$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft File: C9C56B3341FC31139F57F78A815CF9851E91375E.mft (raw, json) Hash identifier: na3jQi7iFRDqvqF8JDPmIkCfx6MqpRn/MxfhZxcNHDI= Subject key identifier: DE:CF:D1:C0:2D:14:15:DD:3B:59:CB:97:43:7B:A8:58:FC:26:64:2A Authority key identifier: C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E Certificate issuer: /CN=C9C56B3341FC31139F57F78A815CF9851E91375E Certificate serial: 7A4A22CE1D43D6BAAC4953BC6BA719850CFBE257 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 11:29:15 +0000 Manifest this update: Tue 02 Jun 2026 11:24:15 +0000 Manifest next update: Wed 03 Jun 2026 13:58:15 +0000 Files and hashes: 1: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: YDyhEGDnWg4aoTzQ4Kj70ioCxeiG+fWs6BKdMJUBP40=) 2: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: UvvLQHaYsHEf6H/EOqibK//gY5katYyU5vu1/kohXeI=) 3: C9C56B3341FC31139F57F78A815CF9851E91375E.crl (hash: Vwm9Ab6eVH8E+uLcJV2phDS8QuosiTrqCtvetzKatBY=) 4: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: ++K50lF9/3pIjVc4GT4lTLKYd8Uj+kdHUPhBXnfZ3JA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:4a:22:ce:1d:43:d6:ba:ac:49:53:bc:6b:a7:19:85:0c:fb:e2:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9C56B3341FC31139F57F78A815CF9851E91375E Validity Not Before: Jun 2 11:24:15 2026 GMT Not After : Jun 3 13:58:15 2026 GMT Subject: CN=DECFD1C02D1415DD3B59CB97437BA858FC26642A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:19:33:90:59:4a:62:45:2b:98:53:04:42: 90:c6:ad:6a:0e:12:88:b1:b8:16:40:a3:22:78:91: 97:9e:6e:ed:8f:4e:c5:cf:c7:54:37:86:29:42:6f: 79:d1:3d:5d:12:5b:f6:48:dc:4d:a7:8a:87:01:bc: 62:16:48:82:68:02:e4:e8:54:4f:34:51:07:f5:45: 60:85:5a:45:94:43:22:1d:3a:41:0e:44:dc:89:49: b3:0b:cc:f3:4e:32:ed:74:13:cf:d1:93:9a:36:fc: 32:36:c5:73:3f:23:8b:7f:29:e7:ae:00:4d:47:36: b5:f1:70:1c:de:3e:d2:cc:58:2e:46:75:b1:18:01: e5:7a:5d:d4:77:2b:29:19:50:39:e3:29:39:88:97: d8:c8:79:d6:b4:c1:43:f8:53:a9:63:cb:3a:05:07: 13:36:7b:dc:68:c6:d7:b4:72:55:6a:23:0a:cc:63: c0:5d:ce:ff:e2:d7:5e:c0:7b:f4:1e:53:78:81:83: 4c:d9:15:0b:5c:27:a9:b7:fb:d1:b7:97:65:f7:53: bf:90:87:65:a0:6a:ea:0c:fe:ed:20:8d:19:a4:4a: 6f:15:c5:69:e8:05:4e:51:08:2c:4f:12:5d:85:83: f8:3b:42:0b:73:b2:48:45:b3:b0:a7:64:c3:fa:a1: a2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CF:D1:C0:2D:14:15:DD:3B:59:CB:97:43:7B:A8:58:FC:26:64:2A X509v3 Authority Key Identifier: keyid:C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:60:16:9d:64:1c:a3:be:dd:3d:32:78:45:f0:a0:9f:65:4f: ec:ec:eb:7c:0a:2e:07:be:4b:10:7a:71:01:94:15:ec:48:a2: 33:83:ff:5a:0f:be:d3:44:ce:ee:2d:fc:d8:5a:e0:95:36:32: a5:a7:8b:71:15:5c:c5:1d:47:2b:68:fd:d9:69:2b:82:f7:16: b3:a0:e0:3c:f7:3d:e9:04:20:7c:74:76:5d:16:5b:db:af:bc: 83:12:b4:cf:8c:df:90:1f:5d:4b:50:70:de:b0:0a:c1:19:c1: f9:3a:0f:3a:15:41:9c:7e:df:38:f2:d6:7d:fa:1b:34:ff:d8: 97:9f:e6:d0:1e:7f:82:ae:3c:bb:c8:44:55:6f:e3:ea:73:e1: 3a:28:3b:f4:6a:f1:97:99:8b:86:d1:b3:e5:c3:09:e7:f0:67: a8:a3:54:55:80:37:5f:1e:c6:8a:a9:30:8d:74:00:ed:02:68: 09:17:21:67:d8:e8:57:a4:ec:65:d4:89:9f:2e:77:9b:29:0d: a1:29:ea:e7:9e:41:66:13:f9:c6:70:3e:59:a8:67:fa:d6:ac: 68:94:6c:50:b9:ea:0f:1e:42:ea:f0:5c:7a:c6:b4:cc:0a:74: 01:de:b9:b3:f9:cd:5a:16:32:0e:7e:de:9a:e2:ea:2d:21:d2: 05:32:7e:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUekoizh1D1rqsSVO8a6cZhQz74lcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlDNTZCMzM0MUZDMzExMzlGNTdGNzhBODE1Q0Y5ODUx RTkxMzc1RTAeFw0yNjA2MDIxMTI0MTVaFw0yNjA2MDMxMzU4MTVaMDMxMTAvBgNV BAMTKERFQ0ZEMUMwMkQxNDE1REQzQjU5Q0I5NzQzN0JBODU4RkMyNjY0MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/gxkzkFlKYkUrmFMEQpDGrWoO EoixuBZAoyJ4kZeebu2PTsXPx1Q3hilCb3nRPV0SW/ZI3E2niocBvGIWSIJoAuTo VE80UQf1RWCFWkWUQyIdOkEORNyJSbMLzPNOMu10E8/Rk5o2/DI2xXM/I4t/Keeu AE1HNrXxcBzePtLMWC5GdbEYAeV6XdR3KykZUDnjKTmIl9jIeda0wUP4U6ljyzoF BxM2e9xoxte0clVqIwrMY8Bdzv/i117Ae/QeU3iBg0zZFQtcJ6m3+9G3l2X3U7+Q h2WgauoM/u0gjRmkSm8VxWnoBU5RCCxPEl2Fg/g7QgtzskhFs7CnZMP6oaKXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3s/RwC0UFd07WcuXQ3uoWPwmZCowHwYDVR0j BBgwFoAUycVrM0H8MROfV/eKgVz5hR6RN14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI4YTdmYTUtZmRhMy00YTNlLTkyZjctZmFiZmVkMDVhOTVjLzAvQzlDNTZCMzM0 MUZDMzExMzlGNTdGNzhBODE1Q0Y5ODUxRTkxMzc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUM1NkIzMzQxRkMzMTEzOUY1N0Y3OEE4MTVDRjk4NTFFOTEz NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvQzlDNTZCMzM0MUZDMzExMzlGNTdGNzhBODE1Q0Y5 ODUxRTkxMzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1gFp1kHKO+3T0yeEXwoJ9lT+zs63wKLge+ SxB6cQGUFexIojOD/1oPvtNEzu4t/Nha4JU2MqWni3EVXMUdRyto/dlpK4L3FrOg 4Dz3PekEIHx0dl0WW9uvvIMStM+M35AfXUtQcN6wCsEZwfk6DzoVQZx+3zjy1n36 GzT/2Jef5tAef4KuPLvIRFVv4+pz4TooO/Rq8ZeZi4bRs+XDCefwZ6ijVFWAN18e xoqpMI10AO0CaAkXIWfY6Fek7GXUiZ8ud5spDaEp6ueeQWYT+cZwPlmoZ/rWrGiU bFC56g8eQurwXHrGtMwKdAHeubP5zVoWMg5+3pri6i0h0gUyfnI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:22:55 2026 by rpki-client