$ rpki-client -vvf rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft File: D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft (raw, json) Hash identifier: 7LDB6BZjGDrNOhd440YPhDH67I54QU6lW6jyU4FoBIM= Subject key identifier: 89:85:51:DB:52:15:54:1B:95:FE:82:E4:2C:09:E0:4B:F9:C5:F1:21 Authority key identifier: D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6 Certificate issuer: /CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6 Certificate serial: 0F6D9CA8ABBB0D028327EDCDA8DB4730B7F77446 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:29:21 +0000 Manifest this update: Tue 12 May 2026 04:24:21 +0000 Manifest next update: Wed 13 May 2026 04:38:21 +0000 Files and hashes: 1: 3136302e32322e3133372e302f32342d3234203d3e20313532383131.roa (hash: UJBNMpcsHaasyvcJ4Sq3J89ZHMIFKcGiQvcCBcd8DHY=) 2: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: e4bsRLScbecV3EUW42ypNee+dC4atMUS4ULfB5R1TMs=) 3: D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl (hash: 7hp2goiDnb7DXFfEnQaLRQRMkCQtxwP59A1fBQv3I7s=) 4: 3136302e32322e3133362e302f32342d3234203d3e20313532383131.roa (hash: mzkKba2j66n6wraFNQYRS+UC4ztp7C2s0dllCrbur4g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 04:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:6d:9c:a8:ab:bb:0d:02:83:27:ed:cd:a8:db:47:30:b7:f7:74:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6 Validity Not Before: May 12 04:24:21 2026 GMT Not After : May 13 04:38:21 2026 GMT Subject: CN=898551DB5215541B95FE82E42C09E04BF9C5F121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:80:60:94:c4:57:ad:cd:8c:4f:19:66:2b:70: 82:77:64:d6:a5:da:dd:07:c7:55:f6:80:e5:a7:a0: 30:f5:d6:14:f8:cb:42:db:29:7a:ce:9f:93:16:89: d9:c7:14:5c:b1:5e:96:f9:f9:8a:24:4e:92:53:56: e3:01:b1:a4:07:4c:84:b4:8a:5f:71:3b:34:a3:5b: c6:06:00:e0:2d:d7:14:68:98:e3:ae:1c:64:12:91: 12:6f:2c:8c:87:29:39:d6:d1:2f:9c:00:28:d0:eb: 40:0d:3e:90:6d:db:72:df:48:ed:18:5a:42:f1:47: ce:12:c0:31:c7:88:27:85:eb:e4:ba:11:b8:89:03: 0c:ec:f1:51:94:7c:2c:c3:65:0c:07:77:ce:8d:6b: b9:16:1d:b4:24:7a:9d:0e:61:f6:75:70:ca:30:03: d8:f5:e1:0a:ea:c3:06:c7:1d:c0:d8:e5:0a:41:3f: 80:bf:99:4e:8a:5c:bd:20:82:67:ae:da:5a:ab:d5: 5d:22:05:b5:31:fc:bc:be:97:9d:f9:21:94:55:09: 75:9b:e9:3a:f2:5e:68:67:a3:02:db:3b:2b:37:16: 73:d9:bc:61:ca:16:06:0c:07:f7:25:07:de:64:b5: d1:ee:69:15:20:dc:89:19:57:b7:55:09:cc:21:a0: 0f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:85:51:DB:52:15:54:1B:95:FE:82:E4:2C:09:E0:4B:F9:C5:F1:21 X509v3 Authority Key Identifier: