$ rpki-client -vvf rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft File: A9E3887289ED85663942126250F7D66CD58FE1F5.mft (raw, json) Hash identifier: cl/gbEoSZ3na2RvEE3EOeJChZyNTtPldop95rhPMcuM= Subject key identifier: 38:10:99:55:23:F2:26:7E:FA:D8:54:6C:A4:A4:DD:08:BA:D0:02:7B Authority key identifier: A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5 Certificate issuer: /CN=A9E3887289ED85663942126250F7D66CD58FE1F5 Certificate serial: 1F66E3680FDFB119FFB2147512DF9643B5B280E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 13:06:47 +0000 Manifest this update: Fri 19 Jun 2026 13:01:47 +0000 Manifest next update: Sat 20 Jun 2026 16:18:47 +0000 Files and hashes: 1: A9E3887289ED85663942126250F7D66CD58FE1F5.crl (hash: qLTzSgper3GQhU8cSuXxo5UbgUDHeJNRcyTDi8LtnWg=) 2: 3130332e3136362e3132322e302f32332d3233203d3e20313431393435.roa (hash: JytxgR9jZstQPJBZYCIpgiXASID1MDjbIa5qz0t9YDc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.crl rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 16:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:66:e3:68:0f:df:b1:19:ff:b2:14:75:12:df:96:43:b5:b2:80:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E3887289ED85663942126250F7D66CD58FE1F5 Validity Not Before: Jun 19 13:01:47 2026 GMT Not After : Jun 20 16:18:47 2026 GMT Subject: CN=3810995523F2267EFAD8546CA4A4DD08BAD0027B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ce:67:92:8c:4b:94:bf:19:68:b6:04:38:d9: 9d:f3:88:04:d6:3f:7e:27:1f:a9:ac:2e:8b:3c:e4: 7f:91:09:14:de:a4:94:f4:22:ce:80:b3:fa:f8:f0: fc:e2:db:96:f5:a8:f3:bf:81:04:72:3b:52:45:b1: ca:a2:1d:cd:87:e6:47:89:f9:44:26:8c:ed:16:9c: aa:5e:e2:58:30:58:f9:93:88:5e:c5:5d:b8:0a:a7: d8:7b:eb:65:61:33:85:dc:1d:ac:25:81:3f:b1:f7: 34:10:2e:68:22:f9:71:f2:bb:32:b2:fc:62:a9:39: 58:44:48:74:55:bf:50:5d:fc:c4:6b:4b:c7:fd:22: 75:3c:13:29:a7:38:d1:f8:a1:5f:d0:48:7e:f0:09: 7c:a6:29:22:94:68:4f:52:f9:54:f1:d7:ad:98:1e: 8d:ce:c7:84:1c:f1:3e:e2:94:20:a8:e9:7f:6b:14: a2:c9:36:f7:48:8a:87:dd:36:0d:98:b3:a7:d5:18: 72:5f:b3:e9:86:cb:a6:7d:aa:37:51:33:64:68:3a: 4e:32:81:29:5b:0b:79:fc:a8:5b:41:3f:c6:a8:7f: 2a:c7:79:1b:63:b7:fd:12:98:74:28:3b:c4:02:f8: bc:49:34:12:97:85:df:e8:6b:ff:7b:ba:80:a5:7f: 0e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:10:99:55:23:F2:26:7E:FA:D8:54:6C:A4:A4:DD:08:BA:D0:02:7B X509v3 Authority Key Identifier: keyid:A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:16:62:29:46:e4:a5:00:7c:9c:26:91:2b:aa:a6:ec:26:23: 