$ rpki-client -vvf rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft File: C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft (raw, json) Hash identifier: P8w/1DsWoUjIYpXacPf0bVbi8dn096dMPml6cSwLODM= Subject key identifier: A9:CA:6D:56:F5:8E:28:D1:3C:E9:8A:81:66:0E:F1:BB:28:DF:AE:83 Authority key identifier: C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94 Certificate issuer: /CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894 Certificate serial: 106236FB09B65B9CF0D202D12FBCCE7F195387B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 17:05:10 +0000 Manifest this update: Sat 13 Jun 2026 17:00:10 +0000 Manifest next update: Sun 14 Jun 2026 17:19:10 +0000 Files and hashes: 1: C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl (hash: stoUJ86akQ6vkpfVwrOwO0OWy0u0Pc2mjFLEox/36fo=) 2: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: Pfe66TELIpbboDlTlvL4smle14adEmFMF0KS3kt6HYM=) 3: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: ZVZI5MXEYgq+QpFFWNL7lGXYAS9omg0P+vD6tywGpec=) 4: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: occ5qoM9oAkKmzdKhCiXxb0YYDDzZw7eQPlVtS1+AXA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:62:36:fb:09:b6:5b:9c:f0:d2:02:d1:2f:bc:ce:7f:19:53:87:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894 Validity Not Before: Jun 13 17:00:10 2026 GMT Not After : Jun 14 17:19:10 2026 GMT Subject: CN=A9CA6D56F58E28D13CE98A81660EF1BB28DFAE83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ed:49:05:a8:c4:06:0e:92:b1:fb:2a:4a:20: e1:96:b2:31:fb:ee:5b:e0:dd:3d:9b:ec:d4:ce:81: 13:c9:a5:e9:40:fc:1b:bb:4b:05:aa:5c:bb:17:5b: 3a:40:67:79:22:f1:96:1a:54:13:e1:e0:c7:f9:b6: 24:49:39:67:ff:6c:e8:2b:35:86:bd:bd:cf:e3:2d: 98:db:e6:0e:76:bd:3b:7d:b7:53:f9:06:c9:d9:8d: 99:1b:5f:ae:33:b0:53:fb:46:42:8a:2f:50:6a:bc: fa:0a:57:da:b7:64:28:4e:46:eb:9c:95:ec:dc:7b: e9:4d:51:98:bb:23:bf:50:a6:4b:36:d7:8c:9a:74: d8:c9:6a:b7:b6:6a:66:e2:0c:2d:e6:59:52:6e:e8: 8a:c8:73:ad:3a:0d:a5:3c:6e:36:12:b6:43:7b:ba: 63:c7:8f:34:25:82:7f:a0:6c:dc:5b:c1:e0:b1:5d: fa:ae:40:40:ac:f0:43:e3:c7:03:39:a1:f3:17:35: 25:cb:c2:69:89:f8:04:d0:ee:db:8d:da:10:ea:ed: 57:88:0d:98:e1:ea:aa:90:2a:f2:3b:f0:aa:ca:5f: 86:84:78:0c:f4:d2:8e:1d:d8:e8:1f:66:1e:de:30: 39:9f:10:14:f2:c9:cf:f3:d9:bd:66:30:44:d9:9f: 9b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CA:6D:56:F5:8E:28:D1:3C:E9:8A:81:66:0E:F1:BB:28:DF:AE:83 X509v3 Authority Key Identifier: keyid:C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5e:47:86:61:4a:a7:3e:22:b5:b1:70:ba:a7:f4:c8:b6:84: 