$ rpki-client -vvf rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft File: 9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft (raw, json) Hash identifier: DmhD2UCOJXMlpM+XmwmrfkXaHyf1k142kSksemIRyZQ= Subject key identifier: 12:E5:B4:ED:34:55:57:19:4A:3B:29:3B:05:A9:12:6A:28:99:59:1D Authority key identifier: 9D:4D:B6:9E:1B:34:49:3D:B5:07:7A:AB:18:31:EA:08:E6:94:62:D1 Certificate issuer: /CN=9D4DB69E1B34493DB5077AAB1831EA08E69462D1 Certificate serial: 0CC5D06444F1A06216D7F17E0D1F4E996FE22F74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 01:00:57 +0000 Manifest this update: Wed 03 Jun 2026 00:55:57 +0000 Manifest next update: Thu 04 Jun 2026 04:42:57 +0000 Files and hashes: 1: 9D4DB69E1B34493DB5077AAB1831EA08E69462D1.crl (hash: BVp/dhZ0KNez+7khojle4/pwk3fTpb9JDhHvQHCDT5w=) 2: 3231302e38372e3132342e302f32332d3234203d3e20313532303539.roa (hash: F1D8qXB1kPa12d9QgeEIlBgwwS/bqZZ5YMaSMkPMuvU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.crl rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 04:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c5:d0:64:44:f1:a0:62:16:d7:f1:7e:0d:1f:4e:99:6f:e2:2f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D4DB69E1B34493DB5077AAB1831EA08E69462D1 Validity Not Before: Jun 3 00:55:57 2026 GMT Not After : Jun 4 04:42:57 2026 GMT Subject: CN=12E5B4ED345557194A3B293B05A9126A2899591D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:da:4f:f8:74:1c:cb:52:67:4c:b1:26:e3:75: a7:2a:86:77:5d:de:75:db:60:4c:d0:7a:fc:38:80: 6f:43:07:3a:eb:b3:2d:a8:44:8a:d6:39:46:cd:cb: f0:6f:ed:c9:e0:a8:d8:07:71:68:f5:b3:75:4a:86: 5e:9a:33:74:11:de:be:70:d2:4b:2e:f2:0a:92:4b: e5:e1:1b:45:7b:27:39:88:f1:f0:44:38:38:89:77: 31:de:66:cb:bb:2e:60:31:8a:2a:55:68:7d:67:5d: 07:2b:b7:73:3c:a1:1a:b2:54:9d:bf:d8:76:06:a9: a6:53:ee:28:ed:b1:a8:53:54:d2:e3:5f:31:e6:e6: 52:45:8b:2d:f4:5a:13:6f:ac:d4:7d:26:2b:eb:36: 27:02:ef:30:5c:81:b0:cb:5b:8e:69:c0:82:7f:b8: c9:97:09:6c:f8:06:9b:43:36:2b:ce:eb:11:c9:4b: 60:b8:33:13:16:84:82:9b:b3:29:48:a8:dd:9c:64: 59:3f:37:3a:b2:97:77:e6:3d:7f:41:38:38:c8:71: 2e:f6:56:75:01:b1:5d:c9:75:98:ba:f7:93:8f:86: 93:8e:17:81:3d:59:ac:3b:e6:64:85:0a:a1:ec:35: e9:ea:33:30:e0:50:2d:75:ca:c6:0c:9b:0c:04:e5: 6d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E5:B4:ED:34:55:57:19:4A:3B:29:3B:05:A9:12:6A:28:99:59:1D X509v3 Authority Key Identifier: keyid:9D:4D:B6:9E:1B:34:49:3D:B5:07:7A:AB:18:31:EA:08:E6:94:62:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ac:6e:a4:cb:85:60:48:df:6a:ca:f3:5c:ac:86:16:4b:bc: d5:86:91:08:01:1c:60:11:52:b9:c9:32:9b:22:39:f9:b2:b4: a9:8c:e5:15:b9:a9:35:2d:34:1c:b3:85:03:4a:d9:42:8c:9c: 8b:3c:bf:b4:86:d1:15:90:ab:f5:bd:9c:23:b5:3f:fe:0c:2e: b8:2d:2d:fc:df:c5:19:7b:c6:c8:35:e8:d4:5d:00:3d:ca:41: d6:bb:5a:0b:5b:6e:f4:7c:ad:ca:c0:6f:26:12:8c:10:38:58: be:f6:b1:9e:36:9a:83:c7:f1:d6:65:cd:ff:56:fd:ec:96:e6: 55:e1:45:e9:98:ae:36:5b:fe:66:57:73:f9:66:91:f2:94:8f: b6:60:42:1c:c2:7b:07:31:66:52:a9:a6:a3:d9:bd:8c:3a:02: 4a:4f:35:71:74:a8:2c:69:1f:05:53:2f:ec:44:b8:5f:c5:e8: 30:f6:7f:b0:23:00:3a:35:1a:b7:66:28:8e:15:97:61:eb:ba: d6:17:f9:3c:15:f6:80:26:4d:b2:aa:c9:3f:2c:1c:c8:aa:b3: 58:df:69:fc:7a:97:0a:fa:fd:a1:37:dc:59:b0:88:61:e1:23: 0c:c1:00:d6:3f:6c:ae:4a:75:a5:d5:52:1f:56:25:ca:5c:08: 57:84:fc:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDMXQZETxoGIW1/F+DR9OmW/iL3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ0REI2OUUxQjM0NDkzREI1MDc3QUFCMTgzMUVBMDhF Njk0NjJEMTAeFw0yNjA2MDMwMDU1NTdaFw0yNjA2MDQwNDQyNTdaMDMxMTAvBgNV BAMTKDEyRTVCNEVEMzQ1NTU3MTk0QTNCMjkzQjA1QTkxMjZBMjg5OTU5MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/2k/4dBzLUmdMsSbjdacqhndd 3nXbYEzQevw4gG9DBzrrsy2oRIrWOUbNy/Bv7cngqNgHcWj1s3VKhl6aM3QR3r5w 0ksu8gqSS+XhG0V7JzmI8fBEODiJdzHeZsu7LmAxiipVaH1nXQcrt3M8oRqyVJ2/ 2HYGqaZT7ijtsahTVNLjXzHm5lJFiy30WhNvrNR9JivrNicC7zBcgbDLW45pwIJ/ uMmXCWz4BptDNivO6xHJS2C4MxMWhIKbsylIqN2cZFk/Nzqyl3fmPX9BODjIcS72 VnUBsV3JdZi695OPhpOOF4E9Waw75mSFCqHsNenqMzDgUC11ysYMmwwE5W2dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEuW07TRVVxlKOyk7BakSaiiZWR0wHwYDVR0j BBgwFoAUnU22nhs0ST21B3qrGDHqCOaUYtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdiZThiN2MtMjMyZi00N2U4LTljZGQtODgxN2QzOWI3MGVhLzAvOUQ0REI2OUUx QjM0NDkzREI1MDc3QUFCMTgzMUVBMDhFNjk0NjJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDREQjY5RTFCMzQ0OTNEQjUwNzdBQUIxODMxRUEwOEU2OTQ2 MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdiZThiN2MtMjMyZi00N2U4LTlj ZGQtODgxN2QzOWI3MGVhLzAvOUQ0REI2OUUxQjM0NDkzREI1MDc3QUFCMTgzMUVB MDhFNjk0NjJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKsbqTLhWBI32rK81yshhZLvNWGkQgBHGAR UrnJMpsiOfmytKmM5RW5qTUtNByzhQNK2UKMnIs8v7SG0RWQq/W9nCO1P/4MLrgt LfzfxRl7xsg16NRdAD3KQda7WgtbbvR8rcrAbyYSjBA4WL72sZ42moPH8dZlzf9W /eyW5lXhRemYrjZb/mZXc/lmkfKUj7ZgQhzCewcxZlKppqPZvYw6AkpPNXF0qCxp HwVTL+xEuF/F6DD2f7AjADo1GrdmKI4Vl2HrutYX+TwV9oAmTbKqyT8sHMiqs1jf afx6lwr6/aE33FmwiGHhIwzBANY/bK5KdaXVUh9WJcpcCFeE/KY= -----END CERTIFICATE-----Generated at Wed Jun 3 04:37:21 2026 by rpki-client