$ rpki-client -vvf rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft File: D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft (raw, json) Hash identifier: //Nso2lDTFZqY02ZZzYLFngBD6F4X3qosbE78EF2exU= Subject key identifier: 3B:9C:23:A6:D5:CD:3A:37:EC:68:79:23:8F:63:6F:ED:70:DC:EA:40 Authority key identifier: D9:E4:B9:E5:C2:0C:5D:24:54:5E:4B:37:44:B7:24:23:24:23:ED:B7 Certificate issuer: /CN=D9E4B9E5C20C5D24545E4B3744B724232423EDB7 Certificate serial: 0D1D57EFE0B8A645521ECF634CEA5E777724E8F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft Manifest number: 2C Signing time: Wed 03 Jun 2026 00:20:15 +0000 Manifest this update: Wed 03 Jun 2026 00:15:15 +0000 Manifest next update: Thu 04 Jun 2026 02:05:15 +0000 Files and hashes: 1: 323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa (hash: cHfAqVSrYWCvGTjmxTN9VKckgkvEOepk7bQUQ5YDUTM=) 2: 3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa (hash: OK8J5tFKOjzZkYFlXmJIuP/RnOPH7Dha6p0ILyYgDYQ=) 3: D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl (hash: ciSf4AV4p1FkblozOX0GGVkhrpjiEryhQ2aTzErVfBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:1d:57:ef:e0:b8:a6:45:52:1e:cf:63:4c:ea:5e:77:77:24:e8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9E4B9E5C20C5D24545E4B3744B724232423EDB7 Validity Not Before: Jun 3 00:15:15 2026 GMT Not After : Jun 4 02:05:15 2026 GMT Subject: CN=3B9C23A6D5CD3A37EC6879238F636FED70DCEA40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:be:60:9e:9f:25:55:7e:a9:eb:72:93:9f:a9: 38:0e:31:77:90:2f:fe:92:ad:fe:4c:55:91:48:5e: 07:47:c0:30:f0:78:64:a9:6c:c9:d9:95:7d:fa:48: e9:42:cd:99:11:d7:ca:4e:93:a6:75:1c:cd:aa:35: 27:58:7c:d5:28:d7:9a:79:7f:b8:13:ba:a2:f8:13: a2:ba:28:27:e9:44:e3:a9:7f:76:75:6b:45:48:c1: 08:ee:ff:4d:bd:d5:c4:db:d7:44:57:ab:ce:11:4d: 2d:47:e6:39:eb:01:52:ff:2b:72:09:65:7b:84:82: 94:01:ee:9e:50:6b:d9:57:a6:a3:63:b4:80:7b:15: 89:aa:3e:2f:77:bd:f3:89:ed:4b:16:73:b4:7f:df: 24:b6:75:73:7a:48:74:7d:42:3f:63:68:b0:e2:ff: b2:22:13:fc:bc:93:56:0b:9e:5a:71:5e:9a:a6:e5: 93:d6:89:c5:8a:69:a8:a4:14:d3:2a:95:b2:be:c6: 91:86:76:3a:72:13:e4:46:a1:46:9d:9c:76:fe:89: 39:17:f0:c7:c9:ef:60:ff:92:4a:be:01:ef:f0:32: 58:da:68:ba:9d:79:31:f8:6e:39:cb:95:ac:c8:66: bd:5c:38:48:3f:a8:9c:9a:86:c3:78:4c:6d:bc:5e: 30:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9C:23:A6:D5:CD:3A:37:EC:68:79:23:8F:63:6F:ED:70:DC:EA:40 X509v3 Authority Key Identifier: keyid:D9:E4:B9:E5:C2:0C:5D:24:54:5E:4B:37:44:B7:24:23:24:23:ED:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:46:54:af:e5:27:9f:e9:a7:f8:ab:b9:a8:4f:b2:fe:53:a6: 