$ rpki-client -vvf rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft File: 9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft (raw, json) Hash identifier: dvWUN3f5cr0D7hSv3KIyYuplf4MuthpexKNc2/qDZYs= Subject key identifier: 33:51:89:27:67:69:38:51:90:6C:BD:DD:7C:0D:5F:BB:E3:4E:D8:D2 Authority key identifier: 93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C Certificate issuer: /CN=9370AF17CF894C561A727E816DE3B11D5D8AAD9C Certificate serial: 2C287B36929DDB281F8E5A4D200DCC848DCA19B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 16:49:54 +0000 Manifest this update: Sat 13 Jun 2026 16:44:54 +0000 Manifest next update: Sun 14 Jun 2026 17:31:54 +0000 Files and hashes: 1: 3130332e3138362e33332e302f32342d3234203d3e20313439363930.roa (hash: 66uNmMCT6fkEdO81aZRWkTBSkfQiCejM3k2UxZQSC6k=) 2: 3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa (hash: rp1e1zzn4/8hrijf1AXdkJbP5FeTjYw1wnI20jUxS/k=) 3: 9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl (hash: 1hQRHjnEB2016qhsw1bjJYsjxYAOBMf9clkkDTyO9p8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:28:7b:36:92:9d:db:28:1f:8e:5a:4d:20:0d:cc:84:8d:ca:19:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9370AF17CF894C561A727E816DE3B11D5D8AAD9C Validity Not Before: Jun 13 16:44:54 2026 GMT Not After : Jun 14 17:31:54 2026 GMT Subject: CN=3351892767693851906CBDDD7C0D5FBBE34ED8D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:20:78:42:38:1b:a7:6c:ed:35:a5:73:a6:3a: 1a:23:b3:10:a5:dc:79:81:f3:13:c5:00:d9:72:31: fe:a8:b3:65:6c:c4:03:49:4c:d3:0a:8f:05:b2:16: 80:72:5c:2c:17:bf:51:b6:80:f9:f8:d7:ad:55:1c: bb:96:ce:03:dc:33:1c:71:c8:56:28:b4:c8:38:6a: 15:58:29:a6:8c:e3:32:97:d1:99:99:05:72:bf:69: 8e:0b:57:1b:32:dd:cd:07:1a:51:75:46:2c:ad:7a: 0e:91:8c:12:4a:27:6d:a9:54:f2:d4:92:da:11:e7: 90:42:53:54:b5:51:40:f7:92:5f:75:a2:fa:94:cc: 3f:a0:3f:46:fd:d1:72:a3:29:fd:23:f5:9f:56:ac: ac:f7:59:81:b8:0b:8e:fc:97:65:be:17:89:ba:51: 4f:3c:a2:54:77:e9:f1:5a:02:3f:18:02:f1:f7:d3: 57:6b:ec:b3:e7:42:d2:f4:08:a0:91:f3:2c:8d:7a: 1e:16:53:16:00:f8:2d:e0:ab:45:1c:b7:8c:03:00: f5:e2:00:e9:c5:50:ad:db:4e:5b:fe:6f:c1:2f:db: 94:4f:b8:1e:30:f4:57:b5:e8:d1:cc:06:ae:61:8d: 97:e4:a5:af:c1:37:f6:57:9b:ee:52:02:a5:ea:e1: 6c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:51:89:27:67:69:38:51:90:6C:BD:DD:7C:0D:5F:BB:E3:4E:D8:D2 X509v3 Authority Key Identifier: keyid:93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f7:a3:a8:67:71:f8:7e:84:fa:16:4a:77:3b:52:07:04:9d: 