$ rpki-client -vvf rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft File: 9290697B92D08AFAAFB01253090BE0FE28871EA9.mft (raw, json) Hash identifier: VjFh/6HeX/5xCqspjKJIQP8wpUpbzHvF830SXFGw7o8= Subject key identifier: 9E:6A:9A:71:20:C4:D8:5E:70:4A:1E:72:43:E8:BF:22:5F:6B:6E:5B Authority key identifier: 92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9 Certificate issuer: /CN=9290697B92D08AFAAFB01253090BE0FE28871EA9 Certificate serial: 4D18765FF33257304BDE2A8927C84285B7075A1F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 12:45:50 +0000 Manifest this update: Tue 02 Jun 2026 12:40:50 +0000 Manifest next update: Wed 03 Jun 2026 15:16:50 +0000 Files and hashes: 1: 323030313a6466373a376438303a3a2f34382d3438203d3e20313431393039.roa (hash: tw5oikVlx6lbDw0PXuWWK4JNZ7QDnCFmUnX8Ug8gws8=) 2: 9290697B92D08AFAAFB01253090BE0FE28871EA9.crl (hash: 6aTPOqnJKYxA9WlvJ0wnLj0DN2S8k8JLhZmrfFOvaIc=) 3: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: WJxpeyz7OfQNEVK9NO1sVdlmaQoTrq8jALq72l9BXpw=) 4: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: ld7ZAKTrz/u5LDPP3+3DpOULg7oKh+lQm5wahDEcTNc=) 5: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: hRuNQymA0Kqk7Awfu8/hFwiPFpevo38okveHDPwRfwI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.crl rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:18:76:5f:f3:32:57:30:4b:de:2a:89:27:c8:42:85:b7:07:5a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9290697B92D08AFAAFB01253090BE0FE28871EA9 Validity Not Before: Jun 2 12:40:50 2026 GMT Not After : Jun 3 15:16:50 2026 GMT Subject: CN=9E6A9A7120C4D85E704A1E7243E8BF225F6B6E5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:05:37:3b:4d:a1:ad:5d:22:d8:46:9d:95:6f: 00:c2:13:17:dc:10:43:d8:5a:46:12:ff:3a:b2:cc: 8b:ee:50:72:fc:94:ba:28:2e:fb:1c:75:4a:50:38: 55:3e:ba:cc:79:a1:4f:73:12:50:6d:d4:0c:84:dd: cd:84:43:99:1e:07:c3:e3:fc:46:49:9d:2f:73:a9: 76:b5:76:f4:05:89:f8:cb:a3:3b:30:7f:fe:28:fc: 7a:3c:51:3b:c5:c9:45:a0:40:d3:07:6e:63:3e:28: d1:3e:27:65:1a:51:d7:bd:e0:4f:9d:7e:09:8a:78: e2:60:d0:d1:44:8e:55:b1:ae:14:5e:8e:c4:13:f8: 9f:ea:d0:9b:41:49:32:ad:07:4d:ef:fe:7b:bb:c8: 09:66:1a:f6:0f:92:52:f9:72:86:3a:f4:1c:96:b1: 64:65:cb:56:58:22:d2:59:97:6f:f1:c7:20:30:96: 18:1b:83:43:07:87:7f:73:82:35:70:ba:2c:72:7b: 15:fc:ac:1d:1e:1a:ef:a9:53:e5:10:13:60:d7:32: ac:f9:92:b7:f8:31:ed:9c:89:52:af:4b:fa:e3:74: 2f:da:60:5f:af:dc:c5:39:74:af:fc:be:db:da:5c: 2a:76:eb:00:ff:88:c3:7d:00:49:b8:12:ff:44:b6: 42:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6A:9A:71:20:C4:D8:5E:70:4A:1E:72:43:E8:BF:22:5F:6B:6E:5B X509v3 Authority