$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft File: B9FC538BFBE91D32C980E6C968C96604E388FD26.mft (raw, json) Hash identifier: US98r1TqP4Ko9zB4re0cqjytvs9Tw43adzTVJhNUMkQ= Subject key identifier: 90:D9:AF:95:80:9C:C2:53:C5:65:5D:87:2B:2C:FB:98:B1:90:5F:E8 Authority key identifier: B9:FC:53:8B:FB:E9:1D:32:C9:80:E6:C9:68:C9:66:04:E3:88:FD:26 Certificate issuer: /CN=B9FC538BFBE91D32C980E6C968C96604E388FD26 Certificate serial: 609C0F8E2A37228FE4C44B839A5BC881D7FBBD87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9FC538BFBE91D32C980E6C968C96604E388FD26.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft Manifest number: 43 Signing time: Sat 20 Jun 2026 03:34:04 +0000 Manifest this update: Sat 20 Jun 2026 03:29:04 +0000 Manifest next update: Sun 21 Jun 2026 06:05:04 +0000 Files and hashes: 1: B9FC538BFBE91D32C980E6C968C96604E388FD26.crl (hash: BxaC6JwBVHZq9FND2Lw2Q+fiZRIcH0IV8YPH2SdV860=) 2: 3130332e3138392e3235342e302f32342d3234203d3e20313439393135.roa (hash: ucIu0OXRxfc1CywG+yYTICGHOqWxj9NSpYywYNEl67o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.crl rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9FC538BFBE91D32C980E6C968C96604E388FD26.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 06:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:9c:0f:8e:2a:37:22:8f:e4:c4:4b:83:9a:5b:c8:81:d7:fb:bd:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9FC538BFBE91D32C980E6C968C96604E388FD26 Validity Not Before: Jun 20 03:29:04 2026 GMT Not After : Jun 21 06:05:04 2026 GMT Subject: CN=90D9AF95809CC253C5655D872B2CFB98B1905FE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a4:d4:af:9a:d2:02:de:00:37:d1:56:56:39: 8c:a5:11:47:7c:71:e3:f6:5c:c2:02:30:8c:62:10: 9f:b2:af:48:09:28:8d:a5:cf:3e:5c:a1:55:07:f3: 87:a2:37:49:34:84:67:66:de:4e:32:62:4d:40:6f: c7:7d:e5:ec:23:b7:e5:79:47:9f:0b:41:0f:bb:1f: f0:f7:5c:b8:c6:d5:56:48:4a:92:71:dc:2c:94:43: 20:e9:aa:1b:36:90:20:10:ef:89:ae:c9:50:b3:86: 48:c6:b5:96:1d:18:16:bd:bf:55:21:3f:73:c5:63: 58:cd:01:a4:ea:54:a7:7f:33:d2:3f:8b:cd:6a:1d: c3:9d:e0:f2:a9:54:c4:e3:5d:4c:c9:ad:90:45:70: a2:8a:89:ea:f5:85:ec:be:24:c9:42:b2:da:5b:3d: 38:7d:35:ac:9e:e4:59:32:6e:93:a0:aa:22:5f:52: b9:a7:17:c7:0e:d3:cf:96:b9:7f:b5:a6:0e:d3:11: 69:bf:f9:16:50:dd:7a:92:c1:54:03:0b:8c:ce:c5: e5:8e:d9:8e:a0:d9:d9:d9:5c:c1:8b:5b:f0:99:bc: f5:c4:db:7c:94:02:9d:4e:75:7c:a7:c3:66:e3:92: 13:fe:2f:30:53:a7:17:37:47:27:e7:cb:fb:49:1f: de:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D9:AF:95:80:9C:C2:53:C5:65:5D:87:2B:2C:FB:98:B1:90:5F:E8 X509v3 Authority Key Identifier: keyid:B9:FC:53:8B:FB:E9:1D:32:C9:80:E6:C9:68:C9:66:04:E3:88:FD:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9FC538BFBE91D32C980E6C968C96604E388FD26.