$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft File: B9E54455BBADEE4051F79D907B7453E95F13B467.mft (raw, json) Hash identifier: PbWOOPPVRgdqq3+f9Znre8zNeDwYe82gnJSGYinwtSg= Subject key identifier: 78:6F:24:6C:E4:EC:19:C7:EB:64:52:26:70:BF:A7:AD:A6:BB:D6:3F Authority key identifier: B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67 Certificate issuer: /CN=B9E54455BBADEE4051F79D907B7453E95F13B467 Certificate serial: 34A0326C10DCB55DA64AB7ED93A794D3A59416A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:12:00 +0000 Manifest this update: Tue 02 Jun 2026 18:07:00 +0000 Manifest next update: Wed 03 Jun 2026 18:30:00 +0000 Files and hashes: 1: 3130332e36362e34352e302f32342d3234203d3e203233363934.roa (hash: vFfmqz/S7K4aLguWPn5rp+ugEbZkxGvqsu4n1XKxUAg=) 2: 3130332e36362e34372e302f32342d3234203d3e203233363934.roa (hash: 8BxjP7wp2ny7XMMIeYWn2YhapQVIdzgBdHrT8RAE1hI=) 3: 3130332e36362e34342e302f32332d3233203d3e203233363934.roa (hash: 7pPEEFuxF2xingEKFsHlopxNVPNMkufYI24t0NlMTEY=) 4: 323030313a6466323a623230303a3a2f34382d3438203d3e203233363934.roa (hash: /KOgzrDFq/tIyDOkqLi1nhsbulS+0UUYSYry8OoTmJg=) 5: B9E54455BBADEE4051F79D907B7453E95F13B467.crl (hash: HHCw50BskbBKzkSOxTWP1mYr6KzTeXpOVFfyEqQijUg=) 6: 3130332e36362e34362e302f32342d3234203d3e203233363934.roa (hash: UedpVAHn21ooqLw8ovvpIgJ1soqSurJAxq23sQ+qlfw=) 7: 3130332e36362e34362e302f32332d3233203d3e203233363934.roa (hash: wr2AUAIBj15wOmk+O8JERfUGMC5W1ujwy25yjBMhvGA=) 8: 3130332e36362e34342e302f32342d3234203d3e203233363934.roa (hash: Mm+87+26OdYLR0WzbeBFR1Yx08pPggtvOd7SnjyjkXk=) 9: 3130332e36362e34342e302f32322d3232203d3e203233363934.roa (hash: 2snLe8yK3Bohn4tsm/dGVrhksjjX4tISeXo0oWw/2NQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 18:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a0:32:6c:10:dc:b5:5d:a6:4a:b7:ed:93:a7:94:d3:a5:94:16:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9E54455BBADEE4051F79D907B7453E95F13B467 Validity Not Before: Jun 2 18:07:00 2026 GMT Not After : Jun 3 18:30:00 2026 GMT Subject: CN=786F246CE4EC19C7EB64522670BFA7ADA6BBD63F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:65:93:97:2e:da:00:c6:f7:9b:8b:24:fc:8b: 9d:8a:b4:3b:83:e2:00:f6:59:7f:e3:29:e6:73:58: a7:77:23:54:71:1d:3c:a3:90:5b:9e:b9:03:30:bc: e8:63:d9:94:53:c3:f5:ac:58:b7:b2:e1:bd:55:b2: 86:1c:55:43:6b:13:07:0b:be:ec:5c:30:c8:e5:1b: 70:2d:d4:c1:2c:28:d4:cd:e3:56:3d:18:bb:a6:39: 98:15:4e:f2:50:34:67:10:3b:a3:57:7f:df:69:8f: 47:be:86:55:21:6c:09:fa:28:a2:e0:31:69:b4:26: 0e:2c:10:54:fd:8c:89:d3:55:88:7e:72:9d:f0:81: e4:23:e6:02:e9:23:1b:9c:f7:28:d1:48:e9:7c:66: 78:fd:11:50:99:67:6d:5c:3c:38:51:33:f4:57:f9: b3:e4:50:9a:7f:dc:39:8a:79:12:aa:25:f6:fc:1f: d3:26:f4:8b:39:23:a5:85:c7:88:ce:4b:1f:40:6c: 51:67:f4:3f:02:b8:8b:71:de:7d:8f:35:79:e3:7c: a7:2e:14:76:2b:fd:f1:bc:f5:bf:31:a9:9b:9b:69: 