Key Identifier: keyid:92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:04:5e:8b:94:d4:b7:2c:3c:d0:22:19:c0:df:ee:d1:44:48: 91:56:df:8d:dd:a7:6d:3c:f4:a9:48:c1:73:e5:fb:38:0a:df: e7:b4:29:c7:44:f1:e8:c1:4f:f4:6c:c9:4e:f6:68:5e:9a:8b: bc:ee:49:05:69:b9:09:b3:41:e1:1e:88:15:8b:1c:6e:c2:67: 05:9e:bd:bb:22:c9:9e:28:78:2e:2f:25:60:2a:3b:1e:d5:54: 3c:44:32:44:a7:c1:ec:bc:b5:08:86:f4:3e:77:6e:67:fe:42: 5c:89:ca:eb:2c:26:3e:51:48:d6:f1:cd:d3:f4:0c:68:db:c9: d1:8e:6a:d4:99:45:d9:f2:61:82:d4:a6:71:1a:c3:e3:01:9a: 92:dd:0a:85:da:8f:39:2c:39:9f:ca:be:6c:fe:b5:7c:89:66: 30:35:9b:75:b1:b6:e3:68:90:59:a0:64:a4:cb:26:49:9b:dc: 19:de:6c:3d:b4:b6:82:1f:fd:01:40:26:4f:60:ca:34:a7:7e: 8e:e4:1b:f8:0e:3f:59:6e:cf:ae:8f:08:aa:7b:4b:4c:e8:42: 27:fa:ef:76:cf:70:65:f7:4b:2c:56:42:2d:4c:c5:d6:53:87: f2:04:68:70:c5:55:58:8e:cd:92:a3:e7:dc:53:58:1b:18:93: df:22:5f:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTRh2X/MyVzBL3iqJJ8hChbcHWh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI5MDY5N0I5MkQwOEFGQUFGQjAxMjUzMDkwQkUwRkUy ODg3MUVBOTAeFw0yNjA2MDIxMjQwNTBaFw0yNjA2MDMxNTE2NTBaMDMxMTAvBgNV BAMTKDlFNkE5QTcxMjBDNEQ4NUU3MDRBMUU3MjQzRThCRjIyNUY2QjZFNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSBTc7TaGtXSLYRp2VbwDCExfc EEPYWkYS/zqyzIvuUHL8lLooLvscdUpQOFU+usx5oU9zElBt1AyE3c2EQ5keB8Pj /EZJnS9zqXa1dvQFifjLozswf/4o/Ho8UTvFyUWgQNMHbmM+KNE+J2UaUde94E+d fgmKeOJg0NFEjlWxrhRejsQT+J/q0JtBSTKtB03v/nu7yAlmGvYPklL5coY69ByW sWRly1ZYItJZl2/xxyAwlhgbg0MHh39zgjVwuixyexX8rB0eGu+pU+UQE2DXMqz5 krf4Me2ciVKvS/rjdC/aYF+v3MU5dK/8vtvaXCp26wD/iMN9AEm4Ev9EtkJtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnmqacSDE2F5wSh5yQ+i/Il9rblswHwYDVR0j BBgwFoAUkpBpe5LQivqvsBJTCQvg/iiHHqkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAxYzRkNjEtZGNlZi00YTIwLWJkNGMtYTI4MmEzN2FhNjllLzAvOTI5MDY5N0I5 MkQwOEFGQUFGQjAxMjUzMDkwQkUwRkUyODg3MUVBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjkwNjk3QjkyRDA4QUZBQUZCMDEyNTMwOTBCRTBGRTI4ODcx RUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAxYzRkNjEtZGNlZi00YTIwLWJk NGMtYTI4MmEzN2FhNjllLzAvOTI5MDY5N0I5MkQwOEFGQUFGQjAxMjUzMDkwQkUw RkUyODg3MUVBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEoEXouU1LcsPNAiGcDf7tFESJFW343dp208 9KlIwXPl+zgK3+e0KcdE8ejBT/RsyU72aF6ai7zuSQVpuQmzQeEeiBWLHG7CZwWe vbsiyZ4oeC4vJWAqOx7VVDxEMkSnwey8tQiG9D53bmf+QlyJyussJj5RSNbxzdP0 DGjbydGOatSZRdnyYYLUpnEaw+MBmpLdCoXajzksOZ/Kvmz+tXyJZjA1m3WxtuNo kFmgZKTLJkmb3BnebD20toIf/QFAJk9gyjSnfo7kG/gOP1luz66PCKp7S0zoQif6 73bPcGX3SyxWQi1MxdZTh/IEaHDFVViOzZKj59xTWBsYk98iX+w= -----END CERTIFICATE-----Generated at Wed Jun 3 03:46:37 2026 by rpki-client