$ rpki-client -vvf rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft File: 9290697B92D08AFAAFB01253090BE0FE28871EA9.mft (raw, json) Hash identifier: /49j6KcbT1HKsAUxmL9+UhyuAyQkL+oWbE2Ga+VbgbA= Subject key identifier: 25:8E:EE:A0:23:E7:C0:B9:CC:B9:4A:A4:9D:01:F7:62:9B:83:E1:17 Authority key identifier: 92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9 Certificate issuer: /CN=9290697B92D08AFAAFB01253090BE0FE28871EA9 Certificate serial: 632C45601C467298AFEB45FB549857C4806B2B4E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 21:25:09 +0000 Manifest this update: Tue 16 Jun 2026 21:20:09 +0000 Manifest next update: Wed 17 Jun 2026 23:32:09 +0000 Files and hashes: 1: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: ld7ZAKTrz/u5LDPP3+3DpOULg7oKh+lQm5wahDEcTNc=) 2: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: hRuNQymA0Kqk7Awfu8/hFwiPFpevo38okveHDPwRfwI=) 3: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: WJxpeyz7OfQNEVK9NO1sVdlmaQoTrq8jALq72l9BXpw=) 4: 9290697B92D08AFAAFB01253090BE0FE28871EA9.crl (hash: gpOJxrgZhVDSC+kh17Xd6GKLavCLwWnOmSjINycZDzI=) 5: 323030313a6466373a376438303a3a2f34382d3438203d3e20313431393039.roa (hash: tw5oikVlx6lbDw0PXuWWK4JNZ7QDnCFmUnX8Ug8gws8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.crl rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2c:45:60:1c:46:72:98:af:eb:45:fb:54:98:57:c4:80:6b:2b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9290697B92D08AFAAFB01253090BE0FE28871EA9 Validity Not Before: Jun 16 21:20:09 2026 GMT Not After : Jun 17 23:32:09 2026 GMT Subject: CN=258EEEA023E7C0B9CCB94AA49D01F7629B83E117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bf:88:cc:bf:43:db:21:2e:c6:ed:44:7c:4d: 8c:93:5d:f3:ac:2d:87:45:f6:45:7c:de:90:aa:d4: 6c:07:60:22:a3:b5:52:1f:2d:d4:39:08:2b:e0:ec: 8d:de:87:31:28:cf:fd:3c:46:9f:0e:73:03:bd:53: dc:ae:6d:df:23:79:a3:a4:02:cf:44:1f:a2:0e:90: c9:06:ca:69:91:27:2d:82:11:49:4f:68:57:99:5f: 81:ff:5b:e1:c8:29:16:c5:9d:72:9d:10:63:9c:fb: bd:37:fa:c4:b8:6f:a9:37:49:35:e6:93:c5:ef:7c: a8:26:af:77:b9:fe:6f:18:9a:e9:2f:a8:e8:d9:c7: d4:c3:11:1a:fc:44:ed:dc:32:20:1f:cc:80:01:85: f9:42:d7:75:13:79:f5:a5:38:46:2c:df:5a:4e:b8: f2:9d:bc:8b:9b:ee:ce:d6:26:07:b4:60:02:9f:10: cb:6f:3a:15:a3:aa:39:41:f0:6f:1c:49:44:d4:2a: f6:fe:31:e5:ec:d7:1d:ea:b8:87:2a:dc:5a:c5:7c: aa:41:bc:b0:bf:29:47:0c:c9:7b:22:2a:f7:f7:68: 8a:6e:e3:3a:e1:8e:bc:f8:67:45:19:3b:d8:0c:86: f5:7c:8f:a6:c7:d0:96:f0:c6:4c:db:7a:bb:92:05: 8e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8E:EE:A0:23:E7:C0:B9:CC:B9:4A:A4:9D:01:F7:62:9B:83:E1:17 X509v3 Authority