$ rpki-client -vvf rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft File: 9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft (raw, json) Hash identifier: hn6tBeAuhIwKY5/jMbPsBof+aPqypiHqIdEnbIC2bz0= Subject key identifier: 85:41:45:3B:3C:85:7B:A0:E0:63:2C:DC:27:5E:C9:0F:80:DB:68:FB Authority key identifier: 9E:E0:13:29:B0:8F:B2:3B:3B:84:0A:A8:0A:D1:66:E4:27:A1:2E:C8 Certificate issuer: /CN=9EE01329B08FB23B3B840AA80AD166E427A12EC8 Certificate serial: 35155C9979FB42B7CB60A04FD5CE244A9B734FFD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 07:24:15 +0000 Manifest this update: Tue 02 Jun 2026 07:19:15 +0000 Manifest next update: Wed 03 Jun 2026 11:18:15 +0000 Files and hashes: 1: 9EE01329B08FB23B3B840AA80AD166E427A12EC8.crl (hash: oKktshH4OxCbOeOg2/gY3AFxB9Zk4UkpIftI6ehm9ok=) 2: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (hash: baidtJB1I5sZbU9lybxXsdsHbmGXConPY+qLEFZYE2g=) 3: 3130332e3136312e3131302e302f32342d3234203d3e20313431363135.roa (hash: uoMkZJAPDBUsE5XNKk03G6DUQfsrgq24ZoSComGkHz4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.crl rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:15:5c:99:79:fb:42:b7:cb:60:a0:4f:d5:ce:24:4a:9b:73:4f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EE01329B08FB23B3B840AA80AD166E427A12EC8 Validity Not Before: Jun 2 07:19:15 2026 GMT Not After : Jun 3 11:18:15 2026 GMT Subject: CN=8541453B3C857BA0E0632CDC275EC90F80DB68FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:15:44:3b:c7:fe:08:e9:be:9b:2c:f1:e1:4d: 05:fd:f9:bf:7c:65:89:cf:77:39:16:32:68:f6:d4: ea:77:ae:9f:07:b0:e6:b6:a6:b6:8b:5e:c3:69:37: 98:aa:c0:0a:f2:7c:2f:f6:3c:17:0a:ad:85:e3:4f: 7f:32:b1:22:37:03:9d:01:87:c2:00:87:97:77:7f: ed:ab:64:1e:64:8d:36:16:98:ce:06:6c:9d:93:8c: db:7a:27:05:d6:d8:cc:40:ea:6e:2b:a4:39:e0:11: f4:6e:7d:23:29:fe:f3:06:cc:23:da:22:41:1c:c1: 3b:23:c7:bc:e6:95:a4:4d:64:1e:bc:d2:ba:76:c5: 4a:87:7a:e7:59:93:78:89:83:61:e3:d9:fe:0c:47: 92:9f:a0:0d:64:b1:68:51:c2:b2:00:85:fe:9c:5e: 51:b5:9c:61:ed:2c:e0:4f:6f:33:09:f3:17:7b:41: b8:ea:7e:41:05:c7:5c:db:7a:af:27:9d:88:e1:3a: c9:45:83:1b:f6:aa:e7:36:63:a5:d3:91:31:e6:4f: 15:5d:69:56:18:94:fa:98:45:85:56:e7:cf:f4:44: e2:bd:e9:84:fe:ab:9e:ea:7e:b7:5b:66:50:a9:fa: 18:5b:8d:8e:7e:b5:62:b6:db:ee:cf:26:79:c8:b3: 2d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:41:45:3B:3C:85:7B:A0:E0:63:2C:DC:27:5E:C9:0F:80:DB:68:FB X509v3 Authority Key Identifier: keyid:9E:E0:13:29:B0:8F:B2:3B:3B:84:0A:A8:0A:D1:66:E4:27:A1:2E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:2b:de:c3:e1:4b:eb:94:9a:3a:59:dc:d4:0f:27:76:89:56: 