$ rpki-client -vvf rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft File: 9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft (raw, json) Hash identifier: reicjDGGgrNp06yg5X9cMun1rDyqQj2ZXg6GzzqYnZI= Subject key identifier: 21:46:8E:44:A4:64:A0:D9:DB:84:69:F3:F3:EA:65:D0:5B:B1:92:28 Authority key identifier: 9B:61:7E:3E:89:75:C5:E8:37:FD:E8:E7:E3:A6:F7:F2:B0:7D:F2:FA Certificate issuer: /CN=9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA Certificate serial: 316F33F7BA8BDD247AEED2CF106B0D7ECD5E9D9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 16:50:12 +0000 Manifest this update: Tue 02 Jun 2026 16:45:12 +0000 Manifest next update: Wed 03 Jun 2026 18:49:12 +0000 Files and hashes: 1: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (hash: Y6VzFaG2FbyNdRwLMR4BvXhR1/TPWS0MIZ86oCceOfk=) 2: 3130332e34332e32352e302f32342d3234203d3e20313339343139.roa (hash: jbUXyMJGAUe8ArHS1H74yui1bmkFdiNku010i13gDLM=) 3: 9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl (hash: NsO1HYyTe5SUJ+grJ0Nq/dYRq0kpN+hY+WTVlXGoYfo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:6f:33:f7:ba:8b:dd:24:7a:ee:d2:cf:10:6b:0d:7e:cd:5e:9d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA Validity Not Before: Jun 2 16:45:12 2026 GMT Not After : Jun 3 18:49:12 2026 GMT Subject: CN=21468E44A464A0D9DB8469F3F3EA65D05BB19228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a1:a9:a6:b1:b8:f7:04:13:75:4e:11:6c:c5: 29:f9:30:ef:39:60:bc:95:b4:83:bd:87:c4:6e:4a: a1:a1:77:a4:04:2c:24:2a:6e:77:bf:50:57:94:6b: 9d:8b:9a:45:ad:b0:26:6e:65:9d:58:45:1e:e2:d5: d7:86:b8:2d:f3:b1:a8:d8:d8:14:1a:5b:cf:63:93: f0:c7:86:17:4b:da:33:c7:a7:8e:df:12:8b:f6:ed: c6:3a:6c:13:f0:38:a7:52:4c:3a:4a:fa:fb:43:d5: 3f:74:75:0c:00:b8:21:51:8e:24:b9:e1:34:23:65: 7e:05:c6:41:00:73:dd:27:6e:e2:5d:52:75:5a:ff: 03:29:7d:6f:79:48:01:ab:0e:fc:46:ef:2f:4b:25: 70:e9:3b:5a:78:17:b7:df:8e:38:0a:2f:ea:3a:55: c1:b4:c0:73:67:bb:93:0f:f1:3c:34:17:14:44:00: 97:90:9f:eb:85:4c:b1:ec:37:89:dd:de:5f:8d:66: 11:39:0f:6e:50:92:2c:76:d4:30:4e:e1:33:ae:c8: 86:21:81:06:e6:3b:d0:8a:e0:ac:2c:57:d9:0d:5b: 7c:84:de:13:98:ed:87:ae:bf:02:68:06:7d:96:b2: 5b:45:8e:78:0e:30:5b:ae:9f:08:cc:f2:9a:c5:d7: 4e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:46:8E:44:A4:64:A0:D9:DB:84:69:F3:F3:EA:65:D0:5B:B1:92:28 X509v3 Authority Key Identifier: keyid:9B:61:7E:3E:89:75:C5:E8:37:FD:E8:E7:E3:A6:F7:F2:B0:7D:F2:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:13:01:57:f2:ec:b1:cd:94:a5:15:d6:1b:d0:07:89:4c:25: 