amSYlu/uqpWjsbD 1pxeB9PlXtrvsWpQb4clFMAplDoK0eTBQgI2uO+B6P4N7Jvu0w0nxRhn9giWtpbr ZCbCCP2A/tWHwNP9WR1ubs4ubhtid+ofSKBkSYMPV3IHZHQ1IU3i5GA0WuWNx8Ld uIvEVX6T6u8D8mgEmD4DkVMZBmJxYoPB08O/sScju1IqFxKHOaukHgvy8ocLWyOh LSXNCYBy4eeTJqopryWsFTSX+9SDMWqd0iANej/MiHnJECFhsd2eKg++dCcHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8X6X6k6aJMrgIrzFW1i49HgbeF0wHwYDVR0j BBgwFoAUk3CvF8+JTFYacn6BbeOxHV2KrZwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGNlOWY0M2QtMDhiYS00ZDAyLThmMzgtNzQ3MzJmMTVjZDhjLzAvOTM3MEFGMTdD Rjg5NEM1NjFBNzI3RTgxNkRFM0IxMUQ1RDhBQUQ5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzcwQUYxN0NGODk0QzU2MUE3MjdFODE2REUzQjExRDVEOEFB RDlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGNlOWY0M2QtMDhiYS00ZDAyLThm MzgtNzQ3MzJmMTVjZDhjLzAvOTM3MEFGMTdDRjg5NEM1NjFBNzI3RTgxNkRFM0Ix MUQ1RDhBQUQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdOJtjOBItA5mF5wueR+5S8dH3wCMtQTp8L l4haBWf2nhEyg8SVGaZIwqF7MWG7sXHGc7WcUdlwT7DihtG/c5wsswt6yz+zVA/P zpEZOqwtnMr5X7pjF+n9Tc5koU8148CIC6zw9Db7VytE+OorP4eWfSsfc+NyfDoo OWsJaZj8eUAyaBcyIBOmLOpjH/EAQHZC99JhMVpwpM35OcWaUIn7+GnXUzZn6Kv1 WPn/vLvJW5V2ZNAyMWShBXAbV2l/AyzbGSRJdFcrL7hjuurwkkwsLRzXglUOghQI t7GdvOcgbgdTbTcJ8OcAwQqvmoOK59ZtH5A8ZRB2IxgXylsi734= -----END CERTIFICATE-----Generated at Wed May 13 13:48:36 2026 by rpki-client