$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft File: 9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft (raw, json) Hash identifier: 0xKarggtaIhTz/I+jNg1L8LDefAZyb44igjeI5UVKaU= Subject key identifier: 1B:D9:1A:5B:59:60:0C:6B:5C:EE:D0:1A:2F:C1:00:F6:E3:5A:0B:67 Authority key identifier: 9B:AA:D5:D1:F3:6F:59:43:A3:5A:6E:E8:00:1A:5E:5F:C2:4D:9B:1E Certificate issuer: /CN=9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E Certificate serial: 69C410C7CC8CDA8A8286C567622C1B0C87032449 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:38:17 +0000 Manifest this update: Tue 02 Jun 2026 10:33:17 +0000 Manifest next update: Wed 03 Jun 2026 11:34:17 +0000 Files and hashes: 1: 9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl (hash: N7t8mhHc2wUV/LUvroPjM4ltF1HUZ4rc0kh2PyTk07E=) 2: 33362e35302e39362e302f32342d3234203d3e20313532333536.roa (hash: WdJUD9VymB093sIE0zYyqec++4X5oG27MXfWK367p8g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c4:10:c7:cc:8c:da:8a:82:86:c5:67:62:2c:1b:0c:87:03:24:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E Validity Not Before: Jun 2 10:33:17 2026 GMT Not After : Jun 3 11:34:17 2026 GMT Subject: CN=1BD91A5B59600C6B5CEED01A2FC100F6E35A0B67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:26:16:02:15:9a:b0:32:9f:76:90:be:72:86: 0d:68:e2:35:eb:b6:ca:19:f6:66:ea:f8:5c:c9:d8: 6a:69:e8:2d:16:e1:0e:c5:5d:d1:28:7f:35:99:25: 36:db:6e:85:9b:37:7e:8c:89:b6:a3:ae:61:41:3b: 78:1d:5e:26:49:1c:f1:1b:33:2d:2b:2e:20:88:09: b9:4a:c8:07:69:11:3b:eb:2d:ba:b2:1c:4f:85:f1: 1b:47:9f:3c:d9:eb:c7:64:74:1c:5d:77:25:a6:4f: 53:e1:04:87:b7:33:ae:47:37:15:07:de:b1:3b:ed: c0:c0:d7:65:95:ca:68:f3:e4:ae:a6:ed:62:e5:b2: 73:61:a3:47:28:25:30:63:80:e8:00:06:23:ea:e0: 74:4f:9a:9a:d4:6c:e6:e5:95:e4:30:84:ba:54:ab: 71:28:87:89:5f:7f:75:b7:03:60:91:b8:6f:af:12: 5f:22:bd:fa:81:64:00:ca:8f:10:3b:44:82:c0:2b: c3:9b:47:5d:32:2e:3c:72:86:a9:cf:a1:84:14:9d: 8c:fb:3b:99:f4:35:3a:f8:27:2b:51:dd:90:d8:d2: 60:af:07:ab:59:08:52:62:0d:4d:1b:14:58:7e:c1: 77:d8:37:8e:8f:cd:ce:b0:26:67:bb:9a:32:db:2f: 65:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D9:1A:5B:59:60:0C:6B:5C:EE:D0:1A:2F:C1:00:F6:E3:5A:0B:67 X509v3 Authority Key Identifier: keyid:9B:AA:D5:D1:F3:6F:59:43:A3:5A:6E:E8:00:1A:5E:5F:C2:4D:9B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:49:4d:70:4a:af:41:8e:e6:2f:49:df:16:87:02:65:59:c7: 8b:db:49:14:fb:bd:92:5c:c2:3e:14:ea:a0:ae:e7:8e:07:c1: