$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft File: 9FA20A14AF60219662C9668DE75D25F0C8B84220.mft (raw, json) Hash identifier: FJXc3/fYjTYSHrjADXWl0z+ejNpIQo3JkANM0RRsJ8c= Subject key identifier: 9A:03:3F:85:55:32:C3:48:15:8B:13:69:2D:DD:CC:B9:E5:C7:90:AD Authority key identifier: 9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20 Certificate issuer: /CN=9FA20A14AF60219662C9668DE75D25F0C8B84220 Certificate serial: 58FDA54456469BAABBEBBEDE1BCBF27786BF31A6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft Manifest number: 08 Signing time: Thu 07 May 2026 18:47:49 +0000 Manifest this update: Thu 07 May 2026 18:42:49 +0000 Manifest next update: Fri 08 May 2026 20:03:49 +0000 Files and hashes: 1: 9FA20A14AF60219662C9668DE75D25F0C8B84220.crl (hash: i15O8bIkBSJ2MqYidQfNbx2f+AzzJxEz0VBSX3EN9oU=) 2: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: YS2T4alON/4lMEWof38ueY05KIoXFInJbn/EVbWzFdU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 20:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:fd:a5:44:56:46:9b:aa:bb:eb:be:de:1b:cb:f2:77:86:bf:31:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FA20A14AF60219662C9668DE75D25F0C8B84220 Validity Not Before: May 7 18:42:49 2026 GMT Not After : May 8 20:03:49 2026 GMT Subject: CN=9A033F855532C348158B13692DDDCCB9E5C790AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:13:a5:d4:36:cf:cf:04:33:5e:c3:8c:19:f7: 08:e9:e5:11:c7:42:40:84:15:39:b7:db:77:32:08: 26:98:41:9f:32:ed:43:a4:63:87:50:90:a0:52:9e: 9f:e4:99:b8:f2:dd:53:83:0c:66:4f:f0:8a:b7:6f: 51:82:7c:00:d5:ec:83:1b:a5:96:1f:58:f2:0a:be: d7:16:23:4d:d5:1f:6d:ac:b3:5a:9a:5b:ff:42:4b: 98:fd:07:cf:08:eb:0b:97:58:53:b5:c6:98:da:c8: 22:2a:f6:57:0c:cd:6b:dc:fb:b5:1e:21:12:3a:5f: dd:97:96:1e:41:f1:e8:96:2c:dc:62:58:90:e5:b6: b3:e2:23:4c:d0:88:fe:0d:02:8b:99:9d:86:89:fc: 74:52:a8:cb:45:7b:ad:d7:7c:50:3d:45:af:ea:0d: 2c:19:ff:2d:49:2f:d5:b2:02:55:38:a7:96:2f:17: 50:59:de:f2:6f:03:2b:d8:52:0f:19:ed:e5:50:36: b1:89:9d:21:ee:eb:f4:39:1c:4b:a9:e3:f6:63:91: 42:38:3f:6f:55:a7:7f:3c:dc:e4:a2:a3:a9:2d:b2: a3:e8:43:9f:a3:93:19:cb:07:38:34:8d:69:29:87: 1e:0f:46:ff:89:b3:b6:aa:5f:7f:2d:29:bd:c0:09: 6d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:03:3F:85:55:32:C3:48:15:8B:13:69:2D:DD:CC:B9:E5:C7:90:AD X509v3 Authority Key Identifier: keyid:9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:60:fc:dd:86:4f:d0:6b:b4:ab:54:ea:7b:76:d1:3f:bc:b4: 