$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft File: 9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft (raw, json) Hash identifier: Q40sNNOJ6zfto+Ht3sqzPb5Acy7V4OoeBrm2I7fSnE4= Subject key identifier: 42:75:CF:A6:B7:C7:2A:09:C1:08:31:D2:40:40:42:61:EA:AF:10:F3 Authority key identifier: 9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9 Certificate issuer: /CN=9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9 Certificate serial: 0BB7F0405223E5CC165859A5894A6B35356FE88C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:56:50 +0000 Manifest this update: Tue 12 May 2026 10:51:50 +0000 Manifest next update: Wed 13 May 2026 12:00:50 +0000 Files and hashes: 1: 9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl (hash: TVekNHUL26t1cPpFP6ggO2HOt/CnWw2MXebm+w8BYdI=) 2: 3136302e32322e3230382e302f32332d3234203d3e20313532383239.roa (hash: geTlR2xlRfEtN72u5a2Y4lLKK2jTFc1FYHlhZP1ErB8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b7:f0:40:52:23:e5:cc:16:58:59:a5:89:4a:6b:35:35:6f:e8:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9 Validity Not Before: May 12 10:51:50 2026 GMT Not After : May 13 12:00:50 2026 GMT Subject: CN=4275CFA6B7C72A09C10831D240404261EAAF10F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:80:0c:24:6d:a5:22:ad:ea:29:58:9b:db:1b: 3e:99:7b:b7:e0:6f:fc:6d:4a:c6:d6:00:bf:be:f9: 92:50:8e:54:41:c1:3f:7e:79:3f:82:82:1e:28:1f: 28:a7:a4:78:66:84:2e:82:ab:c4:60:a5:f3:79:b6: 51:de:31:2f:1c:21:94:de:fb:db:1d:9c:dd:98:96: f0:bc:47:7a:67:1d:34:ed:ee:15:af:3e:be:eb:1f: 83:f2:a6:88:f2:16:74:74:bf:c7:98:65:66:23:b9: 19:30:55:4b:2c:85:57:53:9e:89:97:f5:f9:65:f4: b4:90:e7:44:14:8b:cb:98:f2:20:6e:92:7e:ab:77: 27:1f:9b:24:55:da:f1:72:e1:0c:b6:c6:0f:c6:20: cb:2e:d3:16:6e:ee:c7:af:0d:5f:31:d9:94:df:e4: 21:53:27:ab:27:03:62:e3:6f:c5:54:35:3c:4e:81: 90:7c:a8:f1:50:9c:77:f5:da:54:0f:ad:ce:e0:01: db:2a:cb:d5:0b:7a:dc:bb:2e:ea:64:0a:74:09:0e: 53:ff:73:ca:96:2d:6d:1c:f3:94:39:b3:06:03:99: 20:2c:a0:a4:a8:87:1a:fa:de:e5:10:ab:a6:d5:ce: bc:4e:18:cb:06:4b:45:8c:dd:cc:08:61:df:49:03: 56:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:75:CF:A6:B7:C7:2A:09:C1:08:31:D2:40:40:42:61:EA:AF:10:F3 X509v3 Authority Key Identifier: keyid:9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:82:f3:90:67:da:ef:a7:6f:ec:99:a5:c2:4a:5e:22:34:ee: 6f:c7:2f:c9:31:27:f4:b3:07:64:e4:41:08:5e:60:d3:31:f2: 