$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft File: 9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft (raw, json) Hash identifier: NcTWaCOQLhf/imYSqsXIuUHsquWTjnf4umIRCIqKYFU= Subject key identifier: 08:07:AA:33:E5:D8:A0:7B:BC:8B:1E:4B:18:E8:9A:09:53:52:C2:46 Authority key identifier: 9A:EB:58:DC:D8:2B:E9:C8:49:6A:50:61:29:6B:76:9F:D6:CE:57:23 Certificate issuer: /CN=9AEB58DCD82BE9C8496A5061296B769FD6CE5723 Certificate serial: 60572A312BFE2247C77178D803D592F0640F4FBC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:58:24 +0000 Manifest this update: Tue 16 Jun 2026 19:53:24 +0000 Manifest next update: Wed 17 Jun 2026 20:24:24 +0000 Files and hashes: 1: 9AEB58DCD82BE9C8496A5061296B769FD6CE5723.crl (hash: nQ2NzPcW+d9GV4w9SLDxzyx3gbcrz4C+u67mbAqqfpo=) 2: 3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (hash: R4MBAYAEX9Tv0xootJiGEA1eln9suXnVGRSSaR5WyEA=) 3: 3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (hash: G6mJxfPd30UDcz5ag6UPMmbiQqjncxx0XmGW9whSIV4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.crl rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:24:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:57:2a:31:2b:fe:22:47:c7:71:78:d8:03:d5:92:f0:64:0f:4f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AEB58DCD82BE9C8496A5061296B769FD6CE5723 Validity Not Before: Jun 16 19:53:24 2026 GMT Not After : Jun 17 20:24:24 2026 GMT Subject: CN=0807AA33E5D8A07BBC8B1E4B18E89A095352C246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:27:16:b9:97:45:47:b6:14:a8:86:98:50:9c: 7d:46:40:f8:41:2f:33:e5:86:de:5b:3e:31:07:dc: 12:26:ef:2e:2f:cb:c2:86:24:18:79:a4:47:a0:cf: f1:7c:77:58:26:f4:a2:5c:53:93:0e:99:e9:19:ea: a3:af:20:2e:8c:97:01:72:3a:13:e8:c9:60:58:c6: fe:a3:d5:a3:8d:94:89:e9:05:3c:7f:5d:75:41:c0: d5:b7:e5:66:5a:29:f4:18:41:62:fb:86:46:37:b3: d2:ed:a7:e3:31:45:eb:f1:88:b1:ab:74:97:f3:89: 47:7e:08:62:8e:0f:e8:92:71:ac:4f:6c:30:08:ff: 9d:d2:7f:a2:e0:b6:5e:7b:1b:80:0b:36:c7:df:e1: 01:fe:9b:3c:6e:2b:9a:13:67:8c:9e:92:46:a6:04: 85:b2:cd:dc:2f:f1:32:25:a4:8c:05:d8:8d:6d:ef: d7:5d:f6:80:79:ba:a1:fd:8c:fa:a7:f2:50:37:01: c3:ce:f9:d0:a4:60:6b:a9:f8:d9:9c:04:d3:4e:30: 6e:58:77:b7:1e:b7:eb:0d:e0:c4:6f:65:f2:75:e6: 7e:81:e1:e0:c5:0a:69:68:6e:8b:e3:01:ee:10:f4: 76:71:6d:8e:6a:d0:09:17:14:45:df:4a:97:a2:2e: 96:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:07:AA:33:E5:D8:A0:7B:BC:8B:1E:4B:18:E8:9A:09:53:52:C2:46 X509v3 Authority Key Identifier: keyid:9A:EB:58:DC:D8:2B:E9:C8:49:6A:50:61:29:6B:76:9F:D6:CE:57:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:fc:69:e4:bc:a2:16:bd:b5:1a:d9:8e:71:45:67:6a:82:b3: 