$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft File: 9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft (raw, json) Hash identifier: Vu/+R+gWKNi48yABi6dWO8WdhQ0BcY4aSlA/mzXjNf8= Subject key identifier: A8:21:01:C7:8F:D4:C4:DD:CB:DD:20:B7:53:B7:20:48:92:6A:8D:79 Authority key identifier: 9D:68:AC:E3:A8:F4:CD:6B:9B:D7:AB:C6:95:E6:A2:16:24:B1:C5:6C Certificate issuer: /CN=9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C Certificate serial: 43F8380DACBDCFEB2526C1D464402C874992AE96 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:15:51 +0000 Manifest this update: Tue 12 May 2026 16:10:51 +0000 Manifest next update: Wed 13 May 2026 17:44:51 +0000 Files and hashes: 1: 9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.crl (hash: FU5YH2h08HNDylJI4WUaYAzD2r6KaAsIyt22vXY3/Js=) 2: 3130332e3136302e3133362e302f32342d3234203d3e20313431353838.roa (hash: xiHN/v3vXzzSYuBqvcK2Zxp9gL/Vai3nTROredoBVU8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.crl rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f8:38:0d:ac:bd:cf:eb:25:26:c1:d4:64:40:2c:87:49:92:ae:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C Validity Not Before: May 12 16:10:51 2026 GMT Not After : May 13 17:44:51 2026 GMT Subject: CN=A82101C78FD4C4DDCBDD20B753B72048926A8D79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d2:c9:0d:b0:10:cb:c6:f5:1a:df:51:44:b8: f8:80:c1:e3:5f:c6:5d:d8:ea:3d:61:dc:56:13:06: c9:00:aa:bb:6f:b6:fe:da:48:27:16:fc:21:6a:a0: 28:00:de:4c:9c:d7:16:23:02:77:26:bb:ac:d3:e2: 99:48:c9:9c:cc:c0:77:4d:51:9c:b5:9d:e7:e6:c0: f0:b7:17:4d:fa:b0:82:a4:a2:3e:b1:5e:b6:07:a7: 56:a7:a9:02:3e:ad:3b:12:b6:3e:7d:fb:e9:e9:44: d6:91:7e:dd:7e:fe:af:3a:a3:c3:90:3f:5b:38:ff: 29:ec:e8:5f:4b:8a:81:32:4d:a4:14:31:5f:8a:9e: c0:98:f3:1a:04:6a:c4:e7:49:c3:4b:9f:cb:b9:c3: 72:f2:7c:0e:b8:4d:f3:78:40:f9:4c:ae:58:0d:e3: 4a:5f:75:ff:2f:6a:7e:70:e0:e3:ba:45:12:b3:b9: 6c:31:c8:a3:4f:41:9d:cc:ec:d8:d9:3c:bd:ba:1b: bd:61:0a:73:0c:dd:81:c7:49:e7:12:8d:f7:9f:52: 00:46:7f:aa:fa:39:55:a8:16:7d:ef:99:9f:c8:4e: 49:61:56:0d:81:9e:56:57:46:80:81:6a:4a:d0:72: 3b:ec:2e:ef:50:3d:36:a6:4a:2d:53:f9:eb:c2:1c: b6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:21:01:C7:8F:D4:C4:DD:CB:DD:20:B7:53:B7:20:48:92:6A:8D:79 X509v3 Authority Key Identifier: keyid:9D:68:AC:E3:A8:F4:CD:6B:9B:D7:AB:C6:95:E6:A2:16:24:B1:C5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:84:b3:a4:cd:63:72:38:25:e1:e5:e7:38:d6:60:a8:9e:6d: e0:46:25:11:14:ea:7c:c3:27:d9:5f:ec:bd:74:01:56:0d:2c: 49:65:fa:38:8e:18:cc:6e:d4:a9:c0:00:14:1b:9f:09:fe:70: b7:68:a8:77:17:cd:3c:c5:71:d9:49:17:3c:a5:3d:a0:8f:29: 68:52:cc:e2:2b:bc:99:68:c3:ef:a3:53:40:bc:ef:d2:21:89: cc:ad:d4:a5:7a:1d:ba:2c:31:2f:42:d3:1d:68:c6:5b:ba:60: 02:2f:16:eb:c5:98:6f:2b:f2:60:d4:a5:b4:9f:cc:6f:40:0f: 2d:ad:33:ff:3f:0b:0e:b3:e8:ee:c2:c1:61:1b:09:40:c1:d6: 3a:33:0f:49:18:9b:3f:f9:c5:ea:47:00:d3:58:4e:27:6e:6c: ba:77:a7:93:fc:3e:44:7f:e0:d1:af:77:95:dc:fe:0b:dd:d0: 23:7e:b4:53:d8:af:58:34:79:40:6b:e3:e5:27:2b:be:a2:21: f3:ae:d5:81:14:07:4a:fd:e7:c1:d1:0d:2d:28:4c:e5:ab:e9: 76:d5:7d:4a:f8:48:dc:3d:9e:c2:a8:6b:81:ba:07:01:63:13: ff:0d:44:45:27:45:e2:70:4b:63:26:5e:20:4c:fe:7f:00:5b: b0:5b:98:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/g4Day9z+slJsHUZEAsh0mSrpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ2OEFDRTNBOEY0Q0Q2QjlCRDdBQkM2OTVFNkEyMTYy NEIxQzU2QzAeFw0yNjA1MTIxNjEwNTFaFw0yNjA1MTMxNzQ0NTFaMDMxMTAvBgNV BAMTKEE4MjEwMUM3OEZENEM0RERDQkREMjBCNzUzQjcyMDQ4OTI2QThENzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY0skNsBDLxvUa31FEuPiAweNf xl3Y6j1h3FYTBskAqrtvtv7aSCcW/CFqoCgA3kyc1xYjAncmu6zT4plIyZzMwHdN UZy1nefmwPC3F036sIKkoj6xXrYHp1anqQI+rTsStj59++npRNaRft1+/q86o8OQ P1s4/yns6F9LioEyTaQUMV+KnsCY8xoEasTnScNLn8u5w3LyfA64TfN4QPlMrlgN 40pfdf8van5w4OO6RRKzuWwxyKNPQZ3M7NjZPL26G71hCnMM3YHHSecSjfefUgBG f6r6OVWoFn3vmZ/ITklhVg2BnlZXRoCBakrQcjvsLu9QPTamSi1T+evCHLaFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqCEBx4/UxN3L3SC3U7cgSJJqjXkwHwYDVR0j BBgwFoAUnWis46j0zWub16vGleaiFiSxxWwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFlZWQwOWMtNjA2OC00MDdhLWIwYTYtNTliN2QwYjg3ODU1LzAvOUQ2OEFDRTNB OEY0Q0Q2QjlCRDdBQkM2OTVFNkEyMTYyNEIxQzU2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDY4QUNFM0E4RjRDRDZCOUJEN0FCQzY5NUU2QTIxNjI0QjFD NTZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFlZWQwOWMtNjA2OC00MDdhLWIw YTYtNTliN2QwYjg3ODU1LzAvOUQ2OEFDRTNBOEY0Q0Q2QjlCRDdBQkM2OTVFNkEy MTYyNEIxQzU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWEs6TNY3I4JeHl5zjWYKiebeBGJREU6nzD J9lf7L10AVYNLEll+jiOGMxu1KnAABQbnwn+cLdoqHcXzTzFcdlJFzylPaCPKWhS zOIrvJlow++jU0C879Ihicyt1KV6HbosMS9C0x1oxlu6YAIvFuvFmG8r8mDUpbSf zG9ADy2tM/8/Cw6z6O7CwWEbCUDB1jozD0kYmz/5xepHANNYTidubLp3p5P8PkR/ 4NGvd5Xc/gvd0CN+tFPYr1g0eUBr4+UnK76iIfOu1YEUB0r958HRDS0oTOWr6XbV fUr4SNw9nsKoa4G6BwFjE/8NREUnReJwS2MmXiBM/n8AW7BbmBQ= -----END CERTIFICATE-----Generated at Wed May 13 02:15:58 2026 by rpki-client