$ rpki-client -vvf rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft File: 09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft (raw, json) Hash identifier: 8mAB+IgSZRc3x5D4MI6fiIXCBdc7rZoXXkfV0ZORwio= Subject key identifier: F3:56:B3:8E:F4:E3:F7:3E:CE:D2:D9:95:D1:8E:88:22:C4:05:11:D1 Authority key identifier: 09:C4:BA:8A:F7:41:A5:1F:DD:8C:55:09:17:C9:6D:39:5C:BE:0F:FD Certificate issuer: /CN=09C4BA8AF741A51FDD8C550917C96D395CBE0FFD Certificate serial: 11D74D2CCF62B17402D7FFD0A11B56A2A7F80A47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 15:48:26 +0000 Manifest this update: Tue 16 Jun 2026 15:43:26 +0000 Manifest next update: Wed 17 Jun 2026 19:37:26 +0000 Files and hashes: 1: 3131332e32302e3133362e302f32312d3234203d3e203435373136.roa (hash: 9Dp0sbY0tRdXCsPfX1Bi/rh765yhn92aMlIVBuucvDU=) 2: 09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.crl (hash: l9UFZae+ijs+WeSfEYYGo8R9JgmaSeiuNw2WwIy/wgM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.crl rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d7:4d:2c:cf:62:b1:74:02:d7:ff:d0:a1:1b:56:a2:a7:f8:0a:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09C4BA8AF741A51FDD8C550917C96D395CBE0FFD Validity Not Before: Jun 16 15:43:26 2026 GMT Not After : Jun 17 19:37:26 2026 GMT Subject: CN=F356B38EF4E3F73ECED2D995D18E8822C40511D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e2:0d:03:b3:4c:a4:50:cc:07:15:aa:4d:fb: 2b:ed:b1:c5:cf:c5:13:cf:f3:2a:b6:e0:bf:36:01: 4e:cd:21:e0:b6:32:43:53:21:61:34:fd:12:22:ed: 60:8a:08:62:13:da:7c:74:e9:07:f6:f5:a8:dd:93: 30:6e:da:9d:21:c6:9c:f3:f2:15:43:87:7c:d1:86: 31:1d:6b:ae:f4:59:e1:9e:3d:1d:ef:74:70:5b:24: 70:19:81:1f:b2:8c:a1:99:1d:9f:f7:c7:b7:03:a7: c8:ce:db:dc:7e:aa:8f:b4:df:90:10:54:60:82:34: 5a:0e:b1:2a:f1:bd:28:94:ea:8c:5b:50:6a:3c:d1: 27:c1:31:d9:84:5d:53:1f:0b:96:3b:d4:6e:d7:04: c9:5b:f4:c5:d7:61:43:1b:7a:6a:62:1b:ff:c2:72: 63:1c:fc:50:be:0b:9d:d7:8f:2b:af:92:44:d1:f3: 89:18:63:a8:8e:5f:9b:2b:db:e4:f9:01:03:5d:72: db:49:50:d4:55:f7:41:90:b5:c7:4f:5d:8d:47:df: da:cc:fb:4b:59:cb:c8:f0:62:4a:ae:dc:be:eb:3a: 18:56:bf:b3:3d:7f:06:10:e6:57:33:fd:e2:0d:4f: 10:3e:f2:94:6b:5e:6b:c1:c0:05:ef:d2:56:a2:c5: 0a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:56:B3:8E:F4:E3:F7:3E:CE:D2:D9:95:D1:8E:88:22:C4:05:11:D1 X509v3 Authority Key Identifier: keyid:09:C4:BA:8A:F7:41:A5:1F:DD:8C:55:09:17:C9:6D:39:5C:BE:0F:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f7:47:60:75:a0:92:bb:a4:8e:e8:68:97:ff:37:d0:2b:0a: 