$ rpki-client -vvf rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft File: 9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft (raw, json) Hash identifier: VmRYXLoDegpNy/1AoYXScL6QFFYzWni16EwnihXzdDo= Subject key identifier: 49:C1:4D:D3:B8:B3:59:15:23:41:A2:7E:C2:4B:A6:3E:89:15:BD:84 Authority key identifier: 9D:4D:B6:9E:1B:34:49:3D:B5:07:7A:AB:18:31:EA:08:E6:94:62:D1 Certificate issuer: /CN=9D4DB69E1B34493DB5077AAB1831EA08E69462D1 Certificate serial: 40B9AFBBAF51787C14513CAFE5E02F36EE81F1EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 07:11:32 +0000 Manifest this update: Wed 17 Jun 2026 07:06:32 +0000 Manifest next update: Thu 18 Jun 2026 08:06:32 +0000 Files and hashes: 1: 9D4DB69E1B34493DB5077AAB1831EA08E69462D1.crl (hash: IpabrU/MYRZ7Rm5Yv3/PlBLVw3p9lEiGqEG8/0T2B3Y=) 2: 3231302e38372e3132342e302f32332d3234203d3e20313532303539.roa (hash: F1D8qXB1kPa12d9QgeEIlBgwwS/bqZZ5YMaSMkPMuvU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.crl rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b9:af:bb:af:51:78:7c:14:51:3c:af:e5:e0:2f:36:ee:81:f1:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D4DB69E1B34493DB5077AAB1831EA08E69462D1 Validity Not Before: Jun 17 07:06:32 2026 GMT Not After : Jun 18 08:06:32 2026 GMT Subject: CN=49C14DD3B8B359152341A27EC24BA63E8915BD84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a3:23:fb:6c:ae:7c:00:d6:71:b1:ea:e2:d8: 89:d7:42:fd:2e:88:a8:3b:49:6a:d1:0e:a1:49:44: 4e:9d:1b:dc:26:58:d2:c5:1d:b1:5f:12:42:0d:1b: a1:6b:98:d3:9d:02:cb:b3:ab:1d:4a:47:c2:7f:67: 5d:9c:a3:5f:ca:52:55:d3:5b:07:7c:f1:9c:ce:42: c1:c3:be:43:18:f9:33:2c:37:5f:51:19:d8:40:2f: 8c:f5:83:51:ec:ea:f8:c8:36:3b:e3:34:50:87:29: db:21:d9:b1:81:05:e7:bb:f3:e8:68:c5:31:3e:0f: e0:3c:90:af:94:b8:da:c3:35:73:92:ae:eb:15:9d: 4b:94:6a:b6:18:02:87:81:2e:4a:ad:c4:ab:d2:4d: dd:b4:b3:ad:58:17:99:81:07:d0:2f:0a:d5:25:3b: 49:89:8a:d6:bf:2c:35:14:2a:ed:8d:37:4b:84:d8: fb:ae:d0:7e:78:e2:b0:53:59:1b:5a:c1:31:1c:c0: a8:11:5d:4e:65:f5:d7:2a:bd:62:4e:b1:ed:66:02: e8:0e:db:3c:8e:eb:b6:77:2c:58:20:98:9d:5d:a3: 7b:40:a2:04:46:cb:ff:5a:f1:3e:ac:01:9c:dc:eb: 30:04:14:6d:9e:2f:f3:43:19:dd:b7:ff:0c:70:5e: e4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C1:4D:D3:B8:B3:59:15:23:41:A2:7E:C2:4B:A6:3E:89:15:BD:84 X509v3 Authority Key Identifier: keyid:9D:4D:B6:9E:1B:34:49:3D:B5:07:7A:AB:18:31:EA:08:E6:94:62:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:51:2d:cb:e0:ca:fe:4c:74:cd:d6:1b:8e:d6:19:a6:fe:3f: 