$ rpki-client -vvf rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft File: 9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft (raw, json) Hash identifier: pv739GksefSuUaSxHn0wf+gzCD0BFXzFwqWkC5wk8F0= Subject key identifier: DF:58:53:B0:99:ED:27:34:61:11:79:FF:F0:EB:37:D3:89:36:7F:5C Authority key identifier: 9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A Certificate issuer: /CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A Certificate serial: 017706C52BA0C26A398EADFC4083EE214B0B3F0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 13:41:50 +0000 Manifest this update: Tue 02 Jun 2026 13:36:50 +0000 Manifest next update: Wed 03 Jun 2026 13:41:50 +0000 Files and hashes: 1: 3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (hash: y7jgS/ZISqQ0Ejz5jszYlUpeJRIijdmrHPSpWEnYBQg=) 2: 9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl (hash: D2UyB4ERyKcnZojGt2zTO28XSuGq1YnwCVrD056IXvY=) 3: 3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa (hash: Dgai9I/TT4G/oQBQ3mEn1fS7dXTCrr7cZjoLYBavMXQ=) 4: 3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa (hash: rpX5Z9CNMyEUL+veiVsOhDnQwGzSm68cJVDfJbI5SIE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:77:06:c5:2b:a0:c2:6a:39:8e:ad:fc:40:83:ee:21:4b:0b:3f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A Validity Not Before: Jun 2 13:36:50 2026 GMT Not After : Jun 3 13:41:50 2026 GMT Subject: CN=DF5853B099ED2734611179FFF0EB37D389367F5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:39:50:eb:f9:ce:26:64:68:4d:03:71:d2:2b: 15:dd:1b:8f:56:4b:af:af:de:6e:81:6b:c4:07:b5: a9:f5:9d:3c:cd:a5:fa:25:52:b7:a8:4b:af:34:cc: c9:ee:fa:5e:17:7f:96:11:92:23:11:9b:04:1a:01: a4:b0:01:2e:2b:c0:fb:cd:5d:98:07:58:19:80:10: bf:aa:95:dc:40:6d:34:7f:59:bc:9b:3f:2f:20:20: d3:c6:07:1b:50:68:d9:e9:35:7d:04:7c:81:85:cb: 03:8c:86:74:52:c8:ee:7e:ea:34:f1:69:44:93:80: 59:01:ee:09:5b:25:49:ca:ae:55:00:b9:02:08:30: 4e:9c:1b:a9:74:03:cc:2b:7b:1c:7f:da:a7:00:71: f8:91:3c:a0:f4:7a:a3:1b:d1:06:e4:9a:94:bb:32: d8:5a:54:d6:e8:f4:57:a9:cd:2f:b8:98:a1:a2:c9: 64:04:1b:05:ee:40:7e:e0:5d:95:52:5d:f0:b9:89: e0:78:78:8b:d3:ab:9a:e4:a4:89:e3:8b:83:9b:40: e3:fe:46:85:dd:07:c8:8f:7c:74:55:d9:32:50:2e: e8:ff:63:4f:21:c6:12:31:6a:4d:20:37:25:dd:0a: 67:42:87:25:1b:ef:56:91:8c:be:62:7a:65:50:06: 49:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:58:53:B0:99:ED:27:34:61:11:79:FF:F0:EB:37:D3:89:36:7F:5C X509v3 Authority Key Identifier: keyid:9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:36:5c:65:f5:5e:44:4e:af:be:e3:6c:70:b7:07:72:69:ac: 