13:7d:e5:89:60:8a:9f:b7:59:21:fd:eb:12:91:12:69:49:08: 4a:c7:4e:80:07:a2:47:ec:dc:ef:96:5e:60:6e:2a:98:bc:fe: c7:53:bc:b6:d3:9b:1e:d1:2f:e8:76:d3:cf:ff:f4:6f:02:bd: 56:3c:a8:ef:80:f6:78:c1:4e:e3:ec:7a:97:73:4e:a6:7f:10: 48:8e:cb:ec:4d:9e:1b:6a:f6:ec:1a:6d:44:83:8d:22:50:1b: 7b:ea:0e:ec:a3:90:c4:19:50:b2:fb:4b:99:d9:be:ad:fc:1c: d8:bf:58:7d:17:a9:8d:ab:08:01:c9:b3:e0:44:71:32:aa:5d: ed:68:ef:1e:a1:1b:d9:53:28:a2:5d:dd:9a:95:61:29:9e:56: d3:78:73:79:e7:11:78:c3:ca:d5:3c:d3:e1:93:3c:ec:96:43: f8:cd:82:01:31:6b:45:78:e5:b9:f5:ff:7b:dc:dd:86:96:cd: be:50:d6:7b:28:47:d5:fb:99:1c:cc:3e:f9:83:0d:31:7f:cb: 63:5d:d3:73:a0:d5:e5:45:55:17:e1:35:94:41:23:c6:50:e6: 7e:1d:72:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC7fwQFIj5cwWWFmliUprNTVv6IwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMyM0ZCM0U4Qjg1OTYxRkQ0OEJDNzgwREFGNDRDRUZC NjQ3QzZFOTAeFw0yNjA1MTIxMDUxNTBaFw0yNjA1MTMxMjAwNTBaMDMxMTAvBgNV BAMTKDQyNzVDRkE2QjdDNzJBMDlDMTA4MzFEMjQwNDA0MjYxRUFBRjEwRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfgAwkbaUireopWJvbGz6Ze7fg b/xtSsbWAL+++ZJQjlRBwT9+eT+Cgh4oHyinpHhmhC6Cq8RgpfN5tlHeMS8cIZTe +9sdnN2YlvC8R3pnHTTt7hWvPr7rH4PypojyFnR0v8eYZWYjuRkwVUsshVdTnomX 9fll9LSQ50QUi8uY8iBukn6rdycfmyRV2vFy4Qy2xg/GIMsu0xZu7sevDV8x2ZTf 5CFTJ6snA2Ljb8VUNTxOgZB8qPFQnHf12lQPrc7gAdsqy9ULety7LupkCnQJDlP/ c8qWLW0c85Q5swYDmSAsoKSohxr63uUQq6bVzrxOGMsGS0WM3cwIYd9JA1ZnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQnXPprfHKgnBCDHSQEBCYeqvEPMwHwYDVR0j BBgwFoAUnCP7PouFlh/Ui8eA2vRM77ZHxukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNjYjUwYjAtNDNjYy00OGQwLTkxZjQtMDViYmRlN2FjMWQwLzAvOUMyM0ZCM0U4 Qjg1OTYxRkQ0OEJDNzgwREFGNDRDRUZCNjQ3QzZFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85QzIzRkIzRThCODU5NjFGRDQ4QkM3ODBEQUY0NENFRkI2NDdD NkU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvOUMyM0ZCM0U4Qjg1OTYxRkQ0OEJDNzgwREFGNDRD RUZCNjQ3QzZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmC85Bn2u+nb+yZpcJKXiI07m/HL8kxJ/Sz B2TkQQheYNMx8hN95Ylgip+3WSH96xKREmlJCErHToAHokfs3O+WXmBuKpi8/sdT vLbTmx7RL+h208//9G8CvVY8qO+A9njBTuPsepdzTqZ/EEiOy+xNnhtq9uwabUSD jSJQG3vqDuyjkMQZULL7S5nZvq38HNi/WH0XqY2rCAHJs+BEcTKqXe1o7x6hG9lT KKJd3ZqVYSmeVtN4c3nnEXjDytU80+GTPOyWQ/jNggExa0V45bn1/3vc3YaWzb5Q 1nsoR9X7mRzMPvmDDTF/y2Nd03Og1eVFVRfhNZRBI8ZQ5n4dcro= -----END CERTIFICATE-----Generated at Wed May 13 00:45:10 2026 by rpki-client