86:a2:61:40:8e:88:7e:11:58:50:9b:98:91:00:bb:90:2a:1a: c3:f9:aa:07:1e:b0:09:ea:a5:11:e5:e0:6a:5e:8e:94:d2:df: 98:46:a9:3e:e1:c9:9d:ac:4a:ae:7b:2a:ad:2b:1b:53:8e:27: 2b:b3:db:50:43:0b:0f:8e:29:76:8c:d7:ae:fe:75:e2:cb:97: d2:ca:53:77:a6:71:d5:81:5d:7d:12:79:64:b7:ba:63:4f:bd: e2:cf:48:d2:f1:89:a4:16:b3:b9:02:6d:e6:2a:44:53:a0:44: 71:21:21:99:a8:58:9b:cd:66:fa:8b:18:d2:90:82:c9:8b:1d: d2:8f:2b:2d:f3:6e:1c:1c:b4:b7:36:9e:50:10:59:e7:8f:82: 10:e9:b7:c4:c3:cb:96:9e:0b:29:5f:5d:63:75:58:d4:55:79: 1e:b9:9b:bf:cb:da:ea:b5:14:a3:b6:0a:0c:2c:7c:e4:f2:69: 1e:f6:aa:fa:50:02:65:01:7d:d7:be:b5:ae:0d:db:8e:70:cc: e4:03:a4:5c:5a:d2:2c:1f:02:99:d0:b2:e7:74:e0:25:18:0d: fe:4b:6b:e6:44:f4:a7:ca:7f:e1:60:61:80:46:0f:96:76:f1: 70:b2:56:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQLmvu69ReHwUUTyv5eAvNu6B8eswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ0REI2OUUxQjM0NDkzREI1MDc3QUFCMTgzMUVBMDhF Njk0NjJEMTAeFw0yNjA2MTcwNzA2MzJaFw0yNjA2MTgwODA2MzJaMDMxMTAvBgNV BAMTKDQ5QzE0REQzQjhCMzU5MTUyMzQxQTI3RUMyNEJBNjNFODkxNUJEODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjoyP7bK58ANZxseri2InXQv0u iKg7SWrRDqFJRE6dG9wmWNLFHbFfEkING6FrmNOdAsuzqx1KR8J/Z12co1/KUlXT Wwd88ZzOQsHDvkMY+TMsN19RGdhAL4z1g1Hs6vjINjvjNFCHKdsh2bGBBee78+ho xTE+D+A8kK+UuNrDNXOSrusVnUuUarYYAoeBLkqtxKvSTd20s61YF5mBB9AvCtUl O0mJita/LDUUKu2NN0uE2Puu0H544rBTWRtawTEcwKgRXU5l9dcqvWJOse1mAugO 2zyO67Z3LFggmJ1do3tAogRGy/9a8T6sAZzc6zAEFG2eL/NDGd23/wxwXuT1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUScFN07izWRUjQaJ+wkumPokVvYQwHwYDVR0j BBgwFoAUnU22nhs0ST21B3qrGDHqCOaUYtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdiZThiN2MtMjMyZi00N2U4LTljZGQtODgxN2QzOWI3MGVhLzAvOUQ0REI2OUUx QjM0NDkzREI1MDc3QUFCMTgzMUVBMDhFNjk0NjJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDREQjY5RTFCMzQ0OTNEQjUwNzdBQUIxODMxRUEwOEU2OTQ2 MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdiZThiN2MtMjMyZi00N2U4LTlj ZGQtODgxN2QzOWI3MGVhLzAvOUQ0REI2OUUxQjM0NDkzREI1MDc3QUFCMTgzMUVB MDhFNjk0NjJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRRLcvgyv5MdM3WG47WGab+P4aiYUCOiH4R WFCbmJEAu5AqGsP5qgcesAnqpRHl4GpejpTS35hGqT7hyZ2sSq57Kq0rG1OOJyuz 21BDCw+OKXaM167+deLLl9LKU3emcdWBXX0SeWS3umNPveLPSNLxiaQWs7kCbeYq RFOgRHEhIZmoWJvNZvqLGNKQgsmLHdKPKy3zbhwctLc2nlAQWeePghDpt8TDy5ae CylfXWN1WNRVeR65m7/L2uq1FKO2CgwsfOTyaR72qvpQAmUBfde+ta4N245wzOQD pFxa0iwfApnQsud04CUYDf5La+ZE9KfKf+FgYYBGD5Z28XCyVqQ= -----END CERTIFICATE-----Generated at Wed Jun 17 10:14:14 2026 by rpki-client