$ rpki-client -vvf rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft File: 9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft (raw, json) Hash identifier: 2zU7K4NR4SQSkVEBCiobKTJQIZ+UT3mIlDjT3A8ClZU= Subject key identifier: 45:AA:9A:59:7F:9C:D1:50:EC:43:2D:67:CC:6D:9C:9B:B3:47:54:47 Authority key identifier: 9D:8E:FC:0D:64:AA:98:41:BE:1E:38:43:21:BB:2C:12:15:3F:F1:D9 Certificate issuer: /CN=9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9 Certificate serial: 32236E1E815D74B56EF4DDF467118732C76739CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 12:25:56 +0000 Manifest this update: Fri 19 Jun 2026 12:20:56 +0000 Manifest next update: Sat 20 Jun 2026 15:44:56 +0000 Files and hashes: 1: 9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl (hash: +RYNmWY5P4Xi18u1ZpDyQ6OvIv1UwYpeKxSAZfrXlTc=) 2: 3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa (hash: 1YCliMmBjyp95uqeBYgoOHcVWy+xU/Vfr+PcnyYk678=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 15:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:23:6e:1e:81:5d:74:b5:6e:f4:dd:f4:67:11:87:32:c7:67:39:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9 Validity Not Before: Jun 19 12:20:56 2026 GMT Not After : Jun 20 15:44:56 2026 GMT Subject: CN=45AA9A597F9CD150EC432D67CC6D9C9BB3475447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ef:ae:64:07:ee:eb:35:5a:78:47:3e:fc:b8: 13:e7:76:e9:c3:dc:f6:63:e8:07:04:97:d8:85:ae: 88:18:e8:98:bc:65:74:ed:b9:f6:b7:60:43:7c:03: fe:3b:fd:46:a0:00:91:96:88:be:88:6b:e8:0b:fc: 70:93:ba:8a:d1:18:1d:98:e6:69:08:f7:55:36:ed: cd:a4:7d:a0:29:09:3e:f0:e3:79:9d:fe:99:fa:b6: f2:86:cb:73:87:39:a3:e1:aa:92:40:29:dd:7a:4f: 6b:4f:9b:82:36:19:e6:74:6c:b5:42:10:42:e9:42: da:b6:8c:6f:8f:de:2f:f6:26:77:07:eb:91:d8:5c: 5c:9b:29:3c:22:a4:1e:bc:35:db:da:89:ad:6d:d2: f8:f6:95:0e:6c:e2:0a:e0:c1:24:cf:84:95:07:e4: f7:84:ed:ca:d0:4c:a6:e5:2e:66:fd:1f:d0:b9:5a: 76:c6:4b:9e:be:d5:00:87:7a:56:32:b4:12:67:18: a4:1d:28:24:8a:24:0f:3a:4a:7c:a0:f7:2e:ce:be: b4:96:92:dc:0b:d2:00:73:75:a1:9d:d6:0d:fd:0e: 88:40:38:f9:5c:18:aa:b3:8d:73:cc:9f:02:00:07: 7d:8c:d5:3b:3b:7b:c8:f1:9a:33:d8:39:dc:26:c1: 4f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AA:9A:59:7F:9C:D1:50:EC:43:2D:67:CC:6D:9C:9B:B3:47:54:47 X509v3 Authority Key Identifier: keyid:9D:8E:FC:0D:64:AA:98:41:BE:1E:38:43:21:BB:2C:12:15:3F:F1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:7b:10:dd:df:4e:33:a2:ad:3d:cc:10:72:1d:e7:19:a6:94: db:42:8f:9b:36:7a:05:55:f4:4e:f7:05:60:bc:62:e1:54:d0: 81:72:fd:87:a0:d5:38:59:2e:c2:d5:51:f8:c8:28:42:3d:16: 24:e8:10:44:e0:c6:2e:dc:61:6e:dd:75:27:08:50:83:7f:18: f9:dc:43:e6:ba:50:33:66:fd:51:0f:fa:52:75:71:98:c1:80: 5e:29:0b:42:61:60:c1:df:0a:7b:f5:80:1b:e2:33:d0:2f:a4: 2c:ff:f9:23:2d:e7:b1:dc:d9:97:43:ee:75:c0:eb:73:96:70: 25:9f:6f:02:d0:d8:d3:22:6d:63:6a:1c:c1:db:ae:9b:d0:dc: 71:3a:e8:77:b9:2c:fd:1e:92:d1:bc:f8:94:e5:cf:14:8a:ac: 04:81:ec:8c:12:6b:db:e7:45:bd:ec:4b:e2:c5:e2:bc:9c:59: 82:a2:7d:ec:dd:e5:95:cd:ae:52:6b:c5:33:88:9f:8c:34:2b: 36:95:a5:2f:7b:47:fa:60:f5:f6:c1:95:53:3b:01:33:4e:a8: 4c:61:5f:9d:31:2d:d4:36:22:4f:a8:fb:7b:59:ed:2f:ea:a0: 91:d1:ce:c9:a8:15:f6:cc:ac:9e:e8:79:d7:28:d2:08:d1:01: 64:67:6c:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMiNuHoFddLVu9N30ZxGHMsdnOc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ4RUZDMEQ2NEFBOTg0MUJFMUUzODQzMjFCQjJDMTIx NTNGRjFEOTAeFw0yNjA2MTkxMjIwNTZaFw0yNjA2MjAxNTQ0NTZaMDMxMTAvBgNV BAMTKDQ1QUE5QTU5N0Y5Q0QxNTBFQzQzMkQ2N0NDNkQ5QzlCQjM0NzU0NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/765kB+7rNVp4Rz78uBPndunD 3PZj6AcEl9iFrogY6Ji8ZXTtufa3YEN8A/47/UagAJGWiL6Ia+gL/HCTuorRGB2Y 5mkI91U27c2kfaApCT7w43md/pn6tvKGy3OHOaPhqpJAKd16T2tPm4I2GeZ0bLVC EELpQtq2jG+P3i/2JncH65HYXFybKTwipB68Ndvaia1t0vj2lQ5s4grgwSTPhJUH 5PeE7crQTKblLmb9H9C5WnbGS56+1QCHelYytBJnGKQdKCSKJA86Snyg9y7OvrSW ktwL0gBzdaGd1g39DohAOPlcGKqzjXPMnwIAB32M1Ts7e8jxmjPYOdwmwU+7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURaqaWX+c0VDsQy1nzG2cm7NHVEcwHwYDVR0j BBgwFoAUnY78DWSqmEG+HjhDIbssEhU/8dkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDFkNTFkNDEtYjZjYy00MjBhLWI1YTgtNjdjOGJkNmIwMmFmLzAvOUQ4RUZDMEQ2 NEFBOTg0MUJFMUUzODQzMjFCQjJDMTIxNTNGRjFEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDhFRkMwRDY0QUE5ODQxQkUxRTM4NDMyMUJCMkMxMjE1M0ZG MUQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDFkNTFkNDEtYjZjYy00MjBhLWI1 YTgtNjdjOGJkNmIwMmFmLzAvOUQ4RUZDMEQ2NEFBOTg0MUJFMUUzODQzMjFCQjJD MTIxNTNGRjFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADp7EN3fTjOirT3MEHId5xmmlNtCj5s2egVV 9E73BWC8YuFU0IFy/Yeg1ThZLsLVUfjIKEI9FiToEETgxi7cYW7ddScIUIN/GPnc Q+a6UDNm/VEP+lJ1cZjBgF4pC0JhYMHfCnv1gBviM9AvpCz/+SMt57Hc2ZdD7nXA 63OWcCWfbwLQ2NMibWNqHMHbrpvQ3HE66He5LP0ektG8+JTlzxSKrASB7IwSa9vn Rb3sS+LF4rycWYKifezd5ZXNrlJrxTOIn4w0KzaVpS97R/pg9fbBlVM7ATNOqExh X50xLdQ2Ik+o+3tZ7S/qoJHRzsmoFfbMrJ7oedco0gjRAWRnbGc= -----END CERTIFICATE-----Generated at Sat Jun 20 09:00:59 2026 by rpki-client