$ rpki-client -vvf rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft File: 9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft (raw, json) Hash identifier: qwzH8q92xSrJ/FzeWhjY6GaqW9EbV+Ea5r1qQH5EX5c= Subject key identifier: 73:CD:D3:29:6E:7B:7E:23:EA:E0:B3:F4:7D:AF:F8:14:EB:80:1A:EB Authority key identifier: 9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00 Certificate issuer: /CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800 Certificate serial: 2A6CE4B33E5BB05E4EAC4C7D05082D467B6BC5CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 18:12:45 +0000 Manifest this update: Fri 19 Jun 2026 18:07:45 +0000 Manifest next update: Sat 20 Jun 2026 19:55:45 +0000 Files and hashes: 1: 3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (hash: WkzU0ifpIbp5OQ/6TDxMH+vwFG2tqv2mqNzHskMqmF0=) 2: 3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (hash: J9RbUPOqUx6qGs/3TSnBbVnRso5umnmyOklAgJwt1Js=) 3: 3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (hash: 2N+TEQ769mQU4C1i4Rld3w1DT7X5Tq5lgzhroXjz5Hg=) 4: 9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl (hash: sToVuMj475Y8Yb+NArz6YJLKwLOCKfbS8Ev/evR0sms=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:6c:e4:b3:3e:5b:b0:5e:4e:ac:4c:7d:05:08:2d:46:7b:6b:c5:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800 Validity Not Before: Jun 19 18:07:45 2026 GMT Not After : Jun 20 19:55:45 2026 GMT Subject: CN=73CDD3296E7B7E23EAE0B3F47DAFF814EB801AEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:12:d9:83:2b:67:c5:ae:f4:44:08:df:8f:8c: e7:7d:22:ce:27:69:0b:a8:54:d1:1c:6f:3a:74:74: 4b:29:fd:2c:c3:ec:04:da:88:b0:c5:24:4d:77:28: 3d:bb:21:8f:94:e1:ec:e2:a7:64:da:4b:f8:35:ab: ac:ac:f8:74:72:09:93:2e:b2:f0:21:4d:d9:92:31: 51:80:09:76:f9:80:26:1a:61:3c:9f:29:30:08:d3: dd:9d:eb:ca:8d:83:62:10:de:d7:2e:ba:3c:0a:d3: c3:22:91:b1:08:0d:ce:98:fd:fe:ff:c4:ad:38:8b: 6b:f2:ea:e8:10:f4:9b:6f:b1:02:6a:9f:e8:78:d8: 91:cc:f5:9d:ac:ac:3d:30:2f:60:c1:df:a7:83:b9: 8c:af:94:61:25:4e:06:73:19:5f:46:8f:8b:16:53: 21:b8:7e:9c:ad:e9:a0:67:32:45:e0:b3:fe:c6:8a: 77:88:ab:85:df:f8:d5:df:bc:7f:2b:b9:0c:8a:7b: b4:c0:ba:c9:8c:20:d6:f2:cb:54:e9:44:85:90:9b: db:3c:76:f3:35:ea:65:c1:4b:b2:7f:23:43:c4:5b: 58:26:de:f7:d4:10:b8:50:c1:ff:d2:cd:49:a8:bc: 9d:31:4f:dd:87:b2:a1:ef:41:c2:36:95:a6:c3:f7: f1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CD:D3:29:6E:7B:7E:23:EA:E0:B3:F4:7D:AF:F8:14:EB:80:1A:EB X509v3 Authority Key Identifier: keyid:9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b0:df:e0:84:f7:fe:ea:01:b7:78:11:f8:6e:2d:92:b7:58: 