$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft File: 9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft (raw, json) Hash identifier: 8mRd5XsJU39Kb3n3jFKl4VSUOJUR4cUgaL2ArtrQcEs= Subject key identifier: E9:2B:6B:66:83:BA:F4:22:15:07:4F:56:57:1C:61:39:6E:0D:D0:06 Authority key identifier: 9D:68:AC:E3:A8:F4:CD:6B:9B:D7:AB:C6:95:E6:A2:16:24:B1:C5:6C Certificate issuer: /CN=9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C Certificate serial: 4FA6D80E781B7B7D5A436AF526144FE52F88E75B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 20:54:29 +0000 Manifest this update: Tue 16 Jun 2026 20:49:29 +0000 Manifest next update: Wed 17 Jun 2026 22:48:29 +0000 Files and hashes: 1: 3130332e3136302e3133362e302f32342d3234203d3e20313431353838.roa (hash: xiHN/v3vXzzSYuBqvcK2Zxp9gL/Vai3nTROredoBVU8=) 2: 9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.crl (hash: NRD0VUsDsNd8fBl/sK7BlwOoORK4+w/5J+eoh4Ta7aY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.crl rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a6:d8:0e:78:1b:7b:7d:5a:43:6a:f5:26:14:4f:e5:2f:88:e7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C Validity Not Before: Jun 16 20:49:29 2026 GMT Not After : Jun 17 22:48:29 2026 GMT Subject: CN=E92B6B6683BAF42215074F56571C61396E0DD006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fa:3d:25:54:2b:59:25:69:ba:fe:fe:ac:d2: c9:74:0a:d8:c4:aa:30:b2:69:90:a0:04:d9:9b:3a: 94:8b:ae:59:96:73:4e:b2:47:2c:63:19:b0:b4:67: 6e:bd:a4:27:4b:57:ae:4f:8f:33:dc:39:c1:87:42: 95:a1:fa:22:e1:46:c3:6c:c6:b9:b1:a0:7f:b9:d2: f3:ff:bf:d4:46:9c:75:87:ae:c5:8c:05:e8:b0:83: 73:9d:93:45:3b:0c:05:28:18:2b:11:17:f6:7e:40: 54:d7:c2:21:b3:dc:10:a3:d0:41:8c:04:61:df:e2: 01:46:d3:bb:b0:e4:36:9d:d0:c2:49:e1:2c:67:40: 6a:72:16:f1:45:fd:5e:2b:ba:d1:df:02:40:d7:c9: 9a:98:89:43:98:13:d5:e5:b6:06:72:3b:c4:b7:ca: 6a:59:a6:9b:4c:9e:09:88:13:30:1c:75:3c:7a:ee: 38:9a:76:34:29:b6:d5:a6:ad:6c:97:2d:84:7f:65: dd:ef:14:e4:d6:9f:c2:66:a7:62:d5:76:7d:df:9c: 63:b6:7b:59:29:ec:cf:ca:a1:a6:a7:3e:7f:1e:f8: c7:ab:59:88:2c:0b:e6:1d:26:50:ba:7b:37:d0:ec: c9:49:0a:49:c5:99:c0:2e:83:6b:1c:f0:51:72:fe: da:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2B:6B:66:83:BA:F4:22:15:07:4F:56:57:1C:61:39:6E:0D:D0:06 X509v3 Authority Key Identifier: keyid:9D:68:AC:E3:A8:F4:CD:6B:9B:D7:AB:C6:95:E6:A2:16:24:B1:C5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:3b:fd:41:b0:3b:13:75:c8:cf:db:15:23:61:c4:37:05:67: 