$ rpki-client -vvf rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft File: 9AFC93CAEEA98CBFC0481089E308395A3234F158.mft (raw, json) Hash identifier: vuDw8UtVRqrUlhWMzo7VjRnukO1p46ZQhv3TeIFRbsQ= Subject key identifier: C2:68:B3:2E:E5:08:98:5E:7A:23:E6:E0:4E:8F:5C:55:59:3A:EF:3A Authority key identifier: 9A:FC:93:CA:EE:A9:8C:BF:C0:48:10:89:E3:08:39:5A:32:34:F1:58 Certificate issuer: /CN=9AFC93CAEEA98CBFC0481089E308395A3234F158 Certificate serial: 45F6C4545B9975C011DBB41D5A859A266AD545DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 11:08:44 +0000 Manifest this update: Tue 02 Jun 2026 11:03:44 +0000 Manifest next update: Wed 03 Jun 2026 13:50:44 +0000 Files and hashes: 1: 9AFC93CAEEA98CBFC0481089E308395A3234F158.crl (hash: OU/NYcOc92S4wwqM+87KJXmbuClVHLocMA/6wiYIXTI=) 2: 3130332e3132332e3135382e302f32342d3234203d3e20313332363433.roa (hash: CJzRoBzW5EdikhLdqGZ7+quC12AshwM5y1ZUE0mtwGE=) 3: 3130332e32312e3232382e302f32342d3234203d3e20313332363433.roa (hash: mWMxWItQIy6KIu1MttVIKoQEGs+uqMB7va6yxk2ZK/w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.crl rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 13:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f6:c4:54:5b:99:75:c0:11:db:b4:1d:5a:85:9a:26:6a:d5:45:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFC93CAEEA98CBFC0481089E308395A3234F158 Validity Not Before: Jun 2 11:03:44 2026 GMT Not After : Jun 3 13:50:44 2026 GMT Subject: CN=C268B32EE508985E7A23E6E04E8F5C55593AEF3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:a5:c7:ac:39:8e:6b:d0:32:67:97:82:d0: f3:e4:1e:2e:db:f3:94:aa:bb:e0:74:29:db:8c:6d: fe:53:81:2a:05:53:81:4d:5d:ef:cc:ce:43:8b:ae: bd:16:20:d9:1f:2d:79:68:9a:04:98:1f:fa:7d:00: b8:39:1f:16:13:4b:3d:fa:eb:eb:f0:c1:eb:17:ab: 81:81:9f:04:96:13:9a:75:b6:ec:6a:86:00:bd:ea: bc:39:e6:94:18:61:6c:7d:59:d9:dd:b3:6f:b8:5c: 19:dd:a5:c2:66:9d:a2:85:cd:8b:9a:c8:da:60:3c: 92:00:ed:db:1b:89:f8:73:22:6b:1a:ec:b4:18:cc: 92:4d:df:c1:4e:b3:0d:d9:e6:63:92:2d:6b:7d:81: 48:57:9b:06:5e:ee:73:3b:d4:4d:f0:78:a9:a2:c8: 24:56:59:5f:aa:bb:a9:73:c0:ac:36:ed:1a:d9:17: cd:22:89:fd:45:7a:de:b6:75:57:5b:51:5c:c7:82: 10:4e:08:21:b3:d3:bd:54:fb:6e:fa:28:76:db:44: 4d:ec:51:3f:f5:de:5a:6d:16:db:d1:13:c3:05:56: 04:a1:30:f2:ff:65:50:e0:b8:1c:d2:e4:bd:69:de: fe:01:19:9f:a4:53:f6:01:c6:6c:29:90:5c:55:90: 9b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:68:B3:2E:E5:08:98:5E:7A:23:E6:E0:4E:8F:5C:55:59:3A:EF:3A X509v3 Authority Key Identifier: keyid:9A:FC:93:CA:EE:A9:8C:BF:C0:48:10:89:E3:08:39:5A:32:34:F1:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:82:75:53:fa:eb:6a:0e:1e:45:ea:23:7f:8c:66:83:b2:30: 8a:9c:50:6d:c1:5e:da:d0:47:6e:18:06:61:5b:65:be:91:22: 4d:a1:6a:df:1a:1a:86:46:fa:ad:81:0d:4e:a7:ac:79:fe:c3: 58:b4:99:73:19:38:4d:41:21:ad:e7:02:69:f9:83:d4:ac:98: 2f:05:ee:db:0b:84:bd:aa:03:8b:a0:61:71:49:4b:9a:a5:84: f3:3d:d7:1e:ff:d9:5c:6d:24:5a:f1:f5:4f:8c:47:94:2b:70: f0:f1:67:41:83:12:f2:9e:a4:70:3d:ab:75:c2:55:87:ed:90: d1:46:37:00:84:65:a5:61:ae:41:83:3d:b8:3e:b4:ab:d8:52: ef:8c:fa:ef:77:9c:ff:7f:d0:75:5f:f0:dd:8d:b2:57:f3:7a: eb:42:5f:3f:fa:74:02:5d:0b:45:cc:b3:cc:18:44:51:23:6f: 2d:86:59:42:25:a7:27:3a:1a:fa:4c:38:bd:27:62:ee:78:53: 01:1d:66:3e:84:5a:64:a5:70:35:d0:b8:d3:1e:ae:d9:a2:40: 6a:98:7e:2f:4e:56:09:b7:a8:ae:3b:b1:d4:6b:f8:3e:dd:28: 8f:77:4c:66:0a:7d:bf:66:5c:9b:eb:b6:16:47:d9:0a:d1:be: f2:1c:f8:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURfbEVFuZdcAR27QdWoWaJmrVRdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGQzkzQ0FFRUE5OENCRkMwNDgxMDg5RTMwODM5NUEz MjM0RjE1ODAeFw0yNjA2MDIxMTAzNDRaFw0yNjA2MDMxMzUwNDRaMDMxMTAvBgNV BAMTKEMyNjhCMzJFRTUwODk4NUU3QTIzRTZFMDRFOEY1QzU1NTkzQUVGM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCHKXHrDmOa9AyZ5eC0PPkHi7b 85Squ+B0KduMbf5TgSoFU4FNXe/MzkOLrr0WINkfLXlomgSYH/p9ALg5HxYTSz36 6+vwwesXq4GBnwSWE5p1tuxqhgC96rw55pQYYWx9Wdnds2+4XBndpcJmnaKFzYua yNpgPJIA7dsbifhzImsa7LQYzJJN38FOsw3Z5mOSLWt9gUhXmwZe7nM71E3weKmi yCRWWV+qu6lzwKw27RrZF80iif1Fet62dVdbUVzHghBOCCGz071U+276KHbbRE3s UT/13lptFtvRE8MFVgShMPL/ZVDguBzS5L1p3v4BGZ+kU/YBxmwpkFxVkJsLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwmizLuUImF56I+bgTo9cVVk67zowHwYDVR0j BBgwFoAUmvyTyu6pjL/ASBCJ4wg5WjI08VgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNhZjI3MWYtYzgzZC00NDFlLWJlYTktMThhMjQ0ZDBlMDBlLzAvOUFGQzkzQ0FF RUE5OENCRkMwNDgxMDg5RTMwODM5NUEzMjM0RjE1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QUZDOTNDQUVFQTk4Q0JGQzA0ODEwODlFMzA4Mzk1QTMyMzRG MTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNhZjI3MWYtYzgzZC00NDFlLWJl YTktMThhMjQ0ZDBlMDBlLzAvOUFGQzkzQ0FFRUE5OENCRkMwNDgxMDg5RTMwODM5 NUEzMjM0RjE1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKCdVP662oOHkXqI3+MZoOyMIqcUG3BXtrQ R24YBmFbZb6RIk2hat8aGoZG+q2BDU6nrHn+w1i0mXMZOE1BIa3nAmn5g9SsmC8F 7tsLhL2qA4ugYXFJS5qlhPM91x7/2VxtJFrx9U+MR5QrcPDxZ0GDEvKepHA9q3XC VYftkNFGNwCEZaVhrkGDPbg+tKvYUu+M+u93nP9/0HVf8N2NslfzeutCXz/6dAJd C0XMs8wYRFEjby2GWUIlpyc6GvpMOL0nYu54UwEdZj6EWmSlcDXQuNMertmiQGqY fi9OVgm3qK47sdRr+D7dKI93TGYKfb9mXJvrthZH2QrRvvIc+PI= -----END CERTIFICATE-----Generated at Wed Jun 3 03:50:19 2026 by rpki-client