$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft File: 9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft (raw, json) Hash identifier: PcaaMoNBvhtzlLQfFLn/yMfNDRZ7OQFAqs4Xlm3+wG0= Subject key identifier: 82:1D:1E:72:D9:40:76:A1:BB:97:1F:DF:30:C7:66:02:77:8F:A4:DB Authority key identifier: 9B:AA:D5:D1:F3:6F:59:43:A3:5A:6E:E8:00:1A:5E:5F:C2:4D:9B:1E Certificate issuer: /CN=9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E Certificate serial: 196386B02AC8ECA84A2A1B093A13387232209F6E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 22:11:07 +0000 Manifest this update: Tue 16 Jun 2026 22:06:07 +0000 Manifest next update: Wed 17 Jun 2026 22:48:07 +0000 Files and hashes: 1: 9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl (hash: lrsfUO6EkWonHkRCQcDpvonq7HNj6NZFjUrLm9j/Vqk=) 2: 33362e35302e39362e302f32342d3234203d3e20313532333536.roa (hash: WdJUD9VymB093sIE0zYyqec++4X5oG27MXfWK367p8g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:63:86:b0:2a:c8:ec:a8:4a:2a:1b:09:3a:13:38:72:32:20:9f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E Validity Not Before: Jun 16 22:06:07 2026 GMT Not After : Jun 17 22:48:07 2026 GMT Subject: CN=821D1E72D94076A1BB971FDF30C76602778FA4DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d5:92:c6:91:ff:38:4a:a6:cc:63:2c:b4:10: 67:25:55:ca:73:d5:10:c4:8a:de:23:80:f4:b4:79: 15:0c:b8:55:32:7c:9f:60:1e:c8:42:44:6f:7c:8f: 99:35:01:8b:e4:eb:d3:e2:f3:b3:29:55:77:ad:af: 57:56:3b:9e:57:4c:4d:c2:ca:d1:4a:bc:fb:6c:00: 4c:b4:d7:7a:a5:f3:d1:d7:09:60:3d:34:b6:4c:05: b2:f3:6c:11:a1:da:23:21:91:c9:13:ca:32:8f:a9: 0c:d9:86:8b:61:9f:9a:2a:7b:35:e6:50:ac:96:69: 51:93:e0:4c:50:38:c1:26:d5:2e:72:a6:72:94:02: 7b:02:b7:25:b2:69:84:0f:74:37:b2:f1:da:49:c7: 21:6a:16:bf:12:b6:22:f7:c1:96:ec:d5:48:5c:ff: 68:7e:6d:73:ec:ab:55:73:f0:13:7e:15:00:d8:e2: 55:16:78:16:63:75:2a:12:76:8a:fe:27:a6:8b:f1: fc:1b:b8:7c:eb:da:46:a3:50:9c:5a:5f:b4:5f:fa: 44:6a:1b:65:48:ac:e5:48:3e:f1:54:ed:22:36:35: 54:cd:ad:8f:1d:c8:45:c8:51:a6:76:ec:e4:60:b9: ee:48:71:b4:51:58:d2:6f:02:a5:cc:0d:7f:7a:28: f5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1D:1E:72:D9:40:76:A1:BB:97:1F:DF:30:C7:66:02:77:8F:A4:DB X509v3 Authority Key Identifier: keyid:9B:AA:D5:D1:F3:6F:59:43:A3:5A:6E:E8:00:1A:5E:5F:C2:4D:9B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f3:80:f9:da:21:8a:d4:3c:8a:5f:52:36:bf:1d:01:4b:c6: 4b:1e:77:ac:5e:c2:86:da:39:f6:d6:39:60:d0:98:f1:1d:ea: 