$ rpki-client -vvf rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft File: C09B0826A8950269AAA9592F3B0B65A3232333C5.mft (raw, json) Hash identifier: IAZ2I26vDCAQ14gt0l5CMZvKyp9HoLXUg6wRrDQkUns= Subject key identifier: 96:A9:5E:05:74:56:21:BF:57:4A:23:E9:02:78:AA:AC:13:51:6A:F4 Authority key identifier: C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 Certificate issuer: /CN=C09B0826A8950269AAA9592F3B0B65A3232333C5 Certificate serial: 0E909DB13159D2BF17C45D64EB13E99634E410FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:01:39 +0000 Manifest this update: Tue 12 May 2026 16:56:39 +0000 Manifest next update: Wed 13 May 2026 18:14:39 +0000 Files and hashes: 1: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: /OlYgkp/JUv7mWTKG1jRIEEEMwF4cVrVtCICjMapFuQ=) 2: C09B0826A8950269AAA9592F3B0B65A3232333C5.crl (hash: roGxoPLxDdV71kDPQQ2hinK3P+lydIqhj4HWq6wVqEs=) 3: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: qD0/6TXIm8wKpNkYb5k3M2VEq1Hkh2ZvC2u1LPq71Ck=) 4: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: u7ID+/zmEfkiBk9A2DOk1aoUvKs6xhyBLUvlSwziv+4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:90:9d:b1:31:59:d2:bf:17:c4:5d:64:eb:13:e9:96:34:e4:10:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C09B0826A8950269AAA9592F3B0B65A3232333C5 Validity Not Before: May 12 16:56:39 2026 GMT Not After : May 13 18:14:39 2026 GMT Subject: CN=96A95E05745621BF574A23E90278AAAC13516AF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2e:4f:16:5c:f8:51:fd:e1:e3:38:d1:b6:8f: f3:44:a1:2f:9e:56:90:5b:68:e2:96:14:5a:c7:e6: 18:57:ea:f4:e0:ce:30:90:ab:3a:a0:bb:de:de:e2: aa:96:ab:7e:43:10:2f:ac:d2:4b:26:e2:b0:2d:a8: eb:f9:a1:e4:9c:a7:4f:c5:21:39:32:70:4c:33:a4: ae:27:2b:6f:cf:06:f1:ce:a8:a8:57:5b:f6:c3:a3: c3:54:66:fc:e3:2a:72:f4:66:14:0d:10:65:1a:e8: ee:c1:00:01:66:be:d0:16:b4:45:bd:af:ce:2f:77: 27:04:8c:b8:0a:85:41:53:f9:63:c5:98:f9:e9:de: 64:6a:10:88:45:c3:a3:32:f6:3f:01:4e:fd:18:2c: f6:84:0f:fc:7d:9a:44:27:21:1c:26:87:90:23:7d: ac:5f:39:e5:42:f7:4f:e7:62:ea:2d:e1:94:2e:47: fa:f5:c5:b4:bf:fb:d7:dd:6e:43:50:53:77:f0:a0: 26:53:d6:6a:08:86:2b:1a:cd:eb:ea:05:59:4a:b2: 88:23:6d:e3:e4:ec:93:e9:c9:d2:71:84:d0:24:34: 28:85:2b:f3:26:18:0b:0e:9f:11:7f:32:29:39:69: 2f:14:6c:72:18:5f:41:54:d7:72:2e:b8:c3:23:1a: 1d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A9:5E:05:74:56:21:BF:57:4A:23:E9:02:78:AA:AC:13:51:6A:F4 X509v3 Authority Key Identifier: keyid:C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5d:9f:10:f0:86:ef:05:01:a8:19:fe:22:0f:62:6b:c6:53: c6:9f:56:d3:33:c7:a6:44:4c:80:45:bb:5e:00:69:59:9e:d6: 94:18:4f:5d:04:35:2e:af:e9:ef:62:db:f3:eb:11:ba:89:ce: c5:90:91:1a:e7:44:7e:1d:85:aa:c8:29:5f:ce:73:92:af:0b: 92:9a:ee:28:7f:24:5d:6b:82:c0:09:50:69:8d:ab:c4:9d:14: bd:3a:c3:fc:d7:5b:85:5d:94:09:3b:98:84:55:0d:18:e4:7b: f7:9c:4a:39:b0:3e:c1:f1:ef:be:91:64:7d:66:16:2c:6d:cc: da:b7:ed:a5:be:db:31:5c:89:97:3e:38:c4:5e:80:5c:f4:36: b9:34:eb:84:ab:c7:39:3b:d1:4d:81:6d:a9:89:56:66:5c:d6: c4:f5:18:64:88:e4:3e:79:b6:4d:f5:1a:ee:1d:02:5e:9f:49: 9c:37:77:ed:38:1a:cb:00:1e:52:a3:0d:f8:ad:36:38:ff:de: cf:42:b5:22:56:2f:31:f9:27:49:80:6d:50:a4:32:a0:80:69: 3d:80:c7:d3:f1:4a:2f:03:40:7a:6a:f3:09:9e:97:ef:ce:e5: 00:ff:61:f1:e2:5f:ce:d0:0d:f6:3c:28:fe:48:90:53:d6:c0: f6:32:17:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDpCdsTFZ0r8XxF1k6xPpljTkEP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA5QjA4MjZBODk1MDI2OUFBQTk1OTJGM0IwQjY1QTMy MzIzMzNDNTAeFw0yNjA1MTIxNjU2MzlaFw0yNjA1MTMxODE0MzlaMDMxMTAvBgNV BAMTKDk2QTk1RTA1NzQ1NjIxQkY1NzRBMjNFOTAyNzhBQUFDMTM1MTZBRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaLk8WXPhR/eHjONG2j/NEoS+e VpBbaOKWFFrH5hhX6vTgzjCQqzqgu97e4qqWq35DEC+s0ksm4rAtqOv5oeScp0/F ITkycEwzpK4nK2/PBvHOqKhXW/bDo8NUZvzjKnL0ZhQNEGUa6O7BAAFmvtAWtEW9 r84vdycEjLgKhUFT+WPFmPnp3mRqEIhFw6My9j8BTv0YLPaED/x9mkQnIRwmh5Aj faxfOeVC90/nYuot4ZQuR/r1xbS/+9fdbkNQU3fwoCZT1moIhisazevqBVlKsogj bePk7JPpydJxhNAkNCiFK/MmGAsOnxF/Mik5aS8UbHIYX0FU13IuuMMjGh3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlqleBXRWIb9XSiPpAniqrBNRavQwHwYDVR0j BBgwFoAUwJsIJqiVAmmqqVkvOwtloyMjM8UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjhkYzA4NDktODNmYi00Y2M4LThjMjEtYmU2Y2E3YTJlZDgzLzAvQzA5QjA4MjZB ODk1MDI2OUFBQTk1OTJGM0IwQjY1QTMyMzIzMzNDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMDlCMDgyNkE4OTUwMjY5QUFBOTU5MkYzQjBCNjVBMzIzMjMz M0M1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvQzA5QjA4MjZBODk1MDI2OUFBQTk1OTJGM0IwQjY1 QTMyMzIzMzNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1dnxDwhu8FAagZ/iIPYmvGU8afVtMzx6ZE TIBFu14AaVme1pQYT10ENS6v6e9i2/PrEbqJzsWQkRrnRH4dharIKV/Oc5KvC5Ka 7ih/JF1rgsAJUGmNq8SdFL06w/zXW4VdlAk7mIRVDRjke/ecSjmwPsHx776RZH1m FixtzNq37aW+2zFciZc+OMRegFz0Nrk064Srxzk70U2BbamJVmZc1sT1GGSI5D55 tk31Gu4dAl6fSZw3d+04GssAHlKjDfitNjj/3s9CtSJWLzH5J0mAbVCkMqCAaT2A x9PxSi8DQHpq8wmel+/O5QD/YfHiX87QDfY8KP5IkFPWwPYyF7M= -----END CERTIFICATE-----Generated at Wed May 13 00:27:39 2026 by rpki-client