86:95:1d:fe:00:54:44:0c:5e:cc:84:8e:0e:f1:b7:0b:ba:95: e9:67:9a:4f:81:f2:54:17:f9:95:cd:b8:8d:a0:24:3c:1a:37: 56:bf:57:fd:7e:0f:76:72:33:fe:7f:96:af:c2:51:83:ce:e4: 59:69:f8:bf:ff:1e:00:90:e9:a3:06:74:c5:23:24:b2:f1:c0: ee:dd:34:e8:aa:ae:f0:f1:e7:20:d2:35:28:82:a7:6c:51:e1: 39:0f:a5:67:7d:aa:bc:31:3e:08:b2:55:81:fc:0e:da:76:76: 3f:1e:b4:63:a1:60:77:a1:b5:b1:e6:91:b3:70:54:df:7e:0d: fb:2c:1e:a4:7c:c0:33:05:4e:1e:81:ad:1d:01:03:91:3f:94: b1:ef:87:10:80:46:4b:5f:6e:7d:26:5b:fd:b9:09:1d:65:27: 0d:8c:76:be:cc:1f:be:cc:dc:66:c2:1d:89:bb:ab:83:15:9d: 61:d6:f8:a8:d1:37:b2:c2:62:5d:72:d9:ed:00:c8:b4:59:0e: 6b:32:ca:51:8a:8e:73:e4:b1:36:c2:12:7d:2f:89:58:31:79: bd:1c:e8:80:29:56:70:53:95:f3:d8:bf:ce:d1:b1:9f:24:49: f2:62:94:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEGI2+wm2W5zw0gLRL7zOfxlTh7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQkRGMEVBMTRERERGMEM1NTFERjE4NjMzMkNCODU5 RUI5RDg5NDAeFw0yNjA2MTMxNzAwMTBaFw0yNjA2MTQxNzE5MTBaMDMxMTAvBgNV BAMTKEE5Q0E2RDU2RjU4RTI4RDEzQ0U5OEE4MTY2MEVGMUJCMjhERkFFODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC67UkFqMQGDpKx+ypKIOGWsjH7 7lvg3T2b7NTOgRPJpelA/Bu7SwWqXLsXWzpAZ3ki8ZYaVBPh4Mf5tiRJOWf/bOgr NYa9vc/jLZjb5g52vTt9t1P5BsnZjZkbX64zsFP7RkKKL1BqvPoKV9q3ZChORuuc lezce+lNUZi7I79Qpks214yadNjJare2ambiDC3mWVJu6IrIc606DaU8bjYStkN7 umPHjzQlgn+gbNxbweCxXfquQECs8EPjxwM5ofMXNSXLwmmJ+ATQ7tuN2hDq7VeI DZjh6qqQKvI78KrKX4aEeAz00o4d2OgfZh7eMDmfEBTyyc/z2b1mMETZn5vLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqcptVvWOKNE86YqBZg7xuyjfroMwHwYDVR0j BBgwFoAUybvfDqFN3fDFUd8YYzLLhZ652JQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTk1OTAxY2MtMWI4ZS00ZjNmLWEzZDAtMzI2OWYwZTE2YzQxLzAvQzlCQkRGMEVB MTRERERGMEM1NTFERjE4NjMzMkNCODU5RUI5RDg5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUJCREYwRUExNEREREYwQzU1MURGMTg2MzMyQ0I4NTlFQjlE ODk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTk1OTAxY2MtMWI4ZS00ZjNmLWEz ZDAtMzI2OWYwZTE2YzQxLzAvQzlCQkRGMEVBMTRERERGMEM1NTFERjE4NjMzMkNC ODU5RUI5RDg5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIteR4ZhSqc+IrWxcLqn9Mi2hIaVHf4AVEQM XsyEjg7xtwu6lelnmk+B8lQX+ZXNuI2gJDwaN1a/V/1+D3ZyM/5/lq/CUYPO5Flp +L//HgCQ6aMGdMUjJLLxwO7dNOiqrvDx5yDSNSiCp2xR4TkPpWd9qrwxPgiyVYH8 Dtp2dj8etGOhYHehtbHmkbNwVN9+DfssHqR8wDMFTh6BrR0BA5E/lLHvhxCARktf bn0mW/25CR1lJw2Mdr7MH77M3GbCHYm7q4MVnWHW+KjRN7LCYl1y2e0AyLRZDmsy ylGKjnPksTbCEn0viVgxeb0c6IApVnBTlfPYv87RsZ8kSfJilC0= -----END CERTIFICATE-----Generated at Sat Jun 13 23:52:37 2026 by rpki-client