$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft File: 9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft (raw, json) Hash identifier: 5fsUhNFS16QOgmE68pCQluBZzoChC1szEJLhaHPHhwU= Subject key identifier: 02:F0:1F:70:4E:51:0E:5A:3D:C2:E3:61:18:31:6D:2D:4F:41:92:EC Authority key identifier: 9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF Certificate issuer: /CN=9B995ECA9CF77E66AB04370A6C3562ADCD7413EF Certificate serial: 3EA50E4399770C88E1A7285F36A3FDC2EBB280F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:12:00 +0000 Manifest this update: Tue 02 Jun 2026 18:07:00 +0000 Manifest next update: Wed 03 Jun 2026 21:59:00 +0000 Files and hashes: 1: 3130332e3133302e38332e302f32342d3234203d3e20313530393636.roa (hash: +yASWV2qPXNVH0dMs+ql82F9yTnpzpBrn8UO30QUNqI=) 2: 3130332e3133302e38322e302f32332d3233203d3e20313530393636.roa (hash: oYvVYAWqY5/XajF618G7pKQtRtEqOMlHPhGTTZeide8=) 3: 9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl (hash: c5+csv6Gqlj3tvOGIUOyCBUtMwIaMaOofhR986mLdN8=) 4: 3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa (hash: 0GXiVqHET4FIeA3plxHWjQU7xk7vNPKZIk6ziqpvvGY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a5:0e:43:99:77:0c:88:e1:a7:28:5f:36:a3:fd:c2:eb:b2:80:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B995ECA9CF77E66AB04370A6C3562ADCD7413EF Validity Not Before: Jun 2 18:07:00 2026 GMT Not After : Jun 3 21:59:00 2026 GMT Subject: CN=02F01F704E510E5A3DC2E36118316D2D4F4192EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1f:94:ac:ac:a0:a1:14:32:84:0e:dc:55:8f: 21:46:f9:ad:67:5c:3f:cd:ec:99:20:82:b6:81:51: f9:b4:33:a7:03:06:20:91:5c:bc:f9:8b:c9:27:84: af:fe:31:2d:93:ee:99:95:08:ee:08:23:47:4e:89: 25:f9:fc:38:1f:9d:25:08:ea:51:a9:64:14:b3:1f: e6:f7:c0:5a:81:7b:99:fb:e7:33:66:27:ca:43:13: 7b:3d:18:97:89:5b:9d:75:e0:97:1e:c0:25:31:e2: 76:19:2d:07:c3:89:99:4d:db:c7:a0:70:b4:8c:f0: 21:98:25:e9:1f:bf:a7:c5:d1:56:78:f4:37:82:d6: 05:e8:19:27:89:35:60:7f:73:cb:4a:94:0c:eb:85: 5b:75:31:ce:be:b7:ca:55:f1:01:1b:5d:a5:6f:3f: 1a:47:95:fc:46:49:7d:d8:00:0d:c9:28:1b:6c:f1: b8:41:4d:80:f7:cd:41:e4:09:91:38:6b:0e:19:4e: dc:c5:c1:9d:3f:2e:30:47:1b:4a:f1:44:96:f5:d0: af:62:ac:7d:69:2d:e7:00:b8:6b:6e:a7:13:9b:ec: 31:32:6c:13:e4:de:22:e3:e2:37:3b:5a:90:e1:57: 37:ae:27:5f:d6:37:70:3b:a2:f8:fe:c5:c7:2d:2b: 42:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F0:1F:70:4E:51:0E:5A:3D:C2:E3:61:18:31:6D:2D:4F:41:92:EC X509v3 Authority Key Identifier: keyid:9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:c3:fe:3b:14:06:fd:31:b5:38:af:75:26:77:9d:eb:3d:d1: 