$ rpki-client -vvf rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft File: 9A9D4BDD4311519F6A96141040EA1E98B3363388.mft (raw, json) Hash identifier: ALcGnC+GrM6R/UUdk/MvJlqYAHvhDVUhJmsPV9zrxJQ= Subject key identifier: 4F:4B:39:37:05:A3:6E:96:7C:4C:FC:52:44:DB:7D:E8:CD:79:5A:05 Authority key identifier: 9A:9D:4B:DD:43:11:51:9F:6A:96:14:10:40:EA:1E:98:B3:36:33:88 Certificate issuer: /CN=9A9D4BDD4311519F6A96141040EA1E98B3363388 Certificate serial: 49119F5250BAF40B4C75B97B36B5C48E582B89BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft Manifest number: 14 Signing time: Sat 16 May 2026 15:54:26 +0000 Manifest this update: Sat 16 May 2026 15:49:26 +0000 Manifest next update: Sun 17 May 2026 18:56:26 +0000 Files and hashes: 1: 3130332e3133342e36362e302f32332d3234203d3e203435333132.roa (hash: jEIwfeqUw3Ty0aBUNoGyFFLgparqhCueZmPPzJmpnn8=) 2: 9A9D4BDD4311519F6A96141040EA1E98B3363388.crl (hash: 9VST2gaXJuCUkiQKel+Vp/WyEwdhDfLcpM5yz1ofkxw=) 3: 3130332e3133342e36372e302f32342d3234203d3e203435333132.roa (hash: Rjd2vE2zGKftmY05BM4C0TjHIPA+ii1Rf27f+odCFqc=) 4: 3130332e3133342e36362e302f32342d3234203d3e203435333132.roa (hash: DKDIZFIIa7OPxQWCaUBiuhGDeGm6kz/UIChkAD3FgzA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.crl rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:11:9f:52:50:ba:f4:0b:4c:75:b9:7b:36:b5:c4:8e:58:2b:89:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A9D4BDD4311519F6A96141040EA1E98B3363388 Validity Not Before: May 16 15:49:26 2026 GMT Not After : May 17 18:56:26 2026 GMT Subject: CN=4F4B393705A36E967C4CFC5244DB7DE8CD795A05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b0:a4:e9:3d:57:be:d9:a7:77:32:41:0e:9c: 64:cf:1c:06:85:1d:76:c4:14:67:cc:71:0a:7f:bf: aa:2b:36:05:20:fc:29:59:d0:46:b9:ae:a2:07:a8: 8d:00:60:db:84:27:02:51:d9:92:06:46:18:2c:d8: e7:90:b1:4a:8b:2c:45:56:da:03:a7:0f:ab:f7:42: 41:28:b8:53:db:cd:2b:56:12:57:df:24:ce:1b:da: f6:c5:24:90:dd:ed:38:fa:32:6e:7b:e0:ec:88:bf: 4d:d2:0b:e6:fc:1c:97:14:79:00:bc:d6:6f:23:b8: 65:f3:c5:f1:b7:25:97:81:85:94:14:13:9e:8a:65: 48:86:66:f4:4d:fd:20:12:d3:33:a3:ba:db:ff:77: dd:db:b2:81:11:81:dc:98:b0:50:35:4e:87:6b:15: 98:37:4c:f4:91:fe:0d:2d:50:b8:8a:f8:dc:4e:6b: 1b:e8:f6:fe:4f:e1:3e:dc:71:27:fb:dc:5b:7d:28: 15:f9:c2:2b:97:de:f7:e3:5e:c3:07:6e:01:f0:9b: 3e:25:21:60:91:2f:97:0a:ae:21:be:23:ab:f2:a2: b1:6c:9a:14:cd:7e:60:e4:6e:79:04:2e:8f:17:c3: f0:db:55:01:a2:0a:60:93:3c:02:f7:b6:48:d7:f5: 3b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4B:39:37:05:A3:6E:96:7C:4C:FC:52:44:DB:7D:E8:CD:79:5A:05 X509v3 Authority Key Identifier: keyid:9A:9D:4B:DD:43:11:51:9F:6A:96:14:10:40:EA:1E:98:B3:36:33:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:dd:c3:a8:65:9d:a5:8b:cb:cd:12:5a:4a:f0:17:c7:0d:12: 3d:f1:3c:8c:00:7f:14:4a:f1:0f:6f:f6:c5:04:67:91:3b:5e: e3:2a:dc:6b:82:a8:6a:40:26:b3:c2:bd:0a:0b:02:8f:50:f9: b3:65:1b:aa:6a:7d:73:ff:ad:b7:18:4d:b8:08:b6:65:d1:ee: eb:9f:7c:eb:dc:12:16:76:65:3a:08:c5:8c:69:15:ba:64:be: 4a:a9:a6:8e:03:6c:ce:d8:76:b9:58:ba:49:78:f7:b0:11:d2: 00:f2:04:a4:de:83:75:a6:9c:2e:51:99:92:7c:74:c2:27:59: 35:18:fb:18:7d:d5:b9:d9:8e:1f:40:c6:81:ce:90:d0:3a:c2: 5b:09:c9:59:21:98:bb:33:d5:61:b2:ee:89:93:7c:7f:5d:7a: d8:93:ac:ea:96:f1:87:c3:ef:22:49:9c:53:4d:90:56:7d:2d: 94:d5:01:56:a6:e4:4c:30:b6:19:56:56:a0:72:ae:19:2c:1c: 09:3d:77:b3:08:94:11:84:f6:e8:7e:6a:b9:8c:55:a9:dc:80: 95:55:79:07:8e:b2:ee:ae:07:4b:ed:ea:f7:71:fa:7a:12:c8: a2:39:e2:8c:15:0c:5d:bf:28:fe:7e:54:bd:87:df:29:40:61: 4b:e9:6b:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSRGfUlC69AtMdbl7NrXEjlgrib4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5RDRCREQ0MzExNTE5RjZBOTYxNDEwNDBFQTFFOThC MzM2MzM4ODAeFw0yNjA1MTYxNTQ5MjZaFw0yNjA1MTcxODU2MjZaMDMxMTAvBgNV BAMTKDRGNEIzOTM3MDVBMzZFOTY3QzRDRkM1MjQ0REI3REU4Q0Q3OTVBMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcsKTpPVe+2ad3MkEOnGTPHAaF HXbEFGfMcQp/v6orNgUg/ClZ0Ea5rqIHqI0AYNuEJwJR2ZIGRhgs2OeQsUqLLEVW 2gOnD6v3QkEouFPbzStWElffJM4b2vbFJJDd7Tj6Mm574OyIv03SC+b8HJcUeQC8 1m8juGXzxfG3JZeBhZQUE56KZUiGZvRN/SAS0zOjutv/d93bsoERgdyYsFA1Todr FZg3TPSR/g0tULiK+NxOaxvo9v5P4T7ccSf73Ft9KBX5wiuX3vfjXsMHbgHwmz4l IWCRL5cKriG+I6vyorFsmhTNfmDkbnkELo8Xw/DbVQGiCmCTPAL3tkjX9TsfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT0s5NwWjbpZ8TPxSRNt96M15WgUwHwYDVR0j BBgwFoAUmp1L3UMRUZ9qlhQQQOoemLM2M4gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmY2NmJmYTYtZGM0Yy00MTA4LTkzMmMtMjA0YjYyZTg2MjcyLzAvOUE5RDRCREQ0 MzExNTE5RjZBOTYxNDEwNDBFQTFFOThCMzM2MzM4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTlENEJERDQzMTE1MTlGNkE5NjE0MTA0MEVBMUU5OEIzMzYz Mzg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmY2NmJmYTYtZGM0Yy00MTA4LTkz MmMtMjA0YjYyZTg2MjcyLzAvOUE5RDRCREQ0MzExNTE5RjZBOTYxNDEwNDBFQTFF OThCMzM2MzM4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEndw6hlnaWLy80SWkrwF8cNEj3xPIwAfxRK 8Q9v9sUEZ5E7XuMq3GuCqGpAJrPCvQoLAo9Q+bNlG6pqfXP/rbcYTbgItmXR7uuf fOvcEhZ2ZToIxYxpFbpkvkqppo4DbM7YdrlYukl497AR0gDyBKTeg3WmnC5RmZJ8 dMInWTUY+xh91bnZjh9AxoHOkNA6wlsJyVkhmLsz1WGy7omTfH9detiTrOqW8YfD 7yJJnFNNkFZ9LZTVAVam5EwwthlWVqByrhksHAk9d7MIlBGE9uh+armMVancgJVV eQeOsu6uB0vt6vdx+noSyKI54owVDF2/KP5+VL2H3ylAYUvpa3c= -----END CERTIFICATE-----Generated at Sun May 17 02:28:10 2026 by rpki-client