$ rpki-client -vvf rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.mft File: 9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.mft (raw, json) Hash identifier: UA1br2N2rjkO9rXnOTmd5aOsjYFHYyPPch9J3ljHjs8= Subject key identifier: 0A:35:A9:21:81:81:77:4B:A4:65:1D:24:25:8A:24:6E:1B:B6:99:E0 Authority key identifier: 93:92:F9:5F:0C:33:94:DE:A7:FF:F9:85:C0:85:F4:FF:0A:26:60:FB Certificate issuer: /CN=9392F95F0C3394DEA7FFF985C085F4FF0A2660FB Certificate serial: 43F64E1C291668EFD0C9E1B44F1798E18E1D9DF1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 15:48:25 +0000 Manifest this update: Tue 16 Jun 2026 15:43:25 +0000 Manifest next update: Wed 17 Jun 2026 17:11:25 +0000 Files and hashes: 1: 3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa (hash: 2tG83qDLxajsJqT+je38BN6oGx2Pb5agqntR2yY+mUw=) 2: 9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.crl (hash: 187AG7mbExJxm5NcRhAR2SfyJKdgR/lwnVZ1QQyCsMk=) 3: 3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa (hash: jnGR7HR1o9CjSKGxVZEINbrozGV4LnkdIOURY4rwMfA=) 4: 3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa (hash: 0pZQi9p2n6aMAqASFQQ+CaUR1jCRZ1Jmg90yao5WpBA=) 5: 3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (hash: JNrE3YAgSKkXvk2KuY4C3xc6vFJ8aaqlGvqUWAA5DE4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.crl rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f6:4e:1c:29:16:68:ef:d0:c9:e1:b4:4f:17:98:e1:8e:1d:9d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9392F95F0C3394DEA7FFF985C085F4FF0A2660FB Validity Not Before: Jun 16 15:43:25 2026 GMT Not After : Jun 17 17:11:25 2026 GMT Subject: CN=0A35A9218181774BA4651D24258A246E1BB699E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:17:bf:e2:80:d8:1e:ee:df:e2:7d:ca:93:58: 57:08:89:be:39:a2:59:53:3e:cb:3b:5a:f1:f2:86: 9f:ab:4d:73:84:2b:ee:8d:42:30:80:98:ed:d3:57: 20:47:78:49:d2:33:12:ad:19:db:81:56:1e:b8:a6: be:65:f9:93:98:fb:16:b6:a2:a2:32:26:a6:ad:45: 6b:a2:ca:f6:76:b5:1b:55:5f:50:71:a1:46:74:5d: 03:b6:44:4c:b2:c1:f9:7f:b4:02:6b:6c:84:6c:e0: 32:cb:66:8e:cb:89:e9:58:3b:5d:c3:30:64:59:65: c2:db:60:9e:4a:4a:ab:2f:b9:a1:33:a6:90:fd:0c: bf:ba:bd:3f:4e:76:04:12:e4:37:67:bf:da:25:4c: 16:3c:fc:64:d5:1f:38:22:83:75:e8:17:21:f8:3c: a8:3b:f3:ff:6e:66:94:fe:81:c9:5e:f6:96:a5:f7: 65:6c:e6:20:b2:7e:ea:c2:fd:f2:83:24:86:14:5c: 02:1b:8a:e2:24:3d:42:2d:ac:0b:7e:c2:96:b0:98: 5b:11:c4:c1:a6:85:b0:eb:6d:a6:86:6d:53:f3:82: 51:81:83:6e:da:ee:1a:ef:2a:3d:55:ee:a2:1f:95: 63:c0:da:3a:be:84:f0:22:e3:b5:d7:7e:29:67:7e: db:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:35:A9:21:81:81:77:4B:A4:65:1D:24:25:8A:24:6E:1B:B6:99:E0 X509v3 Authority Key