$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft File: C9C56B3341FC31139F57F78A815CF9851E91375E.mft (raw, json) Hash identifier: hYq6jMeuxwRfI09Nr37QShc9Z7jqmV33Q5B+xekLIyo= Subject key identifier: 32:E5:21:BB:C3:06:2E:26:D4:7D:A8:B4:D5:D2:76:26:D9:02:A7:B3 Authority key identifier: C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E Certificate issuer: /CN=C9C56B3341FC31139F57F78A815CF9851E91375E Certificate serial: 442E283F8D865FC6159511B05422B4CC37552F0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:24:07 +0000 Manifest this update: Tue 16 Jun 2026 16:19:07 +0000 Manifest next update: Wed 17 Jun 2026 19:16:07 +0000 Files and hashes: 1: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: YDyhEGDnWg4aoTzQ4Kj70ioCxeiG+fWs6BKdMJUBP40=) 2: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: UvvLQHaYsHEf6H/EOqibK//gY5katYyU5vu1/kohXeI=) 3: C9C56B3341FC31139F57F78A815CF9851E91375E.crl (hash: rsR/3qy9tZUdMToAqNnhWRiIuoyfeuZgzawL4XCnIoA=) 4: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: ++K50lF9/3pIjVc4GT4lTLKYd8Uj+kdHUPhBXnfZ3JA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:2e:28:3f:8d:86:5f:c6:15:95:11:b0:54:22:b4:cc:37:55:2f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9C56B3341FC31139F57F78A815CF9851E91375E Validity Not Before: Jun 16 16:19:07 2026 GMT Not After : Jun 17 19:16:07 2026 GMT Subject: CN=32E521BBC3062E26D47DA8B4D5D27626D902A7B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:43:ff:11:e3:83:f5:ed:a0:17:07:bd:56:6b: 8e:b5:9f:fb:f7:9b:88:9f:44:5c:f8:8f:8e:e0:4f: c7:b0:34:57:43:6b:70:71:7f:8f:af:83:dc:b6:9c: 8d:9b:87:b8:cb:4a:36:00:18:28:0c:83:78:0f:ac: c0:6b:83:be:28:90:53:c6:f1:b6:2e:c3:8f:88:5e: fa:20:ef:8c:ff:08:84:24:65:9b:31:25:0e:1a:b6: d5:6a:91:63:bd:bb:ec:8e:d7:0c:14:8c:3b:99:4f: 79:f1:27:29:d6:5f:d5:f8:58:29:f7:bd:6a:e4:ea: d8:85:a0:16:3b:83:55:85:61:d8:98:a2:8e:34:e2: ba:12:ea:4d:a6:48:4b:bb:9e:d8:16:c7:f8:fc:ac: 46:9a:9b:51:67:0b:0a:cf:e9:2a:aa:1a:f1:2b:80: 28:bf:13:7e:3e:69:00:75:f1:ad:6e:3a:29:15:65: 58:75:2a:6d:ae:63:7f:d9:fb:76:fc:75:42:f1:df: eb:a1:83:fc:6d:85:62:68:5b:dd:d6:5c:10:da:57: 08:b9:40:6f:27:8c:8f:8b:d3:d4:5d:89:cb:eb:22: 39:cb:14:98:52:56:9e:83:c9:0e:7b:80:dc:3e:ca: fd:e9:52:c7:15:a0:a4:5e:88:d0:b0:13:7f:d6:46: ac:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E5:21:BB:C3:06:2E:26:D4:7D:A8:B4:D5:D2:76:26:D9:02:A7:B3 X509v3 Authority Key Identifier: keyid:C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:a5:90:8a:bd:94:d6:b6:23:a6:13:ca:cb:2e:29:97:43:94: 