$ rpki-client -vvf rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft File: 9C7034B698C7FF4F82CC082FF9330FF137728D54.mft (raw, json) Hash identifier: +kdjQmj4ryOVYMtrUcN2LQps0NoAek4UB2t+kpdij0s= Subject key identifier: 43:0E:FE:33:36:0E:C7:86:EA:00:F9:3F:6F:3A:16:1D:A8:C5:10:CA Authority key identifier: 9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54 Certificate issuer: /CN=9C7034B698C7FF4F82CC082FF9330FF137728D54 Certificate serial: 237B6876C035D5F2B21C292D26E1CC3A13F2E454 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 23:17:19 +0000 Manifest this update: Sat 13 Jun 2026 23:12:19 +0000 Manifest next update: Sun 14 Jun 2026 23:46:19 +0000 Files and hashes: 1: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: bxedlCP85y9hLJaoDhEB2yAE5TUTBHMZLlN+XLPSDLU=) 2: 9C7034B698C7FF4F82CC082FF9330FF137728D54.crl (hash: vk+zuCbHcwPlVVI5TxZbHxjP1zFTq2atup3aqV3aw6U=) 3: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: xnLexvfVVhCVbKeAWwrGqbTG74y7g6OtFXMau20Rt9I=) 4: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: uv4Ad3tws8/RhWdgc4kD3cmhisuMAvoQ5Utlm3Sezl0=) 5: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: QME/pBUvHikqT9rtnZPTg9o0f1I9fV6K/fmu0Ood5pA=) 6: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: TOy78GGmZmDA6OtrgiUd51MTS8SFXQdRl3WQeCtShh4=) 7: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: A0PveJD1fWZi8ZLG9jSQDXLx0OXP4OJbe2qchugQ+9k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.crl rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 15:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:7b:68:76:c0:35:d5:f2:b2:1c:29:2d:26:e1:cc:3a:13:f2:e4:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C7034B698C7FF4F82CC082FF9330FF137728D54 Validity Not Before: Jun 13 23:12:19 2026 GMT Not After : Jun 14 23:46:19 2026 GMT Subject: CN=430EFE33360EC786EA00F93F6F3A161DA8C510CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a5:0f:36:2d:a7:74:11:80:7b:b1:d0:8c:02: 5e:ee:ec:7f:6b:0d:2e:ec:a0:c6:d0:b2:77:6f:54: 64:41:17:bd:87:56:e0:9d:06:67:22:da:39:d6:e5: 83:da:4c:a3:f9:2b:62:22:89:f8:d4:34:0f:48:18: fa:e2:f9:59:37:c8:80:fe:a0:c1:5c:c6:a2:46:f2: 71:b2:5b:a5:37:64:f0:b3:d1:18:10:e4:d4:9c:2c: fd:32:1f:e8:31:83:9f:94:d0:8b:a7:4e:30:ec:64: be:64:87:64:61:ce:bc:e4:01:c8:b9:9e:2d:70:6c: c0:96:0e:8b:cf:43:12:a2:d7:9a:fc:73:7d:e6:3a: 7f:7f:82:9f:bf:e2:7e:9a:2d:87:22:3b:9a:6c:c6: 2b:5e:29:54:67:c4:20:2e:85:ec:0f:f1:57:6f:a4: 92:c5:a6:b1:33:06:e4:62:54:26:41:fb:45:20:4b: 8a:66:05:19:87:24:e8:39:11:b6:ba:7c:be:01:ef: d0:cb:08:e5:15:72:44:a9:bd:20:2e:b7:15:ef:c4: cf:03:b4:d5:65:d7:64:03:61:d5:87:e9:78:22:ff: 95:be:aa:c4:85:77:d2:8c:df:8a:cd:30:e5:62:22: e6:e6:90:40:53:2b:f4:23:5e:26:ae:e3:06:24:ee: 07:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0E:FE:33:36:0E:C7:86:EA:00:F9:3F:6F:3A:16:1D:A8:C5:10:CA X509v3 Authority Key Identifier: keyid:9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:66:ca:c0:37:8d:31:55:c7:81:12:25:b0:bc:08:01:66:b4: a8:62:14:03:64:8a:36:ea:ca:8f:6d:7c:c8:ce:80:58:a9:a2: 8f:6e:02:34:2c:b7:aa:b4:26:ed:0a:89:77:33:41:3c:a7:43: 15:cf:ce:78:f4:d2:76:03:e6:d6:cb:a4:f9:14:ff:d6:7f:10: 19:96:51:60:7c:22:85:44:cc:2e:d6:ec:d9:58:2d:ae:74:74: 94:7b:45:24:00:56:25:02:d8:cd:43:7a:fb:6e:77:49:90:e4: a4:87:b9:51:28:df:73:0e:6b:73:8f:be:45:ac:59:6f:a1:c9: 6c:f4:92:82:d5:d2:ad:c5:66:be:40:7f:7b:c9:11:52:3b:93: 97:63:7d:ae:44:47:a0:74:79:1b:c2:6e:7e:3e:b5:de:d7:08: f2:bf:03:d3:b2:8f:1a:64:f3:98:c9:08:d9:33:e0:71:45:64: 0a:43:f8:15:76:bc:37:ab:62:48:8f:4d:6a:a7:aa:dc:cd:2e: 01:10:cf:69:42:b2:a5:2d:3c:37:fc:97:f2:94:c2:46:70:ef: d0:1f:9f:1d:12:73:6c:5d:77:94:f6:30:18:26:4c:52:fa:4a: db:24:5f:14:e4:0d:a1:83:a8:f0:94:dd:82:43:e6:2b:fd:d5: 9e:a2:bb:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI3todsA11fKyHCktJuHMOhPy5FQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM3MDM0QjY5OEM3RkY0RjgyQ0MwODJGRjkzMzBGRjEz NzcyOEQ1NDAeFw0yNjA2MTMyMzEyMTlaFw0yNjA2MTQyMzQ2MTlaMDMxMTAvBgNV BAMTKDQzMEVGRTMzMzYwRUM3ODZFQTAwRjkzRjZGM0ExNjFEQThDNTEwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXpQ82Lad0EYB7sdCMAl7u7H9r DS7soMbQsndvVGRBF72HVuCdBmci2jnW5YPaTKP5K2IiifjUNA9IGPri+Vk3yID+ oMFcxqJG8nGyW6U3ZPCz0RgQ5NScLP0yH+gxg5+U0IunTjDsZL5kh2RhzrzkAci5 ni1wbMCWDovPQxKi15r8c33mOn9/gp+/4n6aLYciO5psxiteKVRnxCAuhewP8Vdv pJLFprEzBuRiVCZB+0UgS4pmBRmHJOg5Eba6fL4B79DLCOUVckSpvSAutxXvxM8D tNVl12QDYdWH6Xgi/5W+qsSFd9KM34rNMOViIubmkEBTK/QjXiau4wYk7gcfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQw7+MzYOx4bqAPk/bzoWHajFEMowHwYDVR0j BBgwFoAUnHA0tpjH/0+CzAgv+TMP8TdyjVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDllY2E1MGItNTcyMi00OTE4LTgzMTQtODU5ZDNjMWY1NWEyLzAvOUM3MDM0QjY5 OEM3RkY0RjgyQ0MwODJGRjkzMzBGRjEzNzcyOEQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85QzcwMzRCNjk4QzdGRjRGODJDQzA4MkZGOTMzMEZGMTM3NzI4 RDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDllY2E1MGItNTcyMi00OTE4LTgz MTQtODU5ZDNjMWY1NWEyLzAvOUM3MDM0QjY5OEM3RkY0RjgyQ0MwODJGRjkzMzBG RjEzNzcyOEQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtmysA3jTFVx4ESJbC8CAFmtKhiFANkijbq yo9tfMjOgFipoo9uAjQst6q0Ju0KiXczQTynQxXPznj00nYD5tbLpPkU/9Z/EBmW UWB8IoVEzC7W7NlYLa50dJR7RSQAViUC2M1Devtud0mQ5KSHuVEo33MOa3OPvkWs WW+hyWz0koLV0q3FZr5Af3vJEVI7k5djfa5ER6B0eRvCbn4+td7XCPK/A9Oyjxpk 85jJCNkz4HFFZApD+BV2vDerYkiPTWqnqtzNLgEQz2lCsqUtPDf8l/KUwkZw79Af nx0Sc2xdd5T2MBgmTFL6StskXxTkDaGDqPCU3YJD5iv91Z6iuyU= -----END CERTIFICATE-----Generated at Sun Jun 14 06:07:55 2026 by rpki-client