$ rpki-client -vvf rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft File: 9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft (raw, json) Hash identifier: bI9NdFMGs+bTW7q+oBnRWsMDpCP1FpEaUQc2aRM3M/M= Subject key identifier: D6:2A:B3:0A:D6:D6:97:21:8F:E4:D7:C7:72:2E:0E:60:F4:D6:D8:B6 Authority key identifier: 9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C Certificate issuer: /CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Certificate serial: 2007F522A355B3E7F328A4A2AD9A4D9FBF816309 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft Manifest number: 3B Signing time: Sat 13 Jun 2026 17:25:35 +0000 Manifest this update: Sat 13 Jun 2026 17:20:35 +0000 Manifest next update: Sun 14 Jun 2026 19:59:35 +0000 Files and hashes: 1: 3230322e35372e32312e302f32342d3234203d3e20313431363733.roa (hash: 2uayKWV7qVJbZpJZiiGrPFO3R21PwEyriXpTW2MB4pQ=) 2: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (hash: 0uTllQF8wo+NL3Ts0DUiJLkGlZst9OmTPcws3XPvVM8=) 3: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (hash: FVzH7nhWf9HlKEhd9diqlsZY20NWlRxKMpXnnJ7+h6Y=) 4: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (hash: C5EXjolwl07zRhpLr0tmhZ7KpZpGgWZO494eyJEQSqk=) 5: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (hash: byBg5cGc6s1YP8fDSR7s5sO6wrvfj9UFsOHI5fDaKjw=) 6: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (hash: tedUTTSe47lCMR7mgNFb3hX/nrYcz1gvH0zDmHz42Os=) 7: 3230322e35372e32342e302f32332d3233203d3e20313430343639.roa (hash: d1pFnM2SYbSdXqGP4WVzR+cUntyYSCzP9FKk6VY+PFE=) 8: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (hash: o+t6IXXZJ4nVKh7Fjs01qIsZ6gI4rdJ87aU7Y1okiOU=) 9: 9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl (hash: +m1IEZl4R/NDpYP0lhMBu9LvMUkRX6A3RmCvi19og7I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:07:f5:22:a3:55:b3:e7:f3:28:a4:a2:ad:9a:4d:9f:bf:81:63:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Validity Not Before: Jun 13 17:20:35 2026 GMT Not After : Jun 14 19:59:35 2026 GMT Subject: CN=D62AB30AD6D697218FE4D7C7722E0E60F4D6D8B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ca:3e:2b:d2:9d:dd:75:36:53:98:af:c0:de: a0:62:71:9a:2f:91:da:c7:f5:92:45:c7:74:3f:5d: ca:06:93:31:cd:17:34:de:c7:3f:21:fc:95:f4:5f: 05:02:ad:77:ca:28:b1:7c:d0:c4:be:48:cf:c3:b0: 14:b5:4b:68:3f:5b:33:09:eb:45:26:a9:a2:e4:b5: 65:a0:5f:ad:21:d5:c3:5d:9f:4b:fd:03:0c:b0:23: 6c:40:58:b3:4d:b4:3b:ea:40:5e:05:e2:5d:73:55: b5:85:0f:92:db:f4:8b:7e:46:e2:33:04:63:fd:41: 20:25:2a:e1:64:97:f2:74:1a:12:fd:1e:6b:80:a6: ec:16:cb:16:95:df:e4:21:21:c1:8e:e5:9b:c4:11: e7:ff:96:e9:bd:c8:64:fd:94:f2:35:69:87:af:a1: ae:bc:40:08:b8:57:94:35:8f:78:47:44:b5:04:31: 75:56:be:47:18:2b:de:b9:d9:cc:a2:8f:c2:d9:7a: 6c:9a:a2:b8:ac:6a:6b:6a:00:83:e5:f5:7f:06:bc: 52:ae:df:c8:8f:ca:65:4c:7a:57:7b:2e:1b:b4:8d: fa:86:fb:15:5a:f0:d4:2f:6f:ae:a8:9e:4d:34:c5: 