$ rpki-client -vvf rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft File: 9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft (raw, json) Hash identifier: kcMwVGz1XcQRBg623j+xC4P4ov3DpTScA6UVv2p8yqM= Subject key identifier: FD:9D:B1:84:A8:CD:8D:48:84:C9:F1:E6:3C:49:D8:8F:0B:31:42:69 Authority key identifier: 9F:73:03:1D:F0:49:FC:EA:B5:E8:BD:52:42:74:7E:7D:7D:C4:B4:DD Certificate issuer: /CN=9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD Certificate serial: 2E727E6C4AA630F45797F0AE7A11DB0F3EE5DDC7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 12:20:19 +0000 Manifest this update: Tue 02 Jun 2026 12:15:19 +0000 Manifest next update: Wed 03 Jun 2026 14:28:19 +0000 Files and hashes: 1: 323030313a6466353a653238303a3a2f34382d3438203d3e20313431363430.roa (hash: hxbNx1sHpQ2uA7gDNNgf9BYGTMjlNV/I+vSevN2AYMQ=) 2: 3130332e3136322e31392e302f32342d3234203d3e20313431363430.roa (hash: 96iWJc2ow6yzAUODuhe0zI0zVFmk0TX0H28U4QCHRcE=) 3: 9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.crl (hash: FnMA+DU7uNHypSXNKlvhlAmQe7lkQR4Ddm8m0Wd6RRk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.crl rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 14:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:72:7e:6c:4a:a6:30:f4:57:97:f0:ae:7a:11:db:0f:3e:e5:dd:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD Validity Not Before: Jun 2 12:15:19 2026 GMT Not After : Jun 3 14:28:19 2026 GMT Subject: CN=FD9DB184A8CD8D4884C9F1E63C49D88F0B314269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:49:c5:80:b2:13:8b:fb:57:a7:49:25:64:9a: 64:a1:c9:7a:50:9a:f0:ce:37:53:cc:0e:07:64:d6: db:a2:07:c4:7a:60:2e:33:f9:b4:a4:de:09:91:44: 47:e9:e3:cc:35:a6:04:db:ec:c0:12:cd:b2:99:cb: 40:40:8b:2f:79:1d:2e:1a:73:29:9a:23:28:5b:94: f6:ea:b4:ce:43:7a:d3:c7:27:8e:5c:d6:5d:de:b3: db:0f:87:50:ea:4b:80:29:34:4f:92:d6:ce:b9:f2: 9d:88:39:63:70:4c:68:7b:c7:7d:94:c9:bb:7e:66: 2b:6c:25:7d:9a:bb:52:0f:a8:1b:63:cf:b2:4b:b0: 89:d0:2d:1c:70:32:43:ea:98:a9:28:3f:e8:68:12: 99:c1:56:82:24:0c:e6:7f:87:df:51:e4:98:0b:b6: 8e:29:48:68:38:8e:65:00:7e:69:2e:c0:24:ae:ec: 63:d1:4c:2d:1f:ba:60:19:f8:dc:09:88:34:b0:f1: ce:8a:1b:57:67:b6:0d:27:95:80:a0:de:ac:9d:81: 2d:e0:9a:cb:fa:5a:c7:33:04:d1:c3:71:b5:6f:7b: 59:e6:3d:b4:08:e7:23:99:6d:31:a8:e9:2d:65:45: 0e:e7:26:15:d9:56:5c:e3:53:79:5d:9d:0a:a0:67: 0e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9D:B1:84:A8:CD:8D:48:84:C9:F1:E6:3C:49:D8:8F:0B:31:42:69 X509v3 Authority Key Identifier: keyid:9F:73:03:1D:F0:49:FC:EA:B5:E8:BD:52:42:74:7E:7D:7D:C4:B4:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:d6:8f:22:b7:b2:04:df:1f:0a:3a:2c:d6:5b:42:d4:18:1f: 05:f3:7c:d9:6b:d5:4f:34:44:c0:e8:7c:e2:00:1b:b5:b3:34: d9:dc:14:a7:2c:63:94:cc:f6:7e:6f:59:ab:dc:e2:87:29:66: 01:9f:83:3e:e1:b7:b9:6e:c9:60:cd:b1:72:13:a2:c5:04:a8: 45:63:1b:8a:e4:93:b1:77:c1:ac:b3:6b:e0:71:9d:13:4d:64: 76:de:16:8e:ca:de:8a:df:20:3d:74:99:8d:15:62:d8:53:e3: ee:28:a4:15:76:61:e2:ac:5b:82:e5:53:73:2c:5b:76:a3:49: bf:cd:80:5a:70:eb:bc:2c:db:0a:27:87:b4:55:95:62:f2:8f: 99:9b:1a:41:34:13:fd:e2:14:d3:63:21:c9:0a:41:ff:e3:0f: 0b:24:85:69:f1:8b:3f:aa:27:77:f6:96:33:6a:f2:9a:51:7c: bf:4a:c5:21:26:a0:fa:2b:04:83:87:1d:ad:ea:7e:2a:0b:cb: 5f:0c:58:e9:d2:7b:8e:b5:35:e7:07:14:fe:84:31:74:58:70: 64:6b:7c:75:cc:67:fb:d4:df:9c:4d:d8:3b:33:45:d9:57:f5: 62:d9:84:7b:3f:de:5c:12:d5:fa:f7:52:c1:b4:88:7f:1d:ab: 04:2e:f2:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULnJ+bEqmMPRXl/CuehHbDz7l3ccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY3MzAzMURGMDQ5RkNFQUI1RThCRDUyNDI3NDdFN0Q3 REM0QjRERDAeFw0yNjA2MDIxMjE1MTlaFw0yNjA2MDMxNDI4MTlaMDMxMTAvBgNV BAMTKEZEOURCMTg0QThDRDhENDg4NEM5RjFFNjNDNDlEODhGMEIzMTQyNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtScWAshOL+1enSSVkmmShyXpQ mvDON1PMDgdk1tuiB8R6YC4z+bSk3gmRREfp48w1pgTb7MASzbKZy0BAiy95HS4a cymaIyhblPbqtM5DetPHJ45c1l3es9sPh1DqS4ApNE+S1s658p2IOWNwTGh7x32U ybt+ZitsJX2au1IPqBtjz7JLsInQLRxwMkPqmKkoP+hoEpnBVoIkDOZ/h99R5JgL to4pSGg4jmUAfmkuwCSu7GPRTC0fumAZ+NwJiDSw8c6KG1dntg0nlYCg3qydgS3g msv6WsczBNHDcbVve1nmPbQI5yOZbTGo6S1lRQ7nJhXZVlzjU3ldnQqgZw7TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Z2xhKjNjUiEyfHmPEnYjwsxQmkwHwYDVR0j BBgwFoAUn3MDHfBJ/Oq16L1SQnR+fX3EtN0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWNjNjM3YmQtNTk3MS00MjY0LTk5N2EtNzQ5ZDgwNGE2ODU4LzAvOUY3MzAzMURG MDQ5RkNFQUI1RThCRDUyNDI3NDdFN0Q3REM0QjRERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjczMDMxREYwNDlGQ0VBQjVFOEJENTI0Mjc0N0U3RDdEQzRC NERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWNjNjM3YmQtNTk3MS00MjY0LTk5 N2EtNzQ5ZDgwNGE2ODU4LzAvOUY3MzAzMURGMDQ5RkNFQUI1RThCRDUyNDI3NDdF N0Q3REM0QjRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbWjyK3sgTfHwo6LNZbQtQYHwXzfNlr1U80 RMDofOIAG7WzNNncFKcsY5TM9n5vWavc4ocpZgGfgz7ht7luyWDNsXITosUEqEVj G4rkk7F3wayza+BxnRNNZHbeFo7K3orfID10mY0VYthT4+4opBV2YeKsW4LlU3Ms W3ajSb/NgFpw67ws2wonh7RVlWLyj5mbGkE0E/3iFNNjIckKQf/jDwskhWnxiz+q J3f2ljNq8ppRfL9KxSEmoPorBIOHHa3qfioLy18MWOnSe461NecHFP6EMXRYcGRr fHXMZ/vU35xN2DszRdlX9WLZhHs/3lwS1fr3UsG0iH8dqwQu8pg= -----END CERTIFICATE-----Generated at Wed Jun 3 04:04:59 2026 by rpki-client