$ rpki-client -vvf rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft File: 9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft (raw, json) Hash identifier: 9XqOde6mBMI4ocADKXUPjzrluSM8abfIqxcDu0LyTHw= Subject key identifier: A0:22:0D:73:6B:EF:99:BB:87:CD:DA:4B:65:96:E3:CD:8E:2B:68:02 Authority key identifier: 9C:47:04:20:4D:F8:9C:A1:B4:1C:1A:06:44:39:95:B3:CC:E3:86:CB Certificate issuer: /CN=9C4704204DF89CA1B41C1A06443995B3CCE386CB Certificate serial: 1C37055FAB71177E0502A7E80128F522A491DBF1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft Manifest number: 2F Signing time: Fri 05 Jun 2026 20:10:43 +0000 Manifest this update: Fri 05 Jun 2026 20:05:43 +0000 Manifest next update: Sat 06 Jun 2026 21:11:43 +0000 Files and hashes: 1: 9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl (hash: Ilxa0C8KdokyVsFaNVPopitFL66tkmruRDmpin0w4GA=) 2: AS23693.roa (hash: MYMD6pbt4sKz7OvRtkhiGBT2mMS6OgawmPYOhNxznnw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Jun 2026 21:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:37:05:5f:ab:71:17:7e:05:02:a7:e8:01:28:f5:22:a4:91:db:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C4704204DF89CA1B41C1A06443995B3CCE386CB Validity Not Before: Jun 5 20:05:43 2026 GMT Not After : Jun 6 21:11:43 2026 GMT Subject: CN=A0220D736BEF99BB87CDDA4B6596E3CD8E2B6802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:94:ae:1c:e3:36:e3:45:21:65:48:04:4f:7b: 1c:18:33:54:af:d6:92:67:ac:30:25:a1:7b:97:ca: 63:fc:b5:7f:09:51:00:71:f0:0c:98:78:92:44:53: 01:1e:1f:b6:de:36:70:1f:a8:ec:30:cc:54:d7:d5: e9:90:48:7d:99:af:36:5c:b5:01:79:5f:89:2b:7f: 23:23:2e:9d:1f:2b:fb:06:42:7b:87:f3:d5:de:6c: 1f:4a:8d:07:65:05:8f:e8:af:ad:8d:1b:4b:fe:fe: e8:2d:74:43:40:52:36:01:53:71:ad:2e:a1:e4:44: 8e:ee:65:63:54:6f:e5:89:58:dd:6b:a9:c4:f1:9f: 59:ff:2b:b3:bd:ca:f8:1e:c2:fa:97:1b:4d:32:df: 8a:f2:0f:f4:96:a7:91:7f:21:60:9c:21:53:25:b7: 53:16:b3:65:73:e2:d4:81:92:2d:77:58:1e:f1:0d: f3:e5:54:eb:d5:71:d7:cb:47:9a:1f:84:1f:8b:01: 11:99:d4:15:2f:38:58:cb:b5:56:40:bc:02:c5:19: ee:5c:81:e9:7e:2a:7a:d6:bd:17:7c:b0:20:12:be: 15:45:6d:3e:80:4d:73:10:4f:cd:2d:0e:85:e3:dd: 31:a2:4e:98:83:e9:71:54:d4:8a:0e:40:10:45:96: 24:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:22:0D:73:6B:EF:99:BB:87:CD:DA:4B:65:96:E3:CD:8E:2B:68:02 X509v3 Authority Key Identifier: keyid:9C:47:04:20:4D:F8:9C:A1:B4:1C:1A:06:44:39:95:B3:CC:E3:86:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:74:30:c0:bd:ed:12:e9:08:21:7f:8f:ad:bf:1c:8b:49:56: c1:a2:ce:9c:36:2a:1f:f0:47:b8:a2:1e:84:59:17:5c:52:ba: ff:bb:9b:2f:b7:1c:55:bb:d6:1f:92:64:46:f0:b3:b9:a0:0d: 0d:af:31:3b:c8:7a:89:37:16:34:c9:85:12:66:14:98:d2:b1: 57:ca:13:a6:bd:c1:db:0c:23:0e:a1:51:96:62:7b:60:3c:fc: 70:47:eb:41:c6:4e:aa:86:9a:f3:c1:26:59:98:50:5a:95:5d: 55:c2:37:8b:9e:ea:ef:d2:6f:58:89:11:55:cd:67:1d:bd:9b: 01:cc:a1:67:5b:09:fd:5f:84:bd:b9:6c:64:12:4b:e6:09:73: 4a:1a:31:70:21:b1:96:20:38:28:e0:a6:d3:39:84:0a:cb:95: 2c:33:df:6b:e4:e4:0f:2c:79:84:df:c2:a5:fc:76:09:2c:7d: 7e:2b:d0:04:0e:36:21:36:de:69:83:9d:5e:bc:e2:34:61:5f: 9d:74:57:74:bf:da:06:b2:bb:d9:ce:f1:c6:7b:2d:8f:8a:71: bb:fe:f5:bc:9a:13:ff:20:fc:b2:c7:64:7d:e0:b2:79:cc:81: 5e:40:0e:25:02:f7:80:36:f6:33:45:d1:9a:3e:d0:2d:e7:17: b8:99:9d:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHDcFX6txF34FAqfoASj1IqSR2/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM0NzA0MjA0REY4OUNBMUI0MUMxQTA2NDQzOTk1QjND Q0UzODZDQjAeFw0yNjA2MDUyMDA1NDNaFw0yNjA2MDYyMTExNDNaMDMxMTAvBgNV BAMTKEEwMjIwRDczNkJFRjk5QkI4N0NEREE0QjY1OTZFM0NEOEUyQjY4MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtlK4c4zbjRSFlSARPexwYM1Sv 1pJnrDAloXuXymP8tX8JUQBx8AyYeJJEUwEeH7beNnAfqOwwzFTX1emQSH2ZrzZc tQF5X4krfyMjLp0fK/sGQnuH89XebB9KjQdlBY/or62NG0v+/ugtdENAUjYBU3Gt LqHkRI7uZWNUb+WJWN1rqcTxn1n/K7O9yvgewvqXG00y34ryD/SWp5F/IWCcIVMl t1MWs2Vz4tSBki13WB7xDfPlVOvVcdfLR5ofhB+LARGZ1BUvOFjLtVZAvALFGe5c gel+KnrWvRd8sCASvhVFbT6ATXMQT80tDoXj3TGiTpiD6XFU1IoOQBBFliRNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoCINc2vvmbuHzdpLZZbjzY4raAIwHwYDVR0j BBgwFoAUnEcEIE34nKG0HBoGRDmVs8zjhsswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzMyOGYyNGUtZGM3Zi00NTYyLWE1MWQtZTJlMzhjMzY3N2QxLzAvOUM0NzA0MjA0 REY4OUNBMUI0MUMxQTA2NDQzOTk1QjNDQ0UzODZDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QzQ3MDQyMDRERjg5Q0ExQjQxQzFBMDY0NDM5OTVCM0NDRTM4 NkNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvOUM0NzA0MjA0REY4OUNBMUI0MUMxQTA2NDQzOTk1 QjNDQ0UzODZDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZ0MMC97RLpCCF/j62/HItJVsGizpw2Kh/w R7iiHoRZF1xSuv+7my+3HFW71h+SZEbws7mgDQ2vMTvIeok3FjTJhRJmFJjSsVfK E6a9wdsMIw6hUZZie2A8/HBH60HGTqqGmvPBJlmYUFqVXVXCN4ue6u/Sb1iJEVXN Zx29mwHMoWdbCf1fhL25bGQSS+YJc0oaMXAhsZYgOCjgptM5hArLlSwz32vk5A8s eYTfwqX8dgksfX4r0AQONiE23mmDnV684jRhX510V3S/2gayu9nO8cZ7LY+Kcbv+ 9byaE/8g/LLHZH3gsnnMgV5ADiUC94A29jNF0Zo+0C3nF7iZnS4= -----END CERTIFICATE-----Generated at Sat Jun 6 12:03:57 2026 by rpki-client