$ rpki-client -vvf rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft File: 9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft (raw, json) Hash identifier: F4OqiJq6V7q/NM7cFvKX6HHDjgEu7hTEGHQRFV+YPBs= Subject key identifier: 50:0A:00:00:A2:6F:DA:19:24:CB:7F:F0:17:83:22:02:BA:7F:B3:6C Authority key identifier: 9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D Certificate issuer: /CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D Certificate serial: 046F5E47BC48D838AA1506401E56974E332DAA40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 08:50:55 +0000 Manifest this update: Tue 02 Jun 2026 08:45:55 +0000 Manifest next update: Wed 03 Jun 2026 10:41:55 +0000 Files and hashes: 1: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: 2hLM0mgbr0R6ifa3vNzIdaR5NaWhmXwQFTpATyRbVPI=) 2: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: JPXdi6WPGd4vFTIpgnAdhhx+7oMRZdsbWTFXkRgyRnk=) 3: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: BTFNI8KSCzEVQjrkzQTwBs7yIRfL1AV/7o2X6tYhvoE=) 4: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: H+4huOKuCZJDgCcIRHG5F336v2zTL76hXwSaEF33ZKg=) 5: 9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl (hash: piol/Dm0CNdnY8AiOONbwnQhV/c1uXdgr07QrJ2NAnI=) 6: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: JZInvaWprZojdT0ogHnGT0fyYlzFziTH86i1Q0tvWkY=) 7: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: zmwA1y/xC2vL0cjTkZM+ObOlDKLV7xKiwSOMXdyAr5Q=) 8: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: Pbg7HMIUocxPePd7OOnLCPLrq3CDhKhitltGyutZn2w=) 9: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: npHUpI+a7i9Ge4o0vqbUWZs/Np3+nJB1Rs4IQBwLbvY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:6f:5e:47:bc:48:d8:38:aa:15:06:40:1e:56:97:4e:33:2d:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D Validity Not Before: Jun 2 08:45:55 2026 GMT Not After : Jun 3 10:41:55 2026 GMT Subject: CN=500A0000A26FDA1924CB7FF017832202BA7FB36C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2a:06:b8:a2:f7:82:f0:69:08:ad:ee:a3:9a: ce:79:47:d9:16:83:b3:90:77:03:25:57:c9:7c:96: 9e:73:7e:b5:4e:db:f8:e1:c6:a0:ff:e9:5a:72:d0: e6:46:02:2b:31:5a:d0:b8:d7:58:98:ca:48:12:32: 21:ee:5e:e0:9a:60:49:4d:26:ad:7b:54:ff:1d:57: 8b:18:86:cd:39:6b:3e:02:32:63:8a:18:fc:5b:85: 2d:95:6b:bc:5b:a4:66:a8:f2:d8:7c:88:eb:be:f1: 1c:f2:c4:21:25:cb:c5:15:dd:0c:3c:cc:63:ac:4b: 17:27:50:da:16:49:61:b3:19:36:86:a5:c2:5e:20: d7:80:09:23:00:d3:70:51:a4:e4:19:3d:71:3e:3f: ee:3b:54:4e:08:09:c2:73:b4:f0:b7:28:d0:44:30: a2:7b:b5:fe:a6:ac:b4:37:48:ab:f7:ea:53:a9:c7: 2f:b0:b2:30:ed:1b:a6:de:16:cc:d1:8a:93:ad:5b: 24:18:30:32:ae:7f:67:dd:f0:ec:42:41:39:cf:b0: 19:c5:6c:7a:67:c4:02:ca:01:d7:b0:aa:fd:43:ac: 00:86:f6:06:a4:05:3b:a9:64:5e:1a:64:18:71:06: 