$ rpki-client -vvf rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft File: 9E6973F078195021DC7E37753A16BDC3BD2CE345.mft (raw, json) Hash identifier: YTSGsxN44te4lHjHvoKZZBZzd0XYWIwjvGxLL70y5Xc= Subject key identifier: 42:0D:89:06:75:39:09:62:D7:4B:B2:3F:18:5D:A8:3C:DC:50:BD:CF Authority key identifier: 9E:69:73:F0:78:19:50:21:DC:7E:37:75:3A:16:BD:C3:BD:2C:E3:45 Certificate issuer: /CN=9E6973F078195021DC7E37753A16BDC3BD2CE345 Certificate serial: 757E79BF9EE3E5609233A61DA4B30AF91D925200 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 18:57:03 +0000 Manifest this update: Tue 16 Jun 2026 18:52:03 +0000 Manifest next update: Wed 17 Jun 2026 20:34:03 +0000 Files and hashes: 1: 9E6973F078195021DC7E37753A16BDC3BD2CE345.crl (hash: LHaA5C9AEgxHVzlPRrhWXGmZZEq3fyta1yxs2F1+vnY=) 2: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: 70nvBnU+j3RyzkTv1EtBoPc4XFT8NOWYE+TEopumrFA=) 3: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: rDhWNdSE+MiC9nWV9xic84xxhEExen6QKYzm8hSRAZY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.crl rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:7e:79:bf:9e:e3:e5:60:92:33:a6:1d:a4:b3:0a:f9:1d:92:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6973F078195021DC7E37753A16BDC3BD2CE345 Validity Not Before: Jun 16 18:52:03 2026 GMT Not After : Jun 17 20:34:03 2026 GMT Subject: CN=420D890675390962D74BB23F185DA83CDC50BDCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:aa:ca:77:c3:35:55:31:a1:91:53:a3:a7: ad:cf:2b:2c:49:b2:89:7a:85:60:ea:d9:20:97:be: 17:c9:61:7d:9f:25:95:eb:0b:ee:11:d1:74:22:81: 95:3f:e4:44:5b:ca:e3:11:e5:76:f9:40:c1:44:db: da:85:10:86:39:42:d1:79:a0:b9:a0:8a:c2:e3:76: 56:53:ea:6a:a0:06:e6:d8:d2:b9:3a:b2:7c:6a:91: d7:ff:d2:75:89:8f:53:de:56:80:b0:6d:03:9a:27: b0:98:41:92:e3:70:c5:22:34:c7:c0:6b:43:7b:a6: f8:46:30:d9:7c:9d:6f:15:d6:86:ff:ae:32:d3:dc: eb:7e:42:aa:c7:b1:16:5a:48:0d:6e:0b:6d:fa:44: c7:8a:bd:1f:ed:b1:3f:8d:5b:5e:7d:4b:b7:0d:12: 13:5b:79:ea:8a:a3:df:c1:dc:80:12:ca:8e:93:7f: e9:57:81:97:2a:d1:03:07:bf:b5:b7:67:d4:7c:a9: 02:6e:e4:53:23:f0:d6:44:29:f2:3b:f2:9d:0f:73: 3f:d8:ad:04:64:e8:d7:b6:2b:0e:45:58:68:c9:f6: b9:6d:99:b3:67:a9:2f:5c:3e:e7:78:0e:54:99:52: 9f:2e:1c:8d:ec:66:da:60:e0:61:ec:14:fd:df:6b: be:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0D:89:06:75:39:09:62:D7:4B:B2:3F:18:5D:A8:3C:DC:50:BD:CF X509v3 Authority Key Identifier: keyid:9E:69:73:F0:78:19:50:21:DC:7E:37:75:3A:16:BD:C3:BD:2C:E3:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:7e:09:64:15:94:5b:37:11:7d:87:bb:77:a9:bb:44:39:9d: 