$ rpki-client -vvf rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft File: C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft (raw, json) Hash identifier: kZbimS/zRVZ1fCOQbu+W1FX5W4SeF0MavCCoI0d5xwY= Subject key identifier: 33:8B:F9:E0:A9:DF:BB:D2:D3:06:83:71:A8:0D:77:0B:A4:7A:BA:0B Authority key identifier: C9:BA:0F:8C:78:B3:A4:E5:D2:8E:CD:1C:51:7D:C9:84:38:50:87:CA Certificate issuer: /CN=C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA Certificate serial: 53AA9285E281FA4830FA6ADB5B305283B8EE08E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 13:57:06 +0000 Manifest this update: Tue 02 Jun 2026 13:52:06 +0000 Manifest next update: Wed 03 Jun 2026 15:28:06 +0000 Files and hashes: 1: 3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa (hash: qWv000ASHZPLikMYj8Wss1d2EPIqC0119NVLho36do8=) 2: 3130332e3136372e3136372e302f32342d3234203d3e20313431393834.roa (hash: Ivj60OCLGb1xn+8XUcVw7dceegfwRxZ/Fq0NrXLwLn4=) 3: C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl (hash: xf6ZtEIUGyz4vR4QjZXucZrLGz0P6UA5FojYLlzg0ug=) 4: 3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa (hash: 45s4cJ7R43K0N6OFbVA9LlP5PkcF712Aofyn3c/ko+0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:aa:92:85:e2:81:fa:48:30:fa:6a:db:5b:30:52:83:b8:ee:08:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA Validity Not Before: Jun 2 13:52:06 2026 GMT Not After : Jun 3 15:28:06 2026 GMT Subject: CN=338BF9E0A9DFBBD2D3068371A80D770BA47ABA0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c0:f7:f5:f3:4e:de:e3:70:be:5e:79:a8:3f: 3c:ec:7e:a4:d4:2c:de:f5:79:50:6f:60:06:63:21: 4c:51:59:31:cc:48:66:b7:35:35:18:9b:7c:07:91: 75:7d:ab:f0:b2:43:d1:30:fb:f7:ea:ec:aa:93:b8: 37:e4:4a:6e:6b:c4:0a:9b:e1:1d:c5:64:11:c0:78: d8:9d:ec:0e:66:53:91:f4:81:d4:bb:5a:63:18:6e: 77:6a:d8:35:fc:8a:af:8a:8d:09:8f:8b:9e:75:30: 46:d2:c8:f4:38:3d:34:60:c5:87:83:94:5f:ae:81: 36:ef:cb:ba:56:37:7a:93:d4:65:a0:77:d0:ff:1d: fe:33:c2:40:ee:a4:dc:73:6a:d0:5d:36:53:cd:84: 88:45:13:e4:1e:01:99:c1:75:45:4a:d0:40:2b:19: 37:93:36:76:26:8f:46:16:f3:fd:01:a5:13:09:84: 76:9f:48:75:b2:8f:33:7c:88:af:9f:c4:bb:d8:be: 0f:10:7f:13:79:3d:f6:7c:7a:2c:61:58:4c:d3:1d: a4:a2:7c:df:7e:ab:3f:e4:6b:de:9c:de:a7:7b:5b: a4:5c:73:4a:2e:9b:cc:fb:52:19:6b:a6:20:4f:c0: bb:87:87:04:86:72:3b:14:10:b5:94:d5:93:64:da: ef:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8B:F9:E0:A9:DF:BB:D2:D3:06:83:71:A8:0D:77:0B:A4:7A:BA:0B X509v3 Authority Key Identifier: keyid:C9:BA:0F:8C:78:B3:A4:E5:D2:8E:CD:1C:51:7D:C9:84:38:50:87:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:2a:40:b6:a1:1b:da:1e:de:ed:79:cf:d1:ca:5d:a9:68:63: 