$ rpki-client -vvf rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft File: 9E6973F078195021DC7E37753A16BDC3BD2CE345.mft (raw, json) Hash identifier: /Sfa0Re9kvhVkyvAk9WhVCmadBtDmQfNaNmHt3i2sJE= Subject key identifier: 86:30:8E:5D:34:E8:96:DE:0C:92:8C:A2:1D:6A:9B:AA:6B:17:5D:52 Authority key identifier: 9E:69:73:F0:78:19:50:21:DC:7E:37:75:3A:16:BD:C3:BD:2C:E3:45 Certificate issuer: /CN=9E6973F078195021DC7E37753A16BDC3BD2CE345 Certificate serial: 24587C78054FC4354C4102552752CEA5D897C206 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 20:24:46 +0000 Manifest this update: Tue 02 Jun 2026 20:19:46 +0000 Manifest next update: Wed 03 Jun 2026 23:58:46 +0000 Files and hashes: 1: 9E6973F078195021DC7E37753A16BDC3BD2CE345.crl (hash: cJVOC3KLBIoYkfWuu1yQh+1M2rOs7FOSTf5IY9T9xhc=) 2: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: rDhWNdSE+MiC9nWV9xic84xxhEExen6QKYzm8hSRAZY=) 3: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: 70nvBnU+j3RyzkTv1EtBoPc4XFT8NOWYE+TEopumrFA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.crl rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:58:7c:78:05:4f:c4:35:4c:41:02:55:27:52:ce:a5:d8:97:c2:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6973F078195021DC7E37753A16BDC3BD2CE345 Validity Not Before: Jun 2 20:19:46 2026 GMT Not After : Jun 3 23:58:46 2026 GMT Subject: CN=86308E5D34E896DE0C928CA21D6A9BAA6B175D52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:52:87:26:05:fa:f3:c0:de:61:22:74:6b:22: 7f:d7:b3:44:0b:71:5d:9f:32:ae:37:bf:9a:0f:97: a1:e4:7d:c9:eb:d7:c3:1f:05:e8:9f:79:06:02:b6: 6d:2b:42:80:77:e1:ce:7e:7d:ed:c7:da:0e:48:e8: 99:07:d1:bc:a2:1b:4e:6e:41:d3:1d:3f:fe:7b:54: bf:55:e6:77:2b:c9:50:6e:7c:98:e9:21:3a:68:7e: 03:63:74:1f:df:4c:94:14:a8:49:e4:db:2b:e9:dc: 7b:5f:5d:84:fb:8b:60:f2:43:62:83:38:69:43:c2: da:56:64:28:06:ac:74:4d:b8:aa:0c:61:62:1c:30: 21:a1:e2:65:57:4f:e8:5a:91:52:04:6d:49:32:8b: 30:0a:79:bc:e0:2a:f2:2f:28:cc:94:77:58:86:2f: 96:63:a6:81:a4:cc:a7:f2:3b:e3:3d:e3:05:54:c4: d7:76:ef:4d:c9:1a:c5:e3:67:41:99:4b:00:a3:cc: ea:10:e8:19:60:0c:12:c2:75:73:20:0f:66:67:9b: c5:92:7e:58:79:b8:3c:72:01:b9:ae:c3:a6:cd:e9: c5:f5:8a:18:ea:08:90:ac:6a:69:a4:0c:b4:ab:f2: 6f:14:9d:46:bd:e4:ec:4f:6b:25:9d:49:c8:ca:65: 12:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:30:8E:5D:34:E8:96:DE:0C:92:8C:A2:1D:6A:9B:AA:6B:17:5D:52 X509v3 Authority Key Identifier: keyid:9E:69:73:F0:78:19:50:21:DC:7E:37:75:3A:16:BD:C3:BD:2C:E3:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:99:0f:7d:8e:05:39:81:60:e5:9b:96:55:b9:e7:37:33:1e: f7:60:39:09:9a:c2:31:3c:c0:c1:0e:6f:40:af:21:76:13:60: ad:1e:10:65:73:65:e7:b1:91:98:b7:4e:e8:16:aa:19:05:61: c9:51:f7:0c:22:02:91:19:8a:6b:6c:a7:8b:17:52:9f:7c:23: d5:35:d1:f8:07:72:78:a4:d5:c9:99:44:82:cb:4f:ca:08:2e: f8:7d:90:bb:ae:a5:45:c3:9b:46:60:a8:29:63:7a:16:39:e3: 11:fc:07:e2:22:0e:32:c3:1e:d1:db:52:97:32:35:41:25:ab: 92:c2:06:46:0d:bb:a8:b8:c3:44:a5:c7:9f:ca:53:4b:5d:06: 76:e4:1c:2e:ed:6e:e9:8d:fe:4a:a7:69:45:fd:80:fd:81:f2: 19:24:fe:c3:25:4f:ec:9e:91:11:20:4f:43:b2:24:f3:0b:d6: df:4f:d4:a2:e3:19:2d:a6:1b:09:c6:6e:40:f2:af:0f:98:68: a4:c4:14:99:e9:7d:e2:6a:d5:ef:0f:0c:87:05:0a:9c:64:47: 6a:b9:9e:6a:09:11:80:b5:3f:5e:1d:3f:5e:31:ae:d5:92:9d: 06:2b:cd:a2:0a:ed:97:66:24:5a:ed:36:0d:e1:ed:5a:d2:18: 3b:18:47:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJFh8eAVPxDVMQQJVJ1LOpdiXwgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2OTczRjA3ODE5NTAyMURDN0UzNzc1M0ExNkJEQzNC RDJDRTM0NTAeFw0yNjA2MDIyMDE5NDZaFw0yNjA2MDMyMzU4NDZaMDMxMTAvBgNV BAMTKDg2MzA4RTVEMzRFODk2REUwQzkyOENBMjFENkE5QkFBNkIxNzVENTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhUocmBfrzwN5hInRrIn/Xs0QL cV2fMq43v5oPl6Hkfcnr18MfBeifeQYCtm0rQoB34c5+fe3H2g5I6JkH0byiG05u QdMdP/57VL9V5ncryVBufJjpITpofgNjdB/fTJQUqEnk2yvp3HtfXYT7i2DyQ2KD OGlDwtpWZCgGrHRNuKoMYWIcMCGh4mVXT+hakVIEbUkyizAKebzgKvIvKMyUd1iG L5ZjpoGkzKfyO+M94wVUxNd2703JGsXjZ0GZSwCjzOoQ6BlgDBLCdXMgD2Znm8WS flh5uDxyAbmuw6bN6cX1ihjqCJCsammkDLSr8m8UnUa95OxPayWdScjKZRKPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhjCOXTTolt4MkoyiHWqbqmsXXVIwHwYDVR0j BBgwFoAUnmlz8HgZUCHcfjd1Oha9w70s40UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjdkYjIzYjctOTE1OS00NmM3LTg4NTMtMDY2NTRhZTQ3YWVkLzAvOUU2OTczRjA3 ODE5NTAyMURDN0UzNzc1M0ExNkJEQzNCRDJDRTM0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RTY5NzNGMDc4MTk1MDIxREM3RTM3NzUzQTE2QkRDM0JEMkNF MzQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjdkYjIzYjctOTE1OS00NmM3LTg4 NTMtMDY2NTRhZTQ3YWVkLzAvOUU2OTczRjA3ODE5NTAyMURDN0UzNzc1M0ExNkJE QzNCRDJDRTM0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOZD32OBTmBYOWbllW55zczHvdgOQmawjE8 wMEOb0CvIXYTYK0eEGVzZeexkZi3TugWqhkFYclR9wwiApEZimtsp4sXUp98I9U1 0fgHcnik1cmZRILLT8oILvh9kLuupUXDm0ZgqCljehY54xH8B+IiDjLDHtHbUpcy NUElq5LCBkYNu6i4w0Slx5/KU0tdBnbkHC7tbumN/kqnaUX9gP2B8hkk/sMlT+ye kREgT0OyJPML1t9P1KLjGS2mGwnGbkDyrw+YaKTEFJnpfeJq1e8PDIcFCpxkR2q5 nmoJEYC1P14dP14xrtWSnQYrzaIK7ZdmJFrtNg3h7VrSGDsYR5Q= -----END CERTIFICATE-----Generated at Wed Jun 3 04:16:15 2026 by rpki-client