$ rpki-client -vvf rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft File: B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft (raw, json) Hash identifier: GzKXAn3LJEUcgYv89DIGgeYduBPMDgNQm3yCu5WhgAQ= Subject key identifier: FA:26:68:E6:65:88:88:99:34:B0:2C:07:08:AA:47:65:8A:B7:EB:9A Authority key identifier: B9:D7:A5:A4:9B:32:2E:D9:87:28:18:32:AB:CF:B5:DC:50:9A:B8:89 Certificate issuer: /CN=B9D7A5A49B322ED987281832ABCFB5DC509AB889 Certificate serial: 75C2A43AAB46D2A7DE0E88CB565060FC500D3EE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 22:00:53 +0000 Manifest this update: Tue 16 Jun 2026 21:55:53 +0000 Manifest next update: Wed 17 Jun 2026 23:57:53 +0000 Files and hashes: 1: B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl (hash: 4dxiXhNz3v8qtb2SxjtpMKz1/oA3giOyo5gQAH434EQ=) 2: 3130332e3137362e3132312e302f32342d3234203d3e20313437313330.roa (hash: mPIkuQVE9R3LTUTej85wxcqgd13oKy/e6VbDwXPFIhY=) 3: 3130332e3137362e36382e302f32342d3234203d3e20313437313330.roa (hash: huLq2YMQLck+XmMqgf5+tIkuWDJY1pNSg4kGrXts0QE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c2:a4:3a:ab:46:d2:a7:de:0e:88:cb:56:50:60:fc:50:0d:3e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9D7A5A49B322ED987281832ABCFB5DC509AB889 Validity Not Before: Jun 16 21:55:53 2026 GMT Not After : Jun 17 23:57:53 2026 GMT Subject: CN=FA2668E66588889934B02C0708AA47658AB7EB9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:97:81:a4:22:60:41:73:ca:41:67:f3:4b:de: 60:6e:c6:59:f7:36:a1:19:f1:0d:65:d6:0a:c8:ae: b5:a0:ca:2c:cb:3f:ce:6f:27:e7:6a:7d:70:99:b7: 06:86:7d:bf:6a:18:ba:91:02:a3:92:61:dd:48:ad: 98:e8:80:a8:0e:3a:17:e1:e3:6f:e8:14:06:9d:08: ed:74:7e:cd:62:bf:e1:69:74:94:34:dc:1b:0d:15: 84:ce:65:db:bc:f7:21:03:c0:70:b6:e5:55:ad:38: 15:6c:b2:35:57:e3:27:c2:1b:ca:c7:21:0a:50:bf: 91:00:24:26:1f:93:cd:c5:5b:c8:7b:9f:de:8e:98: 95:69:3f:5f:22:19:65:f5:2f:5c:5d:fb:08:54:41: be:d0:b8:47:bc:aa:d9:17:21:fa:6c:17:0e:26:24: 32:e3:25:8f:93:6b:d7:df:fd:1b:f8:42:d4:e8:94: 88:82:2a:e8:25:1b:a7:99:9f:11:c7:0f:21:d8:94: ec:31:12:68:ad:30:85:2c:d6:49:20:b1:20:74:97: 68:14:b8:8a:55:59:70:41:8b:19:a7:df:1b:f3:03: 70:d8:5d:2a:0d:12:0b:29:73:5b:61:cc:32:7c:28: 02:f7:87:ba:c3:8a:01:e7:4f:98:13:65:a9:a8:52: 26:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:26:68:E6:65:88:88:99:34:B0:2C:07:08:AA:47:65:8A:B7:EB:9A X509v3 Authority Key Identifier: keyid:B9:D7:A5:A4:9B:32:2E:D9:87:28:18:32:AB:CF:B5:DC:50:9A:B8:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:85:f4:7f:c1:7f:cb:97:97:c0:7c:9c:c5:0d:6a:85:5b:c8: 