$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.mft File: 09235F29310425E354121090269C1EB6089EB0B2.mft (raw, json) Hash identifier: I11dy/2TkW+lq4Pgj7TGWwjaaXVLXbTJMWp6p3Su1zg= Subject key identifier: 79:54:A4:1E:7D:1E:C0:B0:21:2A:2B:7E:1A:78:29:C0:6A:08:6A:61 Authority key identifier: 09:23:5F:29:31:04:25:E3:54:12:10:90:26:9C:1E:B6:08:9E:B0:B2 Certificate issuer: /CN=09235F29310425E354121090269C1EB6089EB0B2 Certificate serial: 1193222FC7E527D49933D5B402E11009C3D4C667 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09235F29310425E354121090269C1EB6089EB0B2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 15:44:06 +0000 Manifest this update: Tue 02 Jun 2026 15:39:06 +0000 Manifest next update: Wed 03 Jun 2026 19:20:06 +0000 Files and hashes: 1: 3130332e3139302e312e302f32342d3234203d3e20313439383930.roa (hash: i3i9YlBMluNIH3LVCAsoGfBIszmnZLknI4mpG8oNRww=) 2: 3130332e3139302e302e302f32342d3234203d3e20313439383930.roa (hash: 2INetKIyYbbWVRJzq04gwfCzimGA1viA/2dx8yz7FAA=) 3: 09235F29310425E354121090269C1EB6089EB0B2.crl (hash: ujVo8rYJKNUSDabLhlui4LgztOTGJnPXSTHKhC5Ste4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.crl rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09235F29310425E354121090269C1EB6089EB0B2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:93:22:2f:c7:e5:27:d4:99:33:d5:b4:02:e1:10:09:c3:d4:c6:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09235F29310425E354121090269C1EB6089EB0B2 Validity Not Before: Jun 2 15:39:06 2026 GMT Not After : Jun 3 19:20:06 2026 GMT Subject: CN=7954A41E7D1EC0B0212A2B7E1A7829C06A086A61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:22:15:5c:02:56:37:19:29:ca:08:eb:7a:85: 12:83:aa:f2:03:5b:03:72:06:3e:2b:a5:37:dc:0d: 3d:a7:b0:83:99:f4:fd:f6:e2:e1:90:bc:01:eb:4b: ce:cf:96:2a:7b:15:18:02:ae:d8:58:1a:d8:4c:7a: be:a7:24:73:b3:86:81:b1:e5:c5:b3:8e:fb:29:5e: 39:aa:85:91:e1:97:1f:71:f2:bf:c4:fd:5d:15:fc: fc:53:0f:bc:da:06:c1:77:df:5f:4e:72:db:c5:92: 62:65:54:51:26:09:0f:15:d6:f8:97:2a:5e:dc:a3: dc:43:a8:47:5d:75:4c:0a:d7:92:53:09:6d:ea:ca: ed:1d:d7:db:fb:0f:67:45:43:cb:50:1a:8b:6c:66: 66:0c:e4:67:5f:64:77:bb:61:cd:7e:a8:c7:7c:76: 9d:1c:45:bf:7e:70:04:b2:56:19:cb:f1:f9:71:88: a6:44:e8:8e:2a:1d:62:e0:72:80:f2:fa:30:9e:1e: c6:6b:bd:42:6f:04:f4:a1:e1:0f:be:3a:e8:7b:d1: 2f:0f:c5:be:f2:7e:05:12:d2:64:89:b2:dc:a3:55: a2:5d:0b:d6:0d:a8:02:80:72:10:89:4a:6a:74:65: 4d:d2:e9:b2:03:d2:28:69:a0:ba:18:17:14:c3:69: dd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:54:A4:1E:7D:1E:C0:B0:21:2A:2B:7E:1A:78:29:C0:6A:08:6A:61 X509v3 Authority Key Identifier: keyid:09:23:5F:29:31:04:25:E3:54:12:10:90:26:9C:1E:B6:08:9E:B0:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09235F29310425E354121090269C1EB6089EB0B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:34:0e:bc:44:01:bb:d2:8a:75:86:2f:66:6b:7b:b9:13:4b: c7:8d:00:d1:88:66:90:0c:61:3d:d5:53:0f:99:e4:dc:04:34: b3:7c:78:24:1f:08:25:6a:c0:e5:1c:34:71:e2:ca:da:63:4a: 0b:83:fd:57:d0:bb:fd:85:33:43:5a:eb:78:da:66:63:22:33: b7:11:36:79:8c:c3:aa:96:76:d9:66:a9:16:52:ee:be:6f:e4: 9e:21:0d:10:45:43:cb:44:8f:c7:e6:44:52:df:03:ea:f5:e4: 33:32:ed:ad:ad:9e:1a:22:08:d4:9d:2d:a3:bb:83:65:92:77: f3:a9:aa:e6:d3:f7:8d:19:98:e1:cb:73:c8:94:c9:bf:16:39: 20:bb:2b:ac:0c:6e:36:2a:65:0f:a7:ac:66:59:29:04:81:61: bb:61:a8:05:c3:d4:c7:df:81:13:1e:4c:74:ed:cb:a2:02:5b: ef:b4:62:02:93:4b:34:a6:67:c7:36:ac:1f:36:39:b6:f4:f9: a9:01:e0:bd:c4:4c:08:1d:39:dd:d1:94:dd:2e:de:b3:27:34: a0:5b:86:57:86:49:62:82:74:40:b2:28:cc:5a:8b:4b:d2:c3: f2:04:fc:90:73:4d:c5:0e:42:cc:54:a8:ac:0a:e7:a3:67:23: 0b:e2:c6:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEZMiL8flJ9SZM9W0AuEQCcPUxmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkyMzVGMjkzMTA0MjVFMzU0MTIxMDkwMjY5QzFFQjYw ODlFQjBCMjAeFw0yNjA2MDIxNTM5MDZaFw0yNjA2MDMxOTIwMDZaMDMxMTAvBgNV BAMTKDc5NTRBNDFFN0QxRUMwQjAyMTJBMkI3RTFBNzgyOUMwNkEwODZBNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuIhVcAlY3GSnKCOt6hRKDqvID WwNyBj4rpTfcDT2nsIOZ9P324uGQvAHrS87Plip7FRgCrthYGthMer6nJHOzhoGx 5cWzjvspXjmqhZHhlx9x8r/E/V0V/PxTD7zaBsF3319OctvFkmJlVFEmCQ8V1viX Kl7co9xDqEdddUwK15JTCW3qyu0d19v7D2dFQ8tQGotsZmYM5GdfZHe7Yc1+qMd8 dp0cRb9+cASyVhnL8flxiKZE6I4qHWLgcoDy+jCeHsZrvUJvBPSh4Q++Ouh70S8P xb7yfgUS0mSJstyjVaJdC9YNqAKAchCJSmp0ZU3S6bID0ihpoLoYFxTDad2dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeVSkHn0ewLAhKit+GngpwGoIamEwHwYDVR0j BBgwFoAUCSNfKTEEJeNUEhCQJpwetgiesLIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZkYWQ4Y2ItYTUzNy00YzUwLWFmNmEtYWFiYTVmMWU3NjQ0LzAvMDkyMzVGMjkz MTA0MjVFMzU0MTIxMDkwMjY5QzFFQjYwODlFQjBCMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTIzNUYyOTMxMDQyNUUzNTQxMjEwOTAyNjlDMUVCNjA4OUVC MEIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZkYWQ4Y2ItYTUzNy00YzUwLWFm NmEtYWFiYTVmMWU3NjQ0LzAvMDkyMzVGMjkzMTA0MjVFMzU0MTIxMDkwMjY5QzFF QjYwODlFQjBCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIM0DrxEAbvSinWGL2Zre7kTS8eNANGIZpAM YT3VUw+Z5NwENLN8eCQfCCVqwOUcNHHiytpjSguD/VfQu/2FM0Na63jaZmMiM7cR NnmMw6qWdtlmqRZS7r5v5J4hDRBFQ8tEj8fmRFLfA+r15DMy7a2tnhoiCNSdLaO7 g2WSd/OpqubT940ZmOHLc8iUyb8WOSC7K6wMbjYqZQ+nrGZZKQSBYbthqAXD1Mff gRMeTHTty6ICW++0YgKTSzSmZ8c2rB82Obb0+akB4L3ETAgdOd3RlN0u3rMnNKBb hleGSWKCdECyKMxai0vSw/IE/JBzTcUOQsxUqKwK56NnIwvixi8= -----END CERTIFICATE-----Generated at Wed Jun 3 03:20:58 2026 by rpki-client