Key Identifier: keyid:92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1f:3f:bc:1b:b6:8c:78:00:47:d4:3e:55:0d:40:5a:8a:4d: 2f:15:c5:90:7b:6d:a2:de:68:69:ae:0e:4e:f6:f4:4d:ff:f2: d5:01:f7:b8:dd:ef:dd:64:b6:4d:d4:69:5c:e1:db:55:b2:6e: 66:4d:46:01:cb:7e:cb:a3:6a:03:ad:83:45:c7:98:7a:44:4d: e5:3e:a6:37:84:f5:94:49:71:06:07:14:fc:f6:ee:fa:6a:47: 1e:0b:b5:75:c9:b5:8f:eb:31:90:b0:8c:3f:23:25:01:18:fa: dc:d0:af:92:1f:37:27:a6:51:b2:7b:4c:f9:10:48:59:85:96: f0:24:67:8e:85:e1:16:3e:37:ff:2f:d9:9b:a2:e4:16:ea:dd: ed:dd:b3:58:76:d6:8d:0e:f3:8a:3e:ea:ad:cd:4c:f2:62:80: db:f2:ff:48:74:18:2e:88:a1:11:2f:c6:8a:75:89:10:ff:02: 85:cb:62:4f:f6:9a:1e:29:db:e8:a7:3d:72:47:3a:79:63:27: ba:ae:33:1f:44:53:ee:8c:34:64:c8:67:ed:af:06:19:ac:ba: 40:c1:11:1b:b8:ad:83:21:3c:d0:1b:9c:04:98:8a:41:96:60: 40:31:fb:96:f0:41:ab:94:fe:1d:78:7b:28:8f:57:d1:01:be: bb:78:72:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYyxFYBxGcpiv60X7VJhXxIBrK04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI5MDY5N0I5MkQwOEFGQUFGQjAxMjUzMDkwQkUwRkUy ODg3MUVBOTAeFw0yNjA2MTYyMTIwMDlaFw0yNjA2MTcyMzMyMDlaMDMxMTAvBgNV BAMTKDI1OEVFRUEwMjNFN0MwQjlDQ0I5NEFBNDlEMDFGNzYyOUI4M0UxMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTv4jMv0PbIS7G7UR8TYyTXfOs LYdF9kV83pCq1GwHYCKjtVIfLdQ5CCvg7I3ehzEoz/08Rp8OcwO9U9yubd8jeaOk As9EH6IOkMkGymmRJy2CEUlPaFeZX4H/W+HIKRbFnXKdEGOc+703+sS4b6k3STXm k8XvfKgmr3e5/m8YmukvqOjZx9TDERr8RO3cMiAfzIABhflC13UTefWlOEYs31pO uPKdvIub7s7WJge0YAKfEMtvOhWjqjlB8G8cSUTUKvb+MeXs1x3quIcq3FrFfKpB vLC/KUcMyXsiKvf3aIpu4zrhjrz4Z0UZO9gMhvV8j6bH0JbwxkzberuSBY71AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJY7uoCPnwLnMuUqknQH3YpuD4RcwHwYDVR0j BBgwFoAUkpBpe5LQivqvsBJTCQvg/iiHHqkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAxYzRkNjEtZGNlZi00YTIwLWJkNGMtYTI4MmEzN2FhNjllLzAvOTI5MDY5N0I5 MkQwOEFGQUFGQjAxMjUzMDkwQkUwRkUyODg3MUVBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjkwNjk3QjkyRDA4QUZBQUZCMDEyNTMwOTBCRTBGRTI4ODcx RUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAxYzRkNjEtZGNlZi00YTIwLWJk NGMtYTI4MmEzN2FhNjllLzAvOTI5MDY5N0I5MkQwOEFGQUFGQjAxMjUzMDkwQkUw RkUyODg3MUVBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0fP7wbtox4AEfUPlUNQFqKTS8VxZB7baLe aGmuDk729E3/8tUB97jd791ktk3UaVzh21WybmZNRgHLfsujagOtg0XHmHpETeU+ pjeE9ZRJcQYHFPz27vpqRx4LtXXJtY/rMZCwjD8jJQEY+tzQr5IfNyemUbJ7TPkQ SFmFlvAkZ46F4RY+N/8v2Zui5Bbq3e3ds1h21o0O84o+6q3NTPJigNvy/0h0GC6I oREvxop1iRD/AoXLYk/2mh4p2+inPXJHOnljJ7quMx9EU+6MNGTIZ+2vBhmsukDB ERu4rYMhPNAbnASYikGWYEAx+5bwQauU/h14eyiPV9EBvrt4cpU= -----END CERTIFICATE-----Generated at Wed Jun 17 13:32:49 2026 by rpki-client