34:a8:a1:28:75:eb:0f:9e:8e:4c:25:87:fe:55:ad: f6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0A:00:00:A2:6F:DA:19:24:CB:7F:F0:17:83:22:02:BA:7F:B3:6C X509v3 Authority Key Identifier: keyid:9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:7a:d9:a3:e0:28:85:52:58:1f:e0:7b:23:a7:be:cf:0b:95: 0e:85:1f:8d:03:69:c0:00:0d:26:ad:9b:7f:50:10:f2:82:51: b9:05:bd:7a:90:66:45:c8:fc:bd:2a:22:2d:62:67:97:a5:1b: 36:ff:54:c8:4b:a6:89:a6:5d:3d:70:64:b8:43:cd:1e:a5:0b: 73:9b:be:87:80:14:49:5a:5b:fb:ff:59:d6:2e:f6:5d:39:42: 69:6a:e9:db:0e:05:64:a6:fb:35:04:8f:f0:79:93:3e:9d:d6: 17:fc:07:90:ff:84:38:94:37:f2:aa:df:7f:b5:37:77:5d:80: 9d:35:08:5b:bd:a7:ea:3e:2c:77:53:e5:bc:d5:9c:a2:87:1b: d7:2a:1c:49:32:6f:5a:cc:25:0b:b0:b8:14:57:72:f9:25:5e: 45:ab:e6:c7:77:51:67:a2:98:87:c9:ef:e3:85:55:a4:97:e5: 30:23:cb:58:18:43:a1:92:4a:b8:5f:4b:61:9d:c4:d4:89:3f: f5:9e:83:c5:7c:94:bd:a0:34:98:b7:5c:54:05:94:50:57:1b: 43:cd:24:eb:4d:b6:45:de:f0:96:9e:fc:f4:bb:00:c5:ef:c8: 32:d1:95:5d:0f:6d:a6:e4:38:a3:5c:cc:eb:1c:4c:b4:6c:91: ca:e6:1d:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBG9eR7xI2DiqFQZAHlaXTjMtqkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUREN0ZEMUMwQTc0RkUzMTdFREE0MUU0RDFDREM4NTdB RkMxNzc5RDAeFw0yNjA2MDIwODQ1NTVaFw0yNjA2MDMxMDQxNTVaMDMxMTAvBgNV BAMTKDUwMEEwMDAwQTI2RkRBMTkyNENCN0ZGMDE3ODMyMjAyQkE3RkIzNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfKga4oveC8GkIre6jms55R9kW g7OQdwMlV8l8lp5zfrVO2/jhxqD/6Vpy0OZGAisxWtC411iYykgSMiHuXuCaYElN Jq17VP8dV4sYhs05az4CMmOKGPxbhS2Va7xbpGao8th8iOu+8RzyxCEly8UV3Qw8 zGOsSxcnUNoWSWGzGTaGpcJeINeACSMA03BRpOQZPXE+P+47VE4ICcJztPC3KNBE MKJ7tf6mrLQ3SKv36lOpxy+wsjDtG6beFszRipOtWyQYMDKuf2fd8OxCQTnPsBnF bHpnxALKAdewqv1DrACG9gakBTupZF4aZBhxBjSooSh16w+ejkwlh/5VrfbxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUAoAAKJv2hkky3/wF4MiArp/s2wwHwYDVR0j BBgwFoAUndf9HAp0/jF+2kHk0c3IV6/Bd50wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjkwYzkwMDktYWQ1My00ZmE2LWExODMtMzRiMzQ1N2JlYTAzLzAvOUREN0ZEMUMw QTc0RkUzMTdFREE0MUU0RDFDREM4NTdBRkMxNzc5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REQ3RkQxQzBBNzRGRTMxN0VEQTQxRTREMUNEQzg1N0FGQzE3 NzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvOUREN0ZEMUMwQTc0RkUzMTdFREE0MUU0RDFDREM4 NTdBRkMxNzc5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJ62aPgKIVSWB/geyOnvs8LlQ6FH40DacAA DSatm39QEPKCUbkFvXqQZkXI/L0qIi1iZ5elGzb/VMhLpommXT1wZLhDzR6lC3Ob voeAFElaW/v/WdYu9l05Qmlq6dsOBWSm+zUEj/B5kz6d1hf8B5D/hDiUN/Kq33+1 N3ddgJ01CFu9p+o+LHdT5bzVnKKHG9cqHEkyb1rMJQuwuBRXcvklXkWr5sd3UWei mIfJ7+OFVaSX5TAjy1gYQ6GSSrhfS2GdxNSJP/Weg8V8lL2gNJi3XFQFlFBXG0PN JOtNtkXe8Jae/PS7AMXvyDLRlV0PbabkOKNczOscTLRskcrmHX4= -----END CERTIFICATE-----Generated at Wed Jun 3 03:53:37 2026 by rpki-client