19:b5:4f:2f:c9:3d:e3:87:80:ca:63:6d:0d:79:e0:18:73:5a: 8f:b7:9b:89:82:68:0e:ce:84:db:f2:36:12:c5:91:9c:39:19: 9e:6d:62:1e:0f:3a:25:67:8c:96:3d:8c:b9:bf:e2:fa:7e:af: fa:a7:eb:c3:76:aa:a8:1f:fa:96:ef:6e:58:7b:0e:fa:45:82: f6:e7:0b:a5:79:fe:03:19:aa:0a:e9:92:dd:2b:38:f6:e9:23: b0:31:93:c8:33:2f:50:05:72:31:ae:2c:8a:90:58:2c:6c:9e: bc:85:84:b9:45:a6:cf:de:42:96:75:a9:8d:ab:a9:3b:90:df: df:d0:c3:36:36:28:d1:df:f2:8c:26:af:25:ca:ea:eb:dd:c3: ee:95:6c:13:4c:42:77:45:23:16:b7:89:b4:77:58:89:cd:96: 6e:c6:6e:c1:28:b5:e2:26:52:5b:69:ae:c7:20:0e:3e:8b:fd: a7:43:40:e1:fa:a1:f1:e3:aa:aa:c8:b4:d4:3d:01:6d:51:70: c4:47:6b:5a:3d:f1:c7:e7:62:34:6c:64:98:00:d5:4e:c9:69: e5:27:3f:f6:27:68:43:d8:20:54:6c:5a:04:15:d3:51:57:20: 48:b1:10:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdX55v57j5WCSM6YdpLMK+R2SUgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2OTczRjA3ODE5NTAyMURDN0UzNzc1M0ExNkJEQzNC RDJDRTM0NTAeFw0yNjA2MTYxODUyMDNaFw0yNjA2MTcyMDM0MDNaMDMxMTAvBgNV BAMTKDQyMEQ4OTA2NzUzOTA5NjJENzRCQjIzRjE4NURBODNDREM1MEJEQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0HqrKd8M1VTGhkVOjp63PKyxJ sol6hWDq2SCXvhfJYX2fJZXrC+4R0XQigZU/5ERbyuMR5Xb5QMFE29qFEIY5QtF5 oLmgisLjdlZT6mqgBubY0rk6snxqkdf/0nWJj1PeVoCwbQOaJ7CYQZLjcMUiNMfA a0N7pvhGMNl8nW8V1ob/rjLT3Ot+QqrHsRZaSA1uC236RMeKvR/tsT+NW159S7cN EhNbeeqKo9/B3IASyo6Tf+lXgZcq0QMHv7W3Z9R8qQJu5FMj8NZEKfI78p0Pcz/Y rQRk6Ne2Kw5FWGjJ9rltmbNnqS9cPud4DlSZUp8uHI3sZtpg4GHsFP3fa75RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQg2JBnU5CWLXS7I/GF2oPNxQvc8wHwYDVR0j BBgwFoAUnmlz8HgZUCHcfjd1Oha9w70s40UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjdkYjIzYjctOTE1OS00NmM3LTg4NTMtMDY2NTRhZTQ3YWVkLzAvOUU2OTczRjA3 ODE5NTAyMURDN0UzNzc1M0ExNkJEQzNCRDJDRTM0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RTY5NzNGMDc4MTk1MDIxREM3RTM3NzUzQTE2QkRDM0JEMkNF MzQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjdkYjIzYjctOTE1OS00NmM3LTg4 NTMtMDY2NTRhZTQ3YWVkLzAvOUU2OTczRjA3ODE5NTAyMURDN0UzNzc1M0ExNkJE QzNCRDJDRTM0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJ+CWQVlFs3EX2Hu3epu0Q5nRm1Ty/JPeOH gMpjbQ154BhzWo+3m4mCaA7OhNvyNhLFkZw5GZ5tYh4POiVnjJY9jLm/4vp+r/qn 68N2qqgf+pbvblh7DvpFgvbnC6V5/gMZqgrpkt0rOPbpI7Axk8gzL1AFcjGuLIqQ WCxsnryFhLlFps/eQpZ1qY2rqTuQ39/QwzY2KNHf8owmryXK6uvdw+6VbBNMQndF Ixa3ibR3WInNlm7GbsEoteImUltprscgDj6L/adDQOH6ofHjqqrItNQ9AW1RcMRH a1o98cfnYjRsZJgA1U7JaeUnP/YnaEPYIFRsWgQV01FXIEixEKQ= -----END CERTIFICATE-----Generated at Wed Jun 17 10:14:45 2026 by rpki-client