$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft File: 9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft (raw, json) Hash identifier: 9lYwobJb57EO768RX0AMv3iolFxhhVDKsiUgzCyJFQ8= Subject key identifier: EB:8A:EB:66:39:C2:C0:8A:FE:F5:DA:77:8F:19:50:18:A7:5F:99:6C Authority key identifier: 9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF Certificate issuer: /CN=9B995ECA9CF77E66AB04370A6C3562ADCD7413EF Certificate serial: 173CB4E088CD39040906546759B4984E303B1969 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:01:26 +0000 Manifest this update: Wed 17 Jun 2026 02:56:26 +0000 Manifest next update: Thu 18 Jun 2026 05:44:26 +0000 Files and hashes: 1: 9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl (hash: Mp7YspUY4nZKcsQ2+epkrDXPckI8pUIdJYQx/AcK5og=) 2: 3130332e3133302e38332e302f32342d3234203d3e20313530393636.roa (hash: +yASWV2qPXNVH0dMs+ql82F9yTnpzpBrn8UO30QUNqI=) 3: 3130332e3133302e38322e302f32332d3233203d3e20313530393636.roa (hash: oYvVYAWqY5/XajF618G7pKQtRtEqOMlHPhGTTZeide8=) 4: 3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa (hash: 0GXiVqHET4FIeA3plxHWjQU7xk7vNPKZIk6ziqpvvGY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:3c:b4:e0:88:cd:39:04:09:06:54:67:59:b4:98:4e:30:3b:19:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B995ECA9CF77E66AB04370A6C3562ADCD7413EF Validity Not Before: Jun 17 02:56:26 2026 GMT Not After : Jun 18 05:44:26 2026 GMT Subject: CN=EB8AEB6639C2C08AFEF5DA778F195018A75F996C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:74:44:58:3c:d5:d9:e6:23:91:cd:ed:cf:9d: 03:d7:01:60:d4:d4:f9:fb:b7:b2:20:11:62:c5:ee: bb:78:b7:1b:f3:01:4a:23:93:2d:a2:25:ea:06:ea: 84:8f:96:ab:d5:24:74:f9:f8:a7:49:ad:db:6d:20: 0f:3e:52:61:64:f2:0e:99:05:a3:09:de:72:d7:79: c9:62:24:c7:69:7a:ac:ef:c1:27:69:37:43:e7:72: b0:7b:4a:98:cd:71:61:90:3b:08:2d:cf:a0:7b:d4: 72:d9:48:cf:6b:c0:e7:57:64:73:92:b4:94:de:f9: 8b:96:0d:8b:ed:59:a0:7e:4b:2a:26:2c:62:7f:89: 7d:65:da:17:ac:0c:f2:6f:20:18:22:9e:46:1d:15: 4f:f9:a9:e5:3b:7b:32:ed:a7:ab:3f:60:1a:e5:69: 5a:ab:34:7b:24:d9:12:ac:a2:1f:ae:59:5f:b8:4f: 45:a2:2a:7e:75:ad:fe:99:f9:f7:a0:f8:9a:69:fc: c4:2c:94:9f:2b:53:26:23:00:5f:dd:e9:73:38:d4: 01:98:31:cc:04:52:3e:78:22:79:83:3e:08:6b:e4: 7e:dd:01:b5:bc:43:e9:b9:32:b9:31:3d:63:0a:21: f6:19:7d:8b:2e:7a:a1:c3:99:0b:8a:60:1e:b9:3b: 7f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:8A:EB:66:39:C2:C0:8A:FE:F5:DA:77:8F:19:50:18:A7:5F:99:6C X509v3 Authority Key Identifier: keyid:9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:62:87:b8:e1:e0:13:1f:1f:33:ea:42:20:05:1f:6c:19:ea: 