$ rpki-client -vvf rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft File: 9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft (raw, json) Hash identifier: DrQ2GCx9rLMEuoOIGf+6lBYVLGrkb/i63tJMU1+M/Vs= Subject key identifier: 48:5C:AA:C6:CD:9A:FD:B1:4F:1A:92:2D:0D:F4:B1:51:E1:87:B5:8F Authority key identifier: 9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C Certificate issuer: /CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Certificate serial: 572158DE4CD6DF3C5C2E500749DC98A8BF23C252 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft Manifest number: 13 Signing time: Sat 16 May 2026 03:35:33 +0000 Manifest this update: Sat 16 May 2026 03:30:33 +0000 Manifest next update: Sun 17 May 2026 06:34:33 +0000 Files and hashes: 1: 3230322e35372e32302e302f32332d3233203d3e20313431363733.roa (hash: ZROdT78fbmpL537DENBklHYp3VQxWrWUn5aHw+r+zyA=) 2: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (hash: o+t6IXXZJ4nVKh7Fjs01qIsZ6gI4rdJ87aU7Y1okiOU=) 3: 3230322e35372e31392e302f32342d3234203d3e20313339393831.roa (hash: G+CJRSAvkLm8DSPQpJTfXwMfnMxnrjXXDvf2WSgrHBE=) 4: 9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl (hash: czDyrIRm6x+VcpD3cwWsFDlSOURp18ORfd240Gbp0rw=) 5: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (hash: 0uTllQF8wo+NL3Ts0DUiJLkGlZst9OmTPcws3XPvVM8=) 6: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (hash: tedUTTSe47lCMR7mgNFb3hX/nrYcz1gvH0zDmHz42Os=) 7: 3230322e35372e32312e302f32342d3234203d3e20313431363733.roa (hash: 2uayKWV7qVJbZpJZiiGrPFO3R21PwEyriXpTW2MB4pQ=) 8: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (hash: FVzH7nhWf9HlKEhd9diqlsZY20NWlRxKMpXnnJ7+h6Y=) 9: 3230322e35372e32342e302f32332d3233203d3e20313430343639.roa (hash: d1pFnM2SYbSdXqGP4WVzR+cUntyYSCzP9FKk6VY+PFE=) 10: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (hash: C5EXjolwl07zRhpLr0tmhZ7KpZpGgWZO494eyJEQSqk=) 11: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (hash: byBg5cGc6s1YP8fDSR7s5sO6wrvfj9UFsOHI5fDaKjw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 06:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:21:58:de:4c:d6:df:3c:5c:2e:50:07:49:dc:98:a8:bf:23:c2:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Validity Not Before: May 16 03:30:33 2026 GMT Not After : May 17 06:34:33 2026 GMT Subject: CN=485CAAC6CD9AFDB14F1A922D0DF4B151E187B58F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:73:f3:e8:f0:d8:f5:a7:c3:c9:f7:4d:ae:d2: 5f:51:89:4c:84:cf:0b:02:74:0b:7a:e9:56:dc:85: 53:e8:48:a5:9f:9c:2b:fd:d6:46:47:21:ac:db:6f: f2:3e:09:54:75:59:16:ab:ff:56:a0:0e:31:7d:3c: 0e:82:88:df:dd:14:af:e5:14:c7:48:ad:1a:26:32: e6:a3:27:6e:14:e1:b7:94:ae:40:df:7c:3c:5c:2d: cf:82:ed:55:4c:2d:4d:3d:41:9b:b0:01:f8:b5:4b: 53:11:79:f7:bd:cb:ff:1e:ad:8e:93:75:84:27:5e: ef:48:72:54:21:5f:8f:e6:19:ea:6b:c1:f8:19:8e: 0f:36:31:8a:50:f4:f2:ea:ff:0c:45:88:d2:0c:cd: d2:53:78:a4:46:2f:14:39:c1:d7:6f:87:62:3a:44: 65:28:79:11:0f:aa:f9:e3:bf:f6:d6:71:00:89:4f: 43:5d:a7:f1:10:76:8e:94:5a:2a:27:03:16:5f:f2: 