$ rpki-client -vvf rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft File: 9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft (raw, json) Hash identifier: WXXpFBm6nfkHgU5eB2garEtJzz0j/TQAFQpkOurqS3M= Subject key identifier: 4D:F9:90:99:DE:18:A2:11:3C:E7:C7:7A:59:3A:42:12:96:66:0D:E7 Authority key identifier: 9A:2E:70:15:61:0F:91:22:97:C9:C4:B0:FF:DE:85:57:63:38:C9:EA Certificate issuer: /CN=9A2E7015610F912297C9C4B0FFDE85576338C9EA Certificate serial: 4610F55167B8F9E24F38235872D6C089A58C8EE1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 12:09:20 +0000 Manifest this update: Sat 13 Jun 2026 12:04:20 +0000 Manifest next update: Sun 14 Jun 2026 16:02:20 +0000 Files and hashes: 1: 9A2E7015610F912297C9C4B0FFDE85576338C9EA.crl (hash: iid+QRLtv++wBqnInPwppZiFF4hR8+OmfrdKNankXyI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.crl rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:10:f5:51:67:b8:f9:e2:4f:38:23:58:72:d6:c0:89:a5:8c:8e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A2E7015610F912297C9C4B0FFDE85576338C9EA Validity Not Before: Jun 13 12:04:20 2026 GMT Not After : Jun 14 16:02:20 2026 GMT Subject: CN=4DF99099DE18A2113CE7C77A593A421296660DE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:83:e8:9e:c3:c9:48:f5:2d:c5:50:cd:57:53: 32:b3:5a:f4:de:42:54:fc:c0:63:69:58:70:89:03: a0:ab:7f:b4:c6:c4:6d:c6:91:a8:af:23:5c:71:0e: 22:91:93:ba:38:90:eb:6f:b7:47:a2:d4:9f:06:3d: 7f:1f:73:71:ca:a2:51:c6:a4:2f:9b:43:0e:4f:a5: 5a:45:59:b3:bb:5d:8b:11:69:2f:9f:69:bb:5c:a9: 6c:fe:4b:b8:b2:4b:35:af:bc:8b:25:77:be:a9:f3: 0e:38:4c:de:6f:75:0b:6e:a3:c9:af:e8:7d:0f:4e: 7e:34:23:af:eb:ad:37:99:48:3f:ef:9b:96:33:6a: c5:f2:5b:ea:eb:21:1e:50:50:12:d0:85:c6:5a:96: 64:77:89:f5:e1:b9:83:ab:ef:bc:80:ea:52:1d:d6: 4f:c8:34:9f:2a:b2:32:f4:91:8b:2e:e7:30:8b:20: 81:1c:62:d6:5a:06:03:7a:a0:2b:99:37:e4:e0:51: dd:7f:0c:94:f4:e9:89:d9:e3:5f:bb:8f:2d:72:06: 85:8f:24:6a:ab:fd:8f:76:97:37:4e:ed:b6:0b:61: 25:c9:ff:6f:c1:57:d3:62:6a:a2:b7:9e:59:ec:ba: 6c:65:39:e8:06:06:fa:db:83:9b:ad:4e:66:31:58: 12:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F9:90:99:DE:18:A2:11:3C:E7:C7:7A:59:3A:42:12:96:66:0D:E7 X509v3 Authority Key Identifier: keyid:9A:2E:70:15:61:0F:91:22:97:C9:C4:B0:FF:DE:85:57:63:38:C9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:8b:b1:46:84:02:a3:a8:73:74:d0:d8:2c:de:70:9f:49:d6: f2:23:63:8f:74:69:06:77:41:67:69:80:56:fd:9c:04:d7:97: