$ rpki-client -vvf rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft File: E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft (raw, json) Hash identifier: 8VR1yxrPcc7z1z8UXg/D6udGwkUIX4DJLDpnWLxGkOk= Subject key identifier: B4:92:EC:4D:40:14:17:2F:4B:2D:89:64:90:DA:96:00:22:28:67:8D Authority key identifier: E9:DD:F9:8F:B3:21:D5:A9:77:AD:47:B0:C4:1C:D4:FE:29:A3:79:3A Certificate issuer: /CN=E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A Certificate serial: 7D99F4E1738678C94C2103193171F7F74D992ED7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 14:52:10 +0000 Manifest this update: Tue 16 Jun 2026 14:47:10 +0000 Manifest next update: Wed 17 Jun 2026 16:34:10 +0000 Files and hashes: 1: E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.crl (hash: 4jQ3VSEW/pCva8Sm+ZNzj/cjLanvoiX+R6jwa68Uiu0=) 2: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: CNG3TKSalvuCxf+hLEGkOQvjI+uVRC0qCR05spnG4ao=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.crl rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 16:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:99:f4:e1:73:86:78:c9:4c:21:03:19:31:71:f7:f7:4d:99:2e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A Validity Not Before: Jun 16 14:47:10 2026 GMT Not After : Jun 17 16:34:10 2026 GMT Subject: CN=B492EC4D4014172F4B2D896490DA96002228678D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b2:8b:bc:60:7e:64:39:09:c5:7f:e4:a0:ea: a0:25:32:9c:bc:31:cb:2c:a4:0a:8e:94:38:c2:68: dd:68:29:f0:db:79:2f:b4:89:01:8a:2b:a6:72:c2: 0b:de:d0:92:34:7a:4d:a2:2d:e6:c6:85:11:b3:61: 39:c3:db:0d:68:86:da:fb:54:b0:49:f3:b9:82:10: aa:d4:9b:dc:fa:07:60:81:c3:ee:1b:8a:12:c0:76: bb:db:ce:d0:ea:39:7a:bf:5f:84:37:df:d9:61:cd: 89:e5:ea:33:de:ac:87:d9:61:eb:32:32:fd:d2:da: f3:97:84:6e:ab:b7:7f:1a:be:2a:48:91:53:97:1a: c0:ff:e3:57:79:7e:63:39:0a:1b:29:bc:d6:bd:f2: e3:a1:b2:e6:ee:a3:de:ea:7b:f1:c3:eb:61:f8:d4: 50:18:63:b5:78:95:2a:2b:54:19:4d:13:ac:26:49: 04:da:09:d5:9a:4a:4f:26:8f:f9:28:a8:1d:ac:7e: 37:b3:93:01:57:1c:15:85:4f:b0:8a:50:e6:89:fe: ed:bf:15:4e:2b:6e:a0:03:ef:68:34:e8:ba:8b:cc: fd:18:e5:f6:a4:cd:9e:aa:6f:45:39:6d:98:a4:a3: a0:df:ae:1a:96:0f:02:91:ef:dc:51:c2:42:79:91: 0d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:92:EC:4D:40:14:17:2F:4B:2D:89:64:90:DA:96:00:22:28:67:8D X509v3 Authority Key Identifier: keyid:E9:DD:F9:8F:B3:21:D5:A9:77:AD:47:B0:C4:1C:D4:FE:29:A3:79:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:61:9b:34:6b:ce:00:11:a6:25:89:7e:8b:da:67:d5:bd:43: 