$ rpki-client -vvf rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft File: 9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft (raw, json) Hash identifier: DRkRC8O5799ek3dz4evT1z1gcnAOo69AEZuFI03wRuY= Subject key identifier: 1D:5B:69:28:56:95:EF:36:DF:7D:80:2C:0B:B1:8B:E4:14:06:71:EF Authority key identifier: 9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C Certificate issuer: /CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C Certificate serial: 70207F1F43D3F7E1B430AFD7C053819340DB5776 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 01:09:20 +0000 Manifest this update: Wed 17 Jun 2026 01:04:20 +0000 Manifest next update: Thu 18 Jun 2026 04:23:20 +0000 Files and hashes: 1: 3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (hash: /Ar9BLD37pzpWiMramvnEnpVLlVnDEgU4xEdcB/AMOA=) 2: 3130332e32332e39382e302f32332d3233203d3e20313530323435.roa (hash: 7xqE0F9v+EXRL9dCkePN1NHTFDTfqFm2QwKgbcBy4ao=) 3: 323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa (hash: OPLg91e3QDUz0oxlHDtfye2YYgsL8tJKKqHtqB32VO0=) 4: 9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl (hash: +E0jHiE8b8yiD2wuoVrt7nZyjfolxtTOpO86PmIa19g=) 5: 3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (hash: w0+5fhmaBdxaqda6UhvTmcPuYEdSCtqjLZVClfvW/98=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:20:7f:1f:43:d3:f7:e1:b4:30:af:d7:c0:53:81:93:40:db:57:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C Validity Not Before: Jun 17 01:04:20 2026 GMT Not After : Jun 18 04:23:20 2026 GMT Subject: CN=1D5B69285695EF36DF7D802C0BB18BE4140671EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:aa:ee:31:56:d3:7e:ca:77:cb:41:6a:cd:42: e3:88:09:ec:9a:6b:3b:26:6a:15:08:b8:1a:64:a6: 6c:a0:25:92:dd:9c:7d:0d:d9:e7:08:eb:15:98:be: 04:d6:0b:e3:ba:9b:72:29:3f:a1:ef:d1:41:e9:fc: 8e:58:42:44:33:47:35:c5:1a:93:c4:d0:7a:8c:30: b8:b7:34:ff:b5:0e:4d:f9:16:a3:c3:58:05:82:cd: 1b:bf:4a:7a:66:a7:e1:c6:54:f8:17:72:e5:25:2d: db:72:08:77:71:0e:60:22:f5:c3:3f:1c:5a:42:b3: a2:09:fd:29:fc:a3:40:73:b7:e1:cc:04:b5:75:a7: 99:1b:6d:57:a4:a8:dc:e6:5b:b7:f0:e6:59:36:ad: 73:84:b7:61:27:ba:72:0b:28:ab:66:57:85:34:0a: 9d:b8:44:ae:99:6f:29:0b:4a:50:fd:4b:03:f0:b4: 0d:f3:4e:31:d1:90:5f:a4:10:73:d9:72:13:76:34: f5:72:28:92:60:6b:2b:26:ca:8e:c7:39:5a:5d:4e: f2:10:c7:ff:34:78:6d:37:09:4e:29:09:16:17:45: 57:68:88:23:c9:7b:2d:2f:5b:9a:67:8a:2f:f0:45: c0:b8:69:04:53:84:1a:d7:6a:78:f8:df:03:dc:55: d2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5B:69:28:56:95:EF:36:DF:7D:80:2C:0B:B1:8B:E4:14:06:71:EF X509v3 Authority Key Identifier: keyid:9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:14:c1:9a:c6:ad:da:c5:cd:06:b5:47:52:c7:e2:6d:06:4e: 97:da:03:01:c9:e0:b9:80:ff:14:45:9f:b1:61:55:ca:73:ca: 90:0e:a3:6c:37:4a:ee:ac:62:66:c1:b7:96:30:f6:7e:67:72: 55:49:5b:10:ec:ee:97:2e:4b:97:0e:e3:82:71:2b:52:5f:d0: f4:89:41:5e:33:61:3f:d4:67:17:b2:94:78:21:b0:4f:c6:25: 70:fa:79:b5:6d:4c:88:2f:af:92:2b:33:bc:7b:db:d1:6f:84: bf:06:e0:31:72:44:10:27:89:8a:b7:53:a0:00:5d:49:9c:c1: 74:4b:94:8c:88:4a:62:53:b2:52:38:e9:9f:13:36:59:98:bb: db:ac:8c:b4:d4:79:19:10:aa:1e:ca:02:24:fc:42:06:a6:a7: 60:98:59:95:53:b6:fc:9a:dd:26:10:26:17:7a:95:cd:c4:9a: 42:1e:89:ae:bf:76:0e:f4:b6:02:7f:74:ce:d6:3f:60:83:99: 57:98:52:eb:f7:fa:3d:c1:5e:c6:81:64:a8:89:32:12:2e:5a: 4d:e8:f7:b1:fb:f3:5c:32:da:7d:89:71:60:7a:e7:99:58:a2: 9a:1f:56:65:c4:ea:0a:bd:b9:f1:a3:60:39:8d:e6:82:ea:05: b9:f9:de:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcCB/H0PT9+G0MK/XwFOBk0DbV3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURGQzdBNTE0OUQzRkNDMEFDRDlCQkVENTVDNENFOEVB ODJBMDM4QzAeFw0yNjA2MTcwMTA0MjBaFw0yNjA2MTgwNDIzMjBaMDMxMTAvBgNV BAMTKDFENUI2OTI4NTY5NUVGMzZERjdEODAyQzBCQjE4QkU0MTQwNjcxRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfqu4xVtN+ynfLQWrNQuOICeya azsmahUIuBpkpmygJZLdnH0N2ecI6xWYvgTWC+O6m3IpP6Hv0UHp/I5YQkQzRzXF GpPE0HqMMLi3NP+1Dk35FqPDWAWCzRu/Snpmp+HGVPgXcuUlLdtyCHdxDmAi9cM/ HFpCs6IJ/Sn8o0Bzt+HMBLV1p5kbbVekqNzmW7fw5lk2rXOEt2EnunILKKtmV4U0 Cp24RK6ZbykLSlD9SwPwtA3zTjHRkF+kEHPZchN2NPVyKJJgaysmyo7HOVpdTvIQ x/80eG03CU4pCRYXRVdoiCPJey0vW5pnii/wRcC4aQRThBrXanj43wPcVdKrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHVtpKFaV7zbffYAsC7GL5BQGce8wHwYDVR0j BBgwFoAUnfx6UUnT/MCs2bvtVcTOjqgqA4wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg0NmY0MjItYzMwMi00NDYyLWI1ODQtNzAwZTkzNDZjYTA5LzAvOURGQzdBNTE0 OUQzRkNDMEFDRDlCQkVENTVDNENFOEVBODJBMDM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REZDN0E1MTQ5RDNGQ0MwQUNEOUJCRUQ1NUM0Q0U4RUE4MkEw MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg0NmY0MjItYzMwMi00NDYyLWI1 ODQtNzAwZTkzNDZjYTA5LzAvOURGQzdBNTE0OUQzRkNDMEFDRDlCQkVENTVDNENF OEVBODJBMDM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUUwZrGrdrFzQa1R1LH4m0GTpfaAwHJ4LmA /xRFn7FhVcpzypAOo2w3Su6sYmbBt5Yw9n5nclVJWxDs7pcuS5cO44JxK1Jf0PSJ QV4zYT/UZxeylHghsE/GJXD6ebVtTIgvr5IrM7x729FvhL8G4DFyRBAniYq3U6AA XUmcwXRLlIyISmJTslI46Z8TNlmYu9usjLTUeRkQqh7KAiT8Qgamp2CYWZVTtvya 3SYQJhd6lc3EmkIeia6/dg70tgJ/dM7WP2CDmVeYUuv3+j3BXsaBZKiJMhIuWk3o 97H781wy2n2JcWB655lYopofVmXE6gq9ufGjYDmN5oLqBbn53iY= -----END CERTIFICATE-----Generated at Wed Jun 17 10:44:09 2026 by rpki-client