$ rpki-client -vvf rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft File: 9AFC93CAEEA98CBFC0481089E308395A3234F158.mft (raw, json) Hash identifier: M7dh+aueWnByZ/SuowPFA1s0cZxrGzrdVpLgq5ti7EM= Subject key identifier: 9D:BF:49:2F:FA:42:46:48:FF:09:80:46:C2:78:9C:87:F9:3D:43:CE Authority key identifier: 9A:FC:93:CA:EE:A9:8C:BF:C0:48:10:89:E3:08:39:5A:32:34:F1:58 Certificate issuer: /CN=9AFC93CAEEA98CBFC0481089E308395A3234F158 Certificate serial: 2833FCE232AC3929377DAC8BF904DEEF97C3EF61 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 22:00:53 +0000 Manifest this update: Tue 16 Jun 2026 21:55:53 +0000 Manifest next update: Wed 17 Jun 2026 22:17:53 +0000 Files and hashes: 1: 3130332e3132332e3135382e302f32342d3234203d3e20313332363433.roa (hash: CJzRoBzW5EdikhLdqGZ7+quC12AshwM5y1ZUE0mtwGE=) 2: 3130332e32312e3232382e302f32342d3234203d3e20313332363433.roa (hash: mWMxWItQIy6KIu1MttVIKoQEGs+uqMB7va6yxk2ZK/w=) 3: 9AFC93CAEEA98CBFC0481089E308395A3234F158.crl (hash: ZNkJHkiZnl6jud51OTiPLLT1PRMNWCwOrGlCXcx/j9E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.crl rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:33:fc:e2:32:ac:39:29:37:7d:ac:8b:f9:04:de:ef:97:c3:ef:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFC93CAEEA98CBFC0481089E308395A3234F158 Validity Not Before: Jun 16 21:55:53 2026 GMT Not After : Jun 17 22:17:53 2026 GMT Subject: CN=9DBF492FFA424648FF098046C2789C87F93D43CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fa:0e:e7:c3:48:2f:39:75:56:b0:4f:7f:be: e1:2f:70:ca:64:82:5e:6e:8d:ef:88:86:4d:50:35: d1:3b:37:1d:10:83:52:af:c9:39:f9:95:97:c8:88: ca:d9:09:51:3e:e0:73:db:fc:2a:35:31:0a:a9:5d: 5d:63:43:00:ac:58:d0:83:89:dd:9d:e2:2a:34:ba: 4f:d2:99:0f:80:96:41:92:f3:2e:2e:b6:ff:12:b0: 4a:c7:68:4f:af:d7:8f:43:40:42:6d:35:ce:3b:68: 1f:53:69:17:87:db:dc:1f:20:2f:f0:17:c7:6a:ef: 5c:b2:49:f8:0f:09:2f:97:b8:a8:d0:a4:aa:50:19: be:a0:df:80:10:68:3a:9c:0a:6b:ab:c2:3d:dc:1e: a6:fc:26:52:af:f5:71:db:48:dd:7b:90:6b:d3:f0: 40:90:f5:9d:ff:df:75:db:b7:fc:e5:3b:19:28:fb: fe:62:54:08:0b:d3:53:11:47:f6:24:82:9e:f5:4b: 31:0e:e0:b6:af:e1:4d:8f:96:25:36:0a:2c:42:18: 30:3f:29:e2:6b:b5:d3:3a:2b:89:ac:b1:0b:51:4f: 7d:76:37:69:f7:3c:49:cb:c9:63:9c:af:fa:3c:52: d5:1a:a3:63:ca:24:77:1f:b1:a0:87:4d:62:c8:26: 3a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BF:49:2F:FA:42:46:48:FF:09:80:46:C2:78:9C:87:F9:3D:43:CE X509v3 Authority Key Identifier: keyid:9A:FC:93:CA:EE:A9:8C:BF:C0:48:10:89:E3:08:39:5A:32:34:F1:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:55:d9:6d:1b:27:5b:c6:d4:35:d5:08:60:e8:46:84:4a:08: 