$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.mft File: 9541F7A7495AA8918A6FE15016CB396EF2733922.mft (raw, json) Hash identifier: fev8U4LLMMjKe5V6HKCdhCXD9XkOPxw7reL4dqH5ZDc= Subject key identifier: 4B:B2:58:C4:BB:DB:8D:63:4C:47:C9:23:EE:4E:F9:77:FF:92:FF:5D Authority key identifier: 95:41:F7:A7:49:5A:A8:91:8A:6F:E1:50:16:CB:39:6E:F2:73:39:22 Certificate issuer: /CN=9541F7A7495AA8918A6FE15016CB396EF2733922 Certificate serial: 64222D6B1AF8E152C9C805D6DC7E1395B17CC212 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9541F7A7495AA8918A6FE15016CB396EF2733922.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 18:31:26 +0000 Manifest this update: Tue 16 Jun 2026 18:26:26 +0000 Manifest next update: Wed 17 Jun 2026 19:25:26 +0000 Files and hashes: 1: 323430323a313230303a3a2f33322d3438203d3e203234353233.roa (hash: 79pyzvq7PlzmwMv56PeM1vSxs4VK3SzdUl+NKPr2R1E=) 2: 3130332e32322e3234302e302f32322d3234203d3e203234353233.roa (hash: CaMXRMHtTH2oaHCEUbRaStzEXt0odxZTYz16ElrcZ6M=) 3: 3131302e352e39362e302f32302d3234203d3e203234353233.roa (hash: KHMBmLMNsIrlpMVwHI+S1RY6LU739ywmvYFC1cq5xl8=) 4: 34332e3234372e32312e302f32342d3234203d3e20313331373830.roa (hash: 36nZndVPopPsPLeopECZwGolgADhQtpH4A7gMxfmAgY=) 5: 3230332e38342e3135322e302f32312d3234203d3e203234353233.roa (hash: 6m+L6QokpRSXR82tJzEKM+5CtQ02ZMkv7Oc3TQ5fiJM=) 6: 9541F7A7495AA8918A6FE15016CB396EF2733922.crl (hash: Vs4ezL+PtnWITg1qSNJineupT2tBgAmQHEQExnMnVgI=) 7: 34332e3234372e32302e302f32322d3234203d3e203234353233.roa (hash: gwZQbe4m/GrtEIxNeRbhHDA+1mqa7HkZdYu5ukYQUEc=) 8: 3230322e36322e31322e302f32322d3234203d3e203234353233.roa (hash: XN1DjcwbwL8FbCvRk5cbd36XlAVTMcArigukWUmV4y4=) 9: 3230332e3137342e382e302f32312d3234203d3e203234353233.roa (hash: jRyjSLa+6p5f7abgpIfoPXK67MLqzEp1oTDyh4FJNKU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.crl rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9541F7A7495AA8918A6FE15016CB396EF2733922.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:25:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:22:2d:6b:1a:f8:e1:52:c9:c8:05:d6:dc:7e:13:95:b1:7c:c2:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9541F7A7495AA8918A6FE15016CB396EF2733922 Validity Not Before: Jun 16 18:26:26 2026 GMT Not After : Jun 17 19:25:26 2026 GMT Subject: CN=4BB258C4BBDB8D634C47C923EE4EF977FF92FF5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5f:b3:07:96:34:1a:2e:09:7f:f5:13:8d:23: f3:ce:2b:ff:f2:19:0f:b8:e8:99:40:62:e6:c8:58: 95:99:13:7f:e8:c4:e5:f7:3a:e7:dc:da:3f:26:34: 61:06:5f:a0:ca:da:87:51:a0:4f:85:41:83:b1:c7: a9:b2:f6:cb:63:7b:dd:70:1d:76:ff:4c:e0:b3:8e: a7:57:25:90:bb:b7:f6:68:d8:ef:43:3d:87:74:e4: b4:1c:c5:ae:f6:aa:85:68:38:79:ef:dd:38:87:3d: a3:34:62:60:15:11:c2:c4:49:2e:14:5f:9a:8b:36: a0:d5:57:57:f5:f9:a5:98:92:e2:71:aa:3f:68:48: 6a:87:e7:2d:7b:81:0f:b1:8b:54:cb:b4:71:2f:d1: 9b:6a:db:e2:cd:99:45:3e:f2:7c:78:b8:51:24:f7: 8c:3d:81:5e:87:2d:e9:f1:6c:96:39:cd:2b:bc:3b: 6b:cb:d1:91:e5:b5:85:6a:6d:29:e9:84:53:6f:07: 44:e5:e3:2c:a9:f5:e5:a7:99:de:31:86:29:12:08: 