$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft File: 9C227785E7A190271A628E29FFB9374BECA61154.mft (raw, json) Hash identifier: ZROrXNV+hGvOlRkUo7ObhQBRNocWL8ZrwcKg4DU2Rfw= Subject key identifier: 1B:7C:FB:0C:9C:83:09:DC:71:EC:12:E2:C8:88:5C:65:5D:29:A6:07 Authority key identifier: 9C:22:77:85:E7:A1:90:27:1A:62:8E:29:FF:B9:37:4B:EC:A6:11:54 Certificate issuer: /CN=9C227785E7A190271A628E29FFB9374BECA61154 Certificate serial: 7821FD6A4CE3D459C4BB91C843330E812636E89D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C227785E7A190271A628E29FFB9374BECA61154.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 14:37:53 +0000 Manifest this update: Tue 02 Jun 2026 14:32:53 +0000 Manifest next update: Wed 03 Jun 2026 17:40:53 +0000 Files and hashes: 1: 3130332e3132322e3230322e302f32342d3234203d3e20313338303733.roa (hash: bJXWECjiuCYMun/6fgF6wLQ0iGSb4mFhCIoJYAqk5LQ=) 2: 9C227785E7A190271A628E29FFB9374BECA61154.crl (hash: MO2GuS+H0rR5BLmyhZl6bdATSePfNdWAXbepcQTuUN0=) 3: 3130332e3132322e3230332e302f32342d3234203d3e20313338303733.roa (hash: OSktfcUOEhaPa/dtCu8RSESeObR9iQ/cknxFlh9rYYM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.crl rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C227785E7A190271A628E29FFB9374BECA61154.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 17:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:21:fd:6a:4c:e3:d4:59:c4:bb:91:c8:43:33:0e:81:26:36:e8:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C227785E7A190271A628E29FFB9374BECA61154 Validity Not Before: Jun 2 14:32:53 2026 GMT Not After : Jun 3 17:40:53 2026 GMT Subject: CN=1B7CFB0C9C8309DC71EC12E2C8885C655D29A607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ae:c8:95:fe:85:c6:99:1c:10:57:49:5d:2f: 55:d3:7b:e4:e3:7f:3b:98:c1:83:2a:0c:e1:d5:84: 4d:62:84:15:c9:4d:78:11:ba:79:10:d3:71:9d:76: d7:58:42:64:e5:ae:65:b1:fd:9c:f4:95:8d:c3:24: 3c:93:c9:1e:a3:3b:95:11:fe:4e:a8:72:0c:88:8a: ac:87:f4:3e:2c:f5:d5:22:3b:5a:ba:17:ab:a0:d7: 92:5f:fe:d2:7d:7c:b5:01:87:67:9b:ff:38:17:25: 97:ef:d4:58:d3:da:91:b7:72:88:4a:29:4e:e1:85: fe:79:99:67:2b:0f:ad:4a:26:7d:5b:40:f0:62:fc: 84:fe:dd:1b:82:68:1b:1f:39:c2:d7:69:6f:49:be: b6:08:19:cb:e3:0c:af:d8:22:8c:92:f0:ec:be:a7: bb:60:56:18:ec:51:cd:cb:32:3b:21:d8:33:3d:c2: 13:9f:fb:6a:a1:e7:50:df:86:3e:50:6b:e0:f5:76: bf:e1:49:61:4a:87:83:46:e4:b7:df:bd:1f:07:ab: f4:ec:34:c6:06:0d:50:c2:7a:81:83:2e:68:ed:e3: 04:e9:08:59:65:96:ac:4b:dd:ed:b1:1f:fb:23:86: 53:d4:4b:64:5b:02:f7:08:16:01:56:5f:4c:ad:78: b4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7C:FB:0C:9C:83:09:DC:71:EC:12:E2:C8:88:5C:65:5D:29:A6:07 X509v3 Authority Key Identifier: keyid:9C:22:77:85:E7:A1:90:27:1A:62:8E:29:FF:B9:37:4B:EC:A6:11:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C227785E7A190271A628E29FFB9374BECA61154.