9a:0d:08:02:0f:da:73:ca:2f:eb:9a:97:8d:5f:69:12:c1:8e: 3d:c8:b3:41:2f:1e:58:10:56:ab:78:8b:60:bb:ee:24:17:0b: 58:48:14:ad:15:de:f8:aa:70:71:ce:f1:38:09:1a:77:d1:1a: 33:e7:f9:da:87:2b:9f:60:cc:1b:b6:8c:8b:61:31:6f:5c:b7: e4:79:be:47:de:f2:bc:b9:ad:de:f1:ec:4e:aa:bc:1f:3c:a8: 21:8d:44:13:48:82:c8:da:04:7e:46:fc:38:32:a8:40:ac:45: e0:d8:5b:36:8c:41:e0:ef:d7:19:98:4f:63:36:eb:fc:43:25: 2e:8c:18:33:26:d5:7c:ed:9b:c3:ca:60:06:10:64:8e:6b:4f: 0c:70:2d:cc:01:42:72:ea:e6:84:3e:0f:fc:5e:8b:fd:d0:2c: 78:e4:c7:00:35:52:af:2f:ba:2c:6e:71:32:4b:b6:9d:61:33: 15:17:5f:bb:53:35:09:7b:1a:ad:30:1d:d4:74:5b:b4:6d:5c: c5:1d:e3:9d:7f:00:19:b5:ba:f2:06:26:f4:cc:7a:df:37:77: 55:2f:3a:99:08:64:57:03:5a:2e:65:5d:d2:0a:e2:ce:67:bd: e9:d0:a3:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDR1X7+C4pkVSHs9jTOped3ck6PAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFNEI5RTVDMjBDNUQyNDU0NUU0QjM3NDRCNzI0MjMy NDIzRURCNzAeFw0yNjA2MDMwMDE1MTVaFw0yNjA2MDQwMjA1MTVaMDMxMTAvBgNV BAMTKDNCOUMyM0E2RDVDRDNBMzdFQzY4NzkyMzhGNjM2RkVENzBEQ0VBNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vmCenyVVfqnrcpOfqTgOMXeQ L/6Srf5MVZFIXgdHwDDweGSpbMnZlX36SOlCzZkR18pOk6Z1HM2qNSdYfNUo15p5 f7gTuqL4E6K6KCfpROOpf3Z1a0VIwQju/0291cTb10RXq84RTS1H5jnrAVL/K3IJ ZXuEgpQB7p5Qa9lXpqNjtIB7FYmqPi93vfOJ7UsWc7R/3yS2dXN6SHR9Qj9jaLDi /7IiE/y8k1YLnlpxXpqm5ZPWicWKaaikFNMqlbK+xpGGdjpyE+RGoUadnHb+iTkX 8MfJ72D/kkq+Ae/wMljaaLqdeTH4bjnLlazIZr1cOEg/qJyahsN4TG28XjADAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO5wjptXNOjfsaHkjj2Nv7XDc6kAwHwYDVR0j BBgwFoAU2eS55cIMXSRUXks3RLckIyQj7bcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzBhMzkyZGMtMmU0ZS00NzcwLThmNjgtYmM2MWY4MGI3NGE3LzAvRDlFNEI5RTVD MjBDNUQyNDU0NUU0QjM3NDRCNzI0MjMyNDIzRURCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOUU0QjlFNUMyMEM1RDI0NTQ1RTRCMzc0NEI3MjQyMzI0MjNF REI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzBhMzkyZGMtMmU0ZS00NzcwLThm NjgtYmM2MWY4MGI3NGE3LzAvRDlFNEI5RTVDMjBDNUQyNDU0NUU0QjM3NDRCNzI0 MjMyNDIzRURCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRGVK/lJ5/pp/iruahPsv5TppoNCAIP2nPK L+ual41faRLBjj3Is0EvHlgQVqt4i2C77iQXC1hIFK0V3viqcHHO8TgJGnfRGjPn +dqHK59gzBu2jIthMW9ct+R5vkfe8ry5rd7x7E6qvB88qCGNRBNIgsjaBH5G/Dgy qECsReDYWzaMQeDv1xmYT2M26/xDJS6MGDMm1Xztm8PKYAYQZI5rTwxwLcwBQnLq 5oQ+D/xei/3QLHjkxwA1Uq8vuixucTJLtp1hMxUXX7tTNQl7Gq0wHdR0W7RtXMUd 451/ABm1uvIGJvTMet83d1UvOpkIZFcDWi5lXdIK4s5nvenQo50= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:08 2026 by rpki-client