$ rpki-client -vvf rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft File: 09F1FCE71540608DD361D20037B585CA6313B714.mft (raw, json) Hash identifier: 8QCtt5bWmNar0uXh9DAk1hxgWq9ydYxAWT20x/rEOSg= Subject key identifier: 9F:7E:4D:C9:99:C4:1D:B9:97:75:F0:FB:7D:2E:A2:C9:6C:80:18:B9 Authority key identifier: 09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14 Certificate issuer: /CN=09F1FCE71540608DD361D20037B585CA6313B714 Certificate serial: 1576B0B73D0D72DD9823119D347764D3E63BE06D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:29:49 +0000 Manifest this update: Tue 02 Jun 2026 16:24:49 +0000 Manifest next update: Wed 03 Jun 2026 19:43:49 +0000 Files and hashes: 1: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (hash: Tdrs/9MxQFRJ04JmOuNBrPQeJZxfkO1jdYAYtxuEviE=) 2: 09F1FCE71540608DD361D20037B585CA6313B714.crl (hash: F7uKz8ITsOy3spdFSoZi+6rCk0I3w7DqttjZhtqt9f0=) 3: 323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (hash: lNRKhcmiZUAq3a5jFdaJmEqXMHj1lj+pscOEkjDxix0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 19:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:76:b0:b7:3d:0d:72:dd:98:23:11:9d:34:77:64:d3:e6:3b:e0:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F1FCE71540608DD361D20037B585CA6313B714 Validity Not Before: Jun 2 16:24:49 2026 GMT Not After : Jun 3 19:43:49 2026 GMT Subject: CN=9F7E4DC999C41DB99775F0FB7D2EA2C96C8018B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:51:30:86:b9:f5:36:f9:6e:c2:66:13:90:cd: ad:0a:56:60:80:cb:56:7e:56:b8:f4:a4:99:69:f8: 82:a5:6a:24:e9:ce:1d:5d:18:67:55:08:7b:70:6b: 3c:41:49:7c:f4:53:93:3a:52:c3:e7:76:68:52:da: 1e:c1:aa:0b:02:8a:be:52:e3:7b:59:a6:b7:54:18: 14:a7:e5:f7:ca:38:3c:c5:a0:09:83:83:48:6d:ca: fb:85:18:a7:de:fc:a0:76:7f:85:1b:e1:78:b5:fe: 78:aa:af:97:03:16:1b:82:6e:9d:38:d3:85:a5:1c: 34:f2:cc:36:a5:9f:58:a5:9e:2f:a0:35:80:1e:f1: a0:30:84:a5:8b:70:aa:18:8e:58:bc:01:50:bf:4a: d1:6b:99:0c:44:8c:39:1a:a6:00:15:ed:8c:eb:e4: b7:31:08:a4:98:d9:45:58:c9:6e:fe:22:35:49:20: d8:ff:13:2c:35:95:62:8b:ab:fd:03:d5:90:21:25: 69:cf:91:19:70:44:65:e3:f7:78:9b:ed:0e:45:d6: 52:a6:43:29:bc:ca:80:06:32:0f:52:39:05:7b:b9: 1e:ac:b2:de:b4:5a:cf:47:35:fc:84:0e:eb:85:bb: f2:b2:27:3c:b9:c3:f5:f5:64:dc:4e:90:b2:b4:aa: a4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:7E:4D:C9:99:C4:1D:B9:97:75:F0:FB:7D:2E:A2:C9:6C:80:18:B9 X509v3 Authority Key Identifier: keyid:09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ba:a0:c9:34:50:c0:f6:bb:0c:a3:2f:43:92:84:99:ef:50: 