$ rpki-client -vvf rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft File: 9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft (raw, json) Hash identifier: NDd4AgXMCDkptNqlYzAumPrVN/JirlSC2cD7pgfOTHg= Subject key identifier: 26:AC:97:74:B7:16:AD:AB:A6:9B:C2:4A:C3:E8:D3:59:20:E9:F4:9C Authority key identifier: 9E:5A:74:B4:E1:E6:2D:25:BA:36:E3:E7:A4:40:2D:90:6E:F7:0E:2A Certificate issuer: /CN=9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A Certificate serial: 07BAC247A58B7433DAB898AE6E2AF078055DECE2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 13:26:32 +0000 Manifest this update: Tue 02 Jun 2026 13:21:32 +0000 Manifest next update: Wed 03 Jun 2026 16:18:32 +0000 Files and hashes: 1: 9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl (hash: SWPh+kj0aaeEeIrF6rZl6Ba6Idmj7b4UAStn5jPrWps=) 2: 3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa (hash: lw3Ph+05xOCfBGre0101Mumi0SBmIeVe3yfjhxly5RI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 16:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ba:c2:47:a5:8b:74:33:da:b8:98:ae:6e:2a:f0:78:05:5d:ec:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A Validity Not Before: Jun 2 13:21:32 2026 GMT Not After : Jun 3 16:18:32 2026 GMT Subject: CN=26AC9774B716ADABA69BC24AC3E8D35920E9F49C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:28:23:04:09:91:82:5a:b2:fe:a0:74:60:05: 20:f3:ea:25:76:92:cf:6e:d0:ff:22:ee:8b:e5:75: ff:d4:7c:6b:d8:2d:75:2f:fd:fa:b1:fe:47:78:6a: 03:70:95:44:8d:4c:7b:68:55:c2:c5:53:e0:d5:fe: 0d:50:32:3f:0f:f0:45:58:1d:4a:77:f7:f2:a4:a4: dc:66:80:2b:c1:81:9b:dc:9a:2c:26:c2:63:cf:bd: 12:fe:69:c1:fe:f5:3c:42:77:0a:e7:7b:0a:fa:5d: 45:55:92:7a:57:3f:07:a2:75:68:61:50:a8:89:1a: 99:1d:a5:7f:c1:77:7e:8f:ff:29:95:13:a1:9d:e0: 65:2e:be:5a:63:f8:2d:37:23:b2:ab:27:fe:94:b8: 21:ce:ba:d1:4e:f4:df:ff:17:46:7b:7d:4d:84:b3: e2:19:fe:2a:7b:44:b3:10:a1:9f:2d:13:21:7f:2c: 2a:63:d3:56:55:d2:e7:d7:df:c5:ba:42:4a:70:f4: 44:e9:69:d3:8d:89:25:b3:5f:c4:79:4b:34:12:92: a4:ad:ba:bb:1d:98:15:e8:fb:05:fe:4a:8b:1d:4f: e5:fa:86:6e:59:a0:85:91:35:7f:4f:3c:c7:5c:cf: 11:4b:97:b1:95:1a:3a:47:5c:80:cf:63:3b:be:2b: be:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AC:97:74:B7:16:AD:AB:A6:9B:C2:4A:C3:E8:D3:59:20:E9:F4:9C X509v3 Authority Key Identifier: keyid:9E:5A:74:B4:E1:E6:2D:25:BA:36:E3:E7:A4:40:2D:90:6E:F7:0E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:05:19:a0:f0:f8:33:4f:14:b7:af:6c:00:29:6a:ed:32:d5: 