$ rpki-client -vvf rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft File: 9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft (raw, json) Hash identifier: djnLM4BsKKe0Z3VwbDpLUn/HY0Uh66YZEehdjnnLjoo= Subject key identifier: 4F:73:30:99:FF:0D:E4:C2:D9:F8:96:79:42:63:D3:AE:93:C5:3B:12 Authority key identifier: 9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D Certificate issuer: /CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D Certificate serial: 1A9B5D34A91C1E7AD03FB0742399E1C73CC4AC21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 07:16:45 +0000 Manifest this update: Wed 17 Jun 2026 07:11:45 +0000 Manifest next update: Thu 18 Jun 2026 10:46:45 +0000 Files and hashes: 1: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: 2hLM0mgbr0R6ifa3vNzIdaR5NaWhmXwQFTpATyRbVPI=) 2: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: JPXdi6WPGd4vFTIpgnAdhhx+7oMRZdsbWTFXkRgyRnk=) 3: 9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl (hash: GiA2I+hfplMFEFM6/PY+WGbE4t6h6zBqn2aGtyUD810=) 4: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: npHUpI+a7i9Ge4o0vqbUWZs/Np3+nJB1Rs4IQBwLbvY=) 5: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: H+4huOKuCZJDgCcIRHG5F336v2zTL76hXwSaEF33ZKg=) 6: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: JZInvaWprZojdT0ogHnGT0fyYlzFziTH86i1Q0tvWkY=) 7: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: zmwA1y/xC2vL0cjTkZM+ObOlDKLV7xKiwSOMXdyAr5Q=) 8: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: Pbg7HMIUocxPePd7OOnLCPLrq3CDhKhitltGyutZn2w=) 9: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: BTFNI8KSCzEVQjrkzQTwBs7yIRfL1AV/7o2X6tYhvoE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:9b:5d:34:a9:1c:1e:7a:d0:3f:b0:74:23:99:e1:c7:3c:c4:ac:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D Validity Not Before: Jun 17 07:11:45 2026 GMT Not After : Jun 18 10:46:45 2026 GMT Subject: CN=4F733099FF0DE4C2D9F896794263D3AE93C53B12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:48:64:3b:72:53:3e:b0:28:7c:57:50:62: 90:5b:51:84:b6:20:53:aa:1e:94:21:4e:7a:a6:33: 16:98:f9:63:27:5c:19:d1:a5:9c:a8:25:ad:06:6b: 49:ad:aa:8e:3a:50:4b:c8:3c:a3:5d:4c:fb:eb:ca: 98:21:69:5e:05:53:de:4e:dc:c0:79:a5:66:90:c3: 56:dd:6a:3e:d3:d6:8e:7c:75:d2:11:25:a9:0d:d5: a5:aa:f7:df:62:20:ae:fd:47:f6:91:bc:6a:7c:c9: 3a:05:98:59:4d:48:fa:7b:37:bb:b2:26:5a:c3:eb: 37:40:d6:23:d8:97:b5:86:9d:b5:2e:0d:03:20:ba: aa:c3:4c:b5:f2:fa:46:d8:2f:30:64:60:b7:b9:3d: fe:50:37:0d:05:1e:8d:37:29:43:e8:56:f5:a3:2f: 54:17:35:8e:9a:04:00:f3:b8:f8:3f:af:27:fd:ec: 18:91:aa:88:9b:8b:bb:4f:24:f6:8d:0e:c1:00:d1: e5:73:80:a7:53:15:9c:67:8b:03:33:a3:a4:8e:d9: 49:f9:9e:88:9e:86:a4:12:aa:57:4d:34:f6:46:93: 00:12:02:22:b8:e4:37:89:70:ae:e5:b3:74:6e:a4: 