30:47:e0:ae:61:2e:de:5a:2c:57:bc:b4:6e:72:7d:4e:1c:4a: bd:8d:45:82:8a:38:27:fe:8c:82:7f:4f:56:12:51:78:71:8f: cc:53:1d:3b:21:71:e1:38:5a:e2:9f:98:e4:57:5d:6c:54:47: 56:b7:2d:e0:f5:2d:a8:17:55:97:14:92:86:f0:db:85:59:0b: 33:1a:ee:06:74:aa:2c:0c:0b:15:f9:13:4d:42:c3:f2:cd:5a: 00:a5:be:0f:17:6d:12:22:e1:37:4e:12:ae:a9:3b:8b:c2:0b: 0f:cc:7e:df:86:c6:be:50:70:34:de:7f:2f:5f:b2:f4:a5:f5: 19:95:c6:e0:3c:33:0f:05:a0:c3:c8:1d:8d:07:e3:2c:0d:4c: a9:6f:3d:8c:06:e3:07:6f:4f:3f:3b:51:96:b0:57:56:a8:3c: 9f:cb:9d:3a:44:31:75:87:f7:c1:5c:df:32:35:cb:2d:f5:41: d6:f3:a8:ee:58:13:2c:2a:81:0f:c1:0b:5f:87:41:c3:46:d4: 2b:c5:6e:b2:55:1c:20:11:8b:67:6e:6e:a7:e2:17:ac:05:17: 75:2f:2a:80:e6:dd:35:ac:20:e7:d9:76:b2:cc:94:00:90:1a: aa:55:03:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNRVcmXn7QrfLYKBP1c4kSptzT/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVFMDEzMjlCMDhGQjIzQjNCODQwQUE4MEFEMTY2RTQy N0ExMkVDODAeFw0yNjA2MDIwNzE5MTVaFw0yNjA2MDMxMTE4MTVaMDMxMTAvBgNV BAMTKDg1NDE0NTNCM0M4NTdCQTBFMDYzMkNEQzI3NUVDOTBGODBEQjY4RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoFUQ7x/4I6b6bLPHhTQX9+b98 ZYnPdzkWMmj21Op3rp8HsOa2praLXsNpN5iqwAryfC/2PBcKrYXjT38ysSI3A50B h8IAh5d3f+2rZB5kjTYWmM4GbJ2TjNt6JwXW2MxA6m4rpDngEfRufSMp/vMGzCPa IkEcwTsjx7zmlaRNZB680rp2xUqHeudZk3iJg2Hj2f4MR5KfoA1ksWhRwrIAhf6c XlG1nGHtLOBPbzMJ8xd7QbjqfkEFx1zbeq8nnYjhOslFgxv2quc2Y6XTkTHmTxVd aVYYlPqYRYVW58/0ROK96YT+q57qfrdbZlCp+hhbjY5+tWK22+7PJnnIsy2vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhUFFOzyFe6DgYyzcJ17JD4DbaPswHwYDVR0j BBgwFoAUnuATKbCPsjs7hAqoCtFm5CehLsgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2Y0MDhlNDQtM2U5Yy00NWU1LWJjYTQtNWRmYmQ0YjI3MTMwLzAvOUVFMDEzMjlC MDhGQjIzQjNCODQwQUE4MEFEMTY2RTQyN0ExMkVDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RUUwMTMyOUIwOEZCMjNCM0I4NDBBQTgwQUQxNjZFNDI3QTEy RUM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2Y0MDhlNDQtM2U5Yy00NWU1LWJj YTQtNWRmYmQ0YjI3MTMwLzAvOUVFMDEzMjlCMDhGQjIzQjNCODQwQUE4MEFEMTY2 RTQyN0ExMkVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcr3sPhS+uUmjpZ3NQPJ3aJVjBH4K5hLt5a LFe8tG5yfU4cSr2NRYKKOCf+jIJ/T1YSUXhxj8xTHTshceE4WuKfmORXXWxUR1a3 LeD1LagXVZcUkobw24VZCzMa7gZ0qiwMCxX5E01Cw/LNWgClvg8XbRIi4TdOEq6p O4vCCw/Mft+Gxr5QcDTefy9fsvSl9RmVxuA8Mw8FoMPIHY0H4ywNTKlvPYwG4wdv Tz87UZawV1aoPJ/LnTpEMXWH98Fc3zI1yy31QdbzqO5YEywqgQ/BC1+HQcNG1CvF brJVHCARi2dubqfiF6wFF3UvKoDm3TWsIOfZdrLMlACQGqpVA7E= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:21 2026 by rpki-client