85:9e:8d:3b:a1:1f:a7:f8:03:2e:14:c2:e9:d4:64:40:39:e1: 2c:c7:a7:4b:89:8c:b8:09:7f:4c:89:03:db:84:2e:ad:cc:92: 5b:9c:8b:03:1b:a8:b2:d2:78:f2:84:f6:e0:be:32:dd:d0:7e: d7:50:07:0c:60:3e:38:88:09:27:64:4b:0c:44:e0:86:b9:a5: 77:1c:47:88:6c:0a:ba:b1:3f:a9:24:18:31:7f:fa:cd:93:41: 49:00:f1:89:12:45:f9:94:14:5e:a0:d0:d6:61:41:3e:6c:bd: 8a:37:da:af:8b:7e:82:1c:d7:01:17:a1:52:b0:da:6d:8b:b9: c1:74:15:09:f1:ba:38:3c:29:10:f1:93:cc:e3:49:65:6e:3b: 85:2d:ee:3a:17:65:79:3f:78:de:44:56:a3:62:7f:10:a1:2e: 5c:93:da:d8:cb:b7:16:85:71:88:29:a8:8b:42:94:cc:c4:99: 1c:b3:55:d4:a4:ae:e0:0d:60:12:da:d2:6d:02:77:b5:97:4d: 0f:ae:6f:09:b9:7d:d8:ba:94:b4:1b:19:f1:c7:65:13:9b:f7: 72:02:31:48:c6:30:89:5b:9a:ec:be:b2:cd:21:cb:aa:d8:45: a1:ab:24:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFzy04IjNOQQJBlRnWbSYTjA7GWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI5OTVFQ0E5Q0Y3N0U2NkFCMDQzNzBBNkMzNTYyQURD RDc0MTNFRjAeFw0yNjA2MTcwMjU2MjZaFw0yNjA2MTgwNTQ0MjZaMDMxMTAvBgNV BAMTKEVCOEFFQjY2MzlDMkMwOEFGRUY1REE3NzhGMTk1MDE4QTc1Rjk5NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDodERYPNXZ5iORze3PnQPXAWDU 1Pn7t7IgEWLF7rt4txvzAUojky2iJeoG6oSPlqvVJHT5+KdJrdttIA8+UmFk8g6Z BaMJ3nLXecliJMdpeqzvwSdpN0PncrB7SpjNcWGQOwgtz6B71HLZSM9rwOdXZHOS tJTe+YuWDYvtWaB+SyomLGJ/iX1l2hesDPJvIBginkYdFU/5qeU7ezLtp6s/YBrl aVqrNHsk2RKsoh+uWV+4T0WiKn51rf6Z+feg+Jpp/MQslJ8rUyYjAF/d6XM41AGY McwEUj54InmDPghr5H7dAbW8Q+m5MrkxPWMKIfYZfYsueqHDmQuKYB65O3+XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU64rrZjnCwIr+9dp3jxlQGKdfmWwwHwYDVR0j BBgwFoAUm5leypz3fmarBDcKbDVirc10E+8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE4NzA2NGItNWYyNy00MjcwLTkwZTQtOTlmNDNhZTg0ZGI3LzAvOUI5OTVFQ0E5 Q0Y3N0U2NkFCMDQzNzBBNkMzNTYyQURDRDc0MTNFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85Qjk5NUVDQTlDRjc3RTY2QUIwNDM3MEE2QzM1NjJBRENENzQx M0VGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE4NzA2NGItNWYyNy00MjcwLTkw ZTQtOTlmNDNhZTg0ZGI3LzAvOUI5OTVFQ0E5Q0Y3N0U2NkFCMDQzNzBBNkMzNTYy QURDRDc0MTNFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5ih7jh4BMfHzPqQiAFH2wZ6oWejTuhH6f4 Ay4UwunUZEA54SzHp0uJjLgJf0yJA9uELq3MkluciwMbqLLSePKE9uC+Mt3QftdQ BwxgPjiICSdkSwxE4Ia5pXccR4hsCrqxP6kkGDF/+s2TQUkA8YkSRfmUFF6g0NZh QT5svYo32q+LfoIc1wEXoVKw2m2LucF0FQnxujg8KRDxk8zjSWVuO4Ut7joXZXk/ eN5EVqNifxChLlyT2tjLtxaFcYgpqItClMzEmRyzVdSkruANYBLa0m0Cd7WXTQ+u bwm5fdi6lLQbGfHHZROb93ICMUjGMIlbmuy+ss0hy6rYRaGrJHY= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:22 2026 by rpki-client