6b:c9:d7:f9:62:fa:f8:44:f3:8c:dc:71:6b:1a:ef:f1:86:f9: 1e:e7:96:be:78:bd:d7:eb:89:40:fd:b7:5f:b6:6f:61:ee:72: ce:56:ea:ca:fd:7c:3e:94:cf:88:85:3c:23:f2:01:e3:e4:a2: 27:6e:ec:b3:da:0b:d2:e7:fa:15:01:87:41:b6:09:88:7f:f1: 16:57:ca:20:94:95:ed:63:35:58:67:77:96:b1:86:ff:d2:7d: d4:b2:18:7a:4b:89:ea:73:d5:23:ee:32:be:ee:41:7c:31:8f: 5d:2a:99:13:4e:97:18:b9:f3:eb:61:af:f9:57:6c:75:df:c1: ab:3e:74:ed:f6:43:6c:64:74:9c:e9:05:f4:d5:13:bd:69:34: e5:49:91:e8:95:cb:ac:8c:e4:ba:ba:8f:4e:fc:8d:82:50:ba: 7f:17:8c:e3:2d:a3:f8:77:ba:80:22:a6:89:21:1e:34:eb:60: 11:58:86:cf:83:e5:34:00:25:ab:c3:85:dc:72:20:7c:11:fe: f4:76:c8:1a:4e:06:b5:4d:66:c5:b7:ed:f0:97:f2:94:25:67: 8b:fb:8e:b9:c4:5c:18:94:d8:4f:1f:d0:36:d3:b7:c0:c1:ef: 9a:fa:fd:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFXawtz0Nct2YIxGdNHdk0+Y74G0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMUZDRTcxNTQwNjA4REQzNjFEMjAwMzdCNTg1Q0E2 MzEzQjcxNDAeFw0yNjA2MDIxNjI0NDlaFw0yNjA2MDMxOTQzNDlaMDMxMTAvBgNV BAMTKDlGN0U0REM5OTlDNDFEQjk5Nzc1RjBGQjdEMkVBMkM5NkM4MDE4QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjUTCGufU2+W7CZhOQza0KVmCA y1Z+Vrj0pJlp+IKlaiTpzh1dGGdVCHtwazxBSXz0U5M6UsPndmhS2h7BqgsCir5S 43tZprdUGBSn5ffKODzFoAmDg0htyvuFGKfe/KB2f4Ub4Xi1/niqr5cDFhuCbp04 04WlHDTyzDaln1ilni+gNYAe8aAwhKWLcKoYjli8AVC/StFrmQxEjDkapgAV7Yzr 5LcxCKSY2UVYyW7+IjVJINj/Eyw1lWKLq/0D1ZAhJWnPkRlwRGXj93ib7Q5F1lKm Qym8yoAGMg9SOQV7uR6sst60Ws9HNfyEDuuFu/KyJzy5w/X1ZNxOkLK0qqTlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn35NyZnEHbmXdfD7fS6iyWyAGLkwHwYDVR0j BBgwFoAUCfH85xVAYI3TYdIAN7WFymMTtxQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU1YWE5M2QtNzg3Yi00YTE3LTg3ZDAtN2VmNDFiMGYyZGVmLzAvMDlGMUZDRTcx NTQwNjA4REQzNjFEMjAwMzdCNTg1Q0E2MzEzQjcxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOUYxRkNFNzE1NDA2MDhERDM2MUQyMDAzN0I1ODVDQTYzMTNC NzE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU1YWE5M2QtNzg3Yi00YTE3LTg3 ZDAtN2VmNDFiMGYyZGVmLzAvMDlGMUZDRTcxNTQwNjA4REQzNjFEMjAwMzdCNTg1 Q0E2MzEzQjcxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEG6oMk0UMD2uwyjL0OShJnvUGvJ1/li+vhE 84zccWsa7/GG+R7nlr54vdfriUD9t1+2b2Hucs5W6sr9fD6Uz4iFPCPyAePkoidu 7LPaC9Ln+hUBh0G2CYh/8RZXyiCUle1jNVhnd5axhv/SfdSyGHpLiepz1SPuMr7u QXwxj10qmRNOlxi58+thr/lXbHXfwas+dO32Q2xkdJzpBfTVE71pNOVJkeiVy6yM 5Lq6j078jYJQun8XjOMto/h3uoAipokhHjTrYBFYhs+D5TQAJavDhdxyIHwR/vR2 yBpOBrVNZsW37fCX8pQlZ4v7jrnEXBiU2E8f0DbTt8DB75r6/VI= -----END CERTIFICATE-----Generated at Wed Jun 3 03:57:32 2026 by rpki-client