$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft File: 092239A9C28840E7E025454A2EA108ED5A8BF369.mft (raw, json) Hash identifier: Xl0aUVVn37qbngt5d9cw8s/O6F+QxA9nSx6WUWb5HxE= Subject key identifier: AA:17:C8:3B:19:ED:CF:D5:75:BD:5B:60:94:6C:13:56:EA:18:10:1F Authority key identifier: 09:22:39:A9:C2:88:40:E7:E0:25:45:4A:2E:A1:08:ED:5A:8B:F3:69 Certificate issuer: /CN=092239A9C28840E7E025454A2EA108ED5A8BF369 Certificate serial: 2058EEE977387F8D90D3EB7B398FE8694C25EFEF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:55:01 +0000 Manifest this update: Tue 12 May 2026 21:50:01 +0000 Manifest next update: Thu 14 May 2026 00:30:01 +0000 Files and hashes: 1: 092239A9C28840E7E025454A2EA108ED5A8BF369.crl (hash: ReuwiJnV0t/mdPKZ9BUtmGtMbAZtdKotGkzMcAte/dI=) 2: 3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa (hash: 9NL2C7FOxcvOHwTRTmo9h9A795ncThfKAUagyOzQnW8=) 3: 323430353a346338303a3a2f33322d3438203d3e20313335343635.roa (hash: A/ozUYyvaDadcj+xsfOVvgriixFLbEAH6FL6zdv2bCc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.crl rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:58:ee:e9:77:38:7f:8d:90:d3:eb:7b:39:8f:e8:69:4c:25:ef:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=092239A9C28840E7E025454A2EA108ED5A8BF369 Validity Not Before: May 12 21:50:01 2026 GMT Not After : May 14 00:30:01 2026 GMT Subject: CN=AA17C83B19EDCFD575BD5B60946C1356EA18101F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fa:ea:e0:51:05:8e:f3:34:60:fe:73:60:fa: cf:e1:30:fe:40:08:63:48:13:27:91:a2:d4:a4:cf: a3:86:54:cc:d8:d4:43:8a:73:ac:b7:79:76:e4:88: e9:de:41:cc:fc:77:82:94:dc:e3:75:83:f6:0c:14: 1d:8f:d2:f3:18:98:31:ce:b0:8c:3f:c2:06:27:db: e3:46:2a:4f:b1:01:52:01:13:82:c7:b5:02:fe:1b: bd:8f:ad:8f:9c:14:e1:a7:57:c8:04:d8:33:f4:60: 25:29:49:30:81:6e:2c:39:62:40:1e:82:e9:0d:e3: a3:7e:25:52:84:67:74:8a:13:d6:77:09:aa:69:98: c7:db:31:1f:77:fa:09:a2:bf:06:de:90:ef:51:39: 11:40:5e:fb:44:db:05:c5:fc:39:61:e5:8f:46:ad: 51:3a:93:23:eb:4f:c0:d0:bc:3d:7d:e6:5d:93:59: c0:1c:3e:58:3f:ad:9a:c1:1a:99:1a:38:fd:a8:fc: a8:0f:f0:4b:a1:d8:02:66:c0:34:34:b7:52:67:7d: 3a:90:b1:fd:e5:46:06:23:6a:cd:99:fd:03:a7:22: 5a:83:c9:69:c9:8c:c4:f7:d6:30:0f:e9:7e:a6:8d: 24:8f:86:df:7a:e9:d3:96:63:43:0e:5d:ef:d4:b9: da:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:17:C8:3B:19:ED:CF:D5:75:BD:5B:60:94:6C:13:56:EA:18:10:1F X509v3 Authority Key Identifier: keyid:09:22:39:A9:C2:88:40:E7:E0:25:45:4A:2E:A1:08:ED:5A:8B:F3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b9:1f:07:b7:37:c4:ae:9a:cb:6e:4e:a7:c3:5b:4e:b2:b4: