$ rpki-client -vvf rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft File: 9970795F3B277481EE73EA3A16E4FA33964C92D3.mft (raw, json) Hash identifier: zPGmCGNrOpL3ga1nBFjJiN6Uhm8bb5cBLBrGnbehbZs= Subject key identifier: 70:3D:65:DD:07:91:2C:E3:BD:DC:22:28:07:6F:0A:92:13:E5:98:6F Authority key identifier: 99:70:79:5F:3B:27:74:81:EE:73:EA:3A:16:E4:FA:33:96:4C:92:D3 Certificate issuer: /CN=9970795F3B277481EE73EA3A16E4FA33964C92D3 Certificate serial: 4958FD9546CBF8A7ECBCA6425A9C7F0FB2D1EF3F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 21:55:39 +0000 Manifest this update: Sat 13 Jun 2026 21:50:39 +0000 Manifest next update: Sun 14 Jun 2026 23:03:39 +0000 Files and hashes: 1: 3130332e3135362e3134372e302f32342d3234203d3e20313338383130.roa (hash: 5C93GzuwPEwzfZCO761jlr9+kP+U+BLor2EmxZBdJ5Q=) 2: 3130332e3135362e3134362e302f32332d3234203d3e20313431303933.roa (hash: 3Da0wSVO79CXcT4/2ct9HlMI+w8ZYFGpqAbvRWk65hU=) 3: 9970795F3B277481EE73EA3A16E4FA33964C92D3.crl (hash: cvjUSypSY9j1omGzsWM9OSyGwtGjRv5e7gRu3ZECbog=) 4: 3130332e3135362e3134362e302f32342d3234203d3e20313431303933.roa (hash: j3C8JrVEuDWGDYTHo2d7ibn1ngIRwCbcuK1vWB38mfI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.crl rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:58:fd:95:46:cb:f8:a7:ec:bc:a6:42:5a:9c:7f:0f:b2:d1:ef:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970795F3B277481EE73EA3A16E4FA33964C92D3 Validity Not Before: Jun 13 21:50:39 2026 GMT Not After : Jun 14 23:03:39 2026 GMT Subject: CN=703D65DD07912CE3BDDC2228076F0A9213E5986F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3d:27:e9:e0:dc:72:5e:7b:5c:f7:42:84:a7: 45:c9:f9:2b:09:ba:b8:fc:d2:bb:86:18:fe:5b:29: 87:fb:0c:b4:6c:2e:be:1c:de:27:10:05:4f:42:93: c4:37:93:0f:d3:1f:6c:26:7d:c6:2a:8b:b0:fc:09: 6c:a1:09:fa:1c:6f:00:4b:5f:d6:10:19:60:eb:57: 99:94:6e:69:4c:7f:c6:60:27:f9:a3:f3:83:eb:98: bf:ce:1c:8a:4d:42:b0:4e:70:24:a8:7a:67:08:1a: 87:77:ff:26:4b:7b:02:57:3f:f0:3e:9e:36:a5:92: 23:6e:29:2a:65:2e:c4:9b:8e:e6:86:bc:75:fc:4b: 8b:68:d9:45:90:b8:c6:4e:f7:fc:13:e9:e0:0e:20: d0:09:1d:61:04:7b:8d:89:8f:19:5e:df:cf:81:ff: 76:71:ae:74:ab:4a:79:60:47:19:ad:25:1a:fd:ff: a2:b1:dd:90:20:82:76:86:11:e0:eb:45:3b:e3:34: 1a:50:7d:4c:d9:d6:24:cf:b5:6e:8d:2a:75:1b:d5: 3f:d7:e2:94:0c:86:f5:47:67:10:b6:f4:6f:21:21: 03:21:59:a6:67:a1:3e:1a:4e:47:05:69:b1:58:3e: 67:28:41:32:be:52:51:f2:06:84:f6:71:83:3a:bc: 2d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3D:65:DD:07:91:2C:E3:BD:DC:22:28:07:6F:0A:92:13:E5:98:6F X509v3 Authority Key Identifier: keyid:99:70:79:5F:3B:27:74:81:EE:73:EA:3A:16:E4:FA:33:96:4C:92:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:0e:1c:28:55:0e:3a:e3:53:d8:b1:9b:16:b7:a1:e6:46:aa: 61:00:d0:0f:20:25:bc:1f:e8:0a:60:a7:b2:4d:64:46:71:e1: 9a:cc:d6:ab:58:a2:49:bc:6d:b5:e2:19:7e:57:58:22:72:2a: a7:85:c1:65:55:f8:1f:16:9f:f4:19:57:95:9d:51:fa:cf:36: ff:f7:93:6d:7b:b5:55:25:98:dc:75:45:fe:7e:cc:4b:cd:56: cd:72:c0:d3:88:6e:8b:52:f0:ce:ec:4b:bf:94:ec:a9:13:d1: 50:16:20:0f:c0:d2:3e:c0:30:e2:50:33:27:41:e5:04:a6:8a: 43:ce:62:fc:86:6b:9b:32:1a:3c:a7:59:fa:bc:e0:eb:09:76: e7:a8:9a:7c:e2:c6:f8:c2:0e:48:9d:5d:34:0c:28:83:01:aa: 13:c0:0e:63:60:b3:ea:e2:d4:ac:e3:06:d9:2c:c5:60:fe:4a: 59:cb:27:c8:99:7b:1b:63:0b:be:e9:15:00:c4:12:e9:53:13: 5e:90:7b:a2:fc:41:f7:26:24:9f:e4:1b:53:a8:d9:c7:94:5d: 00:d5:40:90:d1:2d:03:a7:a5:15:3c:ea:43:d3:11:9e:c5:02: 7b:b2:a0:5d:be:ea:7b:3c:3e:8c:9d:07:0a:9c:95:5a:04:90: d9:9d:91:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSVj9lUbL+KfsvKZCWpx/D7LR7z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk3MDc5NUYzQjI3NzQ4MUVFNzNFQTNBMTZFNEZBMzM5 NjRDOTJEMzAeFw0yNjA2MTMyMTUwMzlaFw0yNjA2MTQyMzAzMzlaMDMxMTAvBgNV BAMTKDcwM0Q2NUREMDc5MTJDRTNCRERDMjIyODA3NkYwQTkyMTNFNTk4NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPSfp4NxyXntc90KEp0XJ+SsJ urj80ruGGP5bKYf7DLRsLr4c3icQBU9Ck8Q3kw/TH2wmfcYqi7D8CWyhCfocbwBL X9YQGWDrV5mUbmlMf8ZgJ/mj84PrmL/OHIpNQrBOcCSoemcIGod3/yZLewJXP/A+ njalkiNuKSplLsSbjuaGvHX8S4to2UWQuMZO9/wT6eAOINAJHWEEe42Jjxle38+B /3ZxrnSrSnlgRxmtJRr9/6Kx3ZAggnaGEeDrRTvjNBpQfUzZ1iTPtW6NKnUb1T/X 4pQMhvVHZxC29G8hIQMhWaZnoT4aTkcFabFYPmcoQTK+UlHyBoT2cYM6vC1PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcD1l3QeRLOO93CIoB28KkhPlmG8wHwYDVR0j BBgwFoAUmXB5XzsndIHuc+o6FuT6M5ZMktMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg5OWExNWItZDVhZS00NWVjLTgwMTItYTZjYWFiM2RkODhiLzAvOTk3MDc5NUYz QjI3NzQ4MUVFNzNFQTNBMTZFNEZBMzM5NjRDOTJEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTcwNzk1RjNCMjc3NDgxRUU3M0VBM0ExNkU0RkEzMzk2NEM5 MkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg5OWExNWItZDVhZS00NWVjLTgw MTItYTZjYWFiM2RkODhiLzAvOTk3MDc5NUYzQjI3NzQ4MUVFNzNFQTNBMTZFNEZB MzM5NjRDOTJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkOHChVDjrjU9ixmxa3oeZGqmEA0A8gJbwf 6Apgp7JNZEZx4ZrM1qtYokm8bbXiGX5XWCJyKqeFwWVV+B8Wn/QZV5WdUfrPNv/3 k217tVUlmNx1Rf5+zEvNVs1ywNOIbotS8M7sS7+U7KkT0VAWIA/A0j7AMOJQMydB 5QSmikPOYvyGa5syGjynWfq84OsJdueomnzixvjCDkidXTQMKIMBqhPADmNgs+ri 1KzjBtksxWD+SlnLJ8iZextjC77pFQDEEulTE16Qe6L8QfcmJJ/kG1Oo2ceUXQDV QJDRLQOnpRU86kPTEZ7FAnuyoF2+6ns8PoydBwqclVoEkNmdkWw= -----END CERTIFICATE-----Generated at Sat Jun 13 23:53:27 2026 by rpki-client