d5:29:d6:c3:a3:c8:3a:ff:5e:54:09:9c:25:50:da:9e:fc:b2: a1:02:f3:d3:bf:d9:04:1e:ac:b5:31:49:c8:d2:b2:16:24:ab: ff:27:70:e1:7f:31:d6:ea:b5:56:f8:c8:4a:33:ce:2e:60:be: f9:36:28:08:50:55:31:f7:f4:54:5b:ea:14:ba:3c:50:0c:8f: 12:7a:e2:d4:99:f2:9c:90:a2:bf:2f:00:bb:f2:e5:a1:ab:db: 3d:06:50:27:8e:86:c9:fb:4a:5b:a7:85:a1:86:37:5d:e9:a4: 3e:1b:81:e0:2d:59:d4:c6:be:7f:51:58:ba:60:5b:6a:00:8e: b6:88:63:0d:5d:87:aa:c9:18:97:f3:96:eb:7e:ed:52:a0:99: 09:af:37:44:24:6d:e4:56:65:d6:10:ff:27:27:9e:20:0d:b0: 40:26:54:de:4d:77:7e:96:25:67:1c:47:0c:be:7c:83:40:58: 2f:94:c9:5a:0f:bf:e3:62:1c:31:61:a5:48:f8:f6:6b:68:38: 01:91:76:f2:78:30:d5:f0:e2:8b:7f:52:81:62:23:b7:0e:fb: b4:48:c6:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUacQQx8yM2oqChsVnYiwbDIcDJEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJBQUQ1RDFGMzZGNTk0M0EzNUE2RUU4MDAxQTVFNUZD MjREOUIxRTAeFw0yNjA2MDIxMDMzMTdaFw0yNjA2MDMxMTM0MTdaMDMxMTAvBgNV BAMTKDFCRDkxQTVCNTk2MDBDNkI1Q0VFRDAxQTJGQzEwMEY2RTM1QTBCNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYJhYCFZqwMp92kL5yhg1o4jXr tsoZ9mbq+FzJ2Gpp6C0W4Q7FXdEofzWZJTbbboWbN36MibajrmFBO3gdXiZJHPEb My0rLiCICblKyAdpETvrLbqyHE+F8RtHnzzZ68dkdBxddyWmT1PhBIe3M65HNxUH 3rE77cDA12WVymjz5K6m7WLlsnNho0coJTBjgOgABiPq4HRPmprUbOblleQwhLpU q3Eoh4lff3W3A2CRuG+vEl8ivfqBZADKjxA7RILAK8ObR10yLjxyhqnPoYQUnYz7 O5n0NTr4JytR3ZDY0mCvB6tZCFJiDU0bFFh+wXfYN46Pzc6wJme7mjLbL2VvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG9kaW1lgDGtc7tAaL8EA9uNaC2cwHwYDVR0j BBgwFoAUm6rV0fNvWUOjWm7oABpeX8JNmx4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ5MGQ4NmItMGIwZC00NTZmLTg0MWEtYmZkYjlkODA3ZmI3LzAvOUJBQUQ1RDFG MzZGNTk0M0EzNUE2RUU4MDAxQTVFNUZDMjREOUIxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkFBRDVEMUYzNkY1OTQzQTM1QTZFRTgwMDFBNUU1RkMyNEQ5 QjFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ5MGQ4NmItMGIwZC00NTZmLTg0 MWEtYmZkYjlkODA3ZmI3LzAvOUJBQUQ1RDFGMzZGNTk0M0EzNUE2RUU4MDAxQTVF NUZDMjREOUIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFJTXBKr0GO5i9J3xaHAmVZx4vbSRT7vZJc wj4U6qCu544HwdUp1sOjyDr/XlQJnCVQ2p78sqEC89O/2QQerLUxScjSshYkq/8n cOF/MdbqtVb4yEozzi5gvvk2KAhQVTH39FRb6hS6PFAMjxJ64tSZ8pyQor8vALvy 5aGr2z0GUCeOhsn7SlunhaGGN13ppD4bgeAtWdTGvn9RWLpgW2oAjraIYw1dh6rJ GJfzlut+7VKgmQmvN0QkbeRWZdYQ/ycnniANsEAmVN5Nd36WJWccRwy+fINAWC+U yVoPv+NiHDFhpUj49mtoOAGRdvJ4MNXw4ot/UoFiI7cO+7RIxsg= -----END CERTIFICATE-----Generated at Wed Jun 3 04:07:50 2026 by rpki-client