72:76:d3:71:a1:89:00:4f:52:c9:76:ff:ca:50:0e:1b:36:88: 2a:e0:39:31:d0:88:32:92:25:44:e7:50:b4:c2:79:e1:4e:93: 29:6d:07:c7:93:96:3b:b0:10:9e:c4:da:64:a1:fe:87:4b:17: 84:63:32:15:49:28:61:e6:20:22:bb:6c:c5:ae:dd:aa:7b:1c: 5b:fd:c9:f8:78:13:fe:34:9c:11:77:3c:3b:5f:ee:81:06:d0: 67:da:ba:a0:3c:c0:f9:7c:b4:b3:0c:92:8e:71:66:92:77:59: 39:87:2b:25:05:e9:49:6d:69:90:f6:56:60:31:80:86:cc:25: 6b:c9:d2:e6:1b:dc:c5:3a:51:8e:49:08:b3:e1:07:df:97:0c: b5:be:4c:2b:de:b0:2d:28:d6:a1:fc:fe:96:f2:11:1c:cc:20: 88:a1:44:14:2c:d8:9c:d0:27:c1:7b:dc:f4:6f:e0:3e:9e:07: 5e:df:9d:48:e0:08:7d:fc:2d:8d:54:74:9a:8e:65:e6:e3:6a: 2f:e7:1c:7b:8e:3a:41:fd:1e:b1:7b:72:ef:74:ba:f6:d2:5b: bd:7d:de:53:a1:08:a1:c0:a9:ca:44:d5:e5:bd:45:78:59:a4: 3d:3d:5b:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB7rCR6WLdDPauJiubirweAVd7OIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU1QTc0QjRFMUU2MkQyNUJBMzZFM0U3QTQ0MDJEOTA2 RUY3MEUyQTAeFw0yNjA2MDIxMzIxMzJaFw0yNjA2MDMxNjE4MzJaMDMxMTAvBgNV BAMTKDI2QUM5Nzc0QjcxNkFEQUJBNjlCQzI0QUMzRThEMzU5MjBFOUY0OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXKCMECZGCWrL+oHRgBSDz6iV2 ks9u0P8i7ovldf/UfGvYLXUv/fqx/kd4agNwlUSNTHtoVcLFU+DV/g1QMj8P8EVY HUp39/KkpNxmgCvBgZvcmiwmwmPPvRL+acH+9TxCdwrnewr6XUVVknpXPweidWhh UKiJGpkdpX/Bd36P/ymVE6Gd4GUuvlpj+C03I7KrJ/6UuCHOutFO9N//F0Z7fU2E s+IZ/ip7RLMQoZ8tEyF/LCpj01ZV0ufX38W6Qkpw9ETpadONiSWzX8R5SzQSkqSt ursdmBXo+wX+SosdT+X6hm5ZoIWRNX9PPMdczxFLl7GVGjpHXIDPYzu+K74ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJqyXdLcWraumm8JKw+jTWSDp9JwwHwYDVR0j BBgwFoAUnlp0tOHmLSW6NuPnpEAtkG73DiowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZjMGNkNWQtZDA4NS00ZTJmLWIyMzAtN2I3ZTY2ZDEzOTNmLzAvOUU1QTc0QjRF MUU2MkQyNUJBMzZFM0U3QTQ0MDJEOTA2RUY3MEUyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RTVBNzRCNEUxRTYyRDI1QkEzNkUzRTdBNDQwMkQ5MDZFRjcw RTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZjMGNkNWQtZDA4NS00ZTJmLWIy MzAtN2I3ZTY2ZDEzOTNmLzAvOUU1QTc0QjRFMUU2MkQyNUJBMzZFM0U3QTQ0MDJE OTA2RUY3MEUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0FGaDw+DNPFLevbAApau0y1XJ203GhiQBP Usl2/8pQDhs2iCrgOTHQiDKSJUTnULTCeeFOkyltB8eTljuwEJ7E2mSh/odLF4Rj MhVJKGHmICK7bMWu3ap7HFv9yfh4E/40nBF3PDtf7oEG0GfauqA8wPl8tLMMko5x ZpJ3WTmHKyUF6UltaZD2VmAxgIbMJWvJ0uYb3MU6UY5JCLPhB9+XDLW+TCvesC0o 1qH8/pbyERzMIIihRBQs2JzQJ8F73PRv4D6eB17fnUjgCH38LY1UdJqOZebjai/n HHuOOkH9HrF7cu90uvbSW7193lOhCKHAqcpE1eW9RXhZpD09W8k= -----END CERTIFICATE-----Generated at Wed Jun 3 04:44:33 2026 by rpki-client