0b:14:f7:74:7f:17:ef:6f:5e:71:dd:91:83:04:be:e6:26:c7: 08:43:0e:13:da:fa:22:da:25:40:1e:cc:ff:5b:73:d0:8b:08: 30:31:05:56:04:1d:80:26:b9:89:94:e9:26:82:32:04:61:0d: 42:8a:41:33:0a:8e:e8:4c:12:fe:e6:e9:46:b8:16:52:db:b6: 20:dd:4c:b0:77:02:eb:83:4a:d5:59:af:3b:10:f6:a8:d0:4f: 00:92:de:f2:db:d4:50:11:8e:b6:53:5d:79:a9:ce:ca:20:ab: 32:c5:8d:dc:12:eb:18:0c:11:20:fb:99:cd:6d:ff:c3:53:e1: 3c:53:51:fa:7b:86:f3:73:a8:d7:8c:06:79:92:fc:70:9d:c4: 1c:c8:1b:95:d5:9f:79:3f:ae:62:33:dc:06:e4:d4:8e:c8:1e: 51:02:83:d1:45:28:f7:13:a2:7b:58:f2:1e:c9:33:9d:53:5b: 2e:9b:ca:1f:eb:cd:f1:76:bc:dd:50:ad:54:62:64:92:dc:f5: db:4d:63:99:ee:b0:86:4d:40:ce:de:9f:1b:16:44:e2:ce:cd: 8e:95:ee:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGWOGsCrI7KhKKhsJOhM4cjIgn24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJBQUQ1RDFGMzZGNTk0M0EzNUE2RUU4MDAxQTVFNUZD MjREOUIxRTAeFw0yNjA2MTYyMjA2MDdaFw0yNjA2MTcyMjQ4MDdaMDMxMTAvBgNV BAMTKDgyMUQxRTcyRDk0MDc2QTFCQjk3MUZERjMwQzc2NjAyNzc4RkE0REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU1ZLGkf84SqbMYyy0EGclVcpz 1RDEit4jgPS0eRUMuFUyfJ9gHshCRG98j5k1AYvk69Pi87MpVXetr1dWO55XTE3C ytFKvPtsAEy013ql89HXCWA9NLZMBbLzbBGh2iMhkckTyjKPqQzZhothn5oqezXm UKyWaVGT4ExQOMEm1S5ypnKUAnsCtyWyaYQPdDey8dpJxyFqFr8StiL3wZbs1Uhc /2h+bXPsq1Vz8BN+FQDY4lUWeBZjdSoSdor+J6aL8fwbuHzr2kajUJxaX7Rf+kRq G2VIrOVIPvFU7SI2NVTNrY8dyEXIUaZ27ORgue5IcbRRWNJvAqXMDX96KPXfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgh0ectlAdqG7lx/fMMdmAnePpNswHwYDVR0j BBgwFoAUm6rV0fNvWUOjWm7oABpeX8JNmx4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ5MGQ4NmItMGIwZC00NTZmLTg0MWEtYmZkYjlkODA3ZmI3LzAvOUJBQUQ1RDFG MzZGNTk0M0EzNUE2RUU4MDAxQTVFNUZDMjREOUIxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkFBRDVEMUYzNkY1OTQzQTM1QTZFRTgwMDFBNUU1RkMyNEQ5 QjFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ5MGQ4NmItMGIwZC00NTZmLTg0 MWEtYmZkYjlkODA3ZmI3LzAvOUJBQUQ1RDFGMzZGNTk0M0EzNUE2RUU4MDAxQTVF NUZDMjREOUIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzzgPnaIYrUPIpfUja/HQFLxksed6xewoba OfbWOWDQmPEd6gsU93R/F+9vXnHdkYMEvuYmxwhDDhPa+iLaJUAezP9bc9CLCDAx BVYEHYAmuYmU6SaCMgRhDUKKQTMKjuhMEv7m6Ua4FlLbtiDdTLB3AuuDStVZrzsQ 9qjQTwCS3vLb1FARjrZTXXmpzsogqzLFjdwS6xgMESD7mc1t/8NT4TxTUfp7hvNz qNeMBnmS/HCdxBzIG5XVn3k/rmIz3Abk1I7IHlECg9FFKPcTontY8h7JM51TWy6b yh/rzfF2vN1QrVRiZJLc9dtNY5nusIZNQM7enxsWROLOzY6V7r8= -----END CERTIFICATE-----Generated at Wed Jun 17 12:18:12 2026 by rpki-client