$ rpki-client -vvf rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft File: 9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft (raw, json) Hash identifier: MuygKTQrFbE+LakHx4TpnTUvkPj+wPQH7X7BkPdP5hI= Subject key identifier: 38:B3:E3:45:51:C1:F7:23:8D:D8:88:82:76:44:C8:7D:EC:48:55:07 Authority key identifier: 93:76:CD:F3:D2:A4:4C:C4:17:64:F8:9F:68:FD:7E:41:30:EB:35:1C Certificate issuer: /CN=9376CDF3D2A44CC41764F89F68FD7E4130EB351C Certificate serial: 3C3404BCB2CBC55C4D632A7E704144674081CC5F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 15:10:07 +0000 Manifest this update: Thu 18 Jun 2026 15:05:07 +0000 Manifest next update: Fri 19 Jun 2026 16:45:07 +0000 Files and hashes: 1: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: 1y2hMqgy1k18v9KwV+64AHSdurxHF23pHNvVVwGqp7s=) 2: 9376CDF3D2A44CC41764F89F68FD7E4130EB351C.crl (hash: rOvAA7V0YyEumO6oNbH9BZrDoZztaOV228R7UP1Yxr4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.crl rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:34:04:bc:b2:cb:c5:5c:4d:63:2a:7e:70:41:44:67:40:81:cc:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9376CDF3D2A44CC41764F89F68FD7E4130EB351C Validity Not Before: Jun 18 15:05:07 2026 GMT Not After : Jun 19 16:45:07 2026 GMT Subject: CN=38B3E34551C1F7238DD888827644C87DEC485507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:20:45:20:64:d8:ee:7f:ff:ff:1a:15:33:ce: f5:fd:e2:78:09:ba:e8:68:1a:b1:35:1b:f5:d8:b4: 3c:93:11:bb:54:b5:55:98:d2:24:c5:df:9a:cb:e6: 43:d3:e4:17:fe:27:5c:07:e0:ed:f7:99:a7:50:e4: f0:f0:14:a8:92:37:c6:ac:34:40:13:29:27:3e:0d: d0:ff:e3:9c:92:96:a9:be:21:31:b0:f8:1b:9f:4a: 75:2d:48:d1:68:70:23:da:00:8a:02:d1:32:2b:c0: 62:9d:6d:07:1d:3d:28:65:b1:85:6e:5b:6a:53:6a: 0f:94:a7:78:ec:5d:90:19:a2:b4:6c:ad:15:ca:50: 1d:91:24:aa:64:aa:89:bb:39:fd:a8:c5:72:13:58: 75:09:e4:a8:26:e7:57:1b:07:75:8d:54:46:5c:77: b6:d8:ab:52:1d:22:aa:b8:03:b7:4d:1f:95:8f:27: 33:27:b2:3b:28:98:3c:30:f9:ab:71:98:b9:a7:22: 89:c6:6e:4a:6d:48:ee:59:f6:a8:4b:cd:f5:15:b0: f3:c3:6e:af:d4:0b:4d:cb:86:7d:95:a7:5a:1d:09: a5:8f:09:c5:f4:9f:95:d0:eb:9b:54:45:48:a7:20: d3:15:6c:1d:67:14:9e:dc:62:1b:b6:e0:62:4a:d4: 59:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B3:E3:45:51:C1:F7:23:8D:D8:88:82:76:44:C8:7D:EC:48:55:07 X509v3 Authority Key Identifier: keyid:93:76:CD:F3:D2:A4:4C:C4:17:64:F8:9F:68:FD:7E:41:30:EB:35:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:9a:45:9c:db:e0:ae:35:b1:00:30:98:eb:6c:a7:1f:fd:3f: c9:78:76:0f:d6:67:8b:b7:16:62:0c:0c:8e:a3:88:11:7e:c8: e9:c2:30:1d:53:8f:1c:f3:82:33:62:12:c8:43:6f:29:8d:bf: b7:4a:9c:71:e2:b4:83:22:5c:a8:31:bb:2b:ff:3d:24:f2:b2: d2:e0:f4:1f:e5:f3:fb:37:06:be:c2:3d:d0:0b:40:70:5e:e2: d0:fd:cb:0e:f9:04:74:71:d3:3b:7b:7e:f6:1f:d1:7a:1d:7e: 50:12:48:4b:3f:0d:24:0d:76:f4:e3:30:b8:ed:ab:6a:1b:ca: e6:e4:2a:ab:3f:c4:2f:5e:d0:a7:03:7b:69:47:df:6d:33:7c: 59:e3:ff:bb:69:88:e0:c0:8a:fa:8e:9b:34:5c:36:e9:53:38: 3d:cd:72:2a:dc:7b:67:5d:3a:b9:ac:69:70:85:b8:4b:2b:d8: 54:00:45:e1:fe:8c:40:ba:01:a1:92:44:5f:bc:5c:6c:c7:23: 83:35:54:a7:9e:6b:c6:08:4f:99:20:6c:75:b2:79:44:dc:42: 93:9d:39:18:dd:b4:64:92:8c:09:8b:b5:dd:db:d5:33:34:ca: 56:3b:75:97:ac:a6:13:dc:f6:61:03:a3:10:48:0c:83:21:23: ff:0b:ef:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPDQEvLLLxVxNYyp+cEFEZ0CBzF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM3NkNERjNEMkE0NENDNDE3NjRGODlGNjhGRDdFNDEz MEVCMzUxQzAeFw0yNjA2MTgxNTA1MDdaFw0yNjA2MTkxNjQ1MDdaMDMxMTAvBgNV BAMTKDM4QjNFMzQ1NTFDMUY3MjM4REQ4ODg4Mjc2NDRDODdERUM0ODU1MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2IEUgZNjuf///GhUzzvX94ngJ uuhoGrE1G/XYtDyTEbtUtVWY0iTF35rL5kPT5Bf+J1wH4O33madQ5PDwFKiSN8as NEATKSc+DdD/45ySlqm+ITGw+BufSnUtSNFocCPaAIoC0TIrwGKdbQcdPShlsYVu W2pTag+Up3jsXZAZorRsrRXKUB2RJKpkqom7Of2oxXITWHUJ5Kgm51cbB3WNVEZc d7bYq1IdIqq4A7dNH5WPJzMnsjsomDww+atxmLmnIonGbkptSO5Z9qhLzfUVsPPD bq/UC03Lhn2Vp1odCaWPCcX0n5XQ65tURUinINMVbB1nFJ7cYhu24GJK1FnjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOLPjRVHB9yON2IiCdkTIfexIVQcwHwYDVR0j BBgwFoAUk3bN89KkTMQXZPifaP1+QTDrNRwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTM0NmMwZTItODE5NC00MDI0LWJjYjMtZDAyOTU2Y2UzYTk5LzAvOTM3NkNERjNE MkE0NENDNDE3NjRGODlGNjhGRDdFNDEzMEVCMzUxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85Mzc2Q0RGM0QyQTQ0Q0M0MTc2NEY4OUY2OEZEN0U0MTMwRUIz NTFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTM0NmMwZTItODE5NC00MDI0LWJj YjMtZDAyOTU2Y2UzYTk5LzAvOTM3NkNERjNEMkE0NENDNDE3NjRGODlGNjhGRDdF NDEzMEVCMzUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6aRZzb4K41sQAwmOtspx/9P8l4dg/WZ4u3 FmIMDI6jiBF+yOnCMB1TjxzzgjNiEshDbymNv7dKnHHitIMiXKgxuyv/PSTystLg 9B/l8/s3Br7CPdALQHBe4tD9yw75BHRx0zt7fvYf0XodflASSEs/DSQNdvTjMLjt q2obyubkKqs/xC9e0KcDe2lH320zfFnj/7tpiODAivqOmzRcNulTOD3Ncirce2dd OrmsaXCFuEsr2FQAReH+jEC6AaGSRF+8XGzHI4M1VKeea8YIT5kgbHWyeUTcQpOd ORjdtGSSjAmLtd3b1TM0ylY7dZesphPc9mEDoxBIDIMhI/8L760= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:35 2026 by rpki-client