$ rpki-client -vvf rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft File: 9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft (raw, json) Hash identifier: /y7VFcFY/Sohp74VpmEJbBzfkt2vGpL2Pkc7d/SXNLI= Subject key identifier: 28:6C:0B:17:97:B6:77:F1:37:69:0C:C1:D5:CE:7B:AC:EC:67:F2:91 Authority key identifier: 9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A Certificate issuer: /CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A Certificate serial: 17ED034B78BBF4A659E48A6EC72D7C6C5A6E8E2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 06:20:35 +0000 Manifest this update: Wed 17 Jun 2026 06:15:35 +0000 Manifest next update: Thu 18 Jun 2026 07:12:35 +0000 Files and hashes: 1: 9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl (hash: DHIXc9Ehc09HeNwAuIcQqpR4N5LAel5keZleTFSzL6w=) 2: 3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa (hash: rpX5Z9CNMyEUL+veiVsOhDnQwGzSm68cJVDfJbI5SIE=) 3: 3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (hash: y7jgS/ZISqQ0Ejz5jszYlUpeJRIijdmrHPSpWEnYBQg=) 4: 3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa (hash: Dgai9I/TT4G/oQBQ3mEn1fS7dXTCrr7cZjoLYBavMXQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ed:03:4b:78:bb:f4:a6:59:e4:8a:6e:c7:2d:7c:6c:5a:6e:8e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A Validity Not Before: Jun 17 06:15:35 2026 GMT Not After : Jun 18 07:12:35 2026 GMT Subject: CN=286C0B1797B677F137690CC1D5CE7BACEC67F291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3c:6e:98:b9:5b:ff:7e:59:7e:16:a4:a3:57: f8:a0:8c:71:e0:08:d5:ae:20:06:e2:a8:1f:3c:da: 6a:38:d5:57:57:c2:a8:3f:22:cf:bc:40:3e:41:f1: ce:1d:74:62:da:27:35:f9:dd:08:1c:b6:60:27:da: fc:a6:ae:91:c3:73:09:d0:c6:be:9f:f3:b4:34:cb: 45:8b:13:96:5e:0c:ee:dc:5a:1c:4c:51:6d:ec:22: b3:4b:ef:1e:5b:c1:21:5a:1e:80:96:4a:dc:24:07: af:e8:8f:75:a4:4e:8f:7e:d6:f6:0d:cd:bc:d5:75: 2d:80:13:7d:df:0d:76:79:e1:8a:a2:c1:91:15:31: 8e:8c:2a:06:34:91:b9:29:94:b1:6c:5e:77:0f:ce: 95:78:af:96:a3:15:23:de:ec:b1:0d:12:d2:d6:17: be:7f:ab:e6:86:b1:49:2f:01:58:76:39:01:94:fe: 2e:d4:49:31:d4:30:05:ba:4a:da:06:28:ab:59:13: 13:b6:4b:9b:51:28:17:57:b1:2e:e1:3d:05:36:b9: 42:52:70:9d:73:b5:b2:78:8b:b1:33:91:cd:d6:04: b3:a6:5d:91:2e:21:d6:0a:c5:88:13:68:39:3b:15: 6b:e3:6d:70:84:40:49:8d:93:02:6d:71:21:45:d8: 3a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6C:0B:17:97:B6:77:F1:37:69:0C:C1:D5:CE:7B:AC:EC:67:F2:91 X509v3 Authority Key Identifier: keyid:9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:ef:15:16:d5:4a:e1:e2:63:c8:d3:4d:1d:02:6a:14:36:dc: 