09:cd:1b:82:a7:1e:cd:3d:c3:ec:c2:14:8a:32:47:af:4c:bc: 8a:93:5d:ec:66:0d:07:16:8f:28:54:4d:09:7d:d9:c3:fb:5f: da:c7:d1:8a:70:d7:5f:65:38:3c:ff:08:e8:73:48:41:45:3a: 24:9e:ec:24:8f:3e:51:72:48:e0:52:35:78:5f:a2:10:97:76: 6f:86:a8:6a:8e:1c:6e:69:88:89:14:24:59:28:13:ef:92:c8: c3:d3:14:16:f7:44:90:2c:96:77:95:02:c7:05:d9:b9:1a:2a: 80:79:20:9a:0b:73:2c:7a:3b:31:46:80:f5:43:cd:ac:79:eb: 5e:bb:2a:11:b1:b6:a3:53:9d:a2:68:c7:e6:45:be:72:d8:80: 68:6b:5c:0d:15:63:05:29:4d:f5:cc:ed:d6:1b:1e:45:39:6f: bf:2b:11:71:a8:dd:ba:0b:8f:b0:01:d2:d1:34:ed:5b:f3:67: 6c:ec:ed:b2:7d:2b:d2:5d:30:84:0b:3a:15:8e:91:24:23:5c: 4c:83:e6:76:07:cc:2d:c9:35:ec:51:9c:ca:95:2b:68:19:e8: c4:69:7d:45:df:fa:3a:f7:af:44:b0:81:ac:c8:05:f1:24:a6: ef:9c:4c:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMW8z97qL3SR67tLPEGsNfs1enZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI2MTdFM0U4OTc1QzVFODM3RkRFOEU3RTNBNkY3RjJC MDdERjJGQTAeFw0yNjA2MDIxNjQ1MTJaFw0yNjA2MDMxODQ5MTJaMDMxMTAvBgNV BAMTKDIxNDY4RTQ0QTQ2NEEwRDlEQjg0NjlGM0YzRUE2NUQwNUJCMTkyMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxoammsbj3BBN1ThFsxSn5MO85 YLyVtIO9h8RuSqGhd6QELCQqbne/UFeUa52LmkWtsCZuZZ1YRR7i1deGuC3zsajY 2BQaW89jk/DHhhdL2jPHp47fEov27cY6bBPwOKdSTDpK+vtD1T90dQwAuCFRjiS5 4TQjZX4FxkEAc90nbuJdUnVa/wMpfW95SAGrDvxG7y9LJXDpO1p4F7ffjjgKL+o6 VcG0wHNnu5MP8Tw0FxREAJeQn+uFTLHsN4nd3l+NZhE5D25Qkix21DBO4TOuyIYh gQbmO9CK4KwsV9kNW3yE3hOY7YeuvwJoBn2WsltFjngOMFuunwjM8prF107jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIUaORKRkoNnbhGnz8+pl0FuxkigwHwYDVR0j BBgwFoAUm2F+Pol1xeg3/ejn46b38rB98vowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDIwODNkNDQtNzgzNS00NDNkLTg1M2EtMGE3OWNmMDBlOTUwLzAvOUI2MTdFM0U4 OTc1QzVFODM3RkRFOEU3RTNBNkY3RjJCMDdERjJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QjYxN0UzRTg5NzVDNUU4MzdGREU4RTdFM0E2RjdGMkIwN0RG MkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDIwODNkNDQtNzgzNS00NDNkLTg1 M2EtMGE3OWNmMDBlOTUwLzAvOUI2MTdFM0U4OTc1QzVFODM3RkRFOEU3RTNBNkY3 RjJCMDdERjJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8TAVfy7LHNlKUV1hvQB4lMJQnNG4KnHs09 w+zCFIoyR69MvIqTXexmDQcWjyhUTQl92cP7X9rH0Ypw119lODz/COhzSEFFOiSe 7CSPPlFySOBSNXhfohCXdm+GqGqOHG5piIkUJFkoE++SyMPTFBb3RJAslneVAscF 2bkaKoB5IJoLcyx6OzFGgPVDzax56167KhGxtqNTnaJox+ZFvnLYgGhrXA0VYwUp TfXM7dYbHkU5b78rEXGo3boLj7AB0tE07VvzZ2zs7bJ9K9JdMIQLOhWOkSQjXEyD 5nYHzC3JNexRnMqVK2gZ6MRpfUXf+jr3r0SwgazIBfEkpu+cTCY= -----END CERTIFICATE-----Generated at Wed Jun 3 03:54:17 2026 by rpki-client