$ rpki-client -vvf rpki-rsync.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.mft File: 9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.mft (raw, json) Hash identifier: M8y5GXAZyLYuNp0VkB2QPyQPAMcFu83Lx7s9G8WGWu8= Subject key identifier: FF:8B:FC:E4:6A:94:11:05:91:2E:2F:52:EE:FD:C7:DC:70:AC:09:18 Authority key identifier: 9F:30:C5:AE:BE:90:85:2C:1E:17:EB:C3:A3:3A:F7:4E:01:97:D1:81 Certificate issuer: /CN=9F30C5AEBE90852C1E17EBC3A33AF74E0197D181 Certificate serial: 0D31FCDDFB99931A3E2D6939C042D312C63D996B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 01:16:21 +0000 Manifest this update: Wed 03 Jun 2026 01:11:21 +0000 Manifest next update: Thu 04 Jun 2026 04:50:21 +0000 Files and hashes: 1: 9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.crl (hash: yiqzv4WpJzFZHO6uVMnOBOnsoAaj4UdJlFiS0GHFalM=) 2: 3130332e36362e38362e302f32342d3234203d3e20313431313037.roa (hash: Z9sJU9Bq2tA48C6TWKXh5WIRjPN4rgYyPhziWn0DpPQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.crl rsync://rpki-rsync.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:31:fc:dd:fb:99:93:1a:3e:2d:69:39:c0:42:d3:12:c6:3d:99:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F30C5AEBE90852C1E17EBC3A33AF74E0197D181 Validity Not Before: Jun 3 01:11:21 2026 GMT Not After : Jun 4 04:50:21 2026 GMT Subject: CN=FF8BFCE46A941105912E2F52EEFDC7DC70AC0918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7a:85:db:db:cd:18:48:e4:90:7f:96:c4:94: 8b:b2:78:cb:8b:41:72:0d:38:d5:6c:39:d9:5c:eb: 51:5e:b5:9a:46:dd:d7:7a:d5:6d:d0:9b:9f:38:ed: a5:23:ea:cf:64:cc:3a:9a:77:b5:6b:60:46:7b:4f: 38:c3:74:f8:22:02:a0:ef:81:63:04:3e:5c:73:66: 7d:25:3c:8a:16:12:c0:74:87:88:fc:76:1e:87:29: b2:d6:d8:e4:c0:19:4a:5c:bd:d1:d9:fb:35:db:65: 05:c9:33:7a:01:0b:ba:5c:1c:46:f6:a2:0f:f5:d6: aa:37:ad:2f:5b:1e:9e:d0:6c:42:fe:c8:9c:62:fa: 32:fd:02:54:64:03:b5:bd:a0:8d:37:1a:30:10:84: 69:00:1c:77:0c:d3:34:fc:65:26:49:9d:15:17:4e: 18:ca:8f:d3:4c:de:7a:fa:85:6b:30:aa:03:c0:52: 2e:c0:6a:81:d9:76:12:66:84:21:3c:78:f1:ce:32: bb:31:59:65:2c:11:e2:59:92:72:d3:1e:4d:e9:42: ed:c1:27:5a:80:b0:6b:22:c4:dd:eb:5e:21:46:5f: e5:31:84:56:ae:b8:a1:46:0c:1c:9e:81:12:3f:e1: f8:fb:12:b8:72:b8:0e:d9:db:12:4e:2b:66:98:7d: 4f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8B:FC:E4:6A:94:11:05:91:2E:2F:52:EE:FD:C7:DC:70:AC:09:18 X509v3 Authority Key Identifier: keyid:9F:30:C5:AE:BE:90:85:2C:1E:17:EB:C3:A3:3A:F7:4E:01:97:D1:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:8d:64:82:bd:a3:f1:c9:bd:52:65:f1:98:c4:47:aa:6e:b6: 