$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft File: 9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft (raw, json) Hash identifier: BjVM6mRx3rBM3olSqw5SIrv8nA9lIetlm9siQ0i5uZA= Subject key identifier: AC:B5:1B:4A:09:0C:E5:E4:F2:65:D3:A8:B5:D6:1E:C4:DC:6B:45:D8 Authority key identifier: 9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9 Certificate issuer: /CN=9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9 Certificate serial: 28407E7C7B445F3632FFC6074E3B3FDBB5036369 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 07:06:26 +0000 Manifest this update: Wed 17 Jun 2026 07:01:26 +0000 Manifest next update: Thu 18 Jun 2026 07:14:26 +0000 Files and hashes: 1: 3136302e32322e3230382e302f32332d3234203d3e20313532383239.roa (hash: geTlR2xlRfEtN72u5a2Y4lLKK2jTFc1FYHlhZP1ErB8=) 2: 9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl (hash: SqolWg2939DE+JSMHcCsCmv76fxudHBrLnnzqlAaX/8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:40:7e:7c:7b:44:5f:36:32:ff:c6:07:4e:3b:3f:db:b5:03:63:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9 Validity Not Before: Jun 17 07:01:26 2026 GMT Not After : Jun 18 07:14:26 2026 GMT Subject: CN=ACB51B4A090CE5E4F265D3A8B5D61EC4DC6B45D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:99:ec:33:30:4d:22:2b:bb:94:23:98:a7:94: 82:c4:41:d7:97:c0:4d:31:32:61:e2:71:86:53:41: cb:1b:28:c1:4f:c9:06:5b:25:d9:d2:df:a3:e5:4c: 54:78:10:32:29:f5:96:28:ea:63:54:1f:e3:e1:0b: 4d:ee:ad:2e:bb:7a:57:fc:c4:6d:88:f9:8f:81:a5: 37:3a:a9:eb:58:15:a8:25:2c:96:06:89:54:e2:a5: 1f:7e:89:24:41:b2:f0:24:f8:81:86:71:c8:43:3b: 5b:02:16:71:ce:3d:ac:cc:bd:26:e8:94:e1:dd:77: 8e:d0:41:49:3b:e2:b9:0e:49:b5:46:55:80:01:b1: af:65:e4:85:ab:35:f1:5a:46:b8:09:25:e0:cb:c0: b4:f0:48:07:04:e2:33:03:50:37:2d:fb:6f:db:54: bb:fd:90:42:f1:ef:c3:6d:6f:d5:e3:03:6e:f7:b6: 22:80:ba:af:fc:3a:fe:2f:3f:13:fb:ff:8d:40:d4: 7e:9b:ee:8b:4c:67:19:a0:73:ae:2f:20:be:5d:06: 96:17:0a:57:e2:53:53:42:77:36:cc:bf:7f:90:5c: e3:33:6f:54:55:0d:27:bc:1e:d5:e1:13:17:dd:3a: 03:19:af:aa:c3:1f:0f:62:2f:e9:44:93:23:0d:76: 79:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B5:1B:4A:09:0C:E5:E4:F2:65:D3:A8:B5:D6:1E:C4:DC:6B:45:D8 X509v3 Authority Key Identifier: keyid:9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:ac:52:80:21:0e:36:f4:e9:7d:60:a1:b1:d5:57:c8:ab:68: 41:e5:7b:f3:d4:c2:9c:21:41:47:9b:d8:25:81:54:c0:92:79: 