$ rpki-client -vvf rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft File: 9DE0710D199DAE298457CA63B91BD20C03F148B9.mft (raw, json) Hash identifier: l+Zy7M+Q9G+dcSm4js9NlL/78ZNcVLxoY3B4kLBC+O8= Subject key identifier: 75:8F:1C:66:BA:BA:1E:A5:F7:4E:FD:59:2E:76:82:2F:51:05:A9:97 Authority key identifier: 9D:E0:71:0D:19:9D:AE:29:84:57:CA:63:B9:1B:D2:0C:03:F1:48:B9 Certificate issuer: /CN=9DE0710D199DAE298457CA63B91BD20C03F148B9 Certificate serial: 2084F8D67B4C9EB722203BBFAFC12D51C6DBABF4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 11:39:29 +0000 Manifest this update: Tue 02 Jun 2026 11:34:29 +0000 Manifest next update: Wed 03 Jun 2026 11:47:29 +0000 Files and hashes: 1: 9DE0710D199DAE298457CA63B91BD20C03F148B9.crl (hash: uJGmDMkvDaBiGUgK5zB8ocIcwryey5QhYX4suSWAjbQ=) 2: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: Wixcu+2ilRcFPig7lum9EHWYiNT3uxWOphv6H0Og4uE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.crl rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:84:f8:d6:7b:4c:9e:b7:22:20:3b:bf:af:c1:2d:51:c6:db:ab:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DE0710D199DAE298457CA63B91BD20C03F148B9 Validity Not Before: Jun 2 11:34:29 2026 GMT Not After : Jun 3 11:47:29 2026 GMT Subject: CN=758F1C66BABA1EA5F74EFD592E76822F5105A997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1d:f5:f6:48:2a:bb:6c:c6:8c:90:e4:8f:d1: f5:e1:ca:d3:e3:86:da:23:9b:da:0a:4d:70:88:3b: 73:ce:2f:c9:93:bb:0a:7b:44:25:18:5d:ca:f1:40: 00:89:28:81:d8:d2:04:05:fb:b1:30:21:4e:92:70: 81:78:cd:49:fa:ab:78:23:4b:35:4f:1f:dc:03:51: 1c:0a:b7:d7:b9:5f:f6:95:d5:4c:ed:14:c5:7b:3d: 2d:ea:e0:11:37:31:66:d5:e3:69:dc:d8:d5:33:b8: d7:89:1c:24:c3:80:c7:f3:21:34:61:2d:e2:c3:a9: 1f:07:4e:9a:c1:53:c6:85:11:98:ae:9f:37:13:7c: e5:fb:39:60:74:f7:58:96:0a:53:e0:73:3e:33:6c: 0f:a4:df:ae:97:0a:2c:f2:33:fc:92:b3:6a:c0:ba: 29:91:72:88:33:2e:ae:f1:1f:e6:2d:73:9c:02:c5: ab:fe:1b:e7:60:8e:a7:ae:a4:6c:7c:20:81:25:51: a6:84:64:f8:8c:38:62:78:b8:33:c1:fa:a7:8e:4f: 10:26:38:7a:71:d0:6c:fe:3e:c4:62:13:fd:d0:da: c3:42:75:f0:e3:80:25:eb:0f:c9:6e:af:4e:8c:d8: e1:03:8b:17:89:dd:6e:c6:61:65:fb:be:9a:71:92: c1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8F:1C:66:BA:BA:1E:A5:F7:4E:FD:59:2E:76:82:2F:51:05:A9:97 X509v3 Authority Key Identifier: keyid:9D:E0:71:0D:19:9D:AE:29:84:57:CA:63:B9:1B:D2:0C:03:F1:48:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:02:03:0f:bb:45:c5:6e:3b:f4:b8:82:bb:42:32:a9:fc:be: f3:3d:76:9b:58:f9:87:d0:ca:98:d6:6f:44:f5:d5:8c:e7:e0: 24:c8:09:e1:50:01:5b:5d:d3:07:9b:d4:fb:dd:d9:97:1b:1e: c1:51:93:4a:18:de:37:49:fa:7f:85:06:a4:ea:6f:21:30:ce: 6f:4d:8c:eb:94:e6:ae:8d:f5:4d:b6:0c:71:b8:70:c4:1a:63: 0c:63:9f:07:31:9a:da:95:bf:83:87:3c:19:77:af:9a:32:94: 8d:fa:fc:46:9f:cd:76:24:d2:c7:36:a7:46:2e:f7:d0:8c:7c: 9d:48:75:76:3b:45:02:4c:57:cc:ed:d4:e1:a3:7c:90:ca:7b: 82:51:d4:8c:4a:c9:c2:e5:65:00:39:0d:7a:4c:5e:28:9a:e1: 59:4b:df:a0:b4:3b:fb:96:9c:f0:12:dc:b1:8c:fa:98:9a:09: 09:e7:eb:2d:ec:77:c5:fc:81:b6:ef:51:25:42:1d:07:f1:4c: ae:90:03:f7:20:d6:02:51:06:af:a0:11:bf:25:17:df:9f:91: 06:49:55:00:2e:07:87:a4:be:ce:35:c9:29:c9:ce:6f:4d:e0: f1:33:47:cb:7a:0d:7b:51:79:d4:59:6a:d9:92:80:f6:1d:f6: 4e:a4:df:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIIT41ntMnrciIDu/r8EtUcbbq/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURFMDcxMEQxOTlEQUUyOTg0NTdDQTYzQjkxQkQyMEMw M0YxNDhCOTAeFw0yNjA2MDIxMTM0MjlaFw0yNjA2MDMxMTQ3MjlaMDMxMTAvBgNV BAMTKDc1OEYxQzY2QkFCQTFFQTVGNzRFRkQ1OTJFNzY4MjJGNTEwNUE5OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHfX2SCq7bMaMkOSP0fXhytPj htojm9oKTXCIO3POL8mTuwp7RCUYXcrxQACJKIHY0gQF+7EwIU6ScIF4zUn6q3gj SzVPH9wDURwKt9e5X/aV1UztFMV7PS3q4BE3MWbV42nc2NUzuNeJHCTDgMfzITRh LeLDqR8HTprBU8aFEZiunzcTfOX7OWB091iWClPgcz4zbA+k366XCizyM/ySs2rA uimRcogzLq7xH+Ytc5wCxav+G+dgjqeupGx8IIElUaaEZPiMOGJ4uDPB+qeOTxAm OHpx0Gz+PsRiE/3Q2sNCdfDjgCXrD8lur06M2OEDixeJ3W7GYWX7vppxksHxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdY8cZrq6HqX3Tv1ZLnaCL1EFqZcwHwYDVR0j BBgwFoAUneBxDRmdrimEV8pjuRvSDAPxSLkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjVmODQyNzgtZTA2ZC00MTE5LWJhNDQtNWMzMjk2OGE4YmJkLzAvOURFMDcxMEQx OTlEQUUyOTg0NTdDQTYzQjkxQkQyMEMwM0YxNDhCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REUwNzEwRDE5OURBRTI5ODQ1N0NBNjNCOTFCRDIwQzAzRjE0 OEI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjVmODQyNzgtZTA2ZC00MTE5LWJh NDQtNWMzMjk2OGE4YmJkLzAvOURFMDcxMEQxOTlEQUUyOTg0NTdDQTYzQjkxQkQy MEMwM0YxNDhCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIECAw+7RcVuO/S4grtCMqn8vvM9dptY+YfQ ypjWb0T11Yzn4CTICeFQAVtd0web1Pvd2ZcbHsFRk0oY3jdJ+n+FBqTqbyEwzm9N jOuU5q6N9U22DHG4cMQaYwxjnwcxmtqVv4OHPBl3r5oylI36/EafzXYk0sc2p0Yu 99CMfJ1IdXY7RQJMV8zt1OGjfJDKe4JR1IxKycLlZQA5DXpMXiia4VlL36C0O/uW nPAS3LGM+piaCQnn6y3sd8X8gbbvUSVCHQfxTK6QA/cg1gJRBq+gEb8lF9+fkQZJ VQAuB4ekvs41ySnJzm9N4PEzR8t6DXtRedRZatmSgPYd9k6k37U= -----END CERTIFICATE-----Generated at Wed Jun 3 04:37:29 2026 by rpki-client