66:f2:18:23:9f:61:4f:28:c8:4c:e5:d6:13:f1:07:e7:63:1d: d3:5b:9b:37:21:b5:fe:93:f6:35:c6:0a:bd:ed:0e:fe:fb:e6: 88:cb:be:e3:43:e4:72:b7:e7:56:3e:56:2e:3a:cb:38:8b:1a: 47:e9:49:ff:44:3d:a5:51:c6:7e:ac:78:f4:b7:a0:a4:a5:e1: 3d:c9:81:aa:42:8f:50:d1:ed:1f:56:b2:27:25:05:18:7d:c4: 5f:99:17:4a:c9:85:df:ad:05:97:ac:26:5e:c2:50:21:24:66: 44:f9:4a:67:bd:2f:84:dc:a9:51:30:d2:19:d0:be:cb:ac:47: 79:60:0b:f8:bb:1b:fe:81:ae:e3:16:8c:69:2e:85:72:20:76: 11:c3:1b:57:b1:60:b1:22:ac:cc:51:f9:7f:39:46:d2:e5:9b: 8a:7d:96:4d:81:4d:3c:b9:4d:f4:b0:5c:70:19:04:f3:af:59: 12:46:64:5f:72:71:81:5c:72:dd:bf:b9:af:48:4a:ae:2f:44: fe:93:90:34:15:32:99:e5:fc:3b:c9:7d:be:a9:bc:79:68:02: e3:f3:c7:a7:e3:8b:c1:ec:da:9f:2b:14:f1:a8:5c:5f:c8:64: 3b:ce:e1:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURC4oP42GX8YVlRGwVCK0zDdVLwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlDNTZCMzM0MUZDMzExMzlGNTdGNzhBODE1Q0Y5ODUx RTkxMzc1RTAeFw0yNjA2MTYxNjE5MDdaFw0yNjA2MTcxOTE2MDdaMDMxMTAvBgNV BAMTKDMyRTUyMUJCQzMwNjJFMjZENDdEQThCNEQ1RDI3NjI2RDkwMkE3QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkQ/8R44P17aAXB71Wa461n/v3 m4ifRFz4j47gT8ewNFdDa3Bxf4+vg9y2nI2bh7jLSjYAGCgMg3gPrMBrg74okFPG 8bYuw4+IXvog74z/CIQkZZsxJQ4attVqkWO9u+yO1wwUjDuZT3nxJynWX9X4WCn3 vWrk6tiFoBY7g1WFYdiYoo404roS6k2mSEu7ntgWx/j8rEaam1FnCwrP6SqqGvEr gCi/E34+aQB18a1uOikVZVh1Km2uY3/Z+3b8dULx3+uhg/xthWJoW93WXBDaVwi5 QG8njI+L09RdicvrIjnLFJhSVp6DyQ57gNw+yv3pUscVoKReiNCwE3/WRqz3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMuUhu8MGLibUfai01dJ2JtkCp7MwHwYDVR0j BBgwFoAUycVrM0H8MROfV/eKgVz5hR6RN14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI4YTdmYTUtZmRhMy00YTNlLTkyZjctZmFiZmVkMDVhOTVjLzAvQzlDNTZCMzM0 MUZDMzExMzlGNTdGNzhBODE1Q0Y5ODUxRTkxMzc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUM1NkIzMzQxRkMzMTEzOUY1N0Y3OEE4MTVDRjk4NTFFOTEz NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvQzlDNTZCMzM0MUZDMzExMzlGNTdGNzhBODE1Q0Y5 ODUxRTkxMzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGlkIq9lNa2I6YTyssuKZdDlGbyGCOfYU8o yEzl1hPxB+djHdNbmzchtf6T9jXGCr3tDv775ojLvuND5HK351Y+Vi46yziLGkfp Sf9EPaVRxn6sePS3oKSl4T3JgapCj1DR7R9WsiclBRh9xF+ZF0rJhd+tBZesJl7C UCEkZkT5Sme9L4TcqVEw0hnQvsusR3lgC/i7G/6BruMWjGkuhXIgdhHDG1exYLEi rMxR+X85RtLlm4p9lk2BTTy5TfSwXHAZBPOvWRJGZF9ycYFcct2/ua9ISq4vRP6T kDQVMpnl/DvJfb6pvHloAuPzx6fji8Hs2p8rFPGoXF/IZDvO4Z4= -----END CERTIFICATE-----Generated at Wed Jun 17 11:50:27 2026 by rpki-client