f3:2a:d3:36:59:ee:a1:6c:14:f3:69:d0:cb:ca:38:5e:cc:1a: 45:22:73:7d:82:52:b4:43:87:28:5c:55:65:ec:a0:86:cb:03: 18:59:b8:2d:8a:da:83:e0:78:ff:ee:e4:bb:c4:ee:8d:70:e0: 7b:63:a8:06:c4:87:de:50:ef:e2:c7:01:79:5b:c2:f8:42:d1: bd:5d:9d:96:f0:27:a6:ea:2e:a2:1d:8c:2b:c2:dc:73:64:0c: 7c:94:b1:5c:90:6a:4c:4d:5d:3b:71:35:a7:0d:8a:c5:97:16: 9b:c4:8e:c6:ae:5d:7f:0d:b1:b5:84:0d:0f:8c:3d:15:ed:6f: e5:56:32:18:d0:4c:4e:51:98:38:48:f8:4d:d0:25:42:0c:f7: 83:e6:d4:75:df:a5:97:1f:de:03:8d:55:a8:9c:0d:7b:4f:53: 26:95:a2:a5:02:f7:0f:84:45:30:6d:c4:d4:c5:0c:89:08:a0: 84:08:d7:bb:a4:bc:25:b1:fe:67:e6:2c:91:1a:a6:b9:0a:74: 9f:9c:8d:58:36:8f:51:ec:b2:98:fd:96:14:f8:e7:58:ae:d1: 19:16:8b:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURhD1UWe4+eJPOCNYctbAiaWMjuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyRTcwMTU2MTBGOTEyMjk3QzlDNEIwRkZERTg1NTc2 MzM4QzlFQTAeFw0yNjA2MTMxMjA0MjBaFw0yNjA2MTQxNjAyMjBaMDMxMTAvBgNV BAMTKDRERjk5MDk5REUxOEEyMTEzQ0U3Qzc3QTU5M0E0MjEyOTY2NjBERTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCig+iew8lI9S3FUM1XUzKzWvTe QlT8wGNpWHCJA6Crf7TGxG3GkaivI1xxDiKRk7o4kOtvt0ei1J8GPX8fc3HKolHG pC+bQw5PpVpFWbO7XYsRaS+fabtcqWz+S7iySzWvvIsld76p8w44TN5vdQtuo8mv 6H0PTn40I6/rrTeZSD/vm5YzasXyW+rrIR5QUBLQhcZalmR3ifXhuYOr77yA6lId 1k/INJ8qsjL0kYsu5zCLIIEcYtZaBgN6oCuZN+TgUd1/DJT06YnZ41+7jy1yBoWP JGqr/Y92lzdO7bYLYSXJ/2/BV9NiaqK3nlnsumxlOegGBvrbg5utTmYxWBJFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTfmQmd4YohE858d6WTpCEpZmDecwHwYDVR0j BBgwFoAUmi5wFWEPkSKXycSw/96FV2M4yeowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTNmYTdkNWMtMzY4ZC00YWYzLWI4ZTctMTc4NjI0NmRkNjJmLzAvOUEyRTcwMTU2 MTBGOTEyMjk3QzlDNEIwRkZERTg1NTc2MzM4QzlFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTJFNzAxNTYxMEY5MTIyOTdDOUM0QjBGRkRFODU1NzYzMzhD OUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTNmYTdkNWMtMzY4ZC00YWYzLWI4 ZTctMTc4NjI0NmRkNjJmLzAvOUEyRTcwMTU2MTBGOTEyMjk3QzlDNEIwRkZERTg1 NTc2MzM4QzlFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+LsUaEAqOoc3TQ2CzecJ9J1vIjY490aQZ3 QWdpgFb9nATXl/Mq0zZZ7qFsFPNp0MvKOF7MGkUic32CUrRDhyhcVWXsoIbLAxhZ uC2K2oPgeP/u5LvE7o1w4HtjqAbEh95Q7+LHAXlbwvhC0b1dnZbwJ6bqLqIdjCvC 3HNkDHyUsVyQakxNXTtxNacNisWXFpvEjsauXX8NsbWEDQ+MPRXtb+VWMhjQTE5R mDhI+E3QJUIM94Pm1HXfpZcf3gONVaicDXtPUyaVoqUC9w+ERTBtxNTFDIkIoIQI 17ukvCWx/mfmLJEaprkKdJ+cjVg2j1Hsspj9lhT451iu0RkWi8A= -----END CERTIFICATE-----Generated at Sat Jun 13 15:01:44 2026 by rpki-client