3d:ad:2c:2e:48:6c:be:d4:76:15:ab:d9:8d:77:79:87:ed:60: 18:b3:07:b2:4a:8f:ab:b5:75:73:36:6a:ad:b9:98:cd:c5:1e: b4:fb:8a:44:55:3b:41:05:3d:df:8e:46:74:03:53:21:95:d3: a1:02:73:ca:d4:31:37:05:e9:04:3a:9f:1a:e9:37:05:1a:b5: dc:c0:09:17:b6:90:18:87:11:8a:ec:e0:27:3e:ae:f6:9c:70: 26:6d:ed:76:35:4d:2f:82:ee:fb:12:d1:7a:7b:1a:96:58:c6: 7d:bd:df:bc:4a:f6:82:db:e8:bf:87:5d:de:5d:71:56:0a:b1: ae:43:8c:46:cf:23:4e:dc:58:ca:2d:d5:60:36:41:74:04:45: 6f:b1:c0:70:4a:b8:75:1a:6a:a0:3d:af:b2:7c:6e:c4:90:2e: ea:8a:f6:d7:ee:20:ee:c0:46:e2:0a:a4:96:43:0e:32:c5:a2: c9:6e:df:5d:33:28:57:ad:09:47:dc:a7:a2:bd:55:a2:58:6f: 74:83:b5:f5:0f:93:e9:54:a5:7b:73:be:7a:ed:ae:0b:7e:e4: 49:61:57:85:97:31:48:e1:3a:be:42:55:4f:36:de:b4:3a:72: e8:3e:a3:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAXcGxSugwmo5jq38QIPuIUsLPwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBODgwMDU2RENGOUFEQjdBNzBENDYxRkY4MzA4NkQ4 RkU4ODk3QTAeFw0yNjA2MDIxMzM2NTBaFw0yNjA2MDMxMzQxNTBaMDMxMTAvBgNV BAMTKERGNTg1M0IwOTlFRDI3MzQ2MTExNzlGRkYwRUIzN0QzODkzNjdGNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1OVDr+c4mZGhNA3HSKxXdG49W S6+v3m6Ba8QHtan1nTzNpfolUreoS680zMnu+l4Xf5YRkiMRmwQaAaSwAS4rwPvN XZgHWBmAEL+qldxAbTR/WbybPy8gINPGBxtQaNnpNX0EfIGFywOMhnRSyO5+6jTx aUSTgFkB7glbJUnKrlUAuQIIME6cG6l0A8wrexx/2qcAcfiRPKD0eqMb0QbkmpS7 MthaVNbo9FepzS+4mKGiyWQEGwXuQH7gXZVSXfC5ieB4eIvTq5rkpInji4ObQOP+ RoXdB8iPfHRV2TJQLuj/Y08hxhIxak0gNyXdCmdChyUb71aRjL5iemVQBkkxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU31hTsJntJzRhEXn/8Os304k2f1wwHwYDVR0j BBgwFoAUn6iABW3Pmtt6cNRh/4MIbY/oiXowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0NDI1MmItZDMwZS00YmRjLTgzMmYtYjM4YjA1YzdhMDM1LzAvOUZBODgwMDU2 RENGOUFEQjdBNzBENDYxRkY4MzA4NkQ4RkU4ODk3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkE4ODAwNTZEQ0Y5QURCN0E3MEQ0NjFGRjgzMDg2RDhGRTg4 OTdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0NDI1MmItZDMwZS00YmRjLTgz MmYtYjM4YjA1YzdhMDM1LzAvOUZBODgwMDU2RENGOUFEQjdBNzBENDYxRkY4MzA4 NkQ4RkU4ODk3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHU2XGX1XkROr77jbHC3B3JprD2tLC5IbL7U dhWr2Y13eYftYBizB7JKj6u1dXM2aq25mM3FHrT7ikRVO0EFPd+ORnQDUyGV06EC c8rUMTcF6QQ6nxrpNwUatdzACRe2kBiHEYrs4Cc+rvaccCZt7XY1TS+C7vsS0Xp7 GpZYxn2937xK9oLb6L+HXd5dcVYKsa5DjEbPI07cWMot1WA2QXQERW+xwHBKuHUa aqA9r7J8bsSQLuqK9tfuIO7ARuIKpJZDDjLFoslu310zKFetCUfcp6K9VaJYb3SD tfUPk+lUpXtzvnrtrgt+5ElhV4WXMUjhOr5CVU823rQ6cug+o4I= -----END CERTIFICATE-----Generated at Wed Jun 3 03:42:44 2026 by rpki-client