$ rpki-client -vvf rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft File: C09B0826A8950269AAA9592F3B0B65A3232333C5.mft (raw, json) Hash identifier: qbUDV3DCmb0sQx/yueXUOAjmatwRIYwjZLKc9f3nHuQ= Subject key identifier: 2B:4C:3E:65:0E:A1:32:49:4A:25:45:13:DA:5D:3B:41:06:2E:A9:4A Authority key identifier: C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 Certificate issuer: /CN=C09B0826A8950269AAA9592F3B0B65A3232333C5 Certificate serial: 23354F7CB678481361D51F336F6BA2851502794F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 05:49:52 +0000 Manifest this update: Wed 17 Jun 2026 05:44:52 +0000 Manifest next update: Thu 18 Jun 2026 08:10:52 +0000 Files and hashes: 1: C09B0826A8950269AAA9592F3B0B65A3232333C5.crl (hash: l2P0rx9Oc5kxeGZz7CgUg2bxb+kiiqkpB6fQgsWK3/M=) 2: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: /OlYgkp/JUv7mWTKG1jRIEEEMwF4cVrVtCICjMapFuQ=) 3: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: u7ID+/zmEfkiBk9A2DOk1aoUvKs6xhyBLUvlSwziv+4=) 4: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: qD0/6TXIm8wKpNkYb5k3M2VEq1Hkh2ZvC2u1LPq71Ck=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:35:4f:7c:b6:78:48:13:61:d5:1f:33:6f:6b:a2:85:15:02:79:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C09B0826A8950269AAA9592F3B0B65A3232333C5 Validity Not Before: Jun 17 05:44:52 2026 GMT Not After : Jun 18 08:10:52 2026 GMT Subject: CN=2B4C3E650EA132494A254513DA5D3B41062EA94A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f5:20:4a:65:60:f8:bb:23:5f:2e:01:3f:e1: 76:e3:33:1c:77:d9:ef:36:b8:a4:32:2c:ed:7e:e4: 28:4b:9f:03:5b:ed:3c:20:42:d2:85:14:08:a6:c8: ce:0f:51:96:44:6d:6b:38:70:49:27:8e:9f:d3:8c: 92:02:ed:bc:09:8b:70:14:5c:e3:a7:18:14:c6:cb: af:e1:80:2e:14:c8:88:74:df:3c:b6:64:41:1c:ab: 61:31:d1:6b:f3:b4:2a:a5:58:9e:d4:13:ff:5a:d3: 24:69:60:28:56:f3:5d:16:ef:35:cc:59:7b:36:2d: 47:61:4b:27:7c:70:0e:56:e3:c5:9f:9f:04:45:46: 7d:84:9c:60:66:0c:2d:2e:30:0c:80:b5:36:f8:74: cf:f3:52:6c:c9:88:c8:05:a3:5f:2e:1c:10:35:71: f9:9d:da:c1:61:39:c2:6f:53:8a:49:65:c2:a2:cc: 1b:ed:14:51:6d:d4:66:d1:44:21:ca:6c:42:3f:74: e2:3c:4d:fd:59:c0:ef:01:03:99:58:03:81:1e:f4: 6c:5d:89:8d:36:9d:bf:59:e6:2b:b7:a9:41:34:7f: ed:48:a2:21:aa:8f:dd:d9:cd:e1:a4:64:9b:a2:48: 0a:8c:4e:0e:16:8c:f3:ab:d7:92:97:10:e6:a3:75: 88:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4C:3E:65:0E:A1:32:49:4A:25:45:13:DA:5D:3B:41:06:2E:A9:4A X509v3 Authority Key Identifier: keyid:C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:d2:03:aa:cb:46:c7:0f:ca:75:a6:2a:bd:47:8b:e0:11:b9: 7e:64:49:68:00:61:1e:bf:d9:05:b1:e7:31:5d:a1:3c:80:f6: 25:5e:3c:49:8c:53:12:3b:62:b5:9f:43:98:5f:bb:7d:5d:a8: 34:9d:ce:6c:81:7f:24:79:4b:91:00:2b:22:a4:ee:15:86:fc: 3b:8b:3d:cc:bb:d9:93:44:2f:89:f8:16:4d:7f:d7:42:a1:39: bb:0c:fc:25:35:b3:9c:4a:3f:f2:b9:9d:38:4d:f1:87:fc:91: b9:3a:00:c8:7b:e7:06:61:ae:e8:ca:db:44:7c:69:1d:87:fa: 5a:46:f4:ef:01:af:24:73:6e:55:68:06:74:7c:b1:08:d3:cd: 73:64:35:44:54:b4:93:6f:48:a4:bf:f7:cb:a4:42:a1:2d:72: 01:7e:df:ef:ba:4f:76:56:1f:54:b5:b8:3c:06:c9:34:0b:22: bc:bb:83:4e:a0:49:4e:22:16:35:29:98:7c:f1:ae:88:e0:f5: d2:9f:e0:56:99:e3:f7:30:bb:44:dd:d6:61:6a:36:ba:23:8a: 61:d2:0a:c4:25:51:8a:d9:98:66:4c:48:4a:59:b8:94:38:28: 58:7f:54:31:74:ac:db:b8:c8:e4:e6:57:77:fb:4b:d7:e4:53: 61:7f:1e:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIzVPfLZ4SBNh1R8zb2uihRUCeU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA5QjA4MjZBODk1MDI2OUFBQTk1OTJGM0IwQjY1QTMy MzIzMzNDNTAeFw0yNjA2MTcwNTQ0NTJaFw0yNjA2MTgwODEwNTJaMDMxMTAvBgNV BAMTKDJCNEMzRTY1MEVBMTMyNDk0QTI1NDUxM0RBNUQzQjQxMDYyRUE5NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF9SBKZWD4uyNfLgE/4XbjMxx3 2e82uKQyLO1+5ChLnwNb7TwgQtKFFAimyM4PUZZEbWs4cEknjp/TjJIC7bwJi3AU XOOnGBTGy6/hgC4UyIh03zy2ZEEcq2Ex0WvztCqlWJ7UE/9a0yRpYChW810W7zXM WXs2LUdhSyd8cA5W48WfnwRFRn2EnGBmDC0uMAyAtTb4dM/zUmzJiMgFo18uHBA1 cfmd2sFhOcJvU4pJZcKizBvtFFFt1GbRRCHKbEI/dOI8Tf1ZwO8BA5lYA4Ee9Gxd iY02nb9Z5iu3qUE0f+1IoiGqj93ZzeGkZJuiSAqMTg4WjPOr15KXEOajdYhVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK0w+ZQ6hMklKJUUT2l07QQYuqUowHwYDVR0j BBgwFoAUwJsIJqiVAmmqqVkvOwtloyMjM8UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjhkYzA4NDktODNmYi00Y2M4LThjMjEtYmU2Y2E3YTJlZDgzLzAvQzA5QjA4MjZB ODk1MDI2OUFBQTk1OTJGM0IwQjY1QTMyMzIzMzNDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMDlCMDgyNkE4OTUwMjY5QUFBOTU5MkYzQjBCNjVBMzIzMjMz M0M1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvQzA5QjA4MjZBODk1MDI2OUFBQTk1OTJGM0IwQjY1 QTMyMzIzMzNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnSA6rLRscPynWmKr1Hi+ARuX5kSWgAYR6/ 2QWx5zFdoTyA9iVePEmMUxI7YrWfQ5hfu31dqDSdzmyBfyR5S5EAKyKk7hWG/DuL Pcy72ZNEL4n4Fk1/10KhObsM/CU1s5xKP/K5nThN8Yf8kbk6AMh75wZhrujK20R8 aR2H+lpG9O8BryRzblVoBnR8sQjTzXNkNURUtJNvSKS/98ukQqEtcgF+3++6T3ZW H1S1uDwGyTQLIry7g06gSU4iFjUpmHzxrojg9dKf4FaZ4/cwu0Td1mFqNrojimHS CsQlUYrZmGZMSEpZuJQ4KFh/VDF0rNu4yOTmV3f7S9fkU2F/Hvo= -----END CERTIFICATE-----Generated at Wed Jun 17 11:44:10 2026 by rpki-client