3f:f2:74:fc:52:91:74:29:2a:0d:dd:b6:d1:98:53:7e:7f:c2: 9b:1d:a6:60:20:84:9a:42:06:5f:78:36:aa:b4:5a:b3:7f:6c: d8:1f:1e:0b:dd:e1:e6:ca:36:34:43:d3:d3:b0:9b:e5:12:d8: 07:7f:45:f9:38:6f:46:d8:95:51:3c:8c:77:b2:6e:f5:9a:ee: 07:cc:0e:94:37:5b:f6:93:e0:e1:2e:24:42:82:8e:1e:0b:2d: b9:93:a5:ea:16:54:f7:08:a9:b5:44:7a:6b:b7:b4:31:90:e4: f0:65:80:18:6f:96:07:74:c7:ac:f8:02:8b:41:a7:38:2d:9e: 00:32:76:06:94:93:30:7c:dc:f4:42:f0:a4:d1:eb:a5:8c:1a: 3a:a4:2f:5f:5c:f1:81:80:73:dc:d1:73:ce:8b:1b:0e:48:01: 49:80:60:45:9d:f2:8b:24:13:99:4b:0e:f2:7c:6d:c6:b1:68: 38:a7:b6:c4:f1:70:03:3b:a7:67:e6:43:99:a4:14:09:be:89: a3:b1:f7:e8:8f:ad:0d:00:07:d1:4a:2d:d0:c1:3a:72:6e:8a: 03:ac:54:72:d1:22:9d:7b:ff:96:96:a5:b5:fd:d6:23:f9:8d: 30:5a:e0:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWP2lRFZGm6q7677eG8vyd4a/MaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBMjBBMTRBRjYwMjE5NjYyQzk2NjhERTc1RDI1RjBD OEI4NDIyMDAeFw0yNjA1MDcxODQyNDlaFw0yNjA1MDgyMDAzNDlaMDMxMTAvBgNV BAMTKDlBMDMzRjg1NTUzMkMzNDgxNThCMTM2OTJERERDQ0I5RTVDNzkwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpE6XUNs/PBDNew4wZ9wjp5RHH QkCEFTm323cyCCaYQZ8y7UOkY4dQkKBSnp/kmbjy3VODDGZP8Iq3b1GCfADV7IMb pZYfWPIKvtcWI03VH22ss1qaW/9CS5j9B88I6wuXWFO1xpjayCIq9lcMzWvc+7Ue IRI6X92Xlh5B8eiWLNxiWJDltrPiI0zQiP4NAouZnYaJ/HRSqMtFe63XfFA9Ra/q DSwZ/y1JL9WyAlU4p5YvF1BZ3vJvAyvYUg8Z7eVQNrGJnSHu6/Q5HEup4/ZjkUI4 P29Vp3883OSio6ktsqPoQ5+jkxnLBzg0jWkphx4PRv+Js7aqX38tKb3ACW33AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmgM/hVUyw0gVixNpLd3MueXHkK0wHwYDVR0j BBgwFoAUn6IKFK9gIZZiyWaN510l8Mi4QiAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzVlNTQ2OGMtMGFjNy00NGE5LTg4MjEtMjgyNTdjNWE4NjA3LzAvOUZBMjBBMTRB RjYwMjE5NjYyQzk2NjhERTc1RDI1RjBDOEI4NDIyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkEyMEExNEFGNjAyMTk2NjJDOTY2OERFNzVEMjVGMEM4Qjg0 MjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvOUZBMjBBMTRBRjYwMjE5NjYyQzk2NjhERTc1RDI1 RjBDOEI4NDIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBg/N2GT9BrtKtU6nt20T+8tD/ydPxSkXQp Kg3dttGYU35/wpsdpmAghJpCBl94Nqq0WrN/bNgfHgvd4ebKNjRD09Owm+US2Ad/ Rfk4b0bYlVE8jHeybvWa7gfMDpQ3W/aT4OEuJEKCjh4LLbmTpeoWVPcIqbVEemu3 tDGQ5PBlgBhvlgd0x6z4AotBpzgtngAydgaUkzB83PRC8KTR66WMGjqkL19c8YGA c9zRc86LGw5IAUmAYEWd8oskE5lLDvJ8bcaxaDintsTxcAM7p2fmQ5mkFAm+iaOx 9+iPrQ0AB9FKLdDBOnJuigOsVHLRIp17/5aWpbX91iP5jTBa4I0= -----END CERTIFICATE-----Generated at Fri May 8 07:27:36 2026 by rpki-client