$ rpki-client -vvf rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft File: 9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft (raw, json) Hash identifier: ngONgdZttw+elB5wKUs3SG0K4h5IpxRCscNmjkWVWR0= Subject key identifier: BC:20:89:4B:77:B2:B2:73:56:98:DC:C6:E6:1B:0D:7F:4F:FB:EA:D1 Authority key identifier: 95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0 Certificate issuer: /CN=9588905DE5DA3CEB7B575E4C7B475E22276450F0 Certificate serial: 1AB0A48A9E8BA1CEE9E9C2D9EF38DF316562FCB2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:00:03 +0000 Manifest this update: Wed 17 Jun 2026 05:55:03 +0000 Manifest next update: Thu 18 Jun 2026 07:56:03 +0000 Files and hashes: 1: 34392e3135362e36302e302f32342d3234203d3e203535363637.roa (hash: dUcYMxyxr0kR8WWHVwUrDj577thKceAoVrMPKHmFvPk=) 2: 34392e3135362e35362e302f32342d3234203d3e203535363637.roa (hash: aLMfdsIVj+NArpBFKbx+R57YG2afPDJAmU3iGMb6+6c=) 3: 9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl (hash: i4sbhOJvtBZOqxkMJh1nFMEOz5f8B2YMO8tXB3elkPQ=) 4: 34392e3135362e35362e302f32332d3233203d3e203535363637.roa (hash: LXofhMEruHNZkVP/FDGdRjlE9GAdxzBp7sQ6AFEv168=) 5: 34392e3135362e35372e302f32342d3234203d3e203535363637.roa (hash: t5M4q+wjV6k977kCQYS5NWkmORi7rVl+URL29ZG5i/Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b0:a4:8a:9e:8b:a1:ce:e9:e9:c2:d9:ef:38:df:31:65:62:fc:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9588905DE5DA3CEB7B575E4C7B475E22276450F0 Validity Not Before: Jun 17 05:55:03 2026 GMT Not After : Jun 18 07:56:03 2026 GMT Subject: CN=BC20894B77B2B2735698DCC6E61B0D7F4FFBEAD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ca:fd:37:96:97:5f:5e:85:51:b3:88:3a:a1: 06:82:c3:9f:1e:91:14:29:a8:a7:a8:36:81:ee:30: 6f:d5:b5:32:b2:06:6f:bc:9f:2a:b5:ff:27:46:96: b9:84:db:8e:b3:db:97:85:3f:32:0a:e6:d3:fc:47: c3:fb:e2:29:a1:6c:a7:59:bc:6b:d5:37:92:1f:28: e2:64:3c:83:9f:b0:12:7f:f3:74:85:26:d8:24:09: d9:cb:0b:36:f4:ff:ab:6f:22:6a:7a:27:84:63:61: 5a:5b:7c:a0:04:08:69:62:08:d1:53:c9:ae:9e:17: b6:cc:f2:4d:fb:b0:ad:fc:d4:19:4a:75:c1:17:f3: 0f:39:06:9a:7b:5d:06:8a:f6:61:ff:df:53:62:72: 8e:2d:34:04:1e:01:9b:de:a5:6e:97:07:ae:ad:ef: 89:dd:59:b4:28:de:47:3c:15:7a:75:ee:9e:72:ff: 32:39:d1:e9:63:af:36:ec:10:35:95:37:cc:60:b5: 47:b4:87:82:33:a3:db:39:64:8e:f7:42:1e:0e:c9: bc:ca:6b:90:b5:90:b0:73:01:4d:00:8d:36:10:6d: b3:d7:91:54:12:b2:65:38:0d:0d:4d:bb:e0:c7:4d: a4:18:78:0d:75:6b:f1:33:04:a6:a6:cb:0f:0f:de: a7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:20:89:4B:77:B2:B2:73:56:98:DC:C6:E6:1B:0D:7F:4F:FB:EA:D1 X509v3 Authority Key