8b:2a:3f:70:bd:35:f6:51:01:d4:a8:a1:bd:ab:bd:a8:b1:09: fb:c9:3d:15:fd:74:b8:09:da:41:2c:97:bf:41:ef:83:83:cb: 8c:95:cf:88:37:e7:e6:56:b0:16:2c:71:a9:01:d7:3d:0a:0f: 14:64:d7:9d:d0:0d:a5:ae:cb:b9:90:a1:13:0d:9e:5f:8f:a3: c8:30:1c:2d:50:c7:c3:ab:ac:75:ab:44:b3:61:a9:65:8e:56: 66:10:f5:fa:03:84:f8:18:ec:12:75:64:c9:fb:ce:1d:73:c4: c0:6b:0f:95:37:02:ee:f9:d3:f8:cd:eb:f8:1f:49:ef:1b:13: e7:9e:02:92:23:ba:8d:2a:fb:df:bd:a7:c2:6f:b6:4e:16:8a: 06:78:73:a6:26:81:bb:a5:2f:40:5b:18:69:6f:34:70:55:92: e5:6a:a2:78:4a:c1:c5:bb:02:25:fa:77:ae:24:60:44:65:9e: 91:33:7c:9e:1d:86:0a:9a:e7:cd:84:38:8f:fb:b3:79:61:bb: 49:b3:11:3b:b7:b5:15:00:fa:97:cf:f0:d8:e8:71:67:09:c9: 29:14:a9:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKEB+fHtEXzYy/8YHTjs/27UDY2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMyM0ZCM0U4Qjg1OTYxRkQ0OEJDNzgwREFGNDRDRUZC NjQ3QzZFOTAeFw0yNjA2MTcwNzAxMjZaFw0yNjA2MTgwNzE0MjZaMDMxMTAvBgNV BAMTKEFDQjUxQjRBMDkwQ0U1RTRGMjY1RDNBOEI1RDYxRUM0REM2QjQ1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjmewzME0iK7uUI5inlILEQdeX wE0xMmHicYZTQcsbKMFPyQZbJdnS36PlTFR4EDIp9ZYo6mNUH+PhC03urS67elf8 xG2I+Y+BpTc6qetYFaglLJYGiVTipR9+iSRBsvAk+IGGcchDO1sCFnHOPazMvSbo lOHdd47QQUk74rkOSbVGVYABsa9l5IWrNfFaRrgJJeDLwLTwSAcE4jMDUDct+2/b VLv9kELx78Ntb9XjA273tiKAuq/8Ov4vPxP7/41A1H6b7otMZxmgc64vIL5dBpYX ClfiU1NCdzbMv3+QXOMzb1RVDSe8HtXhExfdOgMZr6rDHw9iL+lEkyMNdnnPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrLUbSgkM5eTyZdOotdYexNxrRdgwHwYDVR0j BBgwFoAUnCP7PouFlh/Ui8eA2vRM77ZHxukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNjYjUwYjAtNDNjYy00OGQwLTkxZjQtMDViYmRlN2FjMWQwLzAvOUMyM0ZCM0U4 Qjg1OTYxRkQ0OEJDNzgwREFGNDRDRUZCNjQ3QzZFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85QzIzRkIzRThCODU5NjFGRDQ4QkM3ODBEQUY0NENFRkI2NDdD NkU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvOUMyM0ZCM0U4Qjg1OTYxRkQ0OEJDNzgwREFGNDRD RUZCNjQ3QzZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANCsUoAhDjb06X1gobHVV8iraEHle/PUwpwh QUeb2CWBVMCSeYsqP3C9NfZRAdSoob2rvaixCfvJPRX9dLgJ2kEsl79B74ODy4yV z4g35+ZWsBYscakB1z0KDxRk153QDaWuy7mQoRMNnl+Po8gwHC1Qx8OrrHWrRLNh qWWOVmYQ9foDhPgY7BJ1ZMn7zh1zxMBrD5U3Au750/jN6/gfSe8bE+eeApIjuo0q +9+9p8Jvtk4WigZ4c6YmgbulL0BbGGlvNHBVkuVqonhKwcW7AiX6d64kYERlnpEz fJ4dhgqa582EOI/7s3lhu0mzETu3tRUA+pfP8NjocWcJySkUqaI= -----END CERTIFICATE-----Generated at Wed Jun 17 10:53:09 2026 by rpki-client