64:8a:4d:0e:bd:fa:aa:f9:1c:97:23:ae:ed:ef:43:44:ae:0a: c1:7a:01:98:f1:bc:a9:3c:12:1a:bc:0a:44:90:f2:a0:47:cf: dc:6c:92:30:67:61:34:b7:51:19:f4:4f:01:a6:7c:c7:44:ff: 96:04:37:ba:8d:6f:26:a3:3e:e6:19:d7:2b:f1:55:c1:9c:65: 62:10:90:df:06:7a:34:e0:85:ac:2f:17:e0:32:8b:c6:ed:96: c4:fa:7a:d0:76:d1:14:3d:b7:8b:4a:3d:49:55:64:e9:79:ff: 8e:44:4e:57:ec:48:a9:52:7b:7f:e3:5f:d5:b1:a9:55:d7:bb: 19:3c:27:1d:ee:72:41:fd:1d:c9:bb:1b:d3:e7:ce:f2:6a:cb: 05:38:9b:e8:fe:fe:4c:09:3d:3d:48:d2:4a:85:1a:63:0b:76: 78:e5:8f:c9:95:ee:3c:67:e4:f5:94:8a:0a:db:da:70:ca:a4: 80:0a:bd:78:e5:fd:fe:4a:93:29:89:d8:11:d7:c3:d8:03:2d: 1a:bd:62:fe:a6:94:b0:a6:da:2e:58:dc:2d:3a:d6:12:5d:9b: 9b:fe:8e:f8:b9:b2:5d:ed:b5:68:2d:2f:d2:a6:f1:b6:c9:eb: 0e:1f:fd:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYFcqMSv+IkfHcXjYA9WS8GQPT7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFFQjU4RENEODJCRTlDODQ5NkE1MDYxMjk2Qjc2OUZE NkNFNTcyMzAeFw0yNjA2MTYxOTUzMjRaFw0yNjA2MTcyMDI0MjRaMDMxMTAvBgNV BAMTKDA4MDdBQTMzRTVEOEEwN0JCQzhCMUU0QjE4RTg5QTA5NTM1MkMyNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYJxa5l0VHthSohphQnH1GQPhB LzPlht5bPjEH3BIm7y4vy8KGJBh5pEegz/F8d1gm9KJcU5MOmekZ6qOvIC6MlwFy OhPoyWBYxv6j1aONlInpBTx/XXVBwNW35WZaKfQYQWL7hkY3s9Ltp+MxRevxiLGr dJfziUd+CGKOD+iScaxPbDAI/53Sf6Lgtl57G4ALNsff4QH+mzxuK5oTZ4yekkam BIWyzdwv8TIlpIwF2I1t79dd9oB5uqH9jPqn8lA3AcPO+dCkYGup+NmcBNNOMG5Y d7cet+sN4MRvZfJ15n6B4eDFCmlobovjAe4Q9HZxbY5q0AkXFEXfSpeiLpahAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCAeqM+XYoHu8ix5LGOiaCVNSwkYwHwYDVR0j BBgwFoAUmutY3Ngr6chJalBhKWt2n9bOVyMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjc0MTgwMTMtMTY3OS00OTZiLTgwZjYtMmQwNWNjNWJlNzJmLzAvOUFFQjU4RENE ODJCRTlDODQ5NkE1MDYxMjk2Qjc2OUZENkNFNTcyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QUVCNThEQ0Q4MkJFOUM4NDk2QTUwNjEyOTZCNzY5RkQ2Q0U1 NzIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjc0MTgwMTMtMTY3OS00OTZiLTgw ZjYtMmQwNWNjNWJlNzJmLzAvOUFFQjU4RENEODJCRTlDODQ5NkE1MDYxMjk2Qjc2 OUZENkNFNTcyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADX8aeS8oha9tRrZjnFFZ2qCs2SKTQ69+qr5 HJcjru3vQ0SuCsF6AZjxvKk8Ehq8CkSQ8qBHz9xskjBnYTS3URn0TwGmfMdE/5YE N7qNbyajPuYZ1yvxVcGcZWIQkN8GejTghawvF+Ayi8btlsT6etB20RQ9t4tKPUlV ZOl5/45ETlfsSKlSe3/jX9WxqVXXuxk8Jx3uckH9Hcm7G9PnzvJqywU4m+j+/kwJ PT1I0kqFGmMLdnjlj8mV7jxn5PWUigrb2nDKpIAKvXjl/f5KkymJ2BHXw9gDLRq9 Yv6mlLCm2i5Y3C061hJdm5v+jvi5sl3ttWgtL9Km8bbJ6w4f/XE= -----END CERTIFICATE-----Generated at Wed Jun 17 10:03:01 2026 by rpki-client