$ rpki-client -vvf rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.mft File: 9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.mft (raw, json) Hash identifier: CyQjMl6lctirnLtwh8dNsldcBqk8FBVdd0XAK4A0DRY= Subject key identifier: 27:11:AB:10:7C:D7:6A:CE:96:F4:17:01:C8:C5:EE:9B:D5:C6:2A:5E Authority key identifier: 93:92:F9:5F:0C:33:94:DE:A7:FF:F9:85:C0:85:F4:FF:0A:26:60:FB Certificate issuer: /CN=9392F95F0C3394DEA7FFF985C085F4FF0A2660FB Certificate serial: 3E65CF96EEE45E4924C2B8C7D786F2E5DE011290 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 10:58:34 +0000 Manifest this update: Tue 02 Jun 2026 10:53:34 +0000 Manifest next update: Wed 03 Jun 2026 11:18:34 +0000 Files and hashes: 1: 9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.crl (hash: 3JfXcuMHe1hcnVGbO4KTmW4bNzPIL8wuQu6C+qTZNDk=) 2: 3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa (hash: 0pZQi9p2n6aMAqASFQQ+CaUR1jCRZ1Jmg90yao5WpBA=) 3: 3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (hash: JNrE3YAgSKkXvk2KuY4C3xc6vFJ8aaqlGvqUWAA5DE4=) 4: 3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa (hash: 2tG83qDLxajsJqT+je38BN6oGx2Pb5agqntR2yY+mUw=) 5: 3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa (hash: jnGR7HR1o9CjSKGxVZEINbrozGV4LnkdIOURY4rwMfA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.crl rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:65:cf:96:ee:e4:5e:49:24:c2:b8:c7:d7:86:f2:e5:de:01:12:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9392F95F0C3394DEA7FFF985C085F4FF0A2660FB Validity Not Before: Jun 2 10:53:34 2026 GMT Not After : Jun 3 11:18:34 2026 GMT Subject: CN=2711AB107CD76ACE96F41701C8C5EE9BD5C62A5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:56:f9:90:f5:3c:5c:bc:c4:8b:f6:74:f1:52: b9:75:f5:b9:d8:a0:bd:cc:71:74:da:d7:12:3a:90: b7:ee:58:e5:37:f7:3c:92:9a:69:ea:99:09:e7:d5: 9e:b9:2c:95:cd:e9:cc:fc:cd:6a:a3:06:7d:b1:df: fd:fa:03:1d:c4:28:aa:36:00:44:55:b9:7d:a2:eb: 2c:14:1f:b0:23:49:83:2a:de:e8:d6:0e:e5:d3:b0: 30:78:36:4d:50:29:b8:39:76:c4:81:a8:85:55:68: 18:7d:b6:93:c8:8b:f7:dd:50:cf:7b:49:81:1c:03: 8f:66:ca:28:b2:ed:09:ad:37:73:c7:cf:59:51:39: d1:87:42:db:e9:c6:74:da:65:3a:5c:c7:e1:db:e3: f6:04:df:67:9d:de:10:e7:82:47:83:4a:5a:b7:9e: 56:c1:d4:08:fa:dd:14:34:50:c5:01:f5:b5:f8:e3: 27:5e:8a:08:f2:e9:39:0f:0c:34:be:b2:32:d4:87: d6:85:c5:dd:b8:c3:8e:3b:ec:ef:d0:3d:43:c1:8f: c2:2d:d9:f2:f0:bc:65:4d:28:80:ca:5f:f4:08:88: ab:0e:1f:88:ff:59:8f:d5:6b:5d:da:91:1d:b0:bf: 1f:70:35:93:f7:50:37:54:90:23:e3:18:ee:06:e6: b3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:11:AB:10:7C:D7:6A:CE:96:F4:17:01:C8:C5:EE:9B:D5:C6:2A:5E X509v3 Authority Key Identifier: keyid:93:92:F9:5F:0C:33:94:DE:A7:FF:F9:85:C0:85:F4:FF:0A:26:60:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/9392F95F0C3394DEA7FFF985C085F4FF0A2660FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:c6:e5:d4:15:64:20:a8:ec:f4:8e:aa:7c:9b:7e:9f:43:5a: d6:fb:a2:a4:ed:1b:72:ea:72:39:ce:01:b0:09:f8:af:18:53: 1c:26:82:e8:de:d8:5d:e9:d5:84:89:05:68:c0:6f:c8:34:4c: 00:b1:6d:17:16:5a:aa:12:0f:9c:d0:33:4c:55:cc:b1:07:1a: 14:4f:7d:0b:84:c3:0d:3e:fd:61:f6:ee:9d:7c:6d:8f:a6:1d: 36:6e:18:e9:41:ba:d5:f4:e1:84:0b:3a:e0:c9:9e:7d:37:8e: 80:70:7a:2a:5c:23:e9:2a:72:2d:0d:4b:f7:df:e3:14:d0:44: 72:ff:b2:75:e6:e8:7b:ab:b2:93:c6:ce:da:59:d9:a8:f3:d7: c5:82:1d:26:b2:a4:72:c5:1e:35:06:76:ad:06:26:ea:38:64: da:8b:fa:cf:8b:01:3c:a8:c7:bf:8c:ae:0c:e0:97:f4:2a:ec: 3d:3f:60:88:c0:92:70:51:d4:7a:60:7b:62:f3:9e:51:5d:29: 1b:08:e9:bf:4a:52:3e:46:49:42:ce:c6:37:f8:77:2b:c4:5e: 47:41:18:e8:36:1d:e9:a5:b0:58:21:60:bb:0d:d4:69:cc:0e: 5f:1b:93:c0:d5:83:18:0e:13:fd:7e:fb:06:f5:c2:bb:0a:d1: 59:02:ff:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmXPlu7kXkkkwrjH14by5d4BEpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM5MkY5NUYwQzMzOTRERUE3RkZGOTg1QzA4NUY0RkYw QTI2NjBGQjAeFw0yNjA2MDIxMDUzMzRaFw0yNjA2MDMxMTE4MzRaMDMxMTAvBgNV BAMTKDI3MTFBQjEwN0NENzZBQ0U5NkY0MTcwMUM4QzVFRTlCRDVDNjJBNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcVvmQ9TxcvMSL9nTxUrl19bnY oL3McXTa1xI6kLfuWOU39zySmmnqmQnn1Z65LJXN6cz8zWqjBn2x3/36Ax3EKKo2 AERVuX2i6ywUH7AjSYMq3ujWDuXTsDB4Nk1QKbg5dsSBqIVVaBh9tpPIi/fdUM97 SYEcA49myiiy7QmtN3PHz1lROdGHQtvpxnTaZTpcx+Hb4/YE32ed3hDngkeDSlq3 nlbB1Aj63RQ0UMUB9bX44ydeigjy6TkPDDS+sjLUh9aFxd24w4477O/QPUPBj8It 2fLwvGVNKIDKX/QIiKsOH4j/WY/Va13akR2wvx9wNZP3UDdUkCPjGO4G5rMxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJxGrEHzXas6W9BcByMXum9XGKl4wHwYDVR0j BBgwFoAUk5L5XwwzlN6n//mFwIX0/womYPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OThmOTI0NDctYWNkMy00MjdjLWI1ZTctZGIzOTE3ZjE4NWM4LzAvOTM5MkY5NUYw QzMzOTRERUE3RkZGOTg1QzA4NUY0RkYwQTI2NjBGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzkyRjk1RjBDMzM5NERFQTdGRkY5ODVDMDg1RjRGRjBBMjY2 MEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOThmOTI0NDctYWNkMy00MjdjLWI1 ZTctZGIzOTE3ZjE4NWM4LzAvOTM5MkY5NUYwQzMzOTRERUE3RkZGOTg1QzA4NUY0 RkYwQTI2NjBGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrG5dQVZCCo7PSOqnybfp9DWtb7oqTtG3Lq cjnOAbAJ+K8YUxwmguje2F3p1YSJBWjAb8g0TACxbRcWWqoSD5zQM0xVzLEHGhRP fQuEww0+/WH27p18bY+mHTZuGOlButX04YQLOuDJnn03joBweipcI+kqci0NS/ff 4xTQRHL/snXm6HurspPGztpZ2ajz18WCHSaypHLFHjUGdq0GJuo4ZNqL+s+LATyo x7+Mrgzgl/Qq7D0/YIjAknBR1Hpge2LznlFdKRsI6b9KUj5GSULOxjf4dyvEXkdB GOg2HemlsFghYLsN1GnMDl8bk8DVgxgOE/1++wb1wrsK0VkC/9c= -----END CERTIFICATE-----Generated at Wed Jun 3 03:53:49 2026 by rpki-client