$ rpki-client -vvf rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft File: 9F018573ABC40A1244EF018EE95D73D8E54A5247.mft (raw, json) Hash identifier: ACz/3h1UTfAH2EM/OnHL3Hecu1osBOWJbMkrGYnHQjI= Subject key identifier: 5D:07:35:3D:21:2F:36:58:C8:00:01:48:F4:D4:F9:59:44:54:1C:7E Authority key identifier: 9F:01:85:73:AB:C4:0A:12:44:EF:01:8E:E9:5D:73:D8:E5:4A:52:47 Certificate issuer: /CN=9F018573ABC40A1244EF018EE95D73D8E54A5247 Certificate serial: 48ED3549B17F1FBD37FC3C915267A2569E2D25FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 11:19:00 +0000 Manifest this update: Tue 02 Jun 2026 11:14:00 +0000 Manifest next update: Wed 03 Jun 2026 13:54:00 +0000 Files and hashes: 1: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: 5rI4L+b8xzlRIUsWxeEF2NdCqFStv1SMLdpn9443Ve4=) 2: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: On7lPgtr4muQ2OAv+z91B4cwc8QzzKQys3kXiufzPRc=) 3: 9F018573ABC40A1244EF018EE95D73D8E54A5247.crl (hash: Sy/yHqLEFynSp92mvXjVejio/NaPJTGJ7uWJoo/VLCc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.crl rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ed:35:49:b1:7f:1f:bd:37:fc:3c:91:52:67:a2:56:9e:2d:25:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F018573ABC40A1244EF018EE95D73D8E54A5247 Validity Not Before: Jun 2 11:14:00 2026 GMT Not After : Jun 3 13:54:00 2026 GMT Subject: CN=5D07353D212F3658C8000148F4D4F95944541C7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:39:e9:db:46:2d:e8:7b:10:c4:d7:7c:8f:d4: 6e:31:27:4a:c6:fc:d5:85:0e:32:75:6c:16:cc:01: 4f:37:16:d0:26:05:0d:cb:88:8f:3c:a9:ff:17:f8: ab:7e:97:79:a1:74:a6:60:33:b4:0d:13:5b:b3:b7: 42:a0:db:ba:ff:fc:c7:ca:24:d0:5a:24:b0:8d:e3: 88:4f:eb:66:41:4e:9f:f3:cd:3b:18:09:2b:3f:d8: ba:6d:f0:70:d9:71:f4:a4:fa:a9:ad:11:c2:5c:be: 01:bb:40:60:48:26:ab:c2:3f:6d:e1:98:93:4d:23: e6:98:71:13:1a:ac:37:ca:6f:cb:ed:3d:c6:30:76: 3c:4b:c4:07:e1:8b:46:c0:80:79:c6:51:e0:5b:49: 4f:ec:c5:89:5b:f4:df:3b:01:d5:2c:96:e8:dc:ae: 27:39:d4:b8:49:81:da:e0:7e:37:d1:82:97:b9:16: 0b:bf:a4:f3:58:af:40:e2:e6:05:1e:d1:a2:29:b6: d7:6e:26:02:ae:a3:56:9c:da:07:e6:15:fa:3f:07: af:53:7b:e8:dd:34:88:ab:70:2a:64:19:aa:ef:3b: a4:b1:63:9c:99:6e:40:a9:03:6b:6c:09:40:f8:ee: e2:86:7a:a9:62:dd:39:e0:74:08:4b:09:e5:f2:e1: 89:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:07:35:3D:21:2F:36:58:C8:00:01:48:F4:D4:F9:59:44:54:1C:7E X509v3 Authority Key Identifier: keyid:9F:01:85:73:AB:C4:0A:12:44:EF:01:8E:E9:5D:73:D8:E5:4A:52:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:24:b0:7f:e4:f3:2f:8b:93:df:70:ab:a7:ab:3c:bd:b9:fc: 