f6:8a:97:0a:c4:de:5b:cc:43:26:da:66:d0:52:f2:53:1d:06: 14:97:08:10:02:56:ee:73:4c:01:c6:bb:0b:5f:46:aa:2e:e8: 2b:a2:83:63:82:dd:76:3b:c4:db:c9:80:c5:8f:30:62:b3:0e: 06:81:a8:70:62:91:ee:fd:83:c9:6f:05:6e:7c:b0:a7:cd:09: 26:53:44:4d:0c:cd:86:d9:08:5d:23:04:cf:37:a8:03:76:54: 5c:8a:47:c3:09:d2:e9:c9:90:32:45:8d:7b:f0:e0:db:ee:68: db:25:63:a3:1f:7b:39:4a:d4:40:c3:1c:11:02:d2:1c:29:f3: 10:d8:83:e5:7e:32:8a:13:f3:49:3c:83:6e:08:a0:2f:35:dd: e0:26:b6:50:46:a6:cb:df:3a:a7:44:5c:1c:77:76:c7:e4:d8: bd:af:0b:1e:8a:98:09:45:33:82:27:64:7a:19:48:71:60:7e: 87:aa:fe:53:15:33:2a:a6:74:2c:57:5b:37:0a:80:2d:35:cd: 45:da:82:74:d3:e0:11:6e:82:40:38:a9:f9:87:7d:db:c5:c7: 02:f9:db:d4:d7:9b:12:dd:13:f9:e4:9f:39:0b:b1:44:85:61: 3e:23:1a:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIFju6Xc4f42Q0+t7OY/oaUwl7+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkyMjM5QTlDMjg4NDBFN0UwMjU0NTRBMkVBMTA4RUQ1 QThCRjM2OTAeFw0yNjA1MTIyMTUwMDFaFw0yNjA1MTQwMDMwMDFaMDMxMTAvBgNV BAMTKEFBMTdDODNCMTlFRENGRDU3NUJENUI2MDk0NkMxMzU2RUExODEwMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD+urgUQWO8zRg/nNg+s/hMP5A CGNIEyeRotSkz6OGVMzY1EOKc6y3eXbkiOneQcz8d4KU3ON1g/YMFB2P0vMYmDHO sIw/wgYn2+NGKk+xAVIBE4LHtQL+G72PrY+cFOGnV8gE2DP0YCUpSTCBbiw5YkAe gukN46N+JVKEZ3SKE9Z3CappmMfbMR93+gmivwbekO9RORFAXvtE2wXF/Dlh5Y9G rVE6kyPrT8DQvD195l2TWcAcPlg/rZrBGpkaOP2o/KgP8Euh2AJmwDQ0t1JnfTqQ sf3lRgYjas2Z/QOnIlqDyWnJjMT31jAP6X6mjSSPht966dOWY0MOXe/Uudr9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqhfIOxntz9V1vVtglGwTVuoYEB8wHwYDVR0j BBgwFoAUCSI5qcKIQOfgJUVKLqEI7VqL82kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNhNjJjOWEtZDRmMC00NTRiLTgwN2YtODRmOWIzYzIwMmIzLzAvMDkyMjM5QTlD Mjg4NDBFN0UwMjU0NTRBMkVBMTA4RUQ1QThCRjM2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTIyMzlBOUMyODg0MEU3RTAyNTQ1NEEyRUExMDhFRDVBOEJG MzY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNhNjJjOWEtZDRmMC00NTRiLTgw N2YtODRmOWIzYzIwMmIzLzAvMDkyMjM5QTlDMjg4NDBFN0UwMjU0NTRBMkVBMTA4 RUQ1QThCRjM2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACm5Hwe3N8SumstuTqfDW06ytPaKlwrE3lvM QybaZtBS8lMdBhSXCBACVu5zTAHGuwtfRqou6Cuig2OC3XY7xNvJgMWPMGKzDgaB qHBike79g8lvBW58sKfNCSZTRE0MzYbZCF0jBM83qAN2VFyKR8MJ0unJkDJFjXvw 4NvuaNslY6MfezlK1EDDHBEC0hwp8xDYg+V+MooT80k8g24IoC813eAmtlBGpsvf OqdEXBx3dsfk2L2vCx6KmAlFM4InZHoZSHFgfoeq/lMVMyqmdCxXWzcKgC01zUXa gnTT4BFugkA4qfmHfdvFxwL529TXmxLdE/nknzkLsUSFYT4jGvo= -----END CERTIFICATE-----Generated at Wed May 13 06:27:04 2026 by rpki-client