25:44:4b:a3:e0:d1:9e:28:c8:b4:10:f5:82:0a:0d:fa:2b:7d: 42:47:d7:2f:b7:c9:8e:cd:75:e1:ec:bb:af:f8:47:7e:b6:96: 9e:73:bf:95:b7:03:8b:63:77:8f:dc:35:52:e5:29:5f:a4:38: c5:e1:c7:25:ad:ba:c3:29:37:25:10:8c:d7:cf:86:4e:cd:9d: 05:fd:5c:20:6b:aa:c1:94:4e:e3:31:29:33:25:b9:b4:c7:2c: 1c:68:02:12:42:fb:77:e8:25:6b:73:60:0a:6d:2f:24:48:37: 52:ec:7c:a5:4d:52:ab:28:b5:f9:4d:30:01:0d:be:d4:b8:f3: db:c4:e7:43:ba:b5:1e:c8:a3:18:ab:52:48:00:20:99:03:54: 1f:fc:52:ee:07:b6:7a:15:08:a2:66:d5:62:71:bc:5e:76:58: 2a:3c:86:bd:b0:20:31:5c:19:33:fa:49:f8:da:34:ee:3a:84: fd:90:38:53:43:d4:72:b1:d4:c6:32:6d:00:2a:e7:a0:a7:11: 84:80:02:a1:e9:55:3d:38:ac:cb:9e:e1:83:c9:97:61:a4:6b: e2:db:de:5d:b1:6d:ad:13:b1:e6:aa:29:0b:2a:ed:63:a9:13: ae:dd:c3:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU6qSheKB+kgw+mrbWzBSg7juCOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTBGOEM3OEIzQTRFNUQyOEVDRDFDNTE3REM5ODQz ODUwODdDQTAeFw0yNjA2MDIxMzUyMDZaFw0yNjA2MDMxNTI4MDZaMDMxMTAvBgNV BAMTKDMzOEJGOUUwQTlERkJCRDJEMzA2ODM3MUE4MEQ3NzBCQTQ3QUJBMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMwPf1807e43C+XnmoPzzsfqTU LN71eVBvYAZjIUxRWTHMSGa3NTUYm3wHkXV9q/CyQ9Ew+/fq7KqTuDfkSm5rxAqb 4R3FZBHAeNid7A5mU5H0gdS7WmMYbndq2DX8iq+KjQmPi551MEbSyPQ4PTRgxYeD lF+ugTbvy7pWN3qT1GWgd9D/Hf4zwkDupNxzatBdNlPNhIhFE+QeAZnBdUVK0EAr GTeTNnYmj0YW8/0BpRMJhHafSHWyjzN8iK+fxLvYvg8QfxN5PfZ8eixhWEzTHaSi fN9+qz/ka96c3qd7W6Rcc0oum8z7UhlrpiBPwLuHhwSGcjsUELWU1ZNk2u8/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM4v54Knfu9LTBoNxqA13C6R6ugswHwYDVR0j BBgwFoAUyboPjHizpOXSjs0cUX3JhDhQh8owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU0MGNmODAtOTMxNS00MmMxLTg0NGUtYmIwMzYyMmEwNWMxLzAvQzlCQTBGOEM3 OEIzQTRFNUQyOEVDRDFDNTE3REM5ODQzODUwODdDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUJBMEY4Qzc4QjNBNEU1RDI4RUNEMUM1MTdEQzk4NDM4NTA4 N0NBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU0MGNmODAtOTMxNS00MmMxLTg0 NGUtYmIwMzYyMmEwNWMxLzAvQzlCQTBGOEM3OEIzQTRFNUQyOEVDRDFDNTE3REM5 ODQzODUwODdDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsqQLahG9oe3u15z9HKXaloYyVES6Pg0Z4o yLQQ9YIKDforfUJH1y+3yY7NdeHsu6/4R362lp5zv5W3A4tjd4/cNVLlKV+kOMXh xyWtusMpNyUQjNfPhk7NnQX9XCBrqsGUTuMxKTMlubTHLBxoAhJC+3foJWtzYApt LyRIN1LsfKVNUqsotflNMAENvtS489vE50O6tR7IoxirUkgAIJkDVB/8Uu4HtnoV CKJm1WJxvF52WCo8hr2wIDFcGTP6SfjaNO46hP2QOFND1HKx1MYybQAq56CnEYSA AqHpVT04rMue4YPJl2Gka+Lb3l2xba0TseaqKQsq7WOpE67dw3A= -----END CERTIFICATE-----Generated at Wed Jun 3 03:20:59 2026 by rpki-client