47:06:5c:00:c9:96:de:af:b1:63:81:5d:69:63:a6:50:58:0a: 46:5c:b7:68:8f:75:7e:5c:2f:75:17:6b:76:ca:c5:88:8f:24: b7:fe:b1:8e:2b:25:0e:92:72:94:a7:17:6e:4c:f5:12:d8:2d: 73:e3:ea:d4:8d:8d:84:5e:29:f4:93:7f:5c:97:b8:95:9b:ec: 54:0a:d5:d0:35:e6:30:f2:10:4d:ff:24:31:d6:be:38:e2:6f: 59:be:5a:41:b0:93:1c:9c:34:7e:2d:9a:d7:0b:fc:ab:1c:34: 3a:b7:ed:a0:d3:75:06:a8:4d:97:88:62:d0:40:18:7c:d4:5e: 18:3b:73:d4:4e:6e:a6:55:f8:60:0e:e8:44:03:7c:91:61:ec: d1:c3:59:a3:0c:65:fe:35:5d:33:21:2e:3a:7b:f3:61:db:5f: 76:f9:03:30:9a:74:2e:7a:3e:a2:93:c0:fc:24:6a:df:80:2a: c8:c1:d1:3f:13:d1:e8:c9:72:ca:15:7b:c6:6e:10:6d:d6:f3: e6:8a:18:79:9c:c3:47:29:a2:7f:11:ce:4a:bd:2a:9e:02:54: 57:f0:f9:e7:e1:63:9d:af:2e:e2:61:5e:8e:35:d2:05:16:63: 29:92:34:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEddNLM9isXQC1//QoRtWoqf4CkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlDNEJBOEFGNzQxQTUxRkREOEM1NTA5MTdDOTZEMzk1 Q0JFMEZGRDAeFw0yNjA2MTYxNTQzMjZaFw0yNjA2MTcxOTM3MjZaMDMxMTAvBgNV BAMTKEYzNTZCMzhFRjRFM0Y3M0VDRUQyRDk5NUQxOEU4ODIyQzQwNTExRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4g0Ds0ykUMwHFapN+yvtscXP xRPP8yq24L82AU7NIeC2MkNTIWE0/RIi7WCKCGIT2nx06Qf29ajdkzBu2p0hxpzz 8hVDh3zRhjEda670WeGePR3vdHBbJHAZgR+yjKGZHZ/3x7cDp8jO29x+qo+035AQ VGCCNFoOsSrxvSiU6oxbUGo80SfBMdmEXVMfC5Y71G7XBMlb9MXXYUMbempiG//C cmMc/FC+C53XjyuvkkTR84kYY6iOX5sr2+T5AQNdcttJUNRV90GQtcdPXY1H39rM +0tZy8jwYkqu3L7rOhhWv7M9fwYQ5lcz/eINTxA+8pRrXmvBwAXv0laixQojAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU81azjvTj9z7O0tmV0Y6IIsQFEdEwHwYDVR0j BBgwFoAUCcS6ivdBpR/djFUJF8ltOVy+D/0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhZjAwZWMtZDA4My00YTlmLTgyMWYtN2RhMThmODE1NDE3LzAvMDlDNEJBOEFG NzQxQTUxRkREOEM1NTA5MTdDOTZEMzk1Q0JFMEZGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOUM0QkE4QUY3NDFBNTFGREQ4QzU1MDkxN0M5NkQzOTVDQkUw RkZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhZjAwZWMtZDA4My00YTlmLTgy MWYtN2RhMThmODE1NDE3LzAvMDlDNEJBOEFGNzQxQTUxRkREOEM1NTA5MTdDOTZE Mzk1Q0JFMEZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/3R2B1oJK7pI7oaJf/N9ArCkcGXADJlt6v sWOBXWljplBYCkZct2iPdX5cL3UXa3bKxYiPJLf+sY4rJQ6ScpSnF25M9RLYLXPj 6tSNjYReKfSTf1yXuJWb7FQK1dA15jDyEE3/JDHWvjjib1m+WkGwkxycNH4tmtcL /KscNDq37aDTdQaoTZeIYtBAGHzUXhg7c9RObqZV+GAO6EQDfJFh7NHDWaMMZf41 XTMhLjp782HbX3b5AzCadC56PqKTwPwkat+AKsjB0T8T0ejJcsoVe8ZuEG3W8+aK GHmcw0cpon8Rzkq9Kp4CVFfw+efhY52vLuJhXo410gUWYymSNMQ= -----END CERTIFICATE-----Generated at Wed Jun 17 10:45:20 2026 by rpki-client