$ rpki-client -vvf rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft File: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft (raw, json) Hash identifier: FURnxuWgRbfpUHtasaVBx0WHQ8bWrrVEYcn6iEYc6ro= Subject key identifier: FE:7F:36:6A:AB:45:60:D9:5C:E9:33:97:2B:60:8F:B8:C8:20:3B:51 Authority key identifier: B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A Certificate issuer: /CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A Certificate serial: 04BBDF6529F1FA0C445D5101A14FFA825B320499 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 01:46:23 +0000 Manifest this update: Sat 13 Jun 2026 01:41:23 +0000 Manifest next update: Sun 14 Jun 2026 03:46:23 +0000 Files and hashes: 1: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl (hash: nei/3VI8ME5z7flJH1GlknCqnxihpaxOIa/qR1pr+XE=) 2: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: fDnmzf65jBSv74PMDMyNjaHpX/nCsTXRpP2C1qWxmnk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 21:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:bb:df:65:29:f1:fa:0c:44:5d:51:01:a1:4f:fa:82:5b:32:04:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A Validity Not Before: Jun 13 01:41:23 2026 GMT Not After : Jun 14 03:46:23 2026 GMT Subject: CN=FE7F366AAB4560D95CE933972B608FB8C8203B51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:98:cb:30:cd:5b:85:8c:e3:cd:cf:63:a6:b0: 6a:ab:8b:19:db:7b:6e:03:c6:24:3f:1d:2e:a9:53: 09:54:6f:6d:ac:ab:e0:40:fc:68:f8:b1:69:bc:15: 5d:f8:8b:99:6d:ef:7a:2e:45:1f:71:c8:56:f1:9b: ca:90:7a:38:3a:41:75:5d:64:15:c0:0e:02:b5:6d: 39:1e:c2:d3:44:e7:d8:b0:01:6d:3d:85:6f:f9:4e: b6:b1:64:85:f2:7c:ad:2d:d2:18:42:2f:19:d9:33: 48:ce:86:d3:83:82:51:4a:13:30:d2:d2:97:a5:1e: 5e:0a:7f:8e:16:8f:7e:cd:26:fe:c6:07:22:a3:92: e8:6e:45:d4:b1:05:a5:ae:51:3e:07:db:bb:f9:d1: ad:07:53:b4:7f:7e:8a:d0:78:bd:cc:e4:9b:a0:6e: e9:9e:1d:a0:3d:8d:83:2a:52:48:5e:5a:63:c3:8c: 91:a7:3d:45:20:41:7d:c1:57:8b:7f:bb:34:1a:b6: 0b:ff:25:f1:10:01:32:91:80:13:c6:be:20:53:8f: 25:4c:47:bc:f0:43:5d:f9:59:9f:8f:43:3d:c0:37: 8e:7e:63:fc:32:ec:a5:14:48:56:a1:1a:32:b5:a4: 68:f2:6b:d8:28:94:41:e8:2b:5b:6e:72:29:c1:fb: b6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7F:36:6A:AB:45:60:D9:5C:E9:33:97:2B:60:8F:B8:C8:20:3B:51 X509v3 Authority Key Identifier: keyid:B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:23:67:d1:90:b1:33:f8:70:ab:a7:6f:1c:55:32:e3:56:be: 3b:55:92:59:59:96:ff:aa:51:d0:6f:b9:85:ba:52:24:8b:c6: 3f:7a:8e:72:4d:63:7e:7a:ea:18:7a:63:44:22:cb:3a:76:9a: 3b:9f:e0:ca:42:79:9d:cf:32:76:bc:1e:ca:b8:f4:8d:ba:10: c9:88:96:cf:d8:9a:47:56:ef:d8:d0:71:04:60:f0:9a:da:e4: 08:c6:a5:57:02:24:d3:6d:f1:1f:4b:e2:74:82:f0:65:a0:ea: 72:20:a8:84:b3:06:29:94:40:8a:b4:ae:77:6e:c8:9b:69:0c: f7:fc:5a:19:44:43:7a:dd:b6:21:b1:5a:13:ac:76:9a:5e:af: 7a:0f:40:a3:8d:9e:71:e1:d0:fb:f8:3f:d2:df:b2:5c:4b:9e: 48:63:b7:16:f7:2b:d5:6f:ea:77:b7:8f:a0:a8:26:94:96:42: 6a:48:df:64:24:43:7b:43:02:ef:91:ae:e5:ea:41:83:d8:3f: 5f:6a:99:11:ef:c1:b2:60:c0:0c:53:25:f2:60:9d:ff:55:d0: 32:dc:20:6d:36:31:e6:94:c0:c3:07:8d:71:22:f6:89:a0:aa: 00:2c:db:52:1f:d3:53:24:d3:c3:f1:7a:9b:61:b3:de:0e:74: 29:94:2f:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBLvfZSnx+gxEXVEBoU/6glsyBJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCOEE2MUQ4RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3NkFD NUZBRDI5QTAeFw0yNjA2MTMwMTQxMjNaFw0yNjA2MTQwMzQ2MjNaMDMxMTAvBgNV BAMTKEZFN0YzNjZBQUI0NTYwRDk1Q0U5MzM5NzJCNjA4RkI4QzgyMDNCNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWmMswzVuFjOPNz2OmsGqrixnb e24DxiQ/HS6pUwlUb22sq+BA/Gj4sWm8FV34i5lt73ouRR9xyFbxm8qQejg6QXVd ZBXADgK1bTkewtNE59iwAW09hW/5TraxZIXyfK0t0hhCLxnZM0jOhtODglFKEzDS 0pelHl4Kf44Wj37NJv7GByKjkuhuRdSxBaWuUT4H27v50a0HU7R/forQeL3M5Jug bumeHaA9jYMqUkheWmPDjJGnPUUgQX3BV4t/uzQatgv/JfEQATKRgBPGviBTjyVM R7zwQ135WZ+PQz3AN45+Y/wy7KUUSFahGjK1pGjya9golEHoK1tucinB+7alAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/n82aqtFYNlc6TOXK2CPuMggO1EwHwYDVR0j BBgwFoAUubimHY6lUgzyjo5cJFAXasX60powDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE0MTc2MDgtMTZiOC00NDk3LTgxZTMtOTQ3ZDc4ZGJjZjExLzAvQjlCOEE2MUQ4 RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3NkFDNUZBRDI5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9COUI4QTYxRDhFQTU1MjBDRjI4RThFNUMyNDUwMTc2QUM1RkFE MjlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvQjlCOEE2MUQ4RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3 NkFDNUZBRDI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0jZ9GQsTP4cKunbxxVMuNWvjtVkllZlv+q UdBvuYW6UiSLxj96jnJNY3566hh6Y0Qiyzp2mjuf4MpCeZ3PMna8Hsq49I26EMmI ls/YmkdW79jQcQRg8Jra5AjGpVcCJNNt8R9L4nSC8GWg6nIgqISzBimUQIq0rndu yJtpDPf8WhlEQ3rdtiGxWhOsdpper3oPQKONnnHh0Pv4P9LfslxLnkhjtxb3K9Vv 6ne3j6CoJpSWQmpI32QkQ3tDAu+RruXqQYPYP19qmRHvwbJgwAxTJfJgnf9V0DLc IG02MeaUwMMHjXEi9omgqgAs21If01Mk08Pxepths94OdCmUL8s= -----END CERTIFICATE-----Generated at Sat Jun 13 15:16:49 2026 by rpki-client