0f:f0:dc:cc:0c:52:bc:24:6a:d6:a3:12:50:13:5c:a7:44:c1: 50:ee:d2:df:a8:38:3b:1f:3a:0f:26:10:4f:30:59:dd:01:62: bc:a5:39:35:ee:f0:f5:8b:f0:4c:ae:bd:bf:2a:19:c0:70:9b: 86:76:8f:3d:5a:5f:11:38:90:aa:72:08:fe:a7:55:cd:9b:ee: c0:7c:e0:5e:d9:c0:6e:f8:70:b2:85:f3:44:9d:6c:70:81:c6: 93:a6:dc:ab:91:5b:2a:3d:3a:a6:7b:6e:28:cd:9b:7f:ae:6a: 1f:cd:26:12:33:bc:b2:81:f4:c5:03:32:df:a8:d7:95:99:3c: 05:34:9b:e4:c4:93:54:b3:0a:67:08:dd:02:79:29:fd:e2:43: da:3b:90:35:7f:3f:47:74:c6:e4:28:2c:90:0e:91:cf:ac:ee: 1e:a6:37:94:56:21:12:4e:a4:51:e1:74:cc:b4:64:1d:97:57: 6d:fb:b0:7b:aa:b3:61:69:f8:3e:d1:af:d2:dc:cf:eb:6d:eb: 16:c6:fd:d9:c6:dd:5b:ce:69:37:32:a7:82:85:67:c3:d3:35: 34:eb:bd:a0:ca:03:a1:be:85:78:b2:ab:c6:21:2a:4e:94:32: 41:9c:e1:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPqUOQ5l3DIjhpyhfNqP9wuuygPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI5OTVFQ0E5Q0Y3N0U2NkFCMDQzNzBBNkMzNTYyQURD RDc0MTNFRjAeFw0yNjA2MDIxODA3MDBaFw0yNjA2MDMyMTU5MDBaMDMxMTAvBgNV BAMTKDAyRjAxRjcwNEU1MTBFNUEzREMyRTM2MTE4MzE2RDJENEY0MTkyRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnH5SsrKChFDKEDtxVjyFG+a1n XD/N7JkggraBUfm0M6cDBiCRXLz5i8knhK/+MS2T7pmVCO4II0dOiSX5/DgfnSUI 6lGpZBSzH+b3wFqBe5n75zNmJ8pDE3s9GJeJW5114JcewCUx4nYZLQfDiZlN28eg cLSM8CGYJekfv6fF0VZ49DeC1gXoGSeJNWB/c8tKlAzrhVt1Mc6+t8pV8QEbXaVv PxpHlfxGSX3YAA3JKBts8bhBTYD3zUHkCZE4aw4ZTtzFwZ0/LjBHG0rxRJb10K9i rH1pLecAuGtupxOb7DEybBPk3iLj4jc7WpDhVzeuJ1/WN3A7ovj+xcctK0KrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAvAfcE5RDlo9wuNhGDFtLU9BkuwwHwYDVR0j BBgwFoAUm5leypz3fmarBDcKbDVirc10E+8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE4NzA2NGItNWYyNy00MjcwLTkwZTQtOTlmNDNhZTg0ZGI3LzAvOUI5OTVFQ0E5 Q0Y3N0U2NkFCMDQzNzBBNkMzNTYyQURDRDc0MTNFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85Qjk5NUVDQTlDRjc3RTY2QUIwNDM3MEE2QzM1NjJBRENENzQx M0VGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE4NzA2NGItNWYyNy00MjcwLTkw ZTQtOTlmNDNhZTg0ZGI3LzAvOUI5OTVFQ0E5Q0Y3N0U2NkFCMDQzNzBBNkMzNTYy QURDRDc0MTNFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTD/jsUBv0xtTivdSZ3nes90Q/w3MwMUrwk atajElATXKdEwVDu0t+oODsfOg8mEE8wWd0BYrylOTXu8PWL8Eyuvb8qGcBwm4Z2 jz1aXxE4kKpyCP6nVc2b7sB84F7ZwG74cLKF80SdbHCBxpOm3KuRWyo9OqZ7bijN m3+uah/NJhIzvLKB9MUDMt+o15WZPAU0m+TEk1SzCmcI3QJ5Kf3iQ9o7kDV/P0d0 xuQoLJAOkc+s7h6mN5RWIRJOpFHhdMy0ZB2XV237sHuqs2Fp+D7Rr9Lcz+tt6xbG /dnG3VvOaTcyp4KFZ8PTNTTrvaDKA6G+hXiyq8YhKk6UMkGc4To= -----END CERTIFICATE-----Generated at Wed Jun 3 03:20:59 2026 by rpki-client