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:8f:4b:e5:d0:8d:36:2c:b0:96:40:fb:f6:b4:f9:a8:29:38: cd:f5:5b:51:8c:da:f9:ab:e1:90:fe:c8:94:90:75:05:84:4d: 58:a7:99:6b:63:0c:bc:05:5c:37:2f:a1:6d:57:3e:2c:26:31: b6:dc:e2:e3:a6:8d:10:89:0a:13:f2:10:24:fe:b6:f3:9a:9f: e8:1c:7a:ed:b4:21:ad:b6:c6:85:38:da:7c:a9:2e:47:1c:cd: 5e:2b:c6:b7:8e:bd:39:5a:0d:a3:60:a3:c2:d4:7e:b7:87:f0: 9d:e9:1f:d3:16:f4:d6:8c:18:c8:23:cf:81:19:85:7a:e5:f2: f3:35:1b:5a:35:18:f0:bc:d7:c2:8d:52:f1:bd:5f:cb:45:b9: 06:9b:4e:7e:38:f4:82:52:c2:8b:bc:0d:73:22:30:a8:25:21: 98:28:48:43:00:62:a1:47:51:28:54:d2:83:12:9c:f4:8e:ac: 29:71:b5:47:eb:80:c4:7c:4f:43:06:8e:6f:00:58:57:c8:a9: cc:60:f1:3e:4a:7d:8d:9b:b6:e7:43:08:ff:3f:84:91:3f:bc: c8:40:af:fd:2e:cd:54:a3:ec:19:c5:75:43:55:76:14:8c:99: eb:1f:2a:d6:65:7d:9b:32:e3:fb:c8:a3:dd:3f:0d:58:8f:42: d5:57:b7:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeCH9akzj1FnEu5HIQzMOgSY26J0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMyMjc3ODVFN0ExOTAyNzFBNjI4RTI5RkZCOTM3NEJF Q0E2MTE1NDAeFw0yNjA2MDIxNDMyNTNaFw0yNjA2MDMxNzQwNTNaMDMxMTAvBgNV BAMTKDFCN0NGQjBDOUM4MzA5REM3MUVDMTJFMkM4ODg1QzY1NUQyOUE2MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRrsiV/oXGmRwQV0ldL1XTe+Tj fzuYwYMqDOHVhE1ihBXJTXgRunkQ03GddtdYQmTlrmWx/Zz0lY3DJDyTyR6jO5UR /k6ocgyIiqyH9D4s9dUiO1q6F6ug15Jf/tJ9fLUBh2eb/zgXJZfv1FjT2pG3cohK KU7hhf55mWcrD61KJn1bQPBi/IT+3RuCaBsfOcLXaW9JvrYIGcvjDK/YIoyS8Oy+ p7tgVhjsUc3LMjsh2DM9whOf+2qh51Dfhj5Qa+D1dr/hSWFKh4NG5LffvR8Hq/Ts NMYGDVDCeoGDLmjt4wTpCFlllqxL3e2xH/sjhlPUS2RbAvcIFgFWX0yteLTLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG3z7DJyDCdxx7BLiyIhcZV0ppgcwHwYDVR0j BBgwFoAUnCJ3heehkCcaYo4p/7k3S+ymEVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWQ0ZjYzZTQtNmZiMy00YjAzLWIyMTAtYjU2ODZjZDViMzk3LzAvOUMyMjc3ODVF N0ExOTAyNzFBNjI4RTI5RkZCOTM3NEJFQ0E2MTE1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QzIyNzc4NUU3QTE5MDI3MUE2MjhFMjlGRkI5Mzc0QkVDQTYx MTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWQ0ZjYzZTQtNmZiMy00YjAzLWIy MTAtYjU2ODZjZDViMzk3LzAvOUMyMjc3ODVFN0ExOTAyNzFBNjI4RTI5RkZCOTM3 NEJFQ0E2MTE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCPS+XQjTYssJZA+/a0+agpOM31W1GM2vmr 4ZD+yJSQdQWETVinmWtjDLwFXDcvoW1XPiwmMbbc4uOmjRCJChPyECT+tvOan+gc eu20Ia22xoU42nypLkcczV4rxreOvTlaDaNgo8LUfreH8J3pH9MW9NaMGMgjz4EZ hXrl8vM1G1o1GPC818KNUvG9X8tFuQabTn449IJSwou8DXMiMKglIZgoSEMAYqFH UShU0oMSnPSOrClxtUfrgMR8T0MGjm8AWFfIqcxg8T5KfY2btudDCP8/hJE/vMhA r/0uzVSj7BnFdUNVdhSMmesfKtZlfZsy4/vIo90/DViPQtVXtw4= -----END CERTIFICATE-----Generated at Wed Jun 3 03:50:16 2026 by rpki-client