$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft File: 9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft (raw, json) Hash identifier: qJnpsIT7+xPYPLPsnDFfUZ8K+Kk4aofMyultdpgH7Y0= Subject key identifier: 02:D2:0E:F1:F8:E3:86:05:BD:C3:2E:79:61:CA:D8:8D:60:4E:E2:AF Authority key identifier: 91:76:CB:6B:BE:53:90:8A:B2:1A:EF:FC:4F:8F:15:1D:9A:74:7E:75 Certificate issuer: /CN=9176CB6BBE53908AB21AEFFC4F8F151D9A747E75 Certificate serial: 46A838741A99F79EDE3E6B1A5243807E9AC28612 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft Manifest number: 2C Signing time: Wed 03 Jun 2026 02:27:48 +0000 Manifest this update: Wed 03 Jun 2026 02:22:48 +0000 Manifest next update: Thu 04 Jun 2026 03:00:48 +0000 Files and hashes: 1: 9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.crl (hash: j5elTJU4Nne2tzx3BY5tL2v8CkCE13KjXdXtm8HGCe0=) 2: 3131362e302e302e302f32312d3234203d3e203539313339.roa (hash: sLtYSAekx4+fWo5lqk7vJ2/nnu8bKXpxqT5BWuDEsBY=) 3: 3130332e3235332e302e302f32322d3234203d3e203539313339.roa (hash: 7wsmv0kZBtWJ620fNkkrSVx5J21lFglGMK7gAbjRHjo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.crl rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a8:38:74:1a:99:f7:9e:de:3e:6b:1a:52:43:80:7e:9a:c2:86:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9176CB6BBE53908AB21AEFFC4F8F151D9A747E75 Validity Not Before: Jun 3 02:22:48 2026 GMT Not After : Jun 4 03:00:48 2026 GMT Subject: CN=02D20EF1F8E38605BDC32E7961CAD88D604EE2AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:24:88:4a:99:d9:4f:2b:94:db:24:1d:53:e4: 43:44:03:7c:29:aa:9b:b5:c2:3d:f8:31:72:bf:95: cd:a4:8a:1a:41:cf:73:58:7b:9c:41:8e:b2:25:ba: 70:2b:10:16:50:93:49:fe:78:b5:b3:42:c2:ea:a4: 35:96:28:d0:a6:9b:d0:20:0e:64:61:32:b0:e3:54: 0a:31:5c:03:49:a9:15:d2:f8:cf:65:7d:f9:8b:83: 47:f5:cd:2b:48:1d:6e:07:3a:a9:e0:c6:ce:a2:c2: e4:aa:a5:91:63:80:a3:7a:0c:8d:12:15:83:53:b7: 65:9d:2a:56:f8:13:f7:df:06:82:12:c2:e6:ba:59: dd:53:d8:8f:14:6b:25:92:20:f5:85:03:cd:87:78: 06:08:b2:69:3d:e1:92:22:af:d4:cb:e9:99:97:3d: cf:bf:d7:fa:de:8a:4f:1f:02:f1:c0:9b:97:7f:7b: 9c:26:9f:59:35:fe:16:2c:df:53:c0:e6:1f:1a:a8: 37:a5:4b:ff:5a:78:94:e0:3d:de:04:72:5d:33:c5: 24:5a:c0:8e:35:b6:92:94:ab:15:3b:ad:6f:e3:cc: 35:da:b1:50:66:e5:e1:d9:ea:49:59:7b:be:a1:e9: 33:7d:2f:67:e2:da:f4:b4:fc:2f:de:4f:4c:2d:10: a6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D2:0E:F1:F8:E3:86:05:BD:C3:2E:79:61:CA:D8:8D:60:4E:E2:AF X509v3 Authority Key Identifier: keyid:91:76:CB:6B:BE:53:90:8A:B2:1A:EF:FC:4F:8F:15:1D:9A:74:7E:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:8a:9b:73:59:b0:a5:ab:ab:0e:70:50:1c:b8:3b:67:2a:81: b8:29:79:f7:81:07:6b:be:62:8e:3d:a3:e5:b9:3f:39:4a:5f: fb:1a:cd:fa:7d:f0:14:18:6e:cf:28:57:a7:94:84:92:a1:8a: 6a:65:30:47:8a:32:f3:48:34:7e:40:82:a7:3f:74:fa:6c:c3: 57:1c:59:23:b0:e1:66:3d:57:83:99:84:54:3f:20:58:d0:98: c0:13:52:25:31:eb:1f:0a:e0:d1:5d:36:fb:0d:aa:81:9b:d9: db:66:45:11:b2:8e:ef:26:98:20:c3:e7:d4:8a:a7:1c:15:e1: f6:54:4c:13:c9:ec:e9:5b:77:91:85:45:9b:03:d5:5e:12:85: f0:da:56:08:83:10:0c:d7:ab:7a:80:4b:4c:13:8f:4c:79:09: 2a:b2:87:c9:68:b3:1f:77:0d:d1:30:9e:ba:32:bd:e1:f2:5a: a7:b1:5c:b1:f8:c1:ca:77:69:11:7d:93:76:dd:72:8b:bd:39: a1:0a:b4:14:9c:91:85:d8:19:a3:6d:48:fc:e1:19:de:5b:16: 0d:4a:b8:75:7d:2a:42:40:f0:e8:57:6a:8e:ad:02:e4:40:3a: 31:3d:b1:a3:0d:0f:d8:87:fe:c8:b3:e8:55:01:62:d2:c1:6e: f6:9e:f2:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURqg4dBqZ957ePmsaUkOAfprChhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3NkNCNkJCRTUzOTA4QUIyMUFFRkZDNEY4RjE1MUQ5 QTc0N0U3NTAeFw0yNjA2MDMwMjIyNDhaFw0yNjA2MDQwMzAwNDhaMDMxMTAvBgNV BAMTKDAyRDIwRUYxRjhFMzg2MDVCREMzMkU3OTYxQ0FEODhENjA0RUUyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeJIhKmdlPK5TbJB1T5ENEA3wp qpu1wj34MXK/lc2kihpBz3NYe5xBjrIlunArEBZQk0n+eLWzQsLqpDWWKNCmm9Ag DmRhMrDjVAoxXANJqRXS+M9lffmLg0f1zStIHW4HOqngxs6iwuSqpZFjgKN6DI0S FYNTt2WdKlb4E/ffBoISwua6Wd1T2I8UayWSIPWFA82HeAYIsmk94ZIir9TL6ZmX Pc+/1/reik8fAvHAm5d/e5wmn1k1/hYs31PA5h8aqDelS/9aeJTgPd4Ecl0zxSRa wI41tpKUqxU7rW/jzDXasVBm5eHZ6klZe76h6TN9L2fi2vS0/C/eT0wtEKYFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAtIO8fjjhgW9wy55YcrYjWBO4q8wHwYDVR0j BBgwFoAUkXbLa75TkIqyGu/8T48VHZp0fnUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U4Y2Q5N2UtNTZmNS00Y2E1LWE4NWMtNTVhMzIzZjA2MDhjLzAvOTE3NkNCNkJC RTUzOTA4QUIyMUFFRkZDNEY4RjE1MUQ5QTc0N0U3NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTc2Q0I2QkJFNTM5MDhBQjIxQUVGRkM0RjhGMTUxRDlBNzQ3 RTc1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U4Y2Q5N2UtNTZmNS00Y2E1LWE4 NWMtNTVhMzIzZjA2MDhjLzAvOTE3NkNCNkJCRTUzOTA4QUIyMUFFRkZDNEY4RjE1 MUQ5QTc0N0U3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSKm3NZsKWrqw5wUBy4O2cqgbgpefeBB2u+ Yo49o+W5PzlKX/sazfp98BQYbs8oV6eUhJKhimplMEeKMvNINH5Agqc/dPpsw1cc WSOw4WY9V4OZhFQ/IFjQmMATUiUx6x8K4NFdNvsNqoGb2dtmRRGyju8mmCDD59SK pxwV4fZUTBPJ7Olbd5GFRZsD1V4ShfDaVgiDEAzXq3qAS0wTj0x5CSqyh8losx93 DdEwnroyveHyWqexXLH4wcp3aRF9k3bdcou9OaEKtBSckYXYGaNtSPzhGd5bFg1K uHV9KkJA8OhXao6tAuRAOjE9saMND9iH/siz6FUBYtLBbvae8n8= -----END CERTIFICATE-----Generated at Wed Jun 3 04:37:12 2026 by rpki-client