11:2f:34:9c:1a:1b:73:40:95:db:b0:1d:09:68:68:a4:82:e5: 5c:9d:f7:85:62:b2:72:6c:3c:98:ce:7f:ce:2b:fa:4d:75:04: ee:99:d9:76:8d:b8:38:a5:75:ea:1f:20:db:16:d5:6a:35:af: 69:3a:a4:23:7a:33:97:30:12:e8:01:11:81:60:f6:e0:e7:cc: 85:a5:8e:c3:14:3e:a3:e5:a7:74:f3:4d:71:81:ae:64:2e:98: 93:e3:03:fd:51:3d:1a:93:85:d3:8c:e5:9d:a2:9f:d9:cd:b7: 3e:32:ee:48:09:14:60:de:29:00:98:78:b5:e2:e2:4b:5b:1d: af:c7:df:84:de:ca:49:63:79:91:0d:a0:d9:18:e9:39:66:1a: c1:95:19:d3:fe:03:6f:14:7a:a1:b4:fe:02:1d:c8:67:81:bc: d7:51:68:4d:f0:63:7e:4b:71:f7:4e:ee:f3:e3:ec:22:8d:04: 6d:e0:d4:06:e5:50:38:ae:0a:8f:d5:6b:78:ec:13:60:56:d0: 0a:c1:08:2d:62:0f:45:0d:06:d0:0d:48:b0:ac:5a:f2:b8:71: fb:ec:42:ae:d2:f3:92:78:a9:86:6f:51:51:ef:37:be:b5:d7: eb:97:56:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfZn04XOGeMlMIQMZMXH3902ZLtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlEREY5OEZCMzIxRDVBOTc3QUQ0N0IwQzQxQ0Q0RkUy OUEzNzkzQTAeFw0yNjA2MTYxNDQ3MTBaFw0yNjA2MTcxNjM0MTBaMDMxMTAvBgNV BAMTKEI0OTJFQzRENDAxNDE3MkY0QjJEODk2NDkwREE5NjAwMjIyODY3OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmsou8YH5kOQnFf+Sg6qAlMpy8 McsspAqOlDjCaN1oKfDbeS+0iQGKK6Zywgve0JI0ek2iLebGhRGzYTnD2w1ohtr7 VLBJ87mCEKrUm9z6B2CBw+4bihLAdrvbztDqOXq/X4Q339lhzYnl6jPerIfZYesy Mv3S2vOXhG6rt38avipIkVOXGsD/41d5fmM5ChspvNa98uOhsubuo97qe/HD62H4 1FAYY7V4lSorVBlNE6wmSQTaCdWaSk8mj/koqB2sfjezkwFXHBWFT7CKUOaJ/u2/ FU4rbqAD72g06LqLzP0Y5fakzZ6qb0U5bZiko6DfrhqWDwKR79xRwkJ5kQ2/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtJLsTUAUFy9LLYlkkNqWACIoZ40wHwYDVR0j BBgwFoAU6d35j7Mh1al3rUewxBzU/imjeTowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQzM2ExYzYtMGY3MC00Yzk4LTk2YjAtY2FiNTgxMjZhYjk0LzAvRTlEREY5OEZC MzIxRDVBOTc3QUQ0N0IwQzQxQ0Q0RkUyOUEzNzkzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOURERjk4RkIzMjFENUE5NzdBRDQ3QjBDNDFDRDRGRTI5QTM3 OTNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2 YjAtY2FiNTgxMjZhYjk0LzAvRTlEREY5OEZCMzIxRDVBOTc3QUQ0N0IwQzQxQ0Q0 RkUyOUEzNzkzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVhmzRrzgARpiWJfovaZ9W9QxEvNJwaG3NA lduwHQloaKSC5Vyd94VisnJsPJjOf84r+k11BO6Z2XaNuDildeofINsW1Wo1r2k6 pCN6M5cwEugBEYFg9uDnzIWljsMUPqPlp3TzTXGBrmQumJPjA/1RPRqThdOM5Z2i n9nNtz4y7kgJFGDeKQCYeLXi4ktbHa/H34TeykljeZENoNkY6TlmGsGVGdP+A28U eqG0/gIdyGeBvNdRaE3wY35LcfdO7vPj7CKNBG3g1AblUDiuCo/Va3jsE2BW0ArB CC1iD0UNBtANSLCsWvK4cfvsQq7S85J4qYZvUVHvN7611+uXVo8= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:59 2026 by rpki-client