$ rpki-client -vvf rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft File: 9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft (raw, json) Hash identifier: jn00Qi7B07+LJtSTv5IB4f2D2TZyOgjpG27NiNuW+uc= Subject key identifier: F6:28:42:69:3B:E0:AB:E4:97:7D:8B:05:5A:26:D7:B6:33:2B:01:82 Authority key identifier: 9F:2F:D5:F0:22:2A:23:10:19:36:82:C9:DC:2C:AB:6A:7F:4C:EE:F0 Certificate issuer: /CN=9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0 Certificate serial: 5967BCA800B18D669498F355D2679315ACA33F4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 12:04:59 +0000 Manifest this update: Tue 02 Jun 2026 11:59:59 +0000 Manifest next update: Wed 03 Jun 2026 14:12:59 +0000 Files and hashes: 1: 3130332e3137342e36352e302f32342d3234203d3e20313437313236.roa (hash: wlJasn9sEpBfYIb16xYXhPNZ1TeKQ7fHYr3qJmH4nLE=) 2: 3130332e3137342e36342e302f32342d3234203d3e20313437313236.roa (hash: ZGD3gvwBGhA/oYppfcua832gpcsap+01GHOd/NYuTUc=) 3: 9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.crl (hash: RyJjkjuaNgWjGSYtke6gPKieWcclRNOQgUQa95Q1ny8=) 4: 3130332e3137342e36342e302f32332d3234203d3e20313437313236.roa (hash: BwYpBlP3m28Tfj+hQxoec6R8e4UN5PECSBz/IAuPt0w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.crl rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:67:bc:a8:00:b1:8d:66:94:98:f3:55:d2:67:93:15:ac:a3:3f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0 Validity Not Before: Jun 2 11:59:59 2026 GMT Not After : Jun 3 14:12:59 2026 GMT Subject: CN=F62842693BE0ABE4977D8B055A26D7B6332B0182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a1:77:1c:96:f8:a9:f8:28:87:6f:81:04:17: d4:52:68:f2:57:2f:4e:05:02:81:f7:19:f2:2a:ee: 7d:7a:b9:77:6b:24:a5:a4:cb:8c:89:61:5e:3a:79: 1b:85:41:31:7f:24:c6:03:a8:4c:27:f3:76:d0:ca: 25:0e:ad:33:d3:d5:de:d2:d6:e7:36:15:40:56:19: e7:94:83:7d:47:33:cc:15:3e:df:61:1a:6f:c0:3e: c4:e9:02:8e:8f:ea:86:3a:31:bb:7b:36:93:5a:ee: cf:51:84:0d:5b:51:8c:eb:51:67:00:49:18:25:f1: 43:b8:53:0e:f8:8d:26:ca:5c:a1:f6:2a:f1:ab:44: 87:60:d0:86:39:ab:05:cc:d6:58:76:0a:4c:7a:05: 3f:6d:c4:77:e8:ba:d4:fd:5c:d6:1e:1e:bb:4f:7d: a9:98:59:40:4e:1d:8e:f4:79:26:d0:93:a3:f4:4c: c0:6d:38:90:b0:b5:41:90:8c:e9:dd:c4:1f:2f:bb: 2d:fc:47:90:ae:02:a7:ec:9b:b2:40:f7:31:3a:a6: 4a:a6:ca:d8:e5:d5:4d:d6:a3:05:70:4b:61:a4:e9: 1c:ab:31:c6:ac:88:b4:09:b7:bf:74:8c:d3:72:fc: 32:e4:14:df:e0:ea:ba:a7:7a:7c:e4:c7:57:3e:d7: 83:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:28:42:69:3B:E0:AB:E4:97:7D:8B:05:5A:26:D7:B6:33:2B:01:82 X509v3 Authority Key Identifier: keyid:9F:2F:D5:F0:22:2A:23:10:19:36:82:C9:DC:2C:AB:6A:7F:4C:EE:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f9:cd:4d:7e:9e:fa:cf:09:c0:b5:4e:6c:24:76:9e:47:06: f0:4a:61:a3:11:83:89:1b:87:a1:a0:d6:18:03:fa:de:be:e9: 1b:32:6a:f9:d4:d2:7e:44:dd:ee:ee:f3:c2:35:60:7d:45:2b: d7:8c:80:fe:dc:b0:b0:e0:5a:42:ba:33:3f:3e:da:28:72:20: 1b:84:7f:0b:e9:38:d4:1b:af:b0:64:be:36:7e:a4:a0:98:67: c9:3f:df:b8:25:33:ad:b1:17:89:93:b1:09:e6:70:5f:d2:9e: 41:63:4a:72:6a:48:3a:71:56:7f:0d:e4:4a:07:7b:11:fe:32: 49:f0:20:16:04:0f:bf:d5:ab:e4:bc:d2:48:e4:2a:ad:db:24: 54:5e:08:ea:d1:21:b1:6d:a5:d9:35:f1:48:4f:9e:de:0d:ee: 09:4a:16:c7:a0:42:71:d1:80:c1:36:70:3a:e3:42:83:e4:8a: 2f:05:e2:c5:82:38:a4:e4:64:ec:2a:b3:f1:9f:a3:1e:20:9c: 9a:c8:c8:44:cc:97:c9:33:92:a3:ea:c9:be:0b:1a:9c:ab:f4: 8d:23:68:81:4d:d8:7c:e7:ca:ed:33:97:a8:f4:55:13:70:d6: ea:08:bd:88:9f:29:93:a5:c4:fc:00:be:e4:a0:8e:07:27:99: 7e:60:3b:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWWe8qACxjWaUmPNV0meTFayjP00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYyRkQ1RjAyMjJBMjMxMDE5MzY4MkM5REMyQ0FCNkE3 RjRDRUVGMDAeFw0yNjA2MDIxMTU5NTlaFw0yNjA2MDMxNDEyNTlaMDMxMTAvBgNV BAMTKEY2Mjg0MjY5M0JFMEFCRTQ5NzdEOEIwNTVBMjZEN0I2MzMyQjAxODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmoXcclvip+CiHb4EEF9RSaPJX L04FAoH3GfIq7n16uXdrJKWky4yJYV46eRuFQTF/JMYDqEwn83bQyiUOrTPT1d7S 1uc2FUBWGeeUg31HM8wVPt9hGm/APsTpAo6P6oY6Mbt7NpNa7s9RhA1bUYzrUWcA SRgl8UO4Uw74jSbKXKH2KvGrRIdg0IY5qwXM1lh2Ckx6BT9txHfoutT9XNYeHrtP famYWUBOHY70eSbQk6P0TMBtOJCwtUGQjOndxB8vuy38R5CuAqfsm7JA9zE6pkqm ytjl1U3WowVwS2Gk6RyrMcasiLQJt790jNNy/DLkFN/g6rqnenzkx1c+14NvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9ihCaTvgq+SXfYsFWibXtjMrAYIwHwYDVR0j BBgwFoAUny/V8CIqIxAZNoLJ3Cyran9M7vAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFmNGFiYmUtOGI1ZC00MDJiLTkwNTMtNTBiNzg1Yzc3MzUyLzAvOUYyRkQ1RjAy MjJBMjMxMDE5MzY4MkM5REMyQ0FCNkE3RjRDRUVGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjJGRDVGMDIyMkEyMzEwMTkzNjgyQzlEQzJDQUI2QTdGNENF RUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFmNGFiYmUtOGI1ZC00MDJiLTkw NTMtNTBiNzg1Yzc3MzUyLzAvOUYyRkQ1RjAyMjJBMjMxMDE5MzY4MkM5REMyQ0FC NkE3RjRDRUVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGz5zU1+nvrPCcC1Tmwkdp5HBvBKYaMRg4kb h6Gg1hgD+t6+6RsyavnU0n5E3e7u88I1YH1FK9eMgP7csLDgWkK6Mz8+2ihyIBuE fwvpONQbr7BkvjZ+pKCYZ8k/37glM62xF4mTsQnmcF/SnkFjSnJqSDpxVn8N5EoH exH+MknwIBYED7/Vq+S80kjkKq3bJFReCOrRIbFtpdk18UhPnt4N7glKFsegQnHR gME2cDrjQoPkii8F4sWCOKTkZOwqs/Gfox4gnJrIyETMl8kzkqPqyb4LGpyr9I0j aIFN2Hznyu0zl6j0VRNw1uoIvYifKZOlxPwAvuSgjgcnmX5gO/I= -----END CERTIFICATE-----Generated at Wed Jun 3 03:38:52 2026 by rpki-client