$ rpki-client -vvf rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft File: 9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft (raw, json) Hash identifier: 0S21zvM0zeKtLVsVb63cmCqTzIWzXliMN8b2nfOT7So= Subject key identifier: 51:F2:00:3A:CE:3D:A8:05:4A:C5:01:41:FF:38:0F:D3:95:D2:3E:4F Authority key identifier: 9B:F4:E3:BF:C9:0E:2E:55:6F:B0:33:A6:F6:1D:F5:52:E1:31:51:4B Certificate issuer: /CN=9BF4E3BFC90E2E556FB033A6F61DF552E131514B Certificate serial: 08C1F65801690003D3E56A372EA51F8497BE4EE2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:41:40 +0000 Manifest this update: Tue 12 May 2026 10:36:40 +0000 Manifest next update: Wed 13 May 2026 13:37:40 +0000 Files and hashes: 1: 9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl (hash: TddK461Moiwx1wrBmwEO+5GiB3FEUxPAd11XscNPmAw=) 2: 3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa (hash: c0+q/NVTLzO/hS8+W37na92ADaS9y92HcCmUqDS60d0=) 3: 3130332e3132312e3130322e302f32332d3234203d3e20313335343738.roa (hash: HYL8rmsnXXXs/BoqrngiGYdSN3TKjR8GgZKUfGOUHuE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c1:f6:58:01:69:00:03:d3:e5:6a:37:2e:a5:1f:84:97:be:4e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF4E3BFC90E2E556FB033A6F61DF552E131514B Validity Not Before: May 12 10:36:40 2026 GMT Not After : May 13 13:37:40 2026 GMT Subject: CN=51F2003ACE3DA8054AC50141FF380FD395D23E4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:19:ff:26:cf:b6:3b:43:d9:30:97:6d:49:36: 16:43:37:ab:e5:16:62:aa:ba:48:da:45:ac:1d:2c: 8e:74:f0:4c:48:28:26:cc:24:6a:20:aa:5f:42:e7: 06:01:8b:d5:37:a2:b0:b1:18:47:77:07:f0:a7:89: 62:c7:05:97:e2:e1:f5:e1:60:d7:8a:09:50:fb:12: ec:8b:6d:b7:dd:37:d2:aa:a2:ed:2b:8c:da:26:36: bc:cf:b6:24:71:d5:d6:6c:27:75:6f:0d:d6:f8:50: 8c:fd:6d:2a:f5:e5:8d:8d:53:b3:7d:b5:3f:4f:59: dd:5c:35:cc:18:db:73:95:d4:95:ca:3d:3b:0b:9d: b5:9a:42:fb:3f:b9:88:87:cc:f5:0c:20:2f:01:bd: 79:aa:c2:de:21:6c:32:82:a3:c3:74:7a:5d:27:21: c5:e7:f9:32:14:fe:8a:c7:d3:b3:5d:d9:f5:35:09: df:87:27:c2:2f:ed:1e:0d:05:0a:67:c6:29:f8:0b: 25:f6:a2:74:13:d1:8e:7f:00:70:bb:f6:3d:cd:07: 0f:48:e5:ff:37:59:b5:ae:99:e8:b5:f7:3c:51:ce: 65:54:6b:4b:1e:7d:fa:b4:7d:5a:f0:a9:8e:d7:c3: 7f:5d:99:ad:00:ee:6d:98:0e:f7:dc:9d:87:e4:7f: 48:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F2:00:3A:CE:3D:A8:05:4A:C5:01:41:FF:38:0F:D3:95:D2:3E:4F X509v3 Authority Key Identifier: keyid:9B:F4:E3:BF:C9:0E:2E:55:6F:B0:33:A6:F6:1D:F5:52:E1:31:51:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:e1:1f:d6:df:ea:53:df:c9:92:ac:57:3a:08:b8:68:15:c0: a7:4a:ed:f9:52:c0:ce:74:2b:e5:69:a3:5a:7f:ad:d0:49:dd: 5e:22:97:04:7f:92:31:54:b5:ac:69:d0:67:bb:3f:08:c2:77: 11:e4:b9:ba:29:93:27:80:4d:77:1f:e4:06:0b:e5:1e:00:78: e5:8c:86:2a:f0:83:b4:0c:b8:c4:94:46:f0:4f:2a:bd:0f:75: 8b:5f:c4:c6:6b:4e:62:d9:c5:61:6f:ec:bd:49:9d:b6:f4:28: e6:1c:32:dc:33:37:7a:aa:da:f0:cf:ed:44:6d:72:aa:09:58: ec:ba:5f:12:44:a4:7b:cb:d9:13:4d:e5:60:3e:c9:68:53:7c: ef:34:2f:15:57:8d:c5:81:34:a2:a9:82:ad:c9:38:2f:92:59: 62:f7:f6:8f:19:48:62:68:30:3f:85:2b:b2:8e:be:80:73:0e: 03:5b:21:09:71:26:9c:93:af:59:b5:88:c5:b7:f4:e4:c2:f3: bf:ba:6c:3b:0f:39:00:99:89:75:f0:d4:00:7a:9c:83:3c:84: 58:51:83:44:3a:4a:b0:1b:6c:f8:85:10:03:26:f0:3f:05:86: c3:6b:f2:f1:ae:4e:65:fb:fe:b7:ca:ab:58:b9:28:0e:db:9e: 9d:60:57:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCMH2WAFpAAPT5Wo3LqUfhJe+TuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGNEUzQkZDOTBFMkU1NTZGQjAzM0E2RjYxREY1NTJF MTMxNTE0QjAeFw0yNjA1MTIxMDM2NDBaFw0yNjA1MTMxMzM3NDBaMDMxMTAvBgNV BAMTKDUxRjIwMDNBQ0UzREE4MDU0QUM1MDE0MUZGMzgwRkQzOTVEMjNFNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmGf8mz7Y7Q9kwl21JNhZDN6vl FmKqukjaRawdLI508ExIKCbMJGogql9C5wYBi9U3orCxGEd3B/CniWLHBZfi4fXh YNeKCVD7EuyLbbfdN9Kqou0rjNomNrzPtiRx1dZsJ3VvDdb4UIz9bSr15Y2NU7N9 tT9PWd1cNcwY23OV1JXKPTsLnbWaQvs/uYiHzPUMIC8BvXmqwt4hbDKCo8N0el0n IcXn+TIU/orH07Nd2fU1Cd+HJ8Iv7R4NBQpnxin4CyX2onQT0Y5/AHC79j3NBw9I 5f83WbWumei19zxRzmVUa0seffq0fVrwqY7Xw39dma0A7m2YDvfcnYfkf0jZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUfIAOs49qAVKxQFB/zgP05XSPk8wHwYDVR0j BBgwFoAUm/Tjv8kOLlVvsDOm9h31UuExUUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTExMzI0OTctNTk2My00N2FhLTlkZTEtNmM4NDk2YTM2ZWI2LzAvOUJGNEUzQkZD OTBFMkU1NTZGQjAzM0E2RjYxREY1NTJFMTMxNTE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkY0RTNCRkM5MEUyRTU1NkZCMDMzQTZGNjFERjU1MkUxMzE1 MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTExMzI0OTctNTk2My00N2FhLTlk ZTEtNmM4NDk2YTM2ZWI2LzAvOUJGNEUzQkZDOTBFMkU1NTZGQjAzM0E2RjYxREY1 NTJFMTMxNTE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPhH9bf6lPfyZKsVzoIuGgVwKdK7flSwM50 K+Vpo1p/rdBJ3V4ilwR/kjFUtaxp0Ge7PwjCdxHkubopkyeATXcf5AYL5R4AeOWM hirwg7QMuMSURvBPKr0PdYtfxMZrTmLZxWFv7L1Jnbb0KOYcMtwzN3qq2vDP7URt cqoJWOy6XxJEpHvL2RNN5WA+yWhTfO80LxVXjcWBNKKpgq3JOC+SWWL39o8ZSGJo MD+FK7KOvoBzDgNbIQlxJpyTr1m1iMW39OTC87+6bDsPOQCZiXXw1AB6nIM8hFhR g0Q6SrAbbPiFEAMm8D8FhsNr8vGuTmX7/rfKq1i5KA7bnp1gV60= -----END CERTIFICATE-----Generated at Wed May 13 02:40:21 2026 by rpki-client