80:00:ef:31:de:ce:37:40:4a:07:37:cb:af:9e:bb:aa:b8:11: d6:ee:34:b2:96:1d:db:83:d6:6b:fc:66:59:d9:1d:e5:c9:6d: b6:18:da:79:27:a7:cd:d0:90:e2:3b:f2:e4:3a:8f:5d:ed:31: 5c:03:a9:03:1e:e5:6c:c9:46:b9:e7:83:ed:14:7e:dd:29:f2: 5c:7f:50:96:20:77:92:53:ce:4a:11:c8:a5:d0:62:f3:d7:6a: 79:ea:36:ca:43:58:09:b4:fa:71:df:ac:dd:a2:62:d7:ac:c1: 79:f3:4c:a9:f0:3b:31:94:99:ff:90:61:17:ff:d9:ca:d8:04: 16:07:f3:d0:06:29:a0:8d:2b:70:2c:63:15:4d:b6:88:a2:e6: 0c:6c:96:48:16:2a:a2:90:26:f7:cf:0b:a3:7b:f3:1f:d7:33: 06:99:db:40:ca:78:cc:85:31:b6:a8:07:e9:c3:c5:53:21:d0: 59:d7:32:a6:1d:bc:cb:ee:8c:1e:bc:aa:e7:f0:ed:37:2b:d3: 19:50:73:49:d3:0c:cc:f4:b9:bc:90:20:bf:94:43:bc:3c:be: e5:ed:7a:25:93:49:2c:39:e4:ca:12:f9:79:a7:ea:b7:fa:a3: f8:04:d0:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDTH83fuZkxo+LWk5wELTEsY9mWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYzMEM1QUVCRTkwODUyQzFFMTdFQkMzQTMzQUY3NEUw MTk3RDE4MTAeFw0yNjA2MDMwMTExMjFaFw0yNjA2MDQwNDUwMjFaMDMxMTAvBgNV BAMTKEZGOEJGQ0U0NkE5NDExMDU5MTJFMkY1MkVFRkRDN0RDNzBBQzA5MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzeoXb280YSOSQf5bElIuyeMuL QXINONVsOdlc61FetZpG3dd61W3Qm5847aUj6s9kzDqad7VrYEZ7TzjDdPgiAqDv gWMEPlxzZn0lPIoWEsB0h4j8dh6HKbLW2OTAGUpcvdHZ+zXbZQXJM3oBC7pcHEb2 og/11qo3rS9bHp7QbEL+yJxi+jL9AlRkA7W9oI03GjAQhGkAHHcM0zT8ZSZJnRUX ThjKj9NM3nr6hWswqgPAUi7AaoHZdhJmhCE8ePHOMrsxWWUsEeJZknLTHk3pQu3B J1qAsGsixN3rXiFGX+UxhFauuKFGDByegRI/4fj7ErhyuA7Z2xJOK2aYfU99AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/4v85GqUEQWRLi9S7v3H3HCsCRgwHwYDVR0j BBgwFoAUnzDFrr6QhSweF+vDozr3TgGX0YEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGZjYzJkNDQtOTQxOC00MDEzLTk3MjMtYTk3OGY4YmQ4YjZiLzAvOUYzMEM1QUVC RTkwODUyQzFFMTdFQkMzQTMzQUY3NEUwMTk3RDE4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjMwQzVBRUJFOTA4NTJDMUUxN0VCQzNBMzNBRjc0RTAxOTdE MTgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGZjYzJkNDQtOTQxOC00MDEzLTk3 MjMtYTk3OGY4YmQ4YjZiLzAvOUYzMEM1QUVCRTkwODUyQzFFMTdFQkMzQTMzQUY3 NEUwMTk3RDE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKuNZIK9o/HJvVJl8ZjER6putoAA7zHezjdA Sgc3y6+eu6q4EdbuNLKWHduD1mv8ZlnZHeXJbbYY2nknp83QkOI78uQ6j13tMVwD qQMe5WzJRrnng+0Uft0p8lx/UJYgd5JTzkoRyKXQYvPXannqNspDWAm0+nHfrN2i YteswXnzTKnwOzGUmf+QYRf/2crYBBYH89AGKaCNK3AsYxVNtoii5gxslkgWKqKQ JvfPC6N78x/XMwaZ20DKeMyFMbaoB+nDxVMh0FnXMqYdvMvujB68qufw7Tcr0xlQ c0nTDMz0ubyQIL+UQ7w8vuXteiWTSSw55MoS+Xmn6rf6o/gE0Bk= -----END CERTIFICATE-----Generated at Wed Jun 3 03:21:01 2026 by rpki-client