6f:81:08:d5:4f:e6:73:e8:3c:90:42:42:78:a9:cc: 62:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:73:30:99:FF:0D:E4:C2:D9:F8:96:79:42:63:D3:AE:93:C5:3B:12 X509v3 Authority Key Identifier: keyid:9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:ce:f5:e9:fc:aa:be:45:2b:30:e8:48:76:6f:f7:ea:7d:46: eb:1f:a6:d6:f9:76:4b:aa:c8:6b:4f:24:9d:d4:96:08:df:b7: c8:1a:11:e6:44:d8:8d:5d:f0:01:f7:cf:4b:e8:0e:5e:a7:22: 4a:2b:c5:6f:44:64:52:ce:84:58:d5:57:ee:95:52:df:7d:ea: 80:a7:2b:dc:fe:f3:96:cf:21:dc:f7:0e:6c:53:0a:48:5d:5f: 69:ce:96:df:d5:a5:82:f3:cf:eb:10:58:80:bb:de:d5:69:69: 58:9e:6a:aa:ab:6d:92:c9:fb:26:e7:7f:b1:a8:04:b9:cb:da: 8b:48:c5:1d:c8:00:be:32:47:ce:e1:0a:ad:4c:fb:c4:ba:c9: d5:d0:3e:0a:67:a8:f4:b8:a7:a7:ec:6d:ba:41:05:30:a0:2f: 99:c8:0e:ee:98:6b:ea:dd:9e:77:4c:82:de:68:e0:44:df:ca: b8:f0:48:42:58:8f:77:44:fe:fe:ef:56:1c:9b:e8:6d:a4:a8: 3e:3a:c5:2f:fa:fe:bb:79:bc:23:e8:11:ee:94:a4:bd:43:8b: 2a:04:79:ce:09:6d:e8:4b:0f:25:90:b3:79:9a:63:c7:01:49: ac:90:7d:9a:c2:9c:19:e1:08:78:c3:ed:d5:eb:82:6a:f7:9a: 13:c6:0b:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGptdNKkcHnrQP7B0I5nhxzzErCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUREN0ZEMUMwQTc0RkUzMTdFREE0MUU0RDFDREM4NTdB RkMxNzc5RDAeFw0yNjA2MTcwNzExNDVaFw0yNjA2MTgxMDQ2NDVaMDMxMTAvBgNV BAMTKDRGNzMzMDk5RkYwREU0QzJEOUY4OTY3OTQyNjNEM0FFOTNDNTNCMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0aUhkO3JTPrAofFdQYpBbUYS2 IFOqHpQhTnqmMxaY+WMnXBnRpZyoJa0Ga0mtqo46UEvIPKNdTPvrypghaV4FU95O 3MB5pWaQw1bdaj7T1o58ddIRJakN1aWq999iIK79R/aRvGp8yToFmFlNSPp7N7uy JlrD6zdA1iPYl7WGnbUuDQMguqrDTLXy+kbYLzBkYLe5Pf5QNw0FHo03KUPoVvWj L1QXNY6aBADzuPg/ryf97BiRqoibi7tPJPaNDsEA0eVzgKdTFZxniwMzo6SO2Un5 noiehqQSqldNNPZGkwASAiK45DeJcK7ls3RupG+BCNVP5nPoPJBCQnipzGJdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT3Mwmf8N5MLZ+JZ5QmPTrpPFOxIwHwYDVR0j BBgwFoAUndf9HAp0/jF+2kHk0c3IV6/Bd50wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjkwYzkwMDktYWQ1My00ZmE2LWExODMtMzRiMzQ1N2JlYTAzLzAvOUREN0ZEMUMw QTc0RkUzMTdFREE0MUU0RDFDREM4NTdBRkMxNzc5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REQ3RkQxQzBBNzRGRTMxN0VEQTQxRTREMUNEQzg1N0FGQzE3 NzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvOUREN0ZEMUMwQTc0RkUzMTdFREE0MUU0RDFDREM4 NTdBRkMxNzc5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALLO9en8qr5FKzDoSHZv9+p9Rusfptb5dkuq yGtPJJ3Ulgjft8gaEeZE2I1d8AH3z0voDl6nIkorxW9EZFLOhFjVV+6VUt996oCn K9z+85bPIdz3DmxTCkhdX2nOlt/VpYLzz+sQWIC73tVpaVieaqqrbZLJ+ybnf7Go BLnL2otIxR3IAL4yR87hCq1M+8S6ydXQPgpnqPS4p6fsbbpBBTCgL5nIDu6Ya+rd nndMgt5o4ETfyrjwSEJYj3dE/v7vVhyb6G2kqD46xS/6/rt5vCPoEe6UpL1DiyoE ec4JbehLDyWQs3maY8cBSayQfZrCnBnhCHjD7dXrgmr3mhPGC/E= -----END CERTIFICATE-----Generated at Wed Jun 17 10:53:26 2026 by rpki-client