Identifier: keyid:95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:75:6a:34:51:65:bd:44:04:6b:99:55:71:8a:2a:c1:ca:fb: c7:cb:1e:bc:90:ee:d1:33:c4:48:99:98:c7:16:38:39:16:8d: 0a:0b:17:1d:a9:25:35:10:69:3b:c4:ad:7c:cd:d8:13:19:d4: 12:45:2b:70:98:db:59:bb:e5:6d:86:a5:59:9c:9f:0e:5d:c9: 0a:78:76:18:69:ba:34:1f:c3:da:19:a0:07:d7:5b:56:e9:3d: 93:18:f7:60:d9:35:53:67:9f:a3:59:54:58:ce:33:39:2d:74: 00:95:17:e4:d0:aa:17:e6:4a:08:a6:a6:5f:37:2c:d1:d4:a4: 81:29:44:65:3c:fe:79:32:fd:27:c3:23:aa:e7:6c:13:18:39: 9d:00:ed:bf:d4:20:6b:07:c1:66:9f:a3:14:bd:4c:21:92:50: 26:3f:05:3b:7a:4e:c2:ce:3f:1a:0f:c0:ae:62:a2:b4:9d:be: 50:40:4d:e0:9b:09:63:64:33:44:bc:9a:69:09:22:c2:37:eb: ca:08:93:3d:bb:11:fc:b3:f0:ec:71:84:46:15:5a:ca:9e:5e: 39:a3:58:18:93:23:69:ec:6f:7f:2c:bc:9b:dc:3c:09:6f:5a: ff:51:2d:a6:50:07:7d:d5:7f:80:07:df:2d:e9:f5:f4:88:5b: 13:3e:aa:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGrCkip6Loc7p6cLZ7zjfMWVi/LIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU4ODkwNURFNURBM0NFQjdCNTc1RTRDN0I0NzVFMjIy NzY0NTBGMDAeFw0yNjA2MTcwNTU1MDNaFw0yNjA2MTgwNzU2MDNaMDMxMTAvBgNV BAMTKEJDMjA4OTRCNzdCMkIyNzM1Njk4RENDNkU2MUIwRDdGNEZGQkVBRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzyv03lpdfXoVRs4g6oQaCw58e kRQpqKeoNoHuMG/VtTKyBm+8nyq1/ydGlrmE246z25eFPzIK5tP8R8P74imhbKdZ vGvVN5IfKOJkPIOfsBJ/83SFJtgkCdnLCzb0/6tvImp6J4RjYVpbfKAECGliCNFT ya6eF7bM8k37sK381BlKdcEX8w85Bpp7XQaK9mH/31Nico4tNAQeAZvepW6XB66t 74ndWbQo3kc8FXp17p5y/zI50eljrzbsEDWVN8xgtUe0h4Izo9s5ZI73Qh4OybzK a5C1kLBzAU0AjTYQbbPXkVQSsmU4DQ1Nu+DHTaQYeA11a/EzBKamyw8P3qcvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvCCJS3eysnNWmNzG5hsNf0/76tEwHwYDVR0j BBgwFoAUlYiQXeXaPOt7V15Me0deIidkUPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIwNmNmNTAtYTNkMS00Y2M5LTkyNjAtOTg3YjJjYTBjOTI3LzAvOTU4ODkwNURF NURBM0NFQjdCNTc1RTRDN0I0NzVFMjIyNzY0NTBGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTg4OTA1REU1REEzQ0VCN0I1NzVFNEM3QjQ3NUUyMjI3NjQ1 MEYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIwNmNmNTAtYTNkMS00Y2M5LTky NjAtOTg3YjJjYTBjOTI3LzAvOTU4ODkwNURFNURBM0NFQjdCNTc1RTRDN0I0NzVF MjIyNzY0NTBGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB51ajRRZb1EBGuZVXGKKsHK+8fLHryQ7tEz xEiZmMcWODkWjQoLFx2pJTUQaTvErXzN2BMZ1BJFK3CY21m75W2GpVmcnw5dyQp4 dhhpujQfw9oZoAfXW1bpPZMY92DZNVNnn6NZVFjOMzktdACVF+TQqhfmSgimpl83 LNHUpIEpRGU8/nky/SfDI6rnbBMYOZ0A7b/UIGsHwWafoxS9TCGSUCY/BTt6TsLO PxoPwK5iorSdvlBATeCbCWNkM0S8mmkJIsI368oIkz27Efyz8OxxhEYVWsqeXjmj WBiTI2nsb38svJvcPAlvWv9RLaZQB33Vf4AH3y3p9fSIWxM+qoI= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:41 2026 by rpki-client