3c:29:2e:24:52:db:09:8c:b7:35:25:88:a6:c4:58: f0:3d:05:43:d1:7f:c8:26:88:64:37:44:15:7e:fc: 3a:50:d6:51:6c:90:7f:1f:14:d5:36:03:e7:33:97: 56:c1:e6:f9:a5:73:d3:9b:5a:e0:d7:40:de:2c:c7: 1d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5C:AA:C6:CD:9A:FD:B1:4F:1A:92:2D:0D:F4:B1:51:E1:87:B5:8F X509v3 Authority Key Identifier: keyid:9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:e0:1b:4f:c9:26:33:b4:fd:b6:19:cd:6f:59:24:ab:a6:aa: 6a:93:f5:80:a5:a2:99:85:90:b6:bb:f2:a1:65:08:f6:23:06: dc:e2:66:1b:e1:fa:fb:ba:1f:bb:e9:36:b3:21:81:50:63:f8: cf:02:b3:fb:1b:ab:0b:46:9e:d0:ce:e0:c0:43:b6:52:b7:3f: 01:2b:77:76:90:f7:78:af:f2:7e:b3:9a:82:af:54:ea:75:68: 9d:1b:47:6e:95:96:6e:a9:e1:3d:0e:54:61:b9:2b:b5:ac:6c: 1f:7a:5b:6b:09:49:43:2c:6d:90:47:08:ed:31:96:7b:09:73: ad:0c:e7:8e:3b:67:d2:2e:b3:91:67:7a:4a:60:07:49:d2:98: e4:32:1c:4a:b6:43:80:23:26:f1:3f:87:f6:3c:3d:05:e1:ac: f9:87:89:46:59:76:83:f7:93:4f:0b:76:2e:3f:b0:cb:89:45: 17:cc:48:67:c0:05:23:3d:5e:f9:44:d3:a3:53:8f:4c:39:99: 40:59:00:44:93:70:6b:ed:79:ec:b1:03:1c:03:5f:a6:92:08: c9:d7:c4:4a:df:93:01:38:32:58:4f:52:7e:49:c1:90:6b:a5: c6:c5:13:5f:9d:52:53:f3:c0:da:8f:20:8e:73:57:e2:2b:6d: d7:39:ff:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVyFY3kzW3zxcLlAHSdyYqL8jwlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURCOEM0NzIzRTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1 QzgyQ0Q5QzAeFw0yNjA1MTYwMzMwMzNaFw0yNjA1MTcwNjM0MzNaMDMxMTAvBgNV BAMTKDQ4NUNBQUM2Q0Q5QUZEQjE0RjFBOTIyRDBERjRCMTUxRTE4N0I1OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcc/Po8Nj1p8PJ902u0l9RiUyE zwsCdAt66VbchVPoSKWfnCv91kZHIazbb/I+CVR1WRar/1agDjF9PA6CiN/dFK/l FMdIrRomMuajJ24U4beUrkDffDxcLc+C7VVMLU09QZuwAfi1S1MRefe9y/8erY6T dYQnXu9IclQhX4/mGeprwfgZjg82MYpQ9PLq/wxFiNIMzdJTeKRGLxQ5wddvh2I6 RGUoeREPqvnjv/bWcQCJT0Ndp/EQdo6UWionAxZf8jwpLiRS2wmMtzUliKbEWPA9 BUPRf8gmiGQ3RBV+/DpQ1lFskH8fFNU2A+czl1bB5vmlc9ObWuDXQN4sxx3bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSFyqxs2a/bFPGpItDfSxUeGHtY8wHwYDVR0j BBgwFoAUnbjEcj47/dATinkWqLsSxFyCzZwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGQzZjA5NWItNzEzMC00MTIyLWFmMjUtN2QyZTdhMTFiMWIxLzAvOURCOEM0NzIz RTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1QzgyQ0Q5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REI4QzQ3MjNFM0JGREQwMTM4QTc5MTZBOEJCMTJDNDVDODJD RDlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGQzZjA5NWItNzEzMC00MTIyLWFm MjUtN2QyZTdhMTFiMWIxLzAvOURCOEM0NzIzRTNCRkREMDEzOEE3OTE2QThCQjEy QzQ1QzgyQ0Q5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjgG0/JJjO0/bYZzW9ZJKumqmqT9YClopmF kLa78qFlCPYjBtziZhvh+vu6H7vpNrMhgVBj+M8Cs/sbqwtGntDO4MBDtlK3PwEr d3aQ93iv8n6zmoKvVOp1aJ0bR26Vlm6p4T0OVGG5K7WsbB96W2sJSUMsbZBHCO0x lnsJc60M5447Z9Ius5FnekpgB0nSmOQyHEq2Q4AjJvE/h/Y8PQXhrPmHiUZZdoP3 k08Ldi4/sMuJRRfMSGfABSM9XvlE06NTj0w5mUBZAESTcGvteeyxAxwDX6aSCMnX xErfkwE4MlhPUn5JwZBrpcbFE1+dUlPzwNqPII5zV+Irbdc5/3o= -----END CERTIFICATE-----Generated at Sat May 16 20:31:57 2026 by rpki-client