50:d6:4b:49:54:b5:dc:b1:16:bf:dc:09:0f:51:c4:6d:eb:3d: 52:8e:cf:03:47:05:9f:7d:c9:1a:b4:a5:b1:46:97:0a:3c:1e: 68:35:ea:0f:88:41:f5:8d:c9:7d:2f:a5:01:5e:0f:8d:d3:f9: a2:aa:c8:3f:64:dc:7c:5a:78:b6:2b:d3:3a:1b:57:13:5c:68: 31:7a:17:cb:d4:1e:de:f9:96:cf:67:0a:43:6b:71:b8:d6:1b: c6:55:2a:b5:c3:e9:2a:9b:08:ec:e5:ff:d4:f0:3d:3f:52:a1: 2e:55:03:97:42:a1:af:a1:9f:34:f2:55:6f:63:36:d2:9c:61: 7a:cc:4e:db:81:0d:a7:89:04:8e:e6:16:a3:ba:f4:45:15:7d: 01:04:64:48:ff:2a:42:4e:13:c8:ff:b0:47:c4:b4:f3:7c:05: 37:2d:94:fb:69:d2:a1:f3:d4:c3:0f:5b:3f:58:f4:6a:e3:28: ca:6d:a9:dc:ba:a5:d4:81:cd:56:30:97:6a:66:33:38:1a:39: 0f:7c:f6:98:db:ea:2b:48:29:59:59:d8:4e:a3:61:08:b7:6d: b0:91:25:e5:e9:74:71:bd:eb:b6:01:9f:38:ab:5f:9a:e9:83: 19:28:e6:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH2bjaA/fsRn/shR1Et+WQ7WygOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFMzg4NzI4OUVEODU2NjM5NDIxMjYyNTBGN0Q2NkNE NThGRTFGNTAeFw0yNjA2MTkxMzAxNDdaFw0yNjA2MjAxNjE4NDdaMDMxMTAvBgNV BAMTKDM4MTA5OTU1MjNGMjI2N0VGQUQ4NTQ2Q0E0QTRERDA4QkFEMDAyN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDazmeSjEuUvxlotgQ42Z3ziATW P34nH6msLos85H+RCRTepJT0Is6As/r48Pzi25b1qPO/gQRyO1JFscqiHc2H5keJ +UQmjO0WnKpe4lgwWPmTiF7FXbgKp9h762VhM4XcHawlgT+x9zQQLmgi+XHyuzKy /GKpOVhESHRVv1Bd/MRrS8f9InU8EymnONH4oV/QSH7wCXymKSKUaE9S+VTx162Y Ho3Ox4Qc8T7ilCCo6X9rFKLJNvdIiofdNg2Ys6fVGHJfs+mGy6Z9qjdRM2RoOk4y gSlbC3n8qFtBP8aofyrHeRtjt/0SmHQoO8QC+LxJNBKXhd/oa/97uoClfw7LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOBCZVSPyJn762FRspKTdCLrQAnswHwYDVR0j BBgwFoAUqeOIconthWY5QhJiUPfWbNWP4fUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTQzY2M2YTgtZTdhYS00ZjM3LWJkMDgtZjJlYjU3ZTg4NzM2LzAvQTlFMzg4NzI4 OUVEODU2NjM5NDIxMjYyNTBGN0Q2NkNENThGRTFGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOUUzODg3Mjg5RUQ4NTY2Mzk0MjEyNjI1MEY3RDY2Q0Q1OEZF MUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTQzY2M2YTgtZTdhYS00ZjM3LWJk MDgtZjJlYjU3ZTg4NzM2LzAvQTlFMzg4NzI4OUVEODU2NjM5NDIxMjYyNTBGN0Q2 NkNENThGRTFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYWYilG5KUAfJwmkSuqpuwmI1DWS0lUtdyx Fr/cCQ9RxG3rPVKOzwNHBZ99yRq0pbFGlwo8Hmg16g+IQfWNyX0vpQFeD43T+aKq yD9k3HxaeLYr0zobVxNcaDF6F8vUHt75ls9nCkNrcbjWG8ZVKrXD6SqbCOzl/9Tw PT9SoS5VA5dCoa+hnzTyVW9jNtKcYXrMTtuBDaeJBI7mFqO69EUVfQEEZEj/KkJO E8j/sEfEtPN8BTctlPtp0qHz1MMPWz9Y9GrjKMptqdy6pdSBzVYwl2pmMzgaOQ98 9pjb6itIKVlZ2E6jYQi3bbCRJeXpdHG967YBnzirX5rpgxko5iA= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:13 2026 by rpki-client