2e:01:ca:d9:15:56:d3:03:b1:11:4c:d7:74:9e:5f: 9d:cb:09:fb:48:98:d4:bd:d2:06:a7:01:59:74:e7: 6a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6F:24:6C:E4:EC:19:C7:EB:64:52:26:70:BF:A7:AD:A6:BB:D6:3F X509v3 Authority Key Identifier: keyid:B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:89:b7:4e:6a:4f:c1:07:81:99:99:be:21:6f:35:8c:35:83: 94:68:02:e1:28:e5:56:41:b6:45:97:a4:d7:db:dc:7b:8b:44: e6:08:3c:03:34:b0:5a:94:7d:ce:77:89:35:e0:8f:6c:e2:43: 09:c9:c5:1c:21:23:03:61:27:d8:a3:00:d1:b9:81:aa:82:46: 01:92:78:13:fb:98:9b:0e:3f:7a:41:6f:5d:51:75:ec:d7:a7: 71:e3:1f:3c:e7:2f:be:cd:d4:a8:48:cd:cf:c6:5c:f7:27:ad: 93:4f:e5:64:be:37:ac:eb:1e:83:3e:39:9d:51:81:e1:b6:60: 70:bc:3f:07:dd:62:82:99:e0:b2:6b:73:18:b1:65:42:7a:cf: 8b:ef:4d:b9:7f:86:4d:89:44:70:38:65:de:dc:e3:b6:b6:54: 7e:f5:28:b5:6a:4e:af:0b:c0:99:5c:e1:95:d2:e7:7d:1b:4b: 57:0e:8b:e0:1f:15:41:d4:d4:b8:dc:f9:18:73:ec:d7:a4:66: 52:14:9b:2f:0d:10:5e:31:cc:cb:41:a2:5e:ba:8f:27:40:ba: bf:56:61:2c:66:ef:8f:51:2a:f1:c3:f6:03:81:a3:2f:05:30: 78:f3:97:65:e8:7e:c4:f5:73:97:a1:9d:72:b8:43:a8:7a:f9: 4d:91:d9:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNKAybBDctV2mSrftk6eU06WUFqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlFNTQ0NTVCQkFERUU0MDUxRjc5RDkwN0I3NDUzRTk1 RjEzQjQ2NzAeFw0yNjA2MDIxODA3MDBaFw0yNjA2MDMxODMwMDBaMDMxMTAvBgNV BAMTKDc4NkYyNDZDRTRFQzE5QzdFQjY0NTIyNjcwQkZBN0FEQTZCQkQ2M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDZZOXLtoAxvebiyT8i52KtDuD 4gD2WX/jKeZzWKd3I1RxHTyjkFueuQMwvOhj2ZRTw/WsWLey4b1VsoYcVUNrEwcL vuxcMMjlG3At1MEsKNTN41Y9GLumOZgVTvJQNGcQO6NXf99pj0e+hlUhbAn6KKLg MWm0Jg4sEFT9jInTVYh+cp3wgeQj5gLpIxuc9yjRSOl8Znj9EVCZZ21cPDhRM/RX +bPkUJp/3DmKeRKqJfb8H9Mm9Is5I6WFx4jOSx9AbFFn9D8CuItx3n2PNXnjfKcu FHYr/fG89b8xqZubaS4BytkVVtMDsRFM13SeX53LCftImNS90ganAVl052oFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeG8kbOTsGcfrZFImcL+nraa71j8wHwYDVR0j BBgwFoAUueVEVbut7kBR952Qe3RT6V8TtGcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGI0Zjg1MTEtMDdiMy00YTYxLWJkMDQtMmU2NjVjOTI3OGZjLzAvQjlFNTQ0NTVC QkFERUU0MDUxRjc5RDkwN0I3NDUzRTk1RjEzQjQ2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUU1NDQ1NUJCQURFRTQwNTFGNzlEOTA3Qjc0NTNFOTVGMTNC NDY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGI0Zjg1MTEtMDdiMy00YTYxLWJk MDQtMmU2NjVjOTI3OGZjLzAvQjlFNTQ0NTVCQkFERUU0MDUxRjc5RDkwN0I3NDUz RTk1RjEzQjQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALuJt05qT8EHgZmZviFvNYw1g5RoAuEo5VZB tkWXpNfb3HuLROYIPAM0sFqUfc53iTXgj2ziQwnJxRwhIwNhJ9ijANG5gaqCRgGS eBP7mJsOP3pBb11RdezXp3HjHzznL77N1KhIzc/GXPcnrZNP5WS+N6zrHoM+OZ1R geG2YHC8PwfdYoKZ4LJrcxixZUJ6z4vvTbl/hk2JRHA4Zd7c47a2VH71KLVqTq8L wJlc4ZXS530bS1cOi+AfFUHU1Ljc+Rhz7NekZlIUmy8NEF4xzMtBol66jydAur9W YSxm749RKvHD9gOBoy8FMHjzl2XofsT1c5ehnXK4Q6h6+U2R2d0= -----END CERTIFICATE-----Generated at Wed Jun 3 04:05:00 2026 by rpki-client