93:32:eb:54:46:a5:57:6e:5b:d7:29:bd:de:d9:2e:99:46:7b: 91:f4:e2:b0:7b:24:38:42:19:84:ac:de:41:9e:fa:04:56:ae: 71:99:91:b1:4a:ef:12:e2:56:1a:37:83:94:26:da:c0:46:1e: ca:85:95:0c:a8:b9:3a:e8:af:72:95:54:12:ac:d9:c4:55:e4: f6:06:97:6a:a1:4f:ad:d4:86:24:d3:c3:cf:57:a3:60:3e:d1: 4e:aa:78:27:32:7b:30:6f:ab:d8:fc:ba:b7:0f:46:2b:bd:84: 5e:48:aa:04:0a:56:c2:6b:8c:4d:d6:02:01:22:3a:4e:6e:ab: f8:db:09:32:1e:15:0f:a0:b1:b6:66:e6:ca:83:96:76:a4:34: f7:7f:d2:a1:29:e2:77:d8:52:62:cf:80:78:2c:a8:1c:1c:2a: 73:dd:a0:39:c9:3d:0a:97:a6:56:cb:a7:58:72:8f:a9:64:58: 96:3d:35:86:9d:06:67:1b:40:27:09:d1:61:f3:67:74:ee:ec: 44:bf:42:23:17:d6:d5:53:26:53:79:10:26:fe:ee:e4:75:28: ca:ac:06:56:f3:a7:26:0c:d3:aa:f6:e7:ca:48:fd:3d:d1:ab: b5:73:94:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKDP84jKsOSk3fayL+QTe75fD72EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGQzkzQ0FFRUE5OENCRkMwNDgxMDg5RTMwODM5NUEz MjM0RjE1ODAeFw0yNjA2MTYyMTU1NTNaFw0yNjA2MTcyMjE3NTNaMDMxMTAvBgNV BAMTKDlEQkY0OTJGRkE0MjQ2NDhGRjA5ODA0NkMyNzg5Qzg3RjkzRDQzQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+g7nw0gvOXVWsE9/vuEvcMpk gl5uje+Ihk1QNdE7Nx0Qg1KvyTn5lZfIiMrZCVE+4HPb/Co1MQqpXV1jQwCsWNCD id2d4io0uk/SmQ+AlkGS8y4utv8SsErHaE+v149DQEJtNc47aB9TaReH29wfIC/w F8dq71yySfgPCS+XuKjQpKpQGb6g34AQaDqcCmurwj3cHqb8JlKv9XHbSN17kGvT 8ECQ9Z3/33Xbt/zlOxko+/5iVAgL01MRR/Ykgp71SzEO4Lav4U2PliU2CixCGDA/ KeJrtdM6K4mssQtRT312N2n3PEnLyWOcr/o8UtUao2PKJHcfsaCHTWLIJjrzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnb9JL/pCRkj/CYBGwnich/k9Q84wHwYDVR0j BBgwFoAUmvyTyu6pjL/ASBCJ4wg5WjI08VgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNhZjI3MWYtYzgzZC00NDFlLWJlYTktMThhMjQ0ZDBlMDBlLzAvOUFGQzkzQ0FF RUE5OENCRkMwNDgxMDg5RTMwODM5NUEzMjM0RjE1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QUZDOTNDQUVFQTk4Q0JGQzA0ODEwODlFMzA4Mzk1QTMyMzRG MTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNhZjI3MWYtYzgzZC00NDFlLWJl YTktMThhMjQ0ZDBlMDBlLzAvOUFGQzkzQ0FFRUE5OENCRkMwNDgxMDg5RTMwODM5 NUEzMjM0RjE1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhV2W0bJ1vG1DXVCGDoRoRKCJMy61RGpVdu W9cpvd7ZLplGe5H04rB7JDhCGYSs3kGe+gRWrnGZkbFK7xLiVho3g5Qm2sBGHsqF lQyouTror3KVVBKs2cRV5PYGl2qhT63UhiTTw89Xo2A+0U6qeCcyezBvq9j8urcP Riu9hF5IqgQKVsJrjE3WAgEiOk5uq/jbCTIeFQ+gsbZm5sqDlnakNPd/0qEp4nfY UmLPgHgsqBwcKnPdoDnJPQqXplbLp1hyj6lkWJY9NYadBmcbQCcJ0WHzZ3Tu7ES/ QiMX1tVTJlN5ECb+7uR1KMqsBlbzpyYM06r258pI/T3Rq7VzlH8= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:41 2026 by rpki-client