71:69:6f:6a:8b:df:e4:62:eb:dc:3c:a5:9a:5a:d7:30:50:1a: 23:9c:eb:ef:67:41:57:ea:d2:c9:44:47:89:29:44:21:29:77: ab:08:a9:2a:5f:24:8a:96:d5:af:a4:81:0d:ff:c8:ef:a8:89: 44:20:ab:ce:86:50:d5:97:c0:0e:4e:de:d5:41:ae:a6:58:68: 9a:ad:e3:91:1b:48:4d:1b:b9:70:f2:99:1d:4d:31:04:2d:9a: e8:9e:50:f6:65:ce:ed:19:c9:54:ea:51:44:3c:90:4e:8e:27: fe:49:f7:8c:04:5b:d6:67:92:77:bd:50:07:cc:4d:70:d9:c7: 8e:5d:ad:35:52:38:cb:9b:65:43:0d:d9:5c:8f:f2:15:28:9c: c7:2e:1d:76:00:b3:6e:f3:52:54:4a:39:81:f0:75:8e:6c:85: 24:08:61:42:db:4f:fa:40:11:28:b7:e9:e8:c2:ec:4b:03:02: b6:fe:8b:d2:3a:a9:c0:50:76:f0:3c:63:c9:aa:19:35:3c:cf: 0a:33:24:3c:fb:53:bb:00:e8:71:0c:7c:87:5b:79:0b:ff:07: cd:8a:a9:03:c4:35:52:b8:55:e8:a6:4a:0c:c1:55:47:28:69: d7:3c:4f:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSO01SbF/H703/DyRUmeiVp4tJf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwMTg1NzNBQkM0MEExMjQ0RUYwMThFRTk1RDczRDhF NTRBNTI0NzAeFw0yNjA2MDIxMTE0MDBaFw0yNjA2MDMxMzU0MDBaMDMxMTAvBgNV BAMTKDVEMDczNTNEMjEyRjM2NThDODAwMDE0OEY0RDRGOTU5NDQ1NDFDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvOenbRi3oexDE13yP1G4xJ0rG /NWFDjJ1bBbMAU83FtAmBQ3LiI88qf8X+Kt+l3mhdKZgM7QNE1uzt0Kg27r//MfK JNBaJLCN44hP62ZBTp/zzTsYCSs/2Lpt8HDZcfSk+qmtEcJcvgG7QGBIJqvCP23h mJNNI+aYcRMarDfKb8vtPcYwdjxLxAfhi0bAgHnGUeBbSU/sxYlb9N87AdUslujc ric51LhJgdrgfjfRgpe5Fgu/pPNYr0Di5gUe0aIpttduJgKuo1ac2gfmFfo/B69T e+jdNIircCpkGarvO6SxY5yZbkCpA2tsCUD47uKGeqli3TngdAhLCeXy4YmvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXQc1PSEvNljIAAFI9NT5WURUHH4wHwYDVR0j BBgwFoAUnwGFc6vEChJE7wGO6V1z2OVKUkcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTNmNzVlOTgtMTRlZi00NDU3LTk0ZjMtZTViNzNhOTIyZmM1LzAvOUYwMTg1NzNB QkM0MEExMjQ0RUYwMThFRTk1RDczRDhFNTRBNTI0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjAxODU3M0FCQzQwQTEyNDRFRjAxOEVFOTVENzNEOEU1NEE1 MjQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0 ZjMtZTViNzNhOTIyZmM1LzAvOUYwMTg1NzNBQkM0MEExMjQ0RUYwMThFRTk1RDcz RDhFNTRBNTI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIksH/k8y+Lk99wq6erPL25/HFpb2qL3+Ri 69w8pZpa1zBQGiOc6+9nQVfq0slER4kpRCEpd6sIqSpfJIqW1a+kgQ3/yO+oiUQg q86GUNWXwA5O3tVBrqZYaJqt45EbSE0buXDymR1NMQQtmuieUPZlzu0ZyVTqUUQ8 kE6OJ/5J94wEW9Znkne9UAfMTXDZx45drTVSOMubZUMN2VyP8hUonMcuHXYAs27z UlRKOYHwdY5shSQIYULbT/pAESi36ejC7EsDArb+i9I6qcBQdvA8Y8mqGTU8zwoz JDz7U7sA6HEMfIdbeQv/B82KqQPENVK4VeimSgzBVUcoadc8T7I= -----END CERTIFICATE-----Generated at Wed Jun 3 03:38:55 2026 by rpki-client