$ rpki-client -vvf rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft File: 9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft (raw, json) Hash identifier: kzrk6mYyK+NELEzwTjy0MtYEQcuXxMr86oiYA1usLTA= Subject key identifier: E7:19:94:F3:CA:7E:B8:41:C2:51:25:AA:9D:42:12:12:86:73:BD:65 Authority key identifier: 9A:2E:70:15:61:0F:91:22:97:C9:C4:B0:FF:DE:85:57:63:38:C9:EA Certificate issuer: /CN=9A2E7015610F912297C9C4B0FFDE85576338C9EA Certificate serial: 20936B8763E7BE308C55A87A09C1CCF1F6CBD0A6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 17:47:19 +0000 Manifest this update: Fri 19 Jun 2026 17:42:19 +0000 Manifest next update: Sat 20 Jun 2026 19:24:19 +0000 Files and hashes: 1: 9A2E7015610F912297C9C4B0FFDE85576338C9EA.crl (hash: hPwME30OsMXdPaXUlti+SX9JgcxMaYiV5JZQTLAB+2Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.crl rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:93:6b:87:63:e7:be:30:8c:55:a8:7a:09:c1:cc:f1:f6:cb:d0:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A2E7015610F912297C9C4B0FFDE85576338C9EA Validity Not Before: Jun 19 17:42:19 2026 GMT Not After : Jun 20 19:24:19 2026 GMT Subject: CN=E71994F3CA7EB841C25125AA9D4212128673BD65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:58:f0:7a:f7:50:13:a1:14:6a:b4:8b:65:b2: b7:7a:6b:6d:88:d0:e6:6c:91:12:4b:49:ea:46:e3: e8:fd:69:a5:56:65:f4:2c:fd:29:df:9b:1b:f5:e0: 16:52:77:f6:7d:f5:0f:60:e1:18:de:8f:24:b6:8e: de:0c:95:24:a4:fe:1f:cb:5a:eb:40:e8:4e:4c:7a: c6:56:1b:ee:62:63:55:b2:5b:da:b9:a5:62:2a:10: d6:9a:ab:b8:62:cc:f8:e5:67:3d:b5:98:e2:1a:e3: ac:e6:ba:0b:44:12:22:ca:d9:27:d7:e8:c4:93:f3: ae:1d:89:ff:ab:23:26:37:58:fe:1c:13:65:f9:00: 4e:f7:1c:93:b3:c3:c2:5a:50:f1:0d:9a:fc:22:ab: 87:22:cf:86:e5:2f:5c:4d:d4:b2:2c:71:8d:d0:ec: a8:16:7b:f8:84:e9:91:f7:d4:3a:c8:8b:1e:d1:45: 7c:34:23:8e:cf:73:f4:1e:49:10:66:61:9e:ee:0b: c6:a1:49:49:3c:c1:6f:28:4f:93:2e:e7:94:e8:86: e9:79:5f:de:66:98:dc:09:8b:68:07:c5:b3:8c:72: 5f:15:df:5d:13:c0:47:e4:bb:29:fb:26:6b:51:cd: 38:5b:72:b6:71:4b:0f:f8:8e:a9:29:56:69:04:da: 91:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:19:94:F3:CA:7E:B8:41:C2:51:25:AA:9D:42:12:12:86:73:BD:65 X509v3 Authority Key Identifier: keyid:9A:2E:70:15:61:0F:91:22:97:C9:C4:B0:FF:DE:85:57:63:38:C9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3a:4f:50:81:52:ae:2a:ed:df:b7:82:be:55:ab:ad:a9:7b: b6:bf:a7:1e:4b:ba:75:39:f1:d8:9e:4e:04:35:b1:09:6b:a2: b1:1a:e4:bf:9e:f4:3a:0d:c9:b9:57:ec:37:48:e7:a3:91:8e: 21:df:35:15:58:f7:29:e8:7b:6f:b7:14:a5:a2:04:ab:59:90: 26:81:41:5a:51:4e:88:b6:93:15:8e:ed:87:23:f7:93:3a:89: 8c:5c:cd:5a:5b:9a:db:c6:2b:00:2e:ff:ed:4c:06:9d:c8:3c: 66:50:78:c1:30:45:9f:6d:4b:55:8f:ae:de:2e:dd:6b:a5:e6: 8d:17:15:14:bf:79:de:37:80:4b:a5:c5:bb:67:c4:c1:75:bb: 22:53:34:a6:94:4b:eb:72:7e:08:a7:75:7d:0d:9e:88:37:72: 0a:a1:19:b6:23:a2:8f:bc:76:b9:bc:43:3d:cb:bc:ea:12:dd: a6:1c:83:26:f6:71:7e:8a:4d:3f:95:5b:14:ee:9f:33:c2:b3: bb:22:ca:91:ee:ee:89:fb:f4:eb:8e:17:4a:96:75:ee:88:11: 88:ee:71:9d:08:66:a9:02:23:26:3c:7e:ce:dc:9b:62:1e:61: 07:00:a6:e5:a7:5d:53:63:ef:68:76:46:01:18:2b:d4:9b:82: 7f:af:6b:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIJNrh2PnvjCMVah6CcHM8fbL0KYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyRTcwMTU2MTBGOTEyMjk3QzlDNEIwRkZERTg1NTc2 MzM4QzlFQTAeFw0yNjA2MTkxNzQyMTlaFw0yNjA2MjAxOTI0MTlaMDMxMTAvBgNV BAMTKEU3MTk5NEYzQ0E3RUI4NDFDMjUxMjVBQTlENDIxMjEyODY3M0JENjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUWPB691AToRRqtItlsrd6a22I 0OZskRJLSepG4+j9aaVWZfQs/Snfmxv14BZSd/Z99Q9g4RjejyS2jt4MlSSk/h/L WutA6E5MesZWG+5iY1WyW9q5pWIqENaaq7hizPjlZz21mOIa46zmugtEEiLK2SfX 6MST864dif+rIyY3WP4cE2X5AE73HJOzw8JaUPENmvwiq4ciz4blL1xN1LIscY3Q 7KgWe/iE6ZH31DrIix7RRXw0I47Pc/QeSRBmYZ7uC8ahSUk8wW8oT5Mu55Tohul5 X95mmNwJi2gHxbOMcl8V310TwEfkuyn7JmtRzThbcrZxSw/4jqkpVmkE2pElAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5xmU88p+uEHCUSWqnUISEoZzvWUwHwYDVR0j BBgwFoAUmi5wFWEPkSKXycSw/96FV2M4yeowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTNmYTdkNWMtMzY4ZC00YWYzLWI4ZTctMTc4NjI0NmRkNjJmLzAvOUEyRTcwMTU2 MTBGOTEyMjk3QzlDNEIwRkZERTg1NTc2MzM4QzlFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTJFNzAxNTYxMEY5MTIyOTdDOUM0QjBGRkRFODU1NzYzMzhD OUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTNmYTdkNWMtMzY4ZC00YWYzLWI4 ZTctMTc4NjI0NmRkNjJmLzAvOUEyRTcwMTU2MTBGOTEyMjk3QzlDNEIwRkZERTg1 NTc2MzM4QzlFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACo6T1CBUq4q7d+3gr5Vq62pe7a/px5LunU5 8dieTgQ1sQlrorEa5L+e9DoNyblX7DdI56ORjiHfNRVY9ynoe2+3FKWiBKtZkCaB QVpRToi2kxWO7Ycj95M6iYxczVpbmtvGKwAu/+1MBp3IPGZQeMEwRZ9tS1WPrt4u 3Wul5o0XFRS/ed43gEulxbtnxMF1uyJTNKaUS+tyfgindX0Nnog3cgqhGbYjoo+8 drm8Qz3LvOoS3aYcgyb2cX6KTT+VWxTunzPCs7siypHu7on79OuOF0qWde6IEYju cZ0IZqkCIyY8fs7cm2IeYQcApuWnXVNj72h2RgEYK9Sbgn+va88= -----END CERTIFICATE-----Generated at Sat Jun 20 09:11:21 2026 by rpki-client