$ rpki-client -vvf rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft File: A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft (raw, json) Hash identifier: j0cTuLfWRWmY9LWXmPC9Ftz1QDUai7B5suCwrXbAbiw= Subject key identifier: 30:4D:DB:FF:F8:9B:5F:A6:61:14:85:7A:CC:A8:86:2D:97:42:70:1E Authority key identifier: A9:D5:86:A8:2C:B1:66:90:2F:1D:1B:2C:AE:5E:B4:20:F0:8D:23:D0 Certificate issuer: /CN=A9D586A82CB166902F1D1B2CAE5EB420F08D23D0 Certificate serial: 53199B3DE84327980E9CE9C516F90B7E79FECE59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:28:34 +0000 Manifest this update: Tue 02 Jun 2026 19:23:34 +0000 Manifest next update: Wed 03 Jun 2026 22:36:34 +0000 Files and hashes: 1: A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl (hash: u0EWGaFn5s2VHD5BIlodqSuqHYSNMJitG/973Jux3aw=) 2: 3130332e3135302e3135392e302f32342d3234203d3e20313430343331.roa (hash: hcBwS6YzikTq1s/P8jlWWii/vuvMdnJI6Od19w2iLTM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 22:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:19:9b:3d:e8:43:27:98:0e:9c:e9:c5:16:f9:0b:7e:79:fe:ce:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D586A82CB166902F1D1B2CAE5EB420F08D23D0 Validity Not Before: Jun 2 19:23:34 2026 GMT Not After : Jun 3 22:36:34 2026 GMT Subject: CN=304DDBFFF89B5FA66114857ACCA8862D9742701E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:e3:08:36:80:ae:27:41:19:a6:fa:dd:08: ef:44:49:98:16:78:15:e5:47:59:e3:e8:5d:25:ae: e7:a8:12:42:05:68:71:ad:1f:25:78:f2:03:29:1b: ab:60:5b:12:3c:a5:41:12:e3:57:e9:2e:22:4f:ea: 5f:a3:90:56:46:5d:f2:75:41:5d:2b:63:4d:63:9f: f3:a1:20:79:e1:34:90:dc:94:30:04:08:dd:2a:74: bb:38:ca:b9:fc:41:1f:0a:c3:aa:3a:b2:93:a0:45: 86:29:17:d4:6b:37:ca:9d:a9:81:5a:b6:da:ee:d2: b1:97:c9:36:e1:e8:da:c1:70:c1:50:0d:de:70:d9: 0c:79:25:c4:d5:3d:91:df:9c:5c:07:cb:1a:53:93: b9:37:ef:93:7c:b4:0d:6d:c2:b3:50:03:8d:65:fa: f9:e3:34:e8:42:68:28:91:fe:43:6b:de:a8:a8:2d: 16:b2:c7:98:ba:12:c1:0b:44:53:79:49:30:6b:d1: eb:24:d9:29:ec:a6:00:f5:c4:9f:5b:aa:9b:ed:03: a4:30:0d:cb:dc:1c:bb:f1:c0:76:f7:07:50:26:48: c6:a3:56:c7:fe:ae:9e:f4:4a:0e:f8:9c:33:17:c0: c3:e7:00:e5:31:57:67:5d:dd:3b:d6:9d:c9:78:68: dc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4D:DB:FF:F8:9B:5F:A6:61:14:85:7A:CC:A8:86:2D:97:42:70:1E X509v3 Authority Key Identifier: keyid:A9:D5:86:A8:2C:B1:66:90:2F:1D:1B:2C:AE:5E:B4:20:F0:8D:23:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b8:30:b9:4e:15:a6:ba:fa:fa:5e:b9:0f:21:9d:75:ff:f3: c0:37:df:c5:52:24:37:cd:b7:2c:0c:f6:88:dd:71:3d:50:72: dd:e9:77:1f:fd:e3:c4:cf:41:5c:30:46:dc:0d:b2:b3:09:44: e7:53:9a:fb:1e:1c:cd:1d:ff:37:8d:29:70:55:0c:34:be:53: c5:c7:18:45:65:0f:39:78:bb:b0:37:a3:07:b7:27:a1:78:c2: 4b:92:62:5d:fb:f3:69:e2:6a:bc:4e:45:97:c7:fc:c5:f8:bf: 96:17:3f:01:0d:78:b0:89:37:18:54:2c:f1:06:d2:45:3d:07: a4:98:f3:58:34:09:8a:43:52:31:11:51:43:5c:08:15:aa:ca: a5:d3:02:4a:f3:f4:9f:65:aa:f8:c5:bd:91:9d:94:5d:5c:60: d8:c4:82:3c:00:d4:51:56:6f:aa:80:54:58:c3:3c:1c:5a:d0: d6:95:38:a9:0b:29:32:27:9e:2a:1d:27:32:1e:81:16:b0:ee: cd:c7:28:53:26:f2:ae:e7:8b:8f:ca:f5:05:1f:24:f5:87:2e: 94:07:9b:86:da:49:76:08:04:08:bc:98:1a:3b:6c:8a:d1:67: 0a:f2:53:15:61:6a:d2:80:c9:c5:17:b7:4e:a1:8f:2a:c1:76: c4:91:4b:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUxmbPehDJ5gOnOnFFvkLfnn+zlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENTg2QTgyQ0IxNjY5MDJGMUQxQjJDQUU1RUI0MjBG MDhEMjNEMDAeFw0yNjA2MDIxOTIzMzRaFw0yNjA2MDMyMjM2MzRaMDMxMTAvBgNV BAMTKDMwNEREQkZGRjg5QjVGQTY2MTE0ODU3QUNDQTg4NjJEOTc0MjcwMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34OMINoCuJ0EZpvrdCO9ESZgW eBXlR1nj6F0lrueoEkIFaHGtHyV48gMpG6tgWxI8pUES41fpLiJP6l+jkFZGXfJ1 QV0rY01jn/OhIHnhNJDclDAECN0qdLs4yrn8QR8Kw6o6spOgRYYpF9RrN8qdqYFa ttru0rGXyTbh6NrBcMFQDd5w2Qx5JcTVPZHfnFwHyxpTk7k375N8tA1twrNQA41l +vnjNOhCaCiR/kNr3qioLRayx5i6EsELRFN5STBr0esk2SnspgD1xJ9bqpvtA6Qw DcvcHLvxwHb3B1AmSMajVsf+rp70Sg74nDMXwMPnAOUxV2dd3TvWncl4aNzdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUME3b//ibX6ZhFIV6zKiGLZdCcB4wHwYDVR0j BBgwFoAUqdWGqCyxZpAvHRssrl60IPCNI9AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODE2NWU0ODEtNWE3OS00ODY4LWE0ZTQtZmFjZmQ5MjJkODEzLzAvQTlENTg2QTgy Q0IxNjY5MDJGMUQxQjJDQUU1RUI0MjBGMDhEMjNEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOUQ1ODZBODJDQjE2NjkwMkYxRDFCMkNBRTVFQjQyMEYwOEQy M0QwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODE2NWU0ODEtNWE3OS00ODY4LWE0 ZTQtZmFjZmQ5MjJkODEzLzAvQTlENTg2QTgyQ0IxNjY5MDJGMUQxQjJDQUU1RUI0 MjBGMDhEMjNEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI24MLlOFaa6+vpeuQ8hnXX/88A338VSJDfN tywM9ojdcT1Qct3pdx/948TPQVwwRtwNsrMJROdTmvseHM0d/zeNKXBVDDS+U8XH GEVlDzl4u7A3owe3J6F4wkuSYl3782niarxORZfH/MX4v5YXPwENeLCJNxhULPEG 0kU9B6SY81g0CYpDUjERUUNcCBWqyqXTAkrz9J9lqvjFvZGdlF1cYNjEgjwA1FFW b6qAVFjDPBxa0NaVOKkLKTInniodJzIegRaw7s3HKFMm8q7ni4/K9QUfJPWHLpQH m4baSXYIBAi8mBo7bIrRZwryUxVhatKAycUXt06hjyrBdsSRS8g= -----END CERTIFICATE-----Generated at Wed Jun 3 04:11:52 2026 by rpki-client