26:eb:56:d7:6f:03:da:d3:0a:3b:ee:62:98:55:71:34:01:b9: e9:53:b1:ce:c7:c2:3d:99:e6:d7:a6:32:18:5e:4e:7c:20:60: 0c:51:a5:04:de:bc:d6:24:05:41:f5:ca:9a:de:e3:e5:17:4e: 67:b0:86:36:e7:bb:9c:8b:8a:e9:52:bd:2b:48:1a:2f:22:e8: 60:e9:99:12:29:e8:7c:2c:40:96:db:c2:98:d3:01:a0:e2:a7: dc:fb:17:c3:0a:d7:79:7c:a4:4f:aa:8e:e7:af:97:15:43:4e: 61:96:b2:0d:31:36:e7:f5:db:d7:eb:7e:48:67:21:68:59:7b: 0b:29:65:78:06:9a:cd:00:cb:2f:a3:c3:f2:ae:53:07:e7:f3: 4b:0c:46:30:90:cb:7f:9f:df:3f:fa:cc:0b:c8:53:3c:7c:7e: 6a:88:d2:84:66:89:a0:25:c4:25:ca:a2:eb:8f:75:7f:2d:ba: 89:d1:bf:2c:d9:e6:1c:a1:8d:e1:41:da:e7:49:57:ea:55:53: 97:09:97:ae:73:b6:e9:1b:36:c2:c6:b1:9c:d4:c4:d4:d6:c8: 1b:c6:f2:5f:48:08:c5:18:cb:1f:ef:ba:d7:4c:33:b6:e5:cc: 92:79:e6:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdcKkOqtG0qfeDojLVlBg/FANPucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlEN0E1QTQ5QjMyMkVEOTg3MjgxODMyQUJDRkI1REM1 MDlBQjg4OTAeFw0yNjA2MTYyMTU1NTNaFw0yNjA2MTcyMzU3NTNaMDMxMTAvBgNV BAMTKEZBMjY2OEU2NjU4ODg4OTkzNEIwMkMwNzA4QUE0NzY1OEFCN0VCOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOl4GkImBBc8pBZ/NL3mBuxln3 NqEZ8Q1l1grIrrWgyizLP85vJ+dqfXCZtwaGfb9qGLqRAqOSYd1IrZjogKgOOhfh 42/oFAadCO10fs1iv+FpdJQ03BsNFYTOZdu89yEDwHC25VWtOBVssjVX4yfCG8rH IQpQv5EAJCYfk83FW8h7n96OmJVpP18iGWX1L1xd+whUQb7QuEe8qtkXIfpsFw4m JDLjJY+Ta9ff/Rv4QtTolIiCKuglG6eZnxHHDyHYlOwxEmitMIUs1kkgsSB0l2gU uIpVWXBBixmn3xvzA3DYXSoNEgspc1thzDJ8KAL3h7rDigHnT5gTZamoUiYHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+iZo5mWIiJk0sCwHCKpHZYq365owHwYDVR0j BBgwFoAUudelpJsyLtmHKBgyq8+13FCauIkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTk1MWRmZWUtYTc1Yi00NDIwLWE3NTUtMmM3MzU4YmFmN2QzLzAvQjlEN0E1QTQ5 QjMyMkVEOTg3MjgxODMyQUJDRkI1REM1MDlBQjg4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUQ3QTVBNDlCMzIyRUQ5ODcyODE4MzJBQkNGQjVEQzUwOUFC ODg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTk1MWRmZWUtYTc1Yi00NDIwLWE3 NTUtMmM3MzU4YmFmN2QzLzAvQjlEN0E1QTQ5QjMyMkVEOTg3MjgxODMyQUJDRkI1 REM1MDlBQjg4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuF9H/Bf8uXl8B8nMUNaoVbyCbrVtdvA9rT CjvuYphVcTQBuelTsc7Hwj2Z5temMhheTnwgYAxRpQTevNYkBUH1ypre4+UXTmew hjbnu5yLiulSvStIGi8i6GDpmRIp6HwsQJbbwpjTAaDip9z7F8MK13l8pE+qjuev lxVDTmGWsg0xNuf129frfkhnIWhZewspZXgGms0Ayy+jw/KuUwfn80sMRjCQy3+f 3z/6zAvIUzx8fmqI0oRmiaAlxCXKouuPdX8tuonRvyzZ5hyhjeFB2udJV+pVU5cJ l65ztukbNsLGsZzUxNTWyBvG8l9ICMUYyx/vutdMM7blzJJ55uU= -----END CERTIFICATE-----Generated at Wed Jun 17 10:43:47 2026 by rpki-client