51:0a:93:ed:5d:95:8c:e2:2b:72:eb:28:58:48:9f: d2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2A:B3:0A:D6:D6:97:21:8F:E4:D7:C7:72:2E:0E:60:F4:D6:D8:B6 X509v3 Authority Key Identifier: keyid:9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:03:b4:6d:51:3f:71:48:d2:c3:d6:a1:bb:a5:45:29:4d:a4: 30:b3:2b:e5:3c:10:89:f2:29:7b:e8:28:0d:82:cb:52:cc:70: 5e:02:a2:7d:79:00:7c:c8:f3:f1:f3:a1:b9:cb:25:e9:20:c9: 41:ee:83:a5:13:1d:cf:59:07:fe:0c:97:eb:80:f3:3d:4b:5a: cc:2d:7c:58:88:65:19:bc:e4:c5:33:3e:55:5e:c7:a1:46:ec: 68:f7:1f:9a:9b:f3:fb:a0:44:73:91:3d:32:2f:71:de:de:90: 9c:36:c5:56:45:15:d5:5d:b1:91:97:f2:74:36:ad:63:a6:20: 78:68:e0:77:38:21:9f:a5:ab:51:05:23:21:35:75:1e:12:c1: 7f:8a:9c:b4:9d:1f:28:05:a2:59:d8:0c:14:4f:01:c1:43:d4: 1d:51:a3:9e:5d:11:57:85:74:c2:4f:b3:54:62:db:70:e7:1a: 65:39:31:07:d9:57:02:e6:28:c6:93:55:02:ee:a8:e9:ba:48: 62:80:23:c7:b8:90:a1:3e:04:0e:97:86:f7:79:7f:67:73:a8: 2e:1a:9f:62:0e:89:c6:7f:a7:1f:27:0a:eb:f1:67:e7:61:2d: d1:67:64:c5:f9:80:bd:a6:91:ab:9a:2a:30:63:41:8a:f0:2b: 30:15:30:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIAf1IqNVs+fzKKSirZpNn7+BYwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURCOEM0NzIzRTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1 QzgyQ0Q5QzAeFw0yNjA2MTMxNzIwMzVaFw0yNjA2MTQxOTU5MzVaMDMxMTAvBgNV BAMTKEQ2MkFCMzBBRDZENjk3MjE4RkU0RDdDNzcyMkUwRTYwRjRENkQ4QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeyj4r0p3ddTZTmK/A3qBicZov kdrH9ZJFx3Q/XcoGkzHNFzTexz8h/JX0XwUCrXfKKLF80MS+SM/DsBS1S2g/WzMJ 60UmqaLktWWgX60h1cNdn0v9AwywI2xAWLNNtDvqQF4F4l1zVbWFD5Lb9It+RuIz BGP9QSAlKuFkl/J0GhL9HmuApuwWyxaV3+QhIcGO5ZvEEef/lum9yGT9lPI1aYev oa68QAi4V5Q1j3hHRLUEMXVWvkcYK9652cyij8LZemyaorisamtqAIPl9X8GvFKu 38iPymVMeld7Lhu0jfqG+xVa8NQvb66onk00xVEKk+1dlYziK3LrKFhIn9KPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1iqzCtbWlyGP5NfHci4OYPTW2LYwHwYDVR0j BBgwFoAUnbjEcj47/dATinkWqLsSxFyCzZwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGQzZjA5NWItNzEzMC00MTIyLWFmMjUtN2QyZTdhMTFiMWIxLzAvOURCOEM0NzIz RTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1QzgyQ0Q5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REI4QzQ3MjNFM0JGREQwMTM4QTc5MTZBOEJCMTJDNDVDODJD RDlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGQzZjA5NWItNzEzMC00MTIyLWFm MjUtN2QyZTdhMTFiMWIxLzAvOURCOEM0NzIzRTNCRkREMDEzOEE3OTE2QThCQjEy QzQ1QzgyQ0Q5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIDtG1RP3FI0sPWobulRSlNpDCzK+U8EIny KXvoKA2Cy1LMcF4Con15AHzI8/HzobnLJekgyUHug6UTHc9ZB/4Ml+uA8z1LWswt fFiIZRm85MUzPlVex6FG7Gj3H5qb8/ugRHORPTIvcd7ekJw2xVZFFdVdsZGX8nQ2 rWOmIHho4Hc4IZ+lq1EFIyE1dR4SwX+KnLSdHygFolnYDBRPAcFD1B1Ro55dEVeF dMJPs1Ri23DnGmU5MQfZVwLmKMaTVQLuqOm6SGKAI8e4kKE+BA6Xhvd5f2dzqC4a n2IOicZ/px8nCuvxZ+dhLdFnZMX5gL2mkauaKjBjQYrwKzAVMFM= -----END CERTIFICATE-----Generated at Sun Jun 14 05:18:18 2026 by rpki-client