$ rpki-client -vvf rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft File: 9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft (raw, json) Hash identifier: 8Aewznd3rz/VxAGgKRbZQl5NoQdN4LlX6m7DyiqqSxQ= Subject key identifier: 4F:01:91:D0:65:B0:33:A4:CF:40:3F:69:8B:36:49:81:B8:21:F6:FA Authority key identifier: 9B:61:7E:3E:89:75:C5:E8:37:FD:E8:E7:E3:A6:F7:F2:B0:7D:F2:FA Certificate issuer: /CN=9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA Certificate serial: 411A57604B27775EE0AF1AC8BD28B74CC1BF49B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 00:18:23 +0000 Manifest this update: Wed 17 Jun 2026 00:13:23 +0000 Manifest next update: Thu 18 Jun 2026 04:01:23 +0000 Files and hashes: 1: 3130332e34332e32352e302f32342d3234203d3e20313339343139.roa (hash: jbUXyMJGAUe8ArHS1H74yui1bmkFdiNku010i13gDLM=) 2: 9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl (hash: 7v++frnfnJm+enBpDtzhLGLazYeiu68uebFmc6mTVKU=) 3: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (hash: Y6VzFaG2FbyNdRwLMR4BvXhR1/TPWS0MIZ86oCceOfk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:1a:57:60:4b:27:77:5e:e0:af:1a:c8:bd:28:b7:4c:c1:bf:49:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA Validity Not Before: Jun 17 00:13:23 2026 GMT Not After : Jun 18 04:01:23 2026 GMT Subject: CN=4F0191D065B033A4CF403F698B364981B821F6FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:14:e6:c3:30:9b:10:9f:64:9c:30:10:b3:11: 85:c6:5c:bd:aa:e2:bd:e0:45:44:f6:ea:dd:61:f0: 75:c8:2d:b7:ef:2f:b8:3d:f9:a0:72:a2:eb:23:25: eb:0c:11:27:32:6e:d2:84:96:6f:6c:1d:85:09:65: 3b:1c:ab:cc:fb:c1:65:05:69:e5:77:9d:5f:2b:ac: 7e:43:dd:87:7e:20:8a:d4:fb:9d:da:0b:4d:ec:c0: 48:53:33:c0:fe:9c:2c:53:4d:c0:b7:60:32:2c:bb: 0b:00:7b:58:ce:eb:db:b8:12:af:5f:2e:21:1b:6e: 9f:39:77:cf:04:3c:2e:e3:20:a9:c2:f5:2c:7a:44: d8:fe:0e:fc:7d:c0:0f:77:5e:a8:53:60:23:a1:8d: 97:27:2a:5b:80:1a:e8:8b:de:1b:3c:a1:7e:ae:7c: 04:92:b2:ba:89:4f:fa:b7:9e:87:0c:ac:8f:91:91: c1:3e:de:75:60:15:94:88:0e:a3:49:59:9f:61:e2: 24:bc:99:1e:9a:6f:73:70:fc:2a:f6:5a:8f:20:0b: 55:69:6f:74:36:29:3f:30:fa:6a:1b:df:c7:88:05: e5:01:42:ca:02:c8:91:d2:70:20:26:97:4b:cd:ec: 90:6c:72:85:b2:04:08:5a:89:54:24:ef:be:b0:8f: 91:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:01:91:D0:65:B0:33:A4:CF:40:3F:69:8B:36:49:81:B8:21:F6:FA X509v3 Authority Key Identifier: keyid:9B:61:7E:3E:89:75:C5:E8:37:FD:E8:E7:E3:A6:F7:F2:B0:7D:F2:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:4c:57:26:ae:2c:32:24:1b:c0:b1:94:ed:ea:74:90:db:54: 