$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft File: B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft (raw, json) Hash identifier: KbSGRrDOTewHKqnl0FdHOR1GJwXCF3CM4UryNdSG/O4= Subject key identifier: 53:C0:35:B9:55:07:89:5A:50:74:1C:98:50:11:9C:D6:40:F9:7A:10 Authority key identifier: B9:A5:C7:ED:38:66:D3:CA:D2:44:DA:B3:64:D5:DE:AB:01:B4:1B:27 Certificate issuer: /CN=B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27 Certificate serial: 295252A130A0756D2A0C1510494C79E498BBA7DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:02:07 +0000 Manifest this update: Tue 16 Jun 2026 18:57:07 +0000 Manifest next update: Wed 17 Jun 2026 22:09:07 +0000 Files and hashes: 1: B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl (hash: O9+hN9Oim3jXscuxMUZ4GQNpojKRMkaJgrYmeHicDTY=) 2: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: 0dA2mfgVhJxUx/fjGY3+Dm6GSQVEEUHFqlvFJHB2B4M=) 3: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: 4Y1mZB2qJy+rnsbtqPt0mJQCafCDh7l369bEnaFDUds=) 4: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: fnDhoiL+V7XHrTgcb34geX86ATfCep/ePS+vjKoYts4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:52:52:a1:30:a0:75:6d:2a:0c:15:10:49:4c:79:e4:98:bb:a7:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27 Validity Not Before: Jun 16 18:57:07 2026 GMT Not After : Jun 17 22:09:07 2026 GMT Subject: CN=53C035B95507895A50741C9850119CD640F97A10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4b:18:43:27:4e:03:e1:86:c7:3e:c7:bf:30: f0:b8:77:2d:bd:b6:f6:c1:c5:f0:4c:83:50:b2:b4: 35:57:c2:72:c5:57:99:3c:ff:d5:06:0a:06:59:ac: 33:72:9e:17:1b:64:36:c1:35:80:fe:49:aa:a1:04: ec:b7:59:f2:73:ed:64:71:91:6f:0d:6c:1c:eb:34: 92:5b:be:d5:f0:42:12:07:57:c2:9d:f9:47:c1:55: 92:e5:c9:37:25:d2:85:c2:ea:34:de:c7:65:fd:63: ed:3e:d4:0d:a0:63:45:bb:dd:c3:a8:4f:8e:9d:28: eb:bc:a2:73:67:98:63:64:e0:4a:62:03:92:80:a9: 0b:26:95:22:07:7b:ca:da:ee:46:91:3f:7a:ec:db: a6:6a:c0:82:42:d8:7e:bc:f0:3e:ed:b4:06:72:58: e5:85:9d:8f:3d:57:92:62:dd:fb:f0:b1:d1:d2:ec: 6d:29:ea:7d:a4:49:a3:ef:ea:1e:37:43:96:5d:c3: 90:a2:50:40:a7:1d:0c:48:3a:6b:15:05:5c:e2:46: ed:39:67:be:38:1e:22:a7:f6:9b:c6:13:e9:c0:f5: 00:c9:4a:85:59:0f:64:e6:3c:51:4e:dc:04:59:2c: 53:96:53:b5:0c:bf:f2:71:9b:30:21:62:5d:43:ee: 1f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C0:35:B9:55:07:89:5A:50:74:1C:98:50:11:9C:D6:40:F9:7A:10 X509v3 Authority Key Identifier: keyid:B9:A5:C7:ED:38:66:D3:CA:D2:44:DA:B3:64:D5:DE:AB:01:B4:1B:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d8:38:11:35:a5:27:b7:41:96:3b:a6:2b:0c:93:a9:ed:b6: e1:37:54:8a:47:2d:e6:18:2a:92:93:03:c8:be:76:33:47:dd: 6d:f4:1c:b1:98:19:42:3c:db:c9:3d:38:cd:89:b8:99:88:06: 43:63:14:dc:00:c8:aa:75:3f:70:e9:52:55:86:a9:50:34:ea: 9a:be:d9:8f:1f:b5:14:3e:d3:53:17:b6:dc:1c:b2:14:93:6b: 7a:28:c7:ed:e3:fd:df:45:32:69:7c:9d:c7:c9:a0:61:17:d1: ba:76:7d:69:35:d6:89:9b:2f:14:7d:46:19:d0:8d:26:4b:46: 5d:0d:ab:13:09:a1:db:b3:fa:61:fb:34:af:c1:0a:75:a6:5e: 2a:21:26:16:f0:fa:12:6c:58:f3:7a:bc:87:7f:df:fe:0e:ec: 65:5f:b0:8b:e6:6f:3d:a8:7c:58:0f:65:1a:bb:b2:a0:d7:45: a8:e8:22:02:47:5e:26:5e:e0:c5:3a:e7:21:06:b8:e6:11:ad: 0f:2b:15:84:f0:c0:69:91:2d:ca:01:d7:3f:f3:ac:f2:3d:57: 26:4d:85:ba:09:6c:a5:30:60:72:8f:31:44:84:55:b2:b8:57: 9f:2b:89:95:ca:8d:7c:6e:94:47:00:cc:c4:89:46:66:21:63: cf:4f:22:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKVJSoTCgdW0qDBUQSUx55Ji7p9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNUM3RUQzODY2RDNDQUQyNDREQUIzNjRENURFQUIw MUI0MUIyNzAeFw0yNjA2MTYxODU3MDdaFw0yNjA2MTcyMjA5MDdaMDMxMTAvBgNV BAMTKDUzQzAzNUI5NTUwNzg5NUE1MDc0MUM5ODUwMTE5Q0Q2NDBGOTdBMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPSxhDJ04D4YbHPse/MPC4dy29 tvbBxfBMg1CytDVXwnLFV5k8/9UGCgZZrDNynhcbZDbBNYD+SaqhBOy3WfJz7WRx kW8NbBzrNJJbvtXwQhIHV8Kd+UfBVZLlyTcl0oXC6jTex2X9Y+0+1A2gY0W73cOo T46dKOu8onNnmGNk4EpiA5KAqQsmlSIHe8ra7kaRP3rs26ZqwIJC2H688D7ttAZy WOWFnY89V5Ji3fvwsdHS7G0p6n2kSaPv6h43Q5Zdw5CiUECnHQxIOmsVBVziRu05 Z744HiKn9pvGE+nA9QDJSoVZD2TmPFFO3ARZLFOWU7UMv/JxmzAhYl1D7h81AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU8A1uVUHiVpQdByYUBGc1kD5ehAwHwYDVR0j BBgwFoAUuaXH7Thm08rSRNqzZNXeqwG0GycwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkxMDY4MjctODY2ZS00YWMzLThmNzktYTZlMzIwYjIwZGU3LzAvQjlBNUM3RUQz ODY2RDNDQUQyNDREQUIzNjRENURFQUIwMUI0MUIyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUE1QzdFRDM4NjZEM0NBRDI0NERBQjM2NEQ1REVBQjAxQjQx QjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkxMDY4MjctODY2ZS00YWMzLThm NzktYTZlMzIwYjIwZGU3LzAvQjlBNUM3RUQzODY2RDNDQUQyNDREQUIzNjRENURF QUIwMUI0MUIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzYOBE1pSe3QZY7pisMk6nttuE3VIpHLeYY KpKTA8i+djNH3W30HLGYGUI828k9OM2JuJmIBkNjFNwAyKp1P3DpUlWGqVA06pq+ 2Y8ftRQ+01MXttwcshSTa3oox+3j/d9FMml8ncfJoGEX0bp2fWk11ombLxR9RhnQ jSZLRl0NqxMJoduz+mH7NK/BCnWmXiohJhbw+hJsWPN6vId/3/4O7GVfsIvmbz2o fFgPZRq7sqDXRajoIgJHXiZe4MU65yEGuOYRrQ8rFYTwwGmRLcoB1z/zrPI9VyZN hboJbKUwYHKPMUSEVbK4V58riZXKjXxulEcAzMSJRmYhY89PIh0= -----END CERTIFICATE-----Generated at Wed Jun 17 12:40:46 2026 by rpki-client