$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft File: C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft (raw, json) Hash identifier: BSnJC/WHyXB1IbjSOL64PhsXkn17HGwMJgwwb1n1XKQ= Subject key identifier: 51:F7:00:CA:C3:59:57:F7:EE:60:66:D2:D1:DF:1B:03:71:87:A7:75 Authority key identifier: C9:A0:E9:83:26:93:84:F0:0C:CE:85:7E:3A:8E:88:87:BE:9B:7F:C8 Certificate issuer: /CN=C9A0E983269384F00CCE857E3A8E8887BE9B7FC8 Certificate serial: 218A2C9E1CFCAC251D06743E0F262F575A7F409E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 18:38:25 +0000 Manifest this update: Fri 19 Jun 2026 18:33:25 +0000 Manifest next update: Sat 20 Jun 2026 22:24:25 +0000 Files and hashes: 1: C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl (hash: c9mh9rJdLxZGX+nDGztSTE+hcIgpXPDf+XR0yFZgtOw=) 2: 3130332e38312e3131312e302f32342d3234203d3e20313530393538.roa (hash: l+i6wCpyx98LrkN6bI1lbQddhWqft7YLNRfJYsyxYlA=) 3: 3130332e38312e3131302e302f32342d3234203d3e20313530393538.roa (hash: 1X7ytOOeZ7baYbrptPG956jTOlJu9VRB/BLTjRkOU00=) 4: 323030313a6466323a623263303a3a2f34382d3438203d3e20313530393538.roa (hash: DNfu6S0MfyEIbWVxydJYNYlQdSHELvJkaaSCCqoydj0=) 5: 3130332e38312e3131302e302f32332d3234203d3e20313530393538.roa (hash: PAwVQ07BR901R53ceqUz7lmumWNjRRTL4GW80ND0yx0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:8a:2c:9e:1c:fc:ac:25:1d:06:74:3e:0f:26:2f:57:5a:7f:40:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9A0E983269384F00CCE857E3A8E8887BE9B7FC8 Validity Not Before: Jun 19 18:33:25 2026 GMT Not After : Jun 20 22:24:25 2026 GMT Subject: CN=51F700CAC35957F7EE6066D2D1DF1B037187A775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:75:94:b5:60:04:36:6d:e5:65:b9:ab:e0: 10:72:b0:52:31:8f:30:9e:1b:16:82:74:e6:9c:9c: 60:fd:93:43:24:b2:77:ae:72:b0:c5:17:4a:64:39: cd:74:d5:05:54:75:e3:21:04:98:ee:c3:66:32:8b: 9e:f8:4f:d9:ea:62:ea:27:52:47:08:76:ca:fd:ab: 0c:c3:c5:48:a2:eb:57:f3:1a:78:08:73:83:bf:47: f3:69:44:2f:59:1a:e1:07:e6:7e:ca:90:ca:6b:df: 51:f1:58:ff:de:66:7f:3a:9f:46:04:36:3f:26:b2: b3:4c:06:5f:6d:06:a6:f6:fc:5b:e8:5a:36:37:cd: 9b:16:5e:d9:38:1d:50:d0:6e:da:15:27:64:b9:e4: 7d:41:29:0e:61:fc:8f:13:a6:11:f7:ea:0a:cc:4e: a7:e4:05:b0:af:44:f2:fd:a5:52:81:c5:63:d6:30: 03:8e:c1:5b:51:32:27:69:55:a0:e0:36:8f:d2:cb: 06:23:04:30:a7:15:a8:67:53:2a:1a:1e:06:18:33: 49:20:21:b2:cb:9c:f5:9b:ee:d7:d4:78:17:a7:93: 52:ec:53:e5:d7:84:f3:82:93:a9:d8:71:69:00:b3: 4f:00:43:66:62:bb:e5:93:d6:e3:6a:9f:cb:71:68: 53:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F7:00:CA:C3:59:57:F7:EE:60:66:D2:D1:DF:1B:03:71:87:A7:75 X509v3 Authority Key Identifier: keyid:C9:A0:E9:83:26:93:84:F0:0C:CE:85:7E:3A:8E:88:87:BE:9B:7F:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:70:18:d5:c1:91:ad:f1:8c:1e:86:9b:aa:1d:09:65:23:cf: 96:73:e4:81:0e:1b:b8:c7:c6:82:60:2c:ca:9b:08:ae:73:37: 88:52:55:be:8e:2e:a0:f6:68:78:1c:76:e6:12:18:eb:4e:65: 42:2e:b9:6a:f1:bc:79:92:98:30:31:f8:3f:04:52:18:bd:e1: 63:80:c1:9e:f3:32:2a:18:01:ce:64:7f:9a:79:80:19:d2:58: 32:61:f6:16:a2:a7:2b:e1:c1:45:7a:d9:ff:54:ea:0d:17:77: 98:e7:ef:2b:d2:a1:23:11:3c:b5:3f:b6:8a:6f:75:73:63:11: 57:a3:5a:4d:7d:f2:59:ba:ca:bc:16:da:f6:ab:80:da:ed:ad: 3c:3c:e7:34:3e:a2:2b:01:d1:21:8d:4a:94:c6:92:92:6e:76: 49:d0:55:cc:fa:72:b5:97:00:f2:6f:36:6c:91:6b:af:e1:80: df:ac:31:d0:92:c1:f9:5b:73:86:66:7b:69:4c:79:7f:91:64: 61:2e:8f:f1:06:68:99:86:b1:90:41:02:59:9d:96:36:cd:bf: ad:fb:5e:f5:c0:5f:aa:64:59:27:c3:cb:cd:d8:6d:3e:a5:8c: 0a:96:36:e2:00:22:5a:1e:66:8c:3d:61:1e:af:00:ad:51:d4: d6:db:70:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIYosnhz8rCUdBnQ+DyYvV1p/QJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlBMEU5ODMyNjkzODRGMDBDQ0U4NTdFM0E4RTg4ODdC RTlCN0ZDODAeFw0yNjA2MTkxODMzMjVaFw0yNjA2MjAyMjI0MjVaMDMxMTAvBgNV BAMTKDUxRjcwMENBQzM1OTU3RjdFRTYwNjZEMkQxREYxQjAzNzE4N0E3NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7V3WUtWAENm3lZbmr4BBysFIx jzCeGxaCdOacnGD9k0MksneucrDFF0pkOc101QVUdeMhBJjuw2Yyi574T9nqYuon UkcIdsr9qwzDxUii61fzGngIc4O/R/NpRC9ZGuEH5n7KkMpr31HxWP/eZn86n0YE Nj8msrNMBl9tBqb2/FvoWjY3zZsWXtk4HVDQbtoVJ2S55H1BKQ5h/I8TphH36grM TqfkBbCvRPL9pVKBxWPWMAOOwVtRMidpVaDgNo/SywYjBDCnFahnUyoaHgYYM0kg IbLLnPWb7tfUeBenk1LsU+XXhPOCk6nYcWkAs08AQ2Ziu+WT1uNqn8txaFOBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUfcAysNZV/fuYGbS0d8bA3GHp3UwHwYDVR0j BBgwFoAUyaDpgyaThPAMzoV+Oo6Ih76bf8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGYwYmNkYzMtMGZlYS00NzQ3LTk5MDctNjU2NDg2YmFlOGRhLzAvQzlBMEU5ODMy NjkzODRGMDBDQ0U4NTdFM0E4RTg4ODdCRTlCN0ZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUEwRTk4MzI2OTM4NEYwMENDRTg1N0UzQThFODg4N0JFOUI3 RkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGYwYmNkYzMtMGZlYS00NzQ3LTk5 MDctNjU2NDg2YmFlOGRhLzAvQzlBMEU5ODMyNjkzODRGMDBDQ0U4NTdFM0E4RTg4 ODdCRTlCN0ZDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxwGNXBka3xjB6Gm6odCWUjz5Zz5IEOG7jH xoJgLMqbCK5zN4hSVb6OLqD2aHgcduYSGOtOZUIuuWrxvHmSmDAx+D8EUhi94WOA wZ7zMioYAc5kf5p5gBnSWDJh9haipyvhwUV62f9U6g0Xd5jn7yvSoSMRPLU/topv dXNjEVejWk198lm6yrwW2vargNrtrTw85zQ+oisB0SGNSpTGkpJudknQVcz6crWX APJvNmyRa6/hgN+sMdCSwflbc4Zme2lMeX+RZGEuj/EGaJmGsZBBAlmdljbNv637 XvXAX6pkWSfDy83YbT6ljAqWNuIAIloeZow9YR6vAK1R1NbbcGg= -----END CERTIFICATE-----Generated at Sat Jun 20 09:19:58 2026 by rpki-client