9e:44:ff:c4:dd:0e:82:25:03:fc:e1:df:da:f6:a6:d6:67:96: e0:28:32:37:03:8b:f1:4c:00:77:b0:26:6e:5e:34:91:3e:0d: 20:37:c3:08:c9:6f:e9:ba:2e:fc:df:6e:03:b3:e0:eb:c8:4c: 55:49:f6:f8:a8:da:b8:9b:5e:46:fe:85:a1:01:08:92:e8:6e: 9b:a7:63:95:45:1f:2d:0f:71:02:15:95:cb:9a:24:4a:b2:25: 46:9e:97:4f:36:cd:d1:4b:90:e0:c2:5a:5f:02:6e:d0:7b:e7: fa:90:77:c9:b6:4d:15:00:9f:c7:89:f9:c8:57:df:9c:19:13: cf:d5:d3:6a:ff:b3:65:ae:86:2d:f6:c4:eb:a2:5c:c1:06:9b: 09:94:4c:e1:52:44:b0:a0:c6:ab:dc:d6:4c:79:2a:ff:46:f7: 60:39:5d:87:33:07:59:55:0c:37:c7:35:a3:46:17:4b:50:54: 1d:17:67:8a:15:d1:d2:36:a8:83:79:12:d6:ed:07:50:cc:bc: b0:63:48:b3:cc:ab:7b:ef:f2:48:63:d3:9e:4c:3e:79:c6:d1: 3a:20:ba:d7:63:0a:f0:a2:63:fa:4e:57:85:d8:c3:da:f4:54: 42:bd:8f:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKmzksz5bsF5OrEx9BQgtRntrxc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJENzU5OTkyM0I4RkI4QzgzQUIzQjMwMjg3RkJDQzZB OTg3NDgwMDAeFw0yNjA2MTkxODA3NDVaFw0yNjA2MjAxOTU1NDVaMDMxMTAvBgNV BAMTKDczQ0REMzI5NkU3QjdFMjNFQUUwQjNGNDdEQUZGODE0RUI4MDFBRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4EtmDK2fFrvRECN+PjOd9Is4n aQuoVNEcbzp0dEsp/SzD7ATaiLDFJE13KD27IY+U4ezip2TaS/g1q6ys+HRyCZMu svAhTdmSMVGACXb5gCYaYTyfKTAI092d68qNg2IQ3tcuujwK08MikbEIDc6Y/f7/ xK04i2vy6ugQ9JtvsQJqn+h42JHM9Z2srD0wL2DB36eDuYyvlGElTgZzGV9Gj4sW UyG4fpyt6aBnMkXgs/7GineIq4Xf+NXfvH8ruQyKe7TAusmMINbyy1TpRIWQm9s8 dvM16mXBS7J/I0PEW1gm3vfUELhQwf/SzUmovJ0xT92HsqHvQcI2labD9/GHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc83TKW57fiPq4LP0fa/4FOuAGuswHwYDVR0j BBgwFoAUm9dZmSO4+4yDqzswKH+8xqmHSAAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGIzODhmNmUtOTk3NC00NDU3LWFmNGItNWM5YzgyZjUwZTk3LzAvOUJENzU5OTky M0I4RkI4QzgzQUIzQjMwMjg3RkJDQzZBOTg3NDgwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkQ3NTk5OTIzQjhGQjhDODNBQjNCMzAyODdGQkNDNkE5ODc0 ODAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGIzODhmNmUtOTk3NC00NDU3LWFm NGItNWM5YzgyZjUwZTk3LzAvOUJENzU5OTkyM0I4RkI4QzgzQUIzQjMwMjg3RkJD QzZBOTg3NDgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGew3+CE9/7qAbd4EfhuLZK3WJ5E/8TdDoIl A/zh39r2ptZnluAoMjcDi/FMAHewJm5eNJE+DSA3wwjJb+m6LvzfbgOz4OvITFVJ 9vio2ribXkb+haEBCJLobpunY5VFHy0PcQIVlcuaJEqyJUael082zdFLkODCWl8C btB75/qQd8m2TRUAn8eJ+chX35wZE8/V02r/s2Wuhi32xOuiXMEGmwmUTOFSRLCg xqvc1kx5Kv9G92A5XYczB1lVDDfHNaNGF0tQVB0XZ4oV0dI2qIN5EtbtB1DMvLBj SLPMq3vv8khj055MPnnG0TogutdjCvCiY/pOV4XYw9r0VEK9jzQ= -----END CERTIFICATE-----Generated at Sat Jun 20 09:01:30 2026 by rpki-client