$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft File: 9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft (raw, json) Hash identifier: /SdT61ACFGZ1uUV1EjcpduBUGDHVr+n9iIoZPMS7600= Subject key identifier: 13:5A:6C:4D:E2:47:99:85:F2:3C:3D:FA:97:3F:6D:61:E6:45:8A:1B Authority key identifier: 9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13 Certificate issuer: /CN=9A347241E9DA18B0BB748E5558F85DFA6AD14F13 Certificate serial: 35D24F7C2BFEC16A179BBBD9D31666A47D6B9AC7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 14:29:20 +0000 Manifest this update: Thu 18 Jun 2026 14:24:20 +0000 Manifest next update: Fri 19 Jun 2026 16:38:20 +0000 Files and hashes: 1: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: wInMUXHOP8RJI5eoz/+Dc4x331OyQaS/P4AI/7E+Chw=) 2: 9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl (hash: OfDI9qbaHmy3Q7tbjc2afLcUEbNklb7WmkJIf5WYmJw=) 3: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: vdwdHoa0dxzBT4qxWDgRcyQiniSgsgBOI6Tm2dJ4lDY=) 4: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: PjTS4Hn+0nQcRzsQo6Ms0LRYKKTZlFXIqpYw+ixRnkk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 12:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d2:4f:7c:2b:fe:c1:6a:17:9b:bb:d9:d3:16:66:a4:7d:6b:9a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A347241E9DA18B0BB748E5558F85DFA6AD14F13 Validity Not Before: Jun 18 14:24:20 2026 GMT Not After : Jun 19 16:38:20 2026 GMT Subject: CN=135A6C4DE2479985F23C3DFA973F6D61E6458A1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0b:45:b9:32:f8:73:1d:ce:4b:35:f5:40:97: 61:94:09:80:2b:ab:3d:29:bd:90:ce:0b:e3:26:f8: d0:90:db:c2:ed:ce:56:2c:56:59:d5:fa:d1:d0:55: 44:b6:59:e3:a4:ff:f5:e3:21:b3:fb:79:11:7a:a3: 8b:dd:39:dd:15:5e:fd:71:e1:ed:59:7c:e3:e7:4d: fe:9c:ac:44:f2:23:59:9a:72:fd:ea:d3:8a:bd:03: 21:00:ac:93:a0:0a:8e:93:02:0c:dd:12:d0:2a:89: a3:85:e5:ff:5b:3d:29:8c:3a:41:30:89:f7:8f:4a: 98:ac:b9:93:95:7d:68:96:8b:68:d6:5f:c9:7f:04: e0:48:08:87:fb:8c:73:09:45:cc:4d:8a:79:cb:9c: 21:68:de:ac:3b:7d:f7:f3:95:61:1e:8c:7e:5a:ca: 05:33:25:b3:ad:7e:bd:07:70:4f:12:ac:98:2b:c1: b1:7f:32:32:a8:bc:eb:a0:e9:98:c7:29:1b:5a:f4: 92:38:92:0f:aa:be:2b:32:ee:bf:ac:35:ae:01:85: 64:63:f7:06:ff:35:99:73:e6:ef:23:2f:77:41:15: 58:fd:d8:f1:15:56:77:c9:c8:ae:33:36:bd:92:dc: 13:68:12:0f:76:bf:c7:3f:55:cc:1d:9c:96:0d:21: 2f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5A:6C:4D:E2:47:99:85:F2:3C:3D:FA:97:3F:6D:61:E6:45:8A:1B X509v3 Authority Key Identifier: keyid:9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b6:de:89:4f:da:cf:46:6f:23:81:48:d7:60:9a:de:d5:72: f9:d4:bf:56:28:22:c6:37:55:c3:d4:05:b6:52:89:d0:1a:a9: b4:8b:c8:34:b3:e6:76:38:bc:f4:73:8f:28:a9:f9:0a:43:48: d4:48:9b:65:03:67:27:6b:b5:d4:5d:5e:1a:86:ab:2f:b7:93: c0:b0:d4:dd:1f:1a:17:4c:12:91:fa:2a:b9:26:3f:82:48:aa: 1f:da:ed:72:3d:ed:e6:60:66:a2:ac:a4:6d:4e:f6:1a:2d:e2: 97:0e:3e:17:f7:57:a4:5a:12:eb:78:7e:55:28:88:1b:a5:72: 24:98:fb:6c:26:82:9a:93:2a:d1:bf:24:32:91:21:0e:c6:c1: 7c:de:be:97:79:15:80:4b:eb:04:7a:a6:48:d8:fa:9b:2d:ae: 3f:24:e9:06:e5:d2:12:b0:8c:dc:80:a6:e7:4d:7f:d3:34:0b: 5a:b6:ea:d1:17:36:4f:51:e0:d0:1a:70:34:4f:d7:2e:d6:8e: 9a:fd:2f:93:d7:d7:f4:8a:f4:ae:27:30:e6:15:e7:ae:69:4f: 66:db:2b:32:29:ad:db:a6:2b:16:ff:bb:48:d7:60:95:bc:b0: e5:a7:eb:bd:c3:34:c1:ea:c7:13:0e:3b:ce:dd:25:01:2e:f8: 8f:9c:01:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNdJPfCv+wWoXm7vZ0xZmpH1rmscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEzNDcyNDFFOURBMThCMEJCNzQ4RTU1NThGODVERkE2 QUQxNEYxMzAeFw0yNjA2MTgxNDI0MjBaFw0yNjA2MTkxNjM4MjBaMDMxMTAvBgNV BAMTKDEzNUE2QzRERTI0Nzk5ODVGMjNDM0RGQTk3M0Y2RDYxRTY0NThBMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPC0W5MvhzHc5LNfVAl2GUCYAr qz0pvZDOC+Mm+NCQ28LtzlYsVlnV+tHQVUS2WeOk//XjIbP7eRF6o4vdOd0VXv1x 4e1ZfOPnTf6crETyI1macv3q04q9AyEArJOgCo6TAgzdEtAqiaOF5f9bPSmMOkEw ifePSpisuZOVfWiWi2jWX8l/BOBICIf7jHMJRcxNinnLnCFo3qw7fffzlWEejH5a ygUzJbOtfr0HcE8SrJgrwbF/MjKovOug6ZjHKRta9JI4kg+qvisy7r+sNa4BhWRj 9wb/NZlz5u8jL3dBFVj92PEVVnfJyK4zNr2S3BNoEg92v8c/VcwdnJYNIS/BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE1psTeJHmYXyPD36lz9tYeZFihswHwYDVR0j BBgwFoAUmjRyQenaGLC7dI5VWPhd+mrRTxMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NkZDU3NzQtMzBkZC00YTAwLWIxYTktOWIxMjgyNjkzMGMyLzAvOUEzNDcyNDFF OURBMThCMEJCNzQ4RTU1NThGODVERkE2QUQxNEYxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTM0NzI0MUU5REExOEIwQkI3NDhFNTU1OEY4NURGQTZBRDE0 RjEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NkZDU3NzQtMzBkZC00YTAwLWIx YTktOWIxMjgyNjkzMGMyLzAvOUEzNDcyNDFFOURBMThCMEJCNzQ4RTU1NThGODVE RkE2QUQxNEYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHG23olP2s9GbyOBSNdgmt7VcvnUv1YoIsY3 VcPUBbZSidAaqbSLyDSz5nY4vPRzjyip+QpDSNRIm2UDZydrtdRdXhqGqy+3k8Cw 1N0fGhdMEpH6KrkmP4JIqh/a7XI97eZgZqKspG1O9hot4pcOPhf3V6RaEut4flUo iBulciSY+2wmgpqTKtG/JDKRIQ7GwXzevpd5FYBL6wR6pkjY+pstrj8k6Qbl0hKw jNyApudNf9M0C1q26tEXNk9R4NAacDRP1y7Wjpr9L5PX1/SK9K4nMOYV565pT2bb KzIprdumKxb/u0jXYJW8sOWn673DNMHqxxMOO87dJQEu+I+cAVA= -----END CERTIFICATE-----Generated at Thu Jun 18 20:57:46 2026 by rpki-client