$ rpki-client -vvf rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft File: 9A9D4BDD4311519F6A96141040EA1E98B3363388.mft (raw, json) Hash identifier: sWmqIzBkD/ZO4PW/vKHeIsgU6qtRaCfwxeifPD4Wjt8= Subject key identifier: 32:7A:03:9B:E1:29:FE:A7:3A:ED:C0:E0:7C:18:2A:81:25:07:65:0B Authority key identifier: 9A:9D:4B:DD:43:11:51:9F:6A:96:14:10:40:EA:1E:98:B3:36:33:88 Certificate issuer: /CN=9A9D4BDD4311519F6A96141040EA1E98B3363388 Certificate serial: 38DDDB2AA23FD45DA43D4E0E317698F9A3B29855 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 03:38:24 +0000 Manifest this update: Sat 13 Jun 2026 03:33:24 +0000 Manifest next update: Sun 14 Jun 2026 03:45:24 +0000 Files and hashes: 1: 3130332e3133342e36372e302f32342d3234203d3e203435333132.roa (hash: Rjd2vE2zGKftmY05BM4C0TjHIPA+ii1Rf27f+odCFqc=) 2: 9A9D4BDD4311519F6A96141040EA1E98B3363388.crl (hash: 9Pwcz+j/JEvM+ZN20L9GsQP2sgPdkfPLNuBfXSzHmnc=) 3: 3130332e3133342e36362e302f32342d3234203d3e203435333132.roa (hash: DKDIZFIIa7OPxQWCaUBiuhGDeGm6kz/UIChkAD3FgzA=) 4: 3130332e3133342e36362e302f32332d3234203d3e203435333132.roa (hash: jEIwfeqUw3Ty0aBUNoGyFFLgparqhCueZmPPzJmpnn8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.crl rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 03:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:dd:db:2a:a2:3f:d4:5d:a4:3d:4e:0e:31:76:98:f9:a3:b2:98:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A9D4BDD4311519F6A96141040EA1E98B3363388 Validity Not Before: Jun 13 03:33:24 2026 GMT Not After : Jun 14 03:45:24 2026 GMT Subject: CN=327A039BE129FEA73AEDC0E07C182A812507650B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a6:47:39:75:2d:38:88:fb:a2:30:c5:a0:e2: 28:ce:d4:68:4a:68:a3:0b:0c:12:e2:e9:cc:b0:5e: 3c:98:c2:dc:c8:73:67:71:cc:e0:49:5f:e1:3e:e3: 71:02:00:19:46:4d:0b:02:cf:d2:00:4f:01:fb:c0: 79:f6:d6:55:31:56:63:72:d1:7c:86:8f:fe:99:46: cd:fb:e8:d2:53:6a:24:6e:38:32:10:bc:3b:da:f5: 61:d9:b6:28:0d:c2:be:9c:22:5f:1a:c4:22:20:fe: 4f:8c:55:8f:1c:34:df:3c:4e:2c:1c:a0:6b:f2:b3: 01:af:15:8a:32:38:fd:e0:36:8a:dc:c4:34:0b:4a: 02:dc:d0:c8:2e:1f:5c:d9:48:16:96:0b:b1:3f:42: 07:8f:b5:70:35:a9:d9:73:82:e9:46:39:96:e1:5b: e9:60:58:fe:96:18:35:9b:67:29:b6:15:56:51:fe: c5:22:7e:84:1c:50:f6:3f:bd:bb:f1:3f:6e:32:07: 94:c9:b8:02:04:77:c7:74:7b:2b:8e:05:e2:37:8a: 50:20:4b:25:40:64:6d:ae:98:48:de:4b:e2:b4:f4: 28:fe:46:d4:4c:67:20:8d:ba:55:d1:45:45:9e:6b: e4:42:8a:c8:ae:ae:c9:a8:42:ef:04:6c:36:f9:cc: dd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7A:03:9B:E1:29:FE:A7:3A:ED:C0:E0:7C:18:2A:81:25:07:65:0B X509v3 Authority Key Identifier: keyid:9A:9D:4B:DD:43:11:51:9F:6A:96:14:10:40:EA:1E:98:B3:36:33:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:de:c9:81:1e:b9:00:9e:7a:fb:4b:b0:84:b5:63:0b:75:4e: 46:f7:13:f0:fe:a2:34:a3:21:89:70:72:73:d7:b7:7a:79:23: bd:5f:a3:fc:1b:2b:25:7d:11:07:0d:5a:48:f6:5e:2c:0a:54: 03:1d:2a:29:41:79:b8:3e:22:61:ca:00:23:13:65:ff:75:27: 49:21:a7:6b:f5:df:15:f6:4e:7e:f8:7b:b1:1d:98:d7:f1:25: f2:d7:7a:e5:4c:9e:aa:61:ab:84:93:e4:d0:f4:81:80:31:3b: 2b:16:ee:f5:62:49:e0:b4:da:bd:45:49:d1:a7:80:2e:a3:01: 17:0e:58:aa:30:d7:ed:38:e8:43:f9:6a:77:e0:ce:45:d0:6c: 76:8c:86:28:9d:ca:e2:96:e9:53:4e:a5:75:dd:e6:57:51:1c: 78:d1:69:64:94:48:89:93:60:1e:60:d3:5f:c9:7a:0b:4f:89: 13:57:f6:54:09:02:b9:23:cb:bc:a2:c0:cf:8a:f2:2c:e8:b0: b5:16:9e:e3:ee:9b:8a:8d:b0:d4:66:1b:cd:a4:b8:a1:1a:62: 53:30:8a:26:15:19:e4:4b:ca:ee:b7:23:f2:b0:31:e3:a2:45: 21:b8:34:23:10:6d:76:4d:15:04:fa:c6:05:93:dc:b9:59:90: 64:4c:cd:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUON3bKqI/1F2kPU4OMXaY+aOymFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5RDRCREQ0MzExNTE5RjZBOTYxNDEwNDBFQTFFOThC MzM2MzM4ODAeFw0yNjA2MTMwMzMzMjRaFw0yNjA2MTQwMzQ1MjRaMDMxMTAvBgNV BAMTKDMyN0EwMzlCRTEyOUZFQTczQUVEQzBFMDdDMTgyQTgxMjUwNzY1MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBpkc5dS04iPuiMMWg4ijO1GhK aKMLDBLi6cywXjyYwtzIc2dxzOBJX+E+43ECABlGTQsCz9IATwH7wHn21lUxVmNy 0XyGj/6ZRs376NJTaiRuODIQvDva9WHZtigNwr6cIl8axCIg/k+MVY8cNN88Tiwc oGvyswGvFYoyOP3gNorcxDQLSgLc0MguH1zZSBaWC7E/QgePtXA1qdlzgulGOZbh W+lgWP6WGDWbZym2FVZR/sUifoQcUPY/vbvxP24yB5TJuAIEd8d0eyuOBeI3ilAg SyVAZG2umEjeS+K09Cj+RtRMZyCNulXRRUWea+RCisiursmoQu8EbDb5zN3xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMnoDm+Ep/qc67cDgfBgqgSUHZQswHwYDVR0j BBgwFoAUmp1L3UMRUZ9qlhQQQOoemLM2M4gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmY2NmJmYTYtZGM0Yy00MTA4LTkzMmMtMjA0YjYyZTg2MjcyLzAvOUE5RDRCREQ0 MzExNTE5RjZBOTYxNDEwNDBFQTFFOThCMzM2MzM4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTlENEJERDQzMTE1MTlGNkE5NjE0MTA0MEVBMUU5OEIzMzYz Mzg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmY2NmJmYTYtZGM0Yy00MTA4LTkz MmMtMjA0YjYyZTg2MjcyLzAvOUE5RDRCREQ0MzExNTE5RjZBOTYxNDEwNDBFQTFF OThCMzM2MzM4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/eyYEeuQCeevtLsIS1Ywt1Tkb3E/D+ojSj IYlwcnPXt3p5I71fo/wbKyV9EQcNWkj2XiwKVAMdKilBebg+ImHKACMTZf91J0kh p2v13xX2Tn74e7EdmNfxJfLXeuVMnqphq4ST5ND0gYAxOysW7vViSeC02r1FSdGn gC6jARcOWKow1+046EP5anfgzkXQbHaMhiidyuKW6VNOpXXd5ldRHHjRaWSUSImT YB5g01/JegtPiRNX9lQJArkjy7yiwM+K8izosLUWnuPum4qNsNRmG82kuKEaYlMw iiYVGeRLyu63I/KwMeOiRSG4NCMQbXZNFQT6xgWT3LlZkGRMzZ0= -----END CERTIFICATE-----Generated at Sat Jun 13 18:29:45 2026 by rpki-client