96:42:3a:fb:b0:7c:3a:d5:27:be:70:f8:99:27:79:35:1d:09: b1:32:40:37:a7:7b:48:a4:f6:10:86:a5:a4:d7:64:90:75:05: 10:84:7b:9a:f4:0b:37:66:08:ae:f1:76:51:a6:8e:b6:ab:b0: 4b:69:7a:f7:2d:31:c6:12:2c:d9:ed:c5:b9:6f:f6:36:24:cf: 23:96:c6:60:7b:ea:db:b3:ad:48:47:d9:73:86:a7:68:5b:fe: b7:89:5e:1a:00:ae:5f:46:c4:7d:b9:02:2a:1b:6b:7f:39:b8: 39:b1:ce:f9:91:07:92:4b:d8:57:6c:01:a6:e4:d3:53:8c:18: 27:d8:ff:e6:b9:64:60:ef:93:d4:e4:a7:da:85:db:86:65:d3: cc:e3:21:40:f1:de:5d:cd:44:cc:12:47:7a:89:54:c6:e1:57: 18:17:c6:45:b7:32:6c:76:bb:db:b1:2d:bf:fa:bf:85:b9:4d: f6:88:39:c2:46:88:25:c5:f7:28:18:fe:31:cf:d4:45:3d:9a: a6:7c:26:ef:1a:f1:05:81:ef:02:08:53:67:de:e3:1c:60:7c: fe:27:94:09:16:a6:a0:76:03:87:ea:33:93:c6:f5:d3:c0:10: 54:3f:64:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQRpXYEsnd17grxrIvSi3TMG/SbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI2MTdFM0U4OTc1QzVFODM3RkRFOEU3RTNBNkY3RjJC MDdERjJGQTAeFw0yNjA2MTcwMDEzMjNaFw0yNjA2MTgwNDAxMjNaMDMxMTAvBgNV BAMTKDRGMDE5MUQwNjVCMDMzQTRDRjQwM0Y2OThCMzY0OTgxQjgyMUY2RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUFObDMJsQn2ScMBCzEYXGXL2q 4r3gRUT26t1h8HXILbfvL7g9+aByousjJesMEScybtKElm9sHYUJZTscq8z7wWUF aeV3nV8rrH5D3Yd+IIrU+53aC03swEhTM8D+nCxTTcC3YDIsuwsAe1jO69u4Eq9f LiEbbp85d88EPC7jIKnC9Sx6RNj+Dvx9wA93XqhTYCOhjZcnKluAGuiL3hs8oX6u fASSsrqJT/q3nocMrI+RkcE+3nVgFZSIDqNJWZ9h4iS8mR6ab3Nw/Cr2Wo8gC1Vp b3Q2KT8w+mob38eIBeUBQsoCyJHScCAml0vN7JBscoWyBAhaiVQk776wj5HrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTwGR0GWwM6TPQD9pizZJgbgh9vowHwYDVR0j BBgwFoAUm2F+Pol1xeg3/ejn46b38rB98vowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDIwODNkNDQtNzgzNS00NDNkLTg1M2EtMGE3OWNmMDBlOTUwLzAvOUI2MTdFM0U4 OTc1QzVFODM3RkRFOEU3RTNBNkY3RjJCMDdERjJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QjYxN0UzRTg5NzVDNUU4MzdGREU4RTdFM0E2RjdGMkIwN0RG MkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDIwODNkNDQtNzgzNS00NDNkLTg1 M2EtMGE3OWNmMDBlOTUwLzAvOUI2MTdFM0U4OTc1QzVFODM3RkRFOEU3RTNBNkY3 RjJCMDdERjJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9MVyauLDIkG8CxlO3qdJDbVJZCOvuwfDrV J75w+JkneTUdCbEyQDene0ik9hCGpaTXZJB1BRCEe5r0CzdmCK7xdlGmjrarsEtp evctMcYSLNntxblv9jYkzyOWxmB76tuzrUhH2XOGp2hb/reJXhoArl9GxH25Aiob a385uDmxzvmRB5JL2FdsAabk01OMGCfY/+a5ZGDvk9Tkp9qF24Zl08zjIUDx3l3N RMwSR3qJVMbhVxgXxkW3Mmx2u9uxLb/6v4W5TfaIOcJGiCXF9ygY/jHP1EU9mqZ8 Ju8a8QWB7wIIU2fe4xxgfP4nlAkWpqB2A4fqM5PG9dPAEFQ/ZN8= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:38 2026 by rpki-client