$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft File: B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft (raw, json) Hash identifier: bD/OY9Bt2wm97Ke+m+tiUKRkZOljdKat7eNmMEFNSFE= Subject key identifier: DF:1F:F7:02:6E:2D:7C:A0:EA:65:98:66:6E:20:F8:82:CD:CE:80:75 Authority key identifier: B9:A5:C7:ED:38:66:D3:CA:D2:44:DA:B3:64:D5:DE:AB:01:B4:1B:27 Certificate issuer: /CN=B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27 Certificate serial: 7EA7736668E8069D395BBF4070A9335C41DFF775 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:43:59 +0000 Manifest this update: Tue 02 Jun 2026 19:38:59 +0000 Manifest next update: Wed 03 Jun 2026 22:41:59 +0000 Files and hashes: 1: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: 0dA2mfgVhJxUx/fjGY3+Dm6GSQVEEUHFqlvFJHB2B4M=) 2: B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl (hash: 4ay/AFrYSzKXb83rz2RG54vjQmLRhdQmkq8T0xKjX/Y=) 3: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: 4Y1mZB2qJy+rnsbtqPt0mJQCafCDh7l369bEnaFDUds=) 4: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: fnDhoiL+V7XHrTgcb34geX86ATfCep/ePS+vjKoYts4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 22:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:a7:73:66:68:e8:06:9d:39:5b:bf:40:70:a9:33:5c:41:df:f7:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27 Validity Not Before: Jun 2 19:38:59 2026 GMT Not After : Jun 3 22:41:59 2026 GMT Subject: CN=DF1FF7026E2D7CA0EA6598666E20F882CDCE8075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cf:3b:a7:fe:bf:80:60:57:f8:23:f9:e4:c4: 19:cb:c2:1c:dd:1d:5e:10:83:e6:97:04:cd:e0:c0: dc:2a:c7:d2:fd:8b:9a:57:8d:fb:8a:dd:7a:b8:29: e9:cb:66:58:29:26:b9:1e:b0:7c:81:5d:c2:a1:4b: 9b:19:cb:7e:f3:b6:b8:ea:35:9c:2a:db:35:d0:9b: 38:ba:32:c8:50:4e:b7:2c:73:46:73:c4:36:22:c0: 9a:d5:b6:b1:27:e6:3c:99:80:f7:1b:03:07:6b:03: 86:43:5f:c0:c8:91:10:69:36:1a:88:be:9c:15:20: 44:4c:d6:5b:af:9e:2b:e6:10:24:27:d4:52:a9:a1: 06:48:50:ca:cb:31:5e:cf:47:d2:1a:ca:ff:37:9d: 9e:f3:78:96:c5:aa:25:c8:6e:da:ca:3b:40:de:21: a7:50:4b:a7:05:95:8c:e5:f2:1b:5b:f7:b6:b3:d1: f6:49:17:af:6d:f8:e4:2c:0e:aa:a1:b6:b2:0f:37: a6:65:e0:46:19:7f:7a:3c:d6:59:b4:2e:68:00:61: 9a:8e:9a:1c:f0:b7:91:05:91:f0:26:8c:8f:91:98: 69:e5:38:a0:32:ad:7e:ff:60:fa:bc:99:88:b5:1d: 6f:4e:6f:1c:11:de:ac:73:aa:53:e2:4b:e2:ca:97: fa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1F:F7:02:6E:2D:7C:A0:EA:65:98:66:6E:20:F8:82:CD:CE:80:75 X509v3 Authority Key Identifier: keyid:B9:A5:C7:ED:38:66:D3:CA:D2:44:DA:B3:64:D5:DE:AB:01:B4:1B:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d0:05:2c:d0:23:5d:7b:41:a2:65:00:bc:ac:ef:d7:a3:1f: d1:20:55:8a:ce:f5:a0:06:3d:be:11:82:12:46:57:2d:43:0f: 3c:04:17:37:b9:42:57:b5:29:eb:35:4f:82:35:bf:36:03:da: 48:a3:ac:e7:31:53:a3:e7:ec:9a:16:58:bc:89:32:67:26:6d: 9d:84:48:7f:d9:65:98:21:60:2f:dd:f9:07:be:33:f3:1c:e0: bc:e9:d1:66:0f:36:78:76:a3:83:07:e8:21:5e:9d:73:f1:ab: 25:97:ba:42:32:1a:d2:ef:2f:8e:97:ca:02:38:ee:f7:ee:53: 1d:e1:fe:a9:55:05:d6:54:1b:b2:a4:17:ca:f8:20:08:f3:66: e1:94:00:76:e6:b0:97:3f:d9:2b:17:be:d1:ec:55:8d:4c:b8: 6b:59:3d:d2:60:e1:26:c8:3d:ac:39:79:1f:6d:6f:ef:0e:1d: 42:22:87:40:c8:e6:5a:2d:bb:86:e8:5c:08:a0:8e:35:b8:9b: 9e:a8:e0:76:b7:05:79:cc:40:79:2d:c6:6b:ff:57:2c:8b:f0: d6:cf:e2:9a:6d:e4:02:ce:c8:90:f7:d5:aa:1f:dc:02:9e:d8: 9d:50:8e:c8:16:71:df:e3:ac:86:20:7b:43:73:bb:9f:8b:ee: 1c:88:00:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfqdzZmjoBp05W79AcKkzXEHf93UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNUM3RUQzODY2RDNDQUQyNDREQUIzNjRENURFQUIw MUI0MUIyNzAeFw0yNjA2MDIxOTM4NTlaFw0yNjA2MDMyMjQxNTlaMDMxMTAvBgNV BAMTKERGMUZGNzAyNkUyRDdDQTBFQTY1OTg2NjZFMjBGODgyQ0RDRTgwNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnzzun/r+AYFf4I/nkxBnLwhzd HV4Qg+aXBM3gwNwqx9L9i5pXjfuK3Xq4KenLZlgpJrkesHyBXcKhS5sZy37ztrjq NZwq2zXQmzi6MshQTrcsc0ZzxDYiwJrVtrEn5jyZgPcbAwdrA4ZDX8DIkRBpNhqI vpwVIERM1luvnivmECQn1FKpoQZIUMrLMV7PR9Iayv83nZ7zeJbFqiXIbtrKO0De IadQS6cFlYzl8htb97az0fZJF69t+OQsDqqhtrIPN6Zl4EYZf3o81lm0LmgAYZqO mhzwt5EFkfAmjI+RmGnlOKAyrX7/YPq8mYi1HW9ObxwR3qxzqlPiS+LKl/rxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3x/3Am4tfKDqZZhmbiD4gs3OgHUwHwYDVR0j BBgwFoAUuaXH7Thm08rSRNqzZNXeqwG0GycwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkxMDY4MjctODY2ZS00YWMzLThmNzktYTZlMzIwYjIwZGU3LzAvQjlBNUM3RUQz ODY2RDNDQUQyNDREQUIzNjRENURFQUIwMUI0MUIyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUE1QzdFRDM4NjZEM0NBRDI0NERBQjM2NEQ1REVBQjAxQjQx QjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkxMDY4MjctODY2ZS00YWMzLThm NzktYTZlMzIwYjIwZGU3LzAvQjlBNUM3RUQzODY2RDNDQUQyNDREQUIzNjRENURF QUIwMUI0MUIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7QBSzQI117QaJlALys79ejH9EgVYrO9aAG Pb4RghJGVy1DDzwEFze5Qle1Kes1T4I1vzYD2kijrOcxU6Pn7JoWWLyJMmcmbZ2E SH/ZZZghYC/d+Qe+M/Mc4Lzp0WYPNnh2o4MH6CFenXPxqyWXukIyGtLvL46XygI4 7vfuUx3h/qlVBdZUG7KkF8r4IAjzZuGUAHbmsJc/2SsXvtHsVY1MuGtZPdJg4SbI Paw5eR9tb+8OHUIih0DI5lotu4boXAigjjW4m56o4Ha3BXnMQHktxmv/VyyL8NbP 4ppt5ALOyJD31aof3AKe2J1QjsgWcd/jrIYge0Nzu5+L7hyIAGM= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:33 2026 by rpki-client