68:ab:59:68:fb:7e:0a:55:f0:05:43:fe:5e:bd:1b:88:93:a2: a8:e8:cb:ce:51:b0:bb:33:68:45:a5:ea:1b:a5:e5:1f:83:1d: 8f:ec:bf:40:e6:d3:7b:39:19:e0:59:23:8f:19:50:4c:a2:9f: a0:38:a7:fa:ba:78:e8:85:38:52:4c:de:9c:c0:02:b3:71:0d: 30:65:ba:dc:2f:9e:32:fc:4a:79:9a:bf:54:98:97:52:46:09: e0:57:46:a3:d4:05:20:88:09:bd:f7:0f:dd:75:ab:09:4d:c8: 02:3e:42:43:ba:fd:5d:ef:e8:ae:88:dd:c5:e8:36:9d:2e:96: d6:35:26:90:92:97:ea:43:cd:4b:8f:3d:b0:53:94:53:57:3b: b8:75:0a:11:a2:d8:e7:88:31:e5:58:06:30:ab:a0:23:d7:c2: ad:f5:ca:7c:81:0d:ca:89:6d:88:07:1d:89:89:6e:dc:d4:bd: 3d:c7:a6:52:6b:f0:b6:72:f4:c2:18:0e:a7:d3:0c:ba:5c:dc: be:a2:d0:76:4e:58:1b:a2:8f:30:52:80:7a:55:76:9e:83:9f: e7:91:5f:a5:b2:e3:cf:0c:46:58:bd:3f:95:f2:b0:c1:39:af: bb:81:b9:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULCh7NpKd2ygfjlpNIA3MhI3KGbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM3MEFGMTdDRjg5NEM1NjFBNzI3RTgxNkRFM0IxMUQ1 RDhBQUQ5QzAeFw0yNjA2MTMxNjQ0NTRaFw0yNjA2MTQxNzMxNTRaMDMxMTAvBgNV BAMTKDMzNTE4OTI3Njc2OTM4NTE5MDZDQkRERDdDMEQ1RkJCRTM0RUQ4RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuIHhCOBunbO01pXOmOhojsxCl 3HmB8xPFANlyMf6os2VsxANJTNMKjwWyFoByXCwXv1G2gPn4161VHLuWzgPcMxxx yFYotMg4ahVYKaaM4zKX0ZmZBXK/aY4LVxsy3c0HGlF1Riyteg6RjBJKJ22pVPLU ktoR55BCU1S1UUD3kl91ovqUzD+gP0b90XKjKf0j9Z9WrKz3WYG4C478l2W+F4m6 UU88olR36fFaAj8YAvH301dr7LPnQtL0CKCR8yyNeh4WUxYA+C3gq0Uct4wDAPXi AOnFUK3bTlv+b8Ev25RPuB4w9Fe16NHMBq5hjZfkpa/BN/ZXm+5SAqXq4WznAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM1GJJ2dpOFGQbL3dfA1fu+NO2NIwHwYDVR0j BBgwFoAUk3CvF8+JTFYacn6BbeOxHV2KrZwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGNlOWY0M2QtMDhiYS00ZDAyLThmMzgtNzQ3MzJmMTVjZDhjLzAvOTM3MEFGMTdD Rjg5NEM1NjFBNzI3RTgxNkRFM0IxMUQ1RDhBQUQ5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzcwQUYxN0NGODk0QzU2MUE3MjdFODE2REUzQjExRDVEOEFB RDlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGNlOWY0M2QtMDhiYS00ZDAyLThm MzgtNzQ3MzJmMTVjZDhjLzAvOTM3MEFGMTdDRjg5NEM1NjFBNzI3RTgxNkRFM0Ix MUQ1RDhBQUQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAn3o6hncfh+hPoWSnc7UgcEnWirWWj7fgpV 8AVD/l69G4iToqjoy85RsLszaEWl6hul5R+DHY/sv0Dm03s5GeBZI48ZUEyin6A4 p/q6eOiFOFJM3pzAArNxDTBlutwvnjL8Snmav1SYl1JGCeBXRqPUBSCICb33D911 qwlNyAI+QkO6/V3v6K6I3cXoNp0ultY1JpCSl+pDzUuPPbBTlFNXO7h1ChGi2OeI MeVYBjCroCPXwq31ynyBDcqJbYgHHYmJbtzUvT3HplJr8LZy9MIYDqfTDLpc3L6i 0HZOWBuijzBSgHpVdp6Dn+eRX6Wy488MRli9P5XysME5r7uBuX4= -----END CERTIFICATE-----Generated at Sun Jun 14 00:26:36 2026 by rpki-client