$ rpki-client -vvf rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft File: 9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft (raw, json) Hash identifier: o9QZ/L9GuIkl7mLKas+rgHE83kL1sSeTsY5VrFyJb1c= Subject key identifier: 59:59:05:1D:FA:19:13:F5:54:D6:80:74:E3:7C:D4:8E:7B:99:E4:71 Authority key identifier: 9F:2F:D5:F0:22:2A:23:10:19:36:82:C9:DC:2C:AB:6A:7F:4C:EE:F0 Certificate issuer: /CN=9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0 Certificate serial: 2E3DAE17EE21F77460B802517A6A07EE40C502B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 22:31:30 +0000 Manifest this update: Tue 16 Jun 2026 22:26:30 +0000 Manifest next update: Thu 18 Jun 2026 00:05:30 +0000 Files and hashes: 1: 9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.crl (hash: L36WYX99NEzadI4AoFH4K1WX6tIRdogTeb5UcE0DYMk=) 2: 3130332e3137342e36342e302f32342d3234203d3e20313437313236.roa (hash: ZGD3gvwBGhA/oYppfcua832gpcsap+01GHOd/NYuTUc=) 3: 3130332e3137342e36342e302f32332d3234203d3e20313437313236.roa (hash: BwYpBlP3m28Tfj+hQxoec6R8e4UN5PECSBz/IAuPt0w=) 4: 3130332e3137342e36352e302f32342d3234203d3e20313437313236.roa (hash: wlJasn9sEpBfYIb16xYXhPNZ1TeKQ7fHYr3qJmH4nLE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.crl rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:3d:ae:17:ee:21:f7:74:60:b8:02:51:7a:6a:07:ee:40:c5:02:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0 Validity Not Before: Jun 16 22:26:30 2026 GMT Not After : Jun 18 00:05:30 2026 GMT Subject: CN=5959051DFA1913F554D68074E37CD48E7B99E471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b1:28:08:52:c1:e9:84:5d:94:46:0e:ba:ad: 68:9d:a2:cb:14:c4:7d:a9:79:76:39:59:ec:74:75: 04:f3:17:e0:70:79:88:8d:9a:09:fa:ed:1c:d2:ca: bd:fe:74:07:fb:26:68:18:b1:20:7e:79:08:4f:6e: 88:40:7c:fc:0f:03:42:ff:6b:7b:0b:02:b0:57:2e: c0:d0:41:79:89:2d:91:0d:7f:69:3c:d8:8a:18:1e: 7f:de:ba:1f:ff:ce:b9:e3:26:c0:20:3c:9b:ce:34: 28:f8:42:77:03:93:89:73:6d:fe:66:0e:af:90:f0: d2:cb:a7:c0:a2:e3:89:a5:d5:68:5e:21:91:f7:cd: cd:d4:88:ed:22:f3:0f:e2:70:cc:f7:30:89:6c:f6: 18:f3:0b:83:21:7d:06:c4:3b:9c:8c:93:3f:1d:ba: fe:8a:0f:08:fd:f1:cf:bd:48:9f:c6:45:54:5a:c4: 79:06:02:d9:a3:50:1d:c9:8f:a7:5d:57:be:32:22: 8d:80:ee:b2:ef:40:c8:41:61:ee:e4:f7:53:0e:9b: 66:cd:f3:1b:9e:36:05:93:19:62:b7:68:0e:c3:1d: 58:ed:45:57:1a:9b:6d:8b:11:0a:d5:14:df:54:0f: 5a:8c:c4:93:22:b4:2c:e3:ce:a2:da:6f:51:78:0c: da:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:59:05:1D:FA:19:13:F5:54:D6:80:74:E3:7C:D4:8E:7B:99:E4:71 X509v3 Authority Key Identifier: keyid:9F:2F:D5:F0:22:2A:23:10:19:36:82:C9:DC:2C:AB:6A:7F:4C:EE:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:df:4b:a1:c7:c4:df:74:2d:0f:86:f0:99:55:eb:c3:1d:79: b5:67:71:bd:a6:5b:9a:73:30:0a:7d:e2:ea:0f:c3:3e:62:3d: 23:1b:a4:41:83:bb:c4:79:5d:95:95:19:94:85:2c:31:4b:83: a4:e2:2f:6c:52:26:d3:05:0b:0e:bb:d2:e1:ab:29:4a:21:60: 1c:19:c5:0d:9a:f5:e5:01:1b:95:13:38:83:30:84:f1:79:65: 74:ab:ba:be:09:66:b0:bc:a3:87:5f:d7:58:7d:32:83:7e:22: 0b:3b:d1:8a:20:f4:49:39:72:5c:9c:18:ee:ec:a4:96:1d:ad: 16:97:18:1b:21:06:cb:bd:05:23:be:ad:f0:ac:2c:66:cf:9a: c0:d1:28:ba:4c:94:e9:79:74:ff:2c:9d:bc:90:b8:b0:21:4d: 64:42:8e:37:a7:ec:28:cd:16:1b:ea:6c:02:ca:a1:78:67:18: 5a:a0:d7:ce:4c:84:2e:66:fa:af:a3:46:13:36:c4:9e:4c:f5: 6b:a6:e4:e5:cc:63:65:da:d2:1b:32:a1:76:73:c6:9b:38:e4: a0:97:7a:e3:a1:0b:89:a7:cb:b7:de:e8:d0:f3:af:69:93:dd: b7:4c:ae:01:dc:da:67:b0:a3:2a:5c:d7:75:7e:25:0b:1c:0c: bf:32:9c:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULj2uF+4h93RguAJRemoH7kDFArkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYyRkQ1RjAyMjJBMjMxMDE5MzY4MkM5REMyQ0FCNkE3 RjRDRUVGMDAeFw0yNjA2MTYyMjI2MzBaFw0yNjA2MTgwMDA1MzBaMDMxMTAvBgNV BAMTKDU5NTkwNTFERkExOTEzRjU1NEQ2ODA3NEUzN0NENDhFN0I5OUU0NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGsSgIUsHphF2URg66rWidossU xH2peXY5Wex0dQTzF+BweYiNmgn67RzSyr3+dAf7JmgYsSB+eQhPbohAfPwPA0L/ a3sLArBXLsDQQXmJLZENf2k82IoYHn/euh//zrnjJsAgPJvONCj4QncDk4lzbf5m Dq+Q8NLLp8Ci44ml1WheIZH3zc3UiO0i8w/icMz3MIls9hjzC4MhfQbEO5yMkz8d uv6KDwj98c+9SJ/GRVRaxHkGAtmjUB3Jj6ddV74yIo2A7rLvQMhBYe7k91MOm2bN 8xueNgWTGWK3aA7DHVjtRVcam22LEQrVFN9UD1qMxJMitCzjzqLab1F4DNpHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWVkFHfoZE/VU1oB043zUjnuZ5HEwHwYDVR0j BBgwFoAUny/V8CIqIxAZNoLJ3Cyran9M7vAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFmNGFiYmUtOGI1ZC00MDJiLTkwNTMtNTBiNzg1Yzc3MzUyLzAvOUYyRkQ1RjAy MjJBMjMxMDE5MzY4MkM5REMyQ0FCNkE3RjRDRUVGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjJGRDVGMDIyMkEyMzEwMTkzNjgyQzlEQzJDQUI2QTdGNENF RUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFmNGFiYmUtOGI1ZC00MDJiLTkw NTMtNTBiNzg1Yzc3MzUyLzAvOUYyRkQ1RjAyMjJBMjMxMDE5MzY4MkM5REMyQ0FC NkE3RjRDRUVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjfS6HHxN90LQ+G8JlV68MdebVncb2mW5pz MAp94uoPwz5iPSMbpEGDu8R5XZWVGZSFLDFLg6TiL2xSJtMFCw670uGrKUohYBwZ xQ2a9eUBG5UTOIMwhPF5ZXSrur4JZrC8o4df11h9MoN+Igs70Yog9Ek5clycGO7s pJYdrRaXGBshBsu9BSO+rfCsLGbPmsDRKLpMlOl5dP8snbyQuLAhTWRCjjen7CjN FhvqbALKoXhnGFqg185MhC5m+q+jRhM2xJ5M9Wum5OXMY2Xa0hsyoXZzxps45KCX euOhC4mny7fe6NDzr2mT3bdMrgHc2mewoypc13V+JQscDL8ynHQ= -----END CERTIFICATE-----Generated at Wed Jun 17 10:40:59 2026 by rpki-client