$ rpki-client -vvf rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft File: 9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft (raw, json) Hash identifier: +5CrwREuttEI2/6kqKs+QwEq7vZmzHG/cQ3s9idAj78= Subject key identifier: C4:6D:6B:B1:B9:EA:AE:E0:49:3B:8C:42:EA:8E:32:25:4F:39:C9:44 Authority key identifier: 9E:9F:59:35:C6:5B:93:B0:70:73:0D:31:DC:3B:0B:94:A4:C3:EF:00 Certificate issuer: /CN=9E9F5935C65B93B070730D31DC3B0B94A4C3EF00 Certificate serial: 7B7F6A187859420E6A70C322A5748720B5F7EA06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:06:17 +0000 Manifest this update: Tue 02 Jun 2026 09:01:17 +0000 Manifest next update: Wed 03 Jun 2026 12:42:17 +0000 Files and hashes: 1: 9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.crl (hash: hkHGVG1a4uDf8Hpg0sMvrby8tunLDSwcGQpEkWnl44Q=) 2: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: naWUC2Rkww5G3UJh4eCfssT9Zr/V8p7wGu4ngZht9HU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.crl rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7f:6a:18:78:59:42:0e:6a:70:c3:22:a5:74:87:20:b5:f7:ea:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E9F5935C65B93B070730D31DC3B0B94A4C3EF00 Validity Not Before: Jun 2 09:01:17 2026 GMT Not After : Jun 3 12:42:17 2026 GMT Subject: CN=C46D6BB1B9EAAEE0493B8C42EA8E32254F39C944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6c:ec:0e:a0:82:73:54:66:ac:fa:24:27:4c: e8:0e:7c:82:c9:8a:11:35:a5:f7:a3:b9:87:6b:7c: 53:58:55:3e:d5:a7:12:1b:d9:f2:3e:64:5a:48:79: 57:41:62:76:ff:7d:bf:b9:a5:79:aa:82:4d:b8:5e: 32:b0:9e:79:ce:cf:1c:ea:d4:45:de:ee:47:6c:1b: d9:c2:84:9d:15:47:28:2d:2a:86:08:63:68:c5:62: cb:5e:2a:2e:c6:47:e8:c4:86:bb:89:75:cd:0f:4f: a3:2e:5f:00:45:16:cc:6d:4d:8b:04:2d:3b:80:1d: 71:bf:f3:42:12:04:3a:cf:a7:28:d4:32:bb:c0:c7: f5:88:0e:de:fa:f3:c8:ac:97:f0:2e:08:f1:80:a2: 09:38:46:72:1b:f3:71:c3:5a:58:81:0e:2f:64:0d: 72:3a:56:62:66:43:c7:78:cf:cd:39:58:f4:8c:c7: 6a:6f:65:5f:2b:4e:a8:87:d7:00:56:9e:72:e6:46: df:e2:07:0c:f0:3a:2c:c8:18:48:13:05:08:7b:9c: ee:df:e5:62:db:ac:32:29:fe:c2:3c:8e:58:54:b5: e0:c2:56:16:cf:7f:ef:08:a1:09:6c:fc:c4:ab:35: aa:5d:6f:76:0b:58:d4:90:a6:35:8c:7b:24:99:7b: 4b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6D:6B:B1:B9:EA:AE:E0:49:3B:8C:42:EA:8E:32:25:4F:39:C9:44 X509v3 Authority Key Identifier: keyid:9E:9F:59:35:C6:5B:93:B0:70:73:0D:31:DC:3B:0B:94:A4:C3:EF:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8c:15:9e:ee:b5:18:e2:b6:4b:81:34:01:69:73:72:67:33: b4:fc:49:ab:93:1b:c3:56:5f:ce:b7:ae:5a:e2:5a:b9:cd:40: 84:be:d6:7b:64:a1:52:47:fa:29:32:35:85:29:28:29:18:66: d6:b7:58:ef:1f:99:e6:66:c1:7d:5e:8d:12:ef:d1:6e:5a:6a: 3e:e8:b0:0e:8f:6d:2d:35:96:a5:e9:1f:c2:be:77:ff:05:b0: be:15:1f:ee:b1:51:c1:f7:3a:83:c6:1e:81:94:44:c3:a0:a4: 42:13:8a:fb:84:c1:33:ef:a5:09:ff:b2:c5:50:16:81:7f:4e: 33:38:52:11:99:f4:aa:e9:fc:49:f3:39:b0:75:af:87:cc:2f: b0:16:96:a5:3b:82:7d:3a:bc:e5:c8:13:c1:18:4f:61:20:50: 7a:c3:13:7c:b9:d5:01:8d:5a:41:b6:0e:48:a0:80:fc:6b:cf: 9f:97:3a:6f:99:61:42:d1:86:dd:2d:2f:99:81:23:35:b1:c5: e2:9b:f3:75:28:60:a4:6c:c1:67:9e:5e:b2:b6:cf:db:e8:be: ab:99:17:59:75:83:d6:9d:f2:77:ce:bc:30:e9:e0:80:96:3e: b9:5c:fc:9f:bc:91:5c:ae:b7:f9:75:16:26:26:d2:80:e3:e0: ee:f5:28:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe39qGHhZQg5qcMMipXSHILX36gYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU5RjU5MzVDNjVCOTNCMDcwNzMwRDMxREMzQjBCOTRB NEMzRUYwMDAeFw0yNjA2MDIwOTAxMTdaFw0yNjA2MDMxMjQyMTdaMDMxMTAvBgNV BAMTKEM0NkQ2QkIxQjlFQUFFRTA0OTNCOEM0MkVBOEUzMjI1NEYzOUM5NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDabOwOoIJzVGas+iQnTOgOfILJ ihE1pfejuYdrfFNYVT7VpxIb2fI+ZFpIeVdBYnb/fb+5pXmqgk24XjKwnnnOzxzq 1EXe7kdsG9nChJ0VRygtKoYIY2jFYsteKi7GR+jEhruJdc0PT6MuXwBFFsxtTYsE LTuAHXG/80ISBDrPpyjUMrvAx/WIDt7688isl/AuCPGAogk4RnIb83HDWliBDi9k DXI6VmJmQ8d4z805WPSMx2pvZV8rTqiH1wBWnnLmRt/iBwzwOizIGEgTBQh7nO7f 5WLbrDIp/sI8jlhUteDCVhbPf+8IoQls/MSrNapdb3YLWNSQpjWMeySZe0uXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxG1rsbnqruBJO4xC6o4yJU85yUQwHwYDVR0j BBgwFoAUnp9ZNcZbk7Bwcw0x3DsLlKTD7wAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Q3YzdhYzItNWE5Yi00OTJhLWE0YzUtMWYxMzU5MGRhZTA2LzAvOUU5RjU5MzVD NjVCOTNCMDcwNzMwRDMxREMzQjBCOTRBNEMzRUYwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RTlGNTkzNUM2NUI5M0IwNzA3MzBEMzFEQzNCMEI5NEE0QzNF RjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Q3YzdhYzItNWE5Yi00OTJhLWE0 YzUtMWYxMzU5MGRhZTA2LzAvOUU5RjU5MzVDNjVCOTNCMDcwNzMwRDMxREMzQjBC OTRBNEMzRUYwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqMFZ7utRjitkuBNAFpc3JnM7T8SauTG8NW X863rlriWrnNQIS+1ntkoVJH+ikyNYUpKCkYZta3WO8fmeZmwX1ejRLv0W5aaj7o sA6PbS01lqXpH8K+d/8FsL4VH+6xUcH3OoPGHoGURMOgpEITivuEwTPvpQn/ssVQ FoF/TjM4UhGZ9Krp/EnzObB1r4fML7AWlqU7gn06vOXIE8EYT2EgUHrDE3y51QGN WkG2DkiggPxrz5+XOm+ZYULRht0tL5mBIzWxxeKb83UoYKRswWeeXrK2z9vovquZ F1l1g9ad8nfOvDDp4ICWPrlc/J+8kVyut/l1FiYm0oDj4O71KBY= -----END CERTIFICATE-----Generated at Wed Jun 3 04:23:18 2026 by rpki-client