3d:bf:90:ad:04:10:5c:c1:1a:32:0d:0e:9e:7a:78:6c:c3:c4: 7e:4b:83:72:8e:2a:00:18:5f:fb:d9:3e:11:34:73:f6:e7:a1: e4:e1:c5:a3:d1:6b:a2:86:6e:c0:52:93:6a:8c:6f:e5:46:0c: bd:7c:6b:c8:56:cb:07:ac:6d:3d:84:b4:1e:72:b4:2d:47:8d: a5:da:dd:48:e8:ba:f9:8b:85:e5:8d:25:a0:47:4e:9d:11:aa: 1b:00:97:dc:6d:d4:0c:8c:7a:5c:95:bf:e3:f2:b6:b1:90:9b: 53:3f:ea:60:52:33:7f:89:b8:67:1d:92:19:da:1a:39:04:8b: 77:ed:ac:44:2a:14:73:2b:04:95:44:36:89:dc:be:df:96:8a: 80:79:65:18:9a:fe:18:46:f4:2e:48:c1:3c:7a:65:8f:43:8f: 0d:45:c4:71:95:52:7f:f2:14:da:bc:43:95:78:3b:91:68:e8: 70:5b:99:17:67:40:e6:0a:93:70:79:0f:1c:fe:0a:c2:2f:d2: 16:5e:5f:3f:8f:27:7a:e5:fb:43:0a:50:5b:99:ea:ac:c1:c8: 48:c1:4f:b5:f7:20:61:8e:8a:e7:b1:d2:b6:e9:af:c4:53:94: bb:1b:26:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6bYDngbe31aQ2r1JhRP5S+I51swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ2OEFDRTNBOEY0Q0Q2QjlCRDdBQkM2OTVFNkEyMTYy NEIxQzU2QzAeFw0yNjA2MTYyMDQ5MjlaFw0yNjA2MTcyMjQ4MjlaMDMxMTAvBgNV BAMTKEU5MkI2QjY2ODNCQUY0MjIxNTA3NEY1NjU3MUM2MTM5NkUwREQwMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd+j0lVCtZJWm6/v6s0sl0CtjE qjCyaZCgBNmbOpSLrlmWc06yRyxjGbC0Z269pCdLV65PjzPcOcGHQpWh+iLhRsNs xrmxoH+50vP/v9RGnHWHrsWMBeiwg3Odk0U7DAUoGCsRF/Z+QFTXwiGz3BCj0EGM BGHf4gFG07uw5Dad0MJJ4SxnQGpyFvFF/V4rutHfAkDXyZqYiUOYE9XltgZyO8S3 ympZpptMngmIEzAcdTx67jiadjQpttWmrWyXLYR/Zd3vFOTWn8Jmp2LVdn3fnGO2 e1kp7M/KoaanPn8e+MerWYgsC+YdJlC6ezfQ7MlJCknFmcAug2sc8FFy/toTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6StrZoO69CIVB09WVxxhOW4N0AYwHwYDVR0j BBgwFoAUnWis46j0zWub16vGleaiFiSxxWwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFlZWQwOWMtNjA2OC00MDdhLWIwYTYtNTliN2QwYjg3ODU1LzAvOUQ2OEFDRTNB OEY0Q0Q2QjlCRDdBQkM2OTVFNkEyMTYyNEIxQzU2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDY4QUNFM0E4RjRDRDZCOUJEN0FCQzY5NUU2QTIxNjI0QjFD NTZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFlZWQwOWMtNjA2OC00MDdhLWIw YTYtNTliN2QwYjg3ODU1LzAvOUQ2OEFDRTNBOEY0Q0Q2QjlCRDdBQkM2OTVFNkEy MTYyNEIxQzU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQ7/UGwOxN1yM/bFSNhxDcFZz2/kK0EEFzB GjINDp56eGzDxH5Lg3KOKgAYX/vZPhE0c/bnoeThxaPRa6KGbsBSk2qMb+VGDL18 a8hWywesbT2EtB5ytC1HjaXa3UjouvmLheWNJaBHTp0RqhsAl9xt1AyMelyVv+Py trGQm1M/6mBSM3+JuGcdkhnaGjkEi3ftrEQqFHMrBJVENoncvt+WioB5ZRia/hhG 9C5IwTx6ZY9Djw1FxHGVUn/yFNq8Q5V4O5Fo6HBbmRdnQOYKk3B5Dxz+CsIv0hZe Xz+PJ3rl+0MKUFuZ6qzByEjBT7X3IGGOiuex0rbpr8RTlLsbJhM= -----END CERTIFICATE-----Generated at Wed Jun 17 10:03:02 2026 by rpki-client