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:e6:ad:61:8c:d6:c7:51:37:0d:6d:6c:ac:fc:c4:bb:8c:e5: 54:45:6d:95:fd:2e:dd:40:ec:2b:24:70:e0:51:29:4b:d8:99: ed:35:c9:ae:05:fa:28:89:ec:9b:69:b7:ca:f5:1f:9d:78:de: 6a:b9:0a:03:e8:ec:e0:ef:91:ce:51:21:74:03:ce:8b:c5:21: 16:89:4e:22:7b:dd:6e:c7:d1:56:00:21:78:ad:03:8b:f2:da: 55:37:fb:e7:7d:5b:bb:7d:b4:0f:43:8d:75:23:ca:cb:04:48: 7c:9f:40:20:6e:56:02:6b:2b:70:72:ce:d9:11:57:ce:aa:e0: 24:d2:ef:ad:ea:0e:3b:e1:da:a9:bc:b7:4c:22:14:b0:71:d1: 27:3a:4c:50:74:9a:23:65:55:bd:ff:e1:3a:06:c1:a9:8c:56: e7:ba:9e:f9:45:2e:75:f0:37:98:46:c8:a0:f6:af:72:f8:d1: 7f:e1:fc:93:f3:1d:fd:c2:6b:c3:41:a1:32:6e:83:a6:8f:2c: 62:e8:b9:cf:f2:e3:7b:c4:9f:47:84:67:d1:d6:e7:90:d4:df: bd:0c:37:59:44:cd:f2:ca:ca:55:b6:40:1d:5d:5c:3d:e7:cd: b7:d4:df:7a:71:8f:ea:75:c9:7c:11:38:e9:6f:2b:f7:b7:c3: 11:ac:5c:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJwPjio3Io/kxEuDmlvIgdf7vYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlGQzUzOEJGQkU5MUQzMkM5ODBFNkM5NjhDOTY2MDRF Mzg4RkQyNjAeFw0yNjA2MjAwMzI5MDRaFw0yNjA2MjEwNjA1MDRaMDMxMTAvBgNV BAMTKDkwRDlBRjk1ODA5Q0MyNTNDNTY1NUQ4NzJCMkNGQjk4QjE5MDVGRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkpNSvmtIC3gA30VZWOYylEUd8 ceP2XMICMIxiEJ+yr0gJKI2lzz5coVUH84eiN0k0hGdm3k4yYk1Ab8d95ewjt+V5 R58LQQ+7H/D3XLjG1VZISpJx3CyUQyDpqhs2kCAQ74muyVCzhkjGtZYdGBa9v1Uh P3PFY1jNAaTqVKd/M9I/i81qHcOd4PKpVMTjXUzJrZBFcKKKier1hey+JMlCstpb PTh9Naye5FkybpOgqiJfUrmnF8cO08+WuX+1pg7TEWm/+RZQ3XqSwVQDC4zOxeWO 2Y6g2dnZXMGLW/CZvPXE23yUAp1OdXynw2bjkhP+LzBTpxc3Ryfny/tJH94RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkNmvlYCcwlPFZV2HKyz7mLGQX+gwHwYDVR0j BBgwFoAUufxTi/vpHTLJgObJaMlmBOOI/SYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMwMDU2YjQtZjAyNy00NGZhLTk3NGQtNGExZWQxOTFhZTU2LzAvQjlGQzUzOEJG QkU5MUQzMkM5ODBFNkM5NjhDOTY2MDRFMzg4RkQyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUZDNTM4QkZCRTkxRDMyQzk4MEU2Qzk2OEM5NjYwNEUzODhG RDI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMwMDU2YjQtZjAyNy00NGZhLTk3 NGQtNGExZWQxOTFhZTU2LzAvQjlGQzUzOEJGQkU5MUQzMkM5ODBFNkM5NjhDOTY2 MDRFMzg4RkQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfmrWGM1sdRNw1tbKz8xLuM5VRFbZX9Lt1A 7CskcOBRKUvYme01ya4F+iiJ7Jtpt8r1H5143mq5CgPo7ODvkc5RIXQDzovFIRaJ TiJ73W7H0VYAIXitA4vy2lU3++d9W7t9tA9DjXUjyssESHyfQCBuVgJrK3ByztkR V86q4CTS763qDjvh2qm8t0wiFLBx0Sc6TFB0miNlVb3/4ToGwamMVue6nvlFLnXw N5hGyKD2r3L40X/h/JPzHf3Ca8NBoTJug6aPLGLouc/y43vEn0eEZ9HW55DU370M N1lEzfLKylW2QB1dXD3nzbfU33pxj+p1yXwROOlvK/e3wxGsXGY= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:06 2026 by rpki-client