31:55:ed:f0:dd:ac:44:cc:8c:84:56:74:9d:93:f2:18:68:d7: a3:a3:08:f4:88:db:b4:81:f5:28:19:62:fc:58:da:8f:20:32: 15:d0:01:68:5d:b4:c8:1c:e9:e0:8b:cc:ff:e5:f5:7e:60:3c: 6a:f2:cc:0d:da:9e:f1:f7:14:59:06:49:b7:ff:c6:f4:1a:ce: 87:33:1c:98:8a:93:0b:03:43:ec:e8:64:68:59:51:6c:60:f1: 4e:cb:fe:18:92:13:9c:23:0a:62:0b:a0:81:0a:8a:1c:f2:ca: 0d:2c:59:c3:bd:cf:02:9e:38:65:05:27:e8:7e:9b:d8:1e:d4: 36:fc:f7:34:61:17:8c:5e:0e:83:f2:7d:4f:9d:85:aa:56:1a: 1f:ab:37:55:74:b0:03:b2:ba:b3:9f:6a:42:5e:b6:9d:32:6c: 24:7c:83:88:d5:bf:b6:90:99:ef:b9:d2:cf:48:b2:f4:99:02: e4:86:69:fc:8d:dc:41:54:9e:b9:9e:e2:78:46:63:a7:4e:33: ee:80:a9:a1:71:c9:93:10:57:3b:d0:8f:24:9e:a7:c7:b0:35: 54:1c:74:13:22:2c:b4:50:1e:9c:20:6c:c3:c6:d8:82:59:85: 30:1e:56:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF+0DS3i79KZZ5Ipuxy18bFpuji4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBODgwMDU2RENGOUFEQjdBNzBENDYxRkY4MzA4NkQ4 RkU4ODk3QTAeFw0yNjA2MTcwNjE1MzVaFw0yNjA2MTgwNzEyMzVaMDMxMTAvBgNV BAMTKDI4NkMwQjE3OTdCNjc3RjEzNzY5MENDMUQ1Q0U3QkFDRUM2N0YyOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9PG6YuVv/fll+FqSjV/igjHHg CNWuIAbiqB882mo41VdXwqg/Is+8QD5B8c4ddGLaJzX53QgctmAn2vymrpHDcwnQ xr6f87Q0y0WLE5ZeDO7cWhxMUW3sIrNL7x5bwSFaHoCWStwkB6/oj3WkTo9+1vYN zbzVdS2AE33fDXZ54YqiwZEVMY6MKgY0kbkplLFsXncPzpV4r5ajFSPe7LENEtLW F75/q+aGsUkvAVh2OQGU/i7USTHUMAW6StoGKKtZExO2S5tRKBdXsS7hPQU2uUJS cJ1ztbJ4i7Ezkc3WBLOmXZEuIdYKxYgTaDk7FWvjbXCEQEmNkwJtcSFF2DpRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKGwLF5e2d/E3aQzB1c57rOxn8pEwHwYDVR0j BBgwFoAUn6iABW3Pmtt6cNRh/4MIbY/oiXowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0NDI1MmItZDMwZS00YmRjLTgzMmYtYjM4YjA1YzdhMDM1LzAvOUZBODgwMDU2 RENGOUFEQjdBNzBENDYxRkY4MzA4NkQ4RkU4ODk3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkE4ODAwNTZEQ0Y5QURCN0E3MEQ0NjFGRjgzMDg2RDhGRTg4 OTdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0NDI1MmItZDMwZS00YmRjLTgz MmYtYjM4YjA1YzdhMDM1LzAvOUZBODgwMDU2RENGOUFEQjdBNzBENDYxRkY4MzA4 NkQ4RkU4ODk3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMzvFRbVSuHiY8jTTR0CahQ23DFV7fDdrETM jIRWdJ2T8hho16OjCPSI27SB9SgZYvxY2o8gMhXQAWhdtMgc6eCLzP/l9X5gPGry zA3anvH3FFkGSbf/xvQazoczHJiKkwsDQ+zoZGhZUWxg8U7L/hiSE5wjCmILoIEK ihzyyg0sWcO9zwKeOGUFJ+h+m9ge1Db89zRhF4xeDoPyfU+dhapWGh+rN1V0sAOy urOfakJetp0ybCR8g4jVv7aQme+50s9IsvSZAuSGafyN3EFUnrme4nhGY6dOM+6A qaFxyZMQVzvQjySep8ewNVQcdBMiLLRQHpwgbMPG2IJZhTAeVho= -----END CERTIFICATE-----Generated at Wed Jun 17 13:15:23 2026 by rpki-client