4c:92:43:cf:54:70:9c:08:47:79:9c:5b:8d:ec:c7: e4:d0:6a:3c:53:eb:35:eb:15:d3:d6:d4:9d:88:6a: 13:48:58:20:0b:4e:82:14:10:dc:22:26:91:60:61: 3d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B2:58:C4:BB:DB:8D:63:4C:47:C9:23:EE:4E:F9:77:FF:92:FF:5D X509v3 Authority Key Identifier: keyid:95:41:F7:A7:49:5A:A8:91:8A:6F:E1:50:16:CB:39:6E:F2:73:39:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9541F7A7495AA8918A6FE15016CB396EF2733922.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:af:e6:28:50:80:71:f0:3d:13:49:28:f0:23:d7:5c:ec:75: 42:58:26:76:b5:71:56:dc:71:cf:36:e2:dc:6a:72:ad:1e:c8: b7:09:ed:a0:c9:cc:6c:e3:f8:bb:a9:8b:c1:ec:e0:e2:2a:e5: 49:74:aa:ee:e4:0d:63:ac:46:cc:a9:51:ec:df:ef:cb:31:a6: 88:f2:51:59:e8:b5:8c:f4:d5:e3:a8:fc:17:db:c2:57:e3:0e: 93:0a:9a:b8:e5:ae:a6:fb:83:c3:11:74:ed:ac:aa:18:59:f3: 5c:38:6a:3a:57:42:0a:aa:f7:92:36:e3:44:ac:80:b0:47:08: 88:dc:72:0b:2e:8a:cf:76:57:20:77:37:c9:14:fb:38:1c:cc: 1c:02:74:96:78:d7:e3:35:43:98:37:42:ca:b5:cb:89:94:05: cc:60:79:b2:8b:01:26:21:d4:0a:c6:51:26:ea:7b:8b:3c:c9: f9:2f:3b:5e:e4:ad:36:1a:21:72:36:50:8e:ad:e9:5a:db:e4: b1:fe:80:65:e9:8e:b2:3a:7a:f8:0b:a1:08:a6:67:e3:53:09: 97:94:56:13:f9:5b:ec:16:38:96:b3:67:e7:36:d5:43:f3:eb: f6:2c:48:d3:b7:2a:6c:19:53:04:61:58:9c:de:a0:88:e5:9b: 2e:65:90:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZCItaxr44VLJyAXW3H4TlbF8whIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0MUY3QTc0OTVBQTg5MThBNkZFMTUwMTZDQjM5NkVG MjczMzkyMjAeFw0yNjA2MTYxODI2MjZaFw0yNjA2MTcxOTI1MjZaMDMxMTAvBgNV BAMTKDRCQjI1OEM0QkJEQjhENjM0QzQ3QzkyM0VFNEVGOTc3RkY5MkZGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLX7MHljQaLgl/9RONI/POK//y GQ+46JlAYubIWJWZE3/oxOX3Oufc2j8mNGEGX6DK2odRoE+FQYOxx6my9stje91w HXb/TOCzjqdXJZC7t/Zo2O9DPYd05LQcxa72qoVoOHnv3TiHPaM0YmAVEcLESS4U X5qLNqDVV1f1+aWYkuJxqj9oSGqH5y17gQ+xi1TLtHEv0Ztq2+LNmUU+8nx4uFEk 94w9gV6HLenxbJY5zSu8O2vL0ZHltYVqbSnphFNvB0Tl4yyp9eWnmd4xhikSCEyS Q89UcJwIR3mcW43sx+TQajxT6zXrFdPW1J2IahNIWCALToIUENwiJpFgYT1vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS7JYxLvbjWNMR8kj7k75d/+S/10wHwYDVR0j BBgwFoAUlUH3p0laqJGKb+FQFss5bvJzOSIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGM2Njc3NjktODBkYy00MDkzLWI1ZjctZGZlN2M1NzIwNDg2LzAvOTU0MUY3QTc0 OTVBQTg5MThBNkZFMTUwMTZDQjM5NkVGMjczMzkyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTQxRjdBNzQ5NUFBODkxOEE2RkUxNTAxNkNCMzk2RUYyNzMz OTIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGM2Njc3NjktODBkYy00MDkzLWI1 ZjctZGZlN2M1NzIwNDg2LzAvOTU0MUY3QTc0OTVBQTg5MThBNkZFMTUwMTZDQjM5 NkVGMjczMzkyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKv5ihQgHHwPRNJKPAj11zsdUJYJna1cVbc cc824txqcq0eyLcJ7aDJzGzj+Lupi8Hs4OIq5Ul0qu7kDWOsRsypUezf78sxpojy UVnotYz01eOo/BfbwlfjDpMKmrjlrqb7g8MRdO2sqhhZ81w4ajpXQgqq95I240Ss gLBHCIjccgsuis92VyB3N8kU+zgczBwCdJZ41+M1Q5g3Qsq1y4mUBcxgebKLASYh 1ArGUSbqe4s8yfkvO17krTYaIXI2UI6t6Vrb5LH+gGXpjrI6evgLoQimZ+NTCZeU VhP5W+wWOJazZ+c21UPz6/YsSNO3KmwZUwRhWJzeoIjlmy5lkLk= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:28 2026 by rpki-client