Identifier: keyid:93:92:F9:5F:0C:33:94:DE:A7:FF:F9:85:C0:85:F4:FF:0A:26:60:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b7:8b:3b:fd:25:50:08:96:7a:37:46:24:4e:25:28:e3:75: bc:3c:e0:5e:f5:4c:22:4a:4e:ca:c4:e5:22:db:4a:11:63:b9: 90:d1:3b:a1:4d:35:70:f4:6c:fd:81:56:0a:62:cb:49:9f:da: 03:f9:f0:88:dd:2b:87:63:45:cb:46:3f:13:a6:5c:63:ed:51: 22:96:f6:8f:a0:ab:70:b8:11:81:a3:fd:41:45:e3:f8:b9:24: ca:01:56:e2:92:05:73:db:bb:38:29:45:87:f8:9c:a2:90:54: 2f:96:98:e2:a3:6c:ea:17:f3:ff:fc:71:b7:bb:53:20:22:8d: fb:ec:95:6f:bb:d8:95:e9:fd:d2:55:02:e5:4b:90:5b:09:a0: 12:5b:e2:1f:c0:30:51:70:4d:4a:a8:d6:bc:1d:90:bb:d3:6a: 82:b9:ff:eb:7c:a3:8c:14:83:d6:bf:8b:c0:16:2c:4e:05:48: fd:27:bf:10:d9:b6:95:0b:85:cf:a5:2a:73:9f:b7:80:b7:3c: c1:94:a7:3a:6c:66:ff:a2:cf:eb:f2:cd:5c:af:fd:ae:25:90: f5:28:a4:b2:49:48:e3:2f:32:49:06:95:f7:9b:bc:bc:1e:57: 8e:e3:bd:2e:96:48:08:c4:4e:b5:7a:f7:1d:8c:dc:b7:36:b8: 6c:5a:7c:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/ZOHCkWaO/QyeG0TxeY4Y4dnfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM5MkY5NUYwQzMzOTRERUE3RkZGOTg1QzA4NUY0RkYw QTI2NjBGQjAeFw0yNjA2MTYxNTQzMjVaFw0yNjA2MTcxNzExMjVaMDMxMTAvBgNV BAMTKDBBMzVBOTIxODE4MTc3NEJBNDY1MUQyNDI1OEEyNDZFMUJCNjk5RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsF7/igNge7t/ifcqTWFcIib45 ollTPss7WvHyhp+rTXOEK+6NQjCAmO3TVyBHeEnSMxKtGduBVh64pr5l+ZOY+xa2 oqIyJqatRWuiyvZ2tRtVX1BxoUZ0XQO2REyywfl/tAJrbIRs4DLLZo7LielYO13D MGRZZcLbYJ5KSqsvuaEzppD9DL+6vT9OdgQS5Ddnv9olTBY8/GTVHzgig3XoFyH4 PKg78/9uZpT+gcle9pal92Vs5iCyfurC/fKDJIYUXAIbiuIkPUItrAt+wpawmFsR xMGmhbDrbaaGbVPzglGBg27a7hrvKj1V7qIflWPA2jq+hPAi47XXfilnftsrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCjWpIYGBd0ukZR0kJYokbhu2meAwHwYDVR0j BBgwFoAUk5L5XwwzlN6n//mFwIX0/womYPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OThmOTI0NDctYWNkMy00MjdjLWI1ZTctZGIzOTE3ZjE4NWM4LzAvOTM5MkY5NUYw QzMzOTRERUE3RkZGOTg1QzA4NUY0RkYwQTI2NjBGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzkyRjk1RjBDMzM5NERFQTdGRkY5ODVDMDg1RjRGRjBBMjY2 MEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOThmOTI0NDctYWNkMy00MjdjLWI1 ZTctZGIzOTE3ZjE4NWM4LzAvOTM5MkY5NUYwQzMzOTRERUE3RkZGOTg1QzA4NUY0 RkYwQTI2NjBGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAO3izv9JVAIlno3RiROJSjjdbw84F71TCJK TsrE5SLbShFjuZDRO6FNNXD0bP2BVgpiy0mf2gP58IjdK4djRctGPxOmXGPtUSKW 9o+gq3C4EYGj/UFF4/i5JMoBVuKSBXPbuzgpRYf4nKKQVC+WmOKjbOoX8//8cbe7 UyAijfvslW+72JXp/dJVAuVLkFsJoBJb4h/AMFFwTUqo1rwdkLvTaoK5/+t8o4wU g9a/i8AWLE4FSP0nvxDZtpULhc+lKnOft4C3PMGUpzpsZv+iz+vyzVyv/a4lkPUo pLJJSOMvMkkGlfebvLweV47jvS6WSAjETrV69x2M3Lc2uGxafGg= -----END CERTIFICATE-----Generated at Wed Jun 17 10:32:59 2026 by rpki-client