$ rpki-client -vvf rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft File: D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft (raw, json) Hash identifier: GcRu6FwKHCxt+11rwF6w5xbe8T3BOLDmNYILfpuUET0= Subject key identifier: F9:24:B7:3E:E8:F8:C3:77:FB:B0:5E:46:63:E6:70:C6:A4:54:67:3E Authority key identifier: D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6 Certificate issuer: /CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6 Certificate serial: 75EBC8C1863DA9465D79AE132FEC9F44BC005E82 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 18:46:51 +0000 Manifest this update: Tue 16 Jun 2026 18:41:51 +0000 Manifest next update: Wed 17 Jun 2026 19:22:51 +0000 Files and hashes: 1: 3136302e32322e3133372e302f32342d3234203d3e20313532383131.roa (hash: UJBNMpcsHaasyvcJ4Sq3J89ZHMIFKcGiQvcCBcd8DHY=) 2: 3136302e32322e3133362e302f32342d3234203d3e20313532383131.roa (hash: mzkKba2j66n6wraFNQYRS+UC4ztp7C2s0dllCrbur4g=) 3: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: e4bsRLScbecV3EUW42ypNee+dC4atMUS4ULfB5R1TMs=) 4: D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl (hash: w6zGQriNr8/gXk3xHTtX9XNNoORtqB+TsfZ1P/UmmtE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:eb:c8:c1:86:3d:a9:46:5d:79:ae:13:2f:ec:9f:44:bc:00:5e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6 Validity Not Before: Jun 16 18:41:51 2026 GMT Not After : Jun 17 19:22:51 2026 GMT Subject: CN=F924B73EE8F8C377FBB05E4663E670C6A454673E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:88:b3:bd:59:f5:ac:c2:33:85:8c:63:82:61: 0e:0d:5e:26:06:00:71:9a:28:d3:64:10:88:f2:11: 7d:59:6d:39:f9:16:22:08:43:b9:8f:6e:55:32:a6: 1d:e8:15:95:ba:8e:12:db:4d:f8:49:fb:50:0f:9e: 0f:6a:03:d9:0b:db:a7:86:07:a2:7e:74:b6:11:4e: 17:09:98:ec:65:d2:cc:f7:75:33:4d:7a:0c:43:77: f6:69:f4:4e:c0:82:bd:23:f4:f6:35:59:a4:c7:f6: 0e:1a:79:14:59:73:08:78:0d:4b:60:97:1a:94:4a: 36:54:36:37:eb:50:62:c8:c3:4a:bd:75:19:c6:13: 40:1e:6f:43:85:40:57:25:44:12:fa:b7:27:bb:47: 9a:cd:00:15:7c:5e:1e:ea:c8:36:61:13:83:99:bc: d0:b3:15:fd:20:12:e8:bd:37:24:01:5b:f6:e0:11: 3b:b3:cf:a4:f1:30:5c:20:14:20:f2:73:1e:8d:72: 6f:ee:6f:67:10:0d:60:3f:88:2f:91:d5:50:e3:ae: 79:c5:48:72:05:86:89:47:dc:5e:93:16:50:d8:1b: a9:79:c1:83:6a:13:ce:34:2b:46:af:1a:7b:d2:db: b5:45:12:4b:72:e6:b2:d5:56:15:1a:09:4e:1e:1a: 18:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:24:B7:3E:E8:F8:C3:77:FB:B0:5E:46:63:E6:70:C6:A4:54:67:3E X509v3 Authority Key Identifier: keyid:D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:0d:ba:18:2f:4e:ba:6a:45:89:3c:98:0c:25:d0:6a:25:6c: 07:cc:c0:02:8d:92:ed:39:73:5b:19:2a:6d:2a:27:ed:c2:f0: 94:f0:02:77:6d:ac:12:83:79:de:44:c7:9c:27:68:1e:47:2a: cd:97:8b:20:7f:25:fa:1f:6a:01:11:44:7a:d2:a1:bb:ca:0e: 7f:8f:18:9f:3d:9e:07:86:0a:34:3a:e0:c8:78:8a:c0:00:d1: bc:12:b7:28:25:16:b2:d7:0b:6d:71:54:01:e0:32:df:2f:1b: 63:1c:e7:20:cb:8f:bd:b3:b2:9b:e1:29:7b:53:3d:6c:cf:09: cd:1f:c6:f3:81:48:f1:b7:90:fc:c3:b3:ca:f6:f0:20:cd:48: e8:98:3f:f4:0a:85:a3:15:2b:02:50:3d:9b:a3:04:04:f1:d6: 04:10:04:2d:c2:6c:d2:06:4a:23:8d:dc:43:23:b0:b7:ba:f3: f7:d6:ad:9f:53:0e:a3:10:99:4e:9b:49:2a:81:6f:00:da:dc: be:9d:66:6f:e6:52:93:f5:b0:97:82:e7:3f:ed:1e:d2:4d:de: f7:12:69:51:95:0e:3e:ae:69:2d:58:94:8e:fe:9f:1b:02:88: 7e:e0:89:32:aa:34:ee:2c:60:48:97:b3:c0:5f:5f:e9:51:1b: 13:4c:ba:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdevIwYY9qUZdea4TL+yfRLwAXoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDNEI2QkU4NEM5MEJDNDA2QUI2NzFFNUY3NUE4Qzg2 NTYyOTRGNjAeFw0yNjA2MTYxODQxNTFaFw0yNjA2MTcxOTIyNTFaMDMxMTAvBgNV BAMTKEY5MjRCNzNFRThGOEMzNzdGQkIwNUU0NjYzRTY3MEM2QTQ1NDY3M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRiLO9WfWswjOFjGOCYQ4NXiYG AHGaKNNkEIjyEX1ZbTn5FiIIQ7mPblUyph3oFZW6jhLbTfhJ+1APng9qA9kL26eG B6J+dLYRThcJmOxl0sz3dTNNegxDd/Zp9E7Agr0j9PY1WaTH9g4aeRRZcwh4DUtg lxqUSjZUNjfrUGLIw0q9dRnGE0Aeb0OFQFclRBL6tye7R5rNABV8Xh7qyDZhE4OZ vNCzFf0gEui9NyQBW/bgETuzz6TxMFwgFCDycx6Ncm/ub2cQDWA/iC+R1VDjrnnF SHIFholH3F6TFlDYG6l5wYNqE840K0avGnvS27VFEkty5rLVVhUaCU4eGhgjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+SS3Puj4w3f7sF5GY+ZwxqRUZz4wHwYDVR0j BBgwFoAU2cS2voTJC8QGq2ceX3WoyGVilPYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE5NWI0YjQtYmM4YS00Y2U1LWI1NTAtOWFhN2IzNmVlMWZhLzAvRDlDNEI2QkU4 NEM5MEJDNDA2QUI2NzFFNUY3NUE4Qzg2NTYyOTRGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EOUM0QjZCRTg0QzkwQkM0MDZBQjY3MUU1Rjc1QThDODY1NjI5 NEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvRDlDNEI2QkU4NEM5MEJDNDA2QUI2NzFFNUY3NUE4 Qzg2NTYyOTRGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALkNuhgvTrpqRYk8mAwl0GolbAfMwAKNku05 c1sZKm0qJ+3C8JTwAndtrBKDed5Ex5wnaB5HKs2XiyB/JfofagERRHrSobvKDn+P GJ89ngeGCjQ64Mh4isAA0bwStyglFrLXC21xVAHgMt8vG2Mc5yDLj72zspvhKXtT PWzPCc0fxvOBSPG3kPzDs8r28CDNSOiYP/QKhaMVKwJQPZujBATx1gQQBC3CbNIG SiON3EMjsLe68/fWrZ9TDqMQmU6bSSqBbwDa3L6dZm/mUpP1sJeC5z/tHtJN3vcS aVGVDj6uaS1YlI7+nxsCiH7giTKqNO4sYEiXs8BfX+lRGxNMulw= -----END CERTIFICATE-----Generated at Wed Jun 17 11:02:41 2026 by rpki-client