keyid:D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4e:e1:5b:18:09:de:77:b4:e1:57:c2:2c:f5:e8:4e:4b:3d: ba:94:0c:de:1b:06:f3:d0:40:ab:4d:59:a7:70:37:c3:6c:28: 84:07:8b:80:2c:8c:07:f9:ba:77:8f:10:ca:a6:88:8c:ae:4f: 9c:11:d4:9f:f2:53:18:6e:34:bd:d7:0b:d0:77:33:ee:75:69: 80:e1:e2:d2:0c:e3:a7:d1:fc:d6:b6:e8:f2:8a:c7:b9:43:9f: 75:e0:27:50:9b:13:93:dd:f7:a1:d2:f1:16:48:74:4b:17:1e: 68:a2:3d:10:65:19:3f:a1:3d:10:72:bd:95:22:5e:da:ed:80: 0c:8a:57:f6:15:ae:22:4f:a2:a4:c1:53:e7:ca:ba:86:9a:89: 30:bb:c5:d1:f1:12:59:40:38:9d:ef:ad:3a:58:7c:9f:eb:a6: c6:a4:cf:79:f0:15:5b:25:3a:fe:4a:44:19:3f:eb:3e:6f:5a: 2d:2f:2b:65:bc:98:02:e0:e4:a6:5f:8e:ff:58:17:a4:08:18: 94:7d:5e:c4:61:e3:dd:8a:ad:85:9c:02:ef:ca:15:56:88:94: 73:a1:52:c9:99:df:b4:ec:2d:4f:94:00:f9:ff:dc:14:9e:b1: d0:38:4d:9d:ce:9b:5d:fe:c8:dc:31:32:32:06:06:40:82:38: fe:f4:12:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD22cqKu7DQKDJ+3NqNtHMLf3dEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDNEI2QkU4NEM5MEJDNDA2QUI2NzFFNUY3NUE4Qzg2 NTYyOTRGNjAeFw0yNjA1MTIwNDI0MjFaFw0yNjA1MTMwNDM4MjFaMDMxMTAvBgNV BAMTKDg5ODU1MURCNTIxNTU0MUI5NUZFODJFNDJDMDlFMDRCRjlDNUYxMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZgGCUxFetzYxPGWYrcIJ3ZNal 2t0Hx1X2gOWnoDD11hT4y0LbKXrOn5MWidnHFFyxXpb5+YokTpJTVuMBsaQHTIS0 il9xOzSjW8YGAOAt1xRomOOuHGQSkRJvLIyHKTnW0S+cACjQ60ANPpBt23LfSO0Y WkLxR84SwDHHiCeF6+S6EbiJAwzs8VGUfCzDZQwHd86Na7kWHbQkep0OYfZ1cMow A9j14QrqwwbHHcDY5QpBP4C/mU6KXL0ggmeu2lqr1V0iBbUx/Ly+l535IZRVCXWb 6TryXmhnowLbOys3FnPZvGHKFgYMB/clB95ktdHuaRUg3IkZV7dVCcwhoA8VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiYVR21IVVBuV/oLkLAngS/nF8SEwHwYDVR0j BBgwFoAU2cS2voTJC8QGq2ceX3WoyGVilPYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE5NWI0YjQtYmM4YS00Y2U1LWI1NTAtOWFhN2IzNmVlMWZhLzAvRDlDNEI2QkU4 NEM5MEJDNDA2QUI2NzFFNUY3NUE4Qzg2NTYyOTRGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EOUM0QjZCRTg0QzkwQkM0MDZBQjY3MUU1Rjc1QThDODY1NjI5 NEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvRDlDNEI2QkU4NEM5MEJDNDA2QUI2NzFFNUY3NUE4 Qzg2NTYyOTRGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxO4VsYCd53tOFXwiz16E5LPbqUDN4bBvPQ QKtNWadwN8NsKIQHi4AsjAf5unePEMqmiIyuT5wR1J/yUxhuNL3XC9B3M+51aYDh 4tIM46fR/Na26PKKx7lDn3XgJ1CbE5Pd96HS8RZIdEsXHmiiPRBlGT+hPRByvZUi XtrtgAyKV/YVriJPoqTBU+fKuoaaiTC7xdHxEllAOJ3vrTpYfJ/rpsakz3nwFVsl Ov5KRBk/6z5vWi0vK2W8mALg5KZfjv9YF6QIGJR9XsRh492KrYWcAu/KFVaIlHOh UsmZ37TsLU+UAPn/3BSesdA4TZ3Om13+yNwxMjIGBkCCOP70El0= -----END CERTIFICATE-----Generated at Tue May 12 22:13:20 2026 by rpki-client