$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/F9705E7510801B2BD073B5BE93CC35011C7E7ADA.mft File: F9705E7510801B2BD073B5BE93CC35011C7E7ADA.mft (raw, json) Hash identifier: OaJczh2LEWEhkd2KX8iEhgg77FNEjuhmbj8/krugVtA= Subject key identifier: 9B:DB:73:88:40:D6:A8:F5:DD:B5:4A:3A:B9:79:8D:94:BF:94:A2:B0 Authority key identifier: F9:70:5E:75:10:80:1B:2B:D0:73:B5:BE:93:CC:35:01:1C:7E:7A:DA Certificate issuer: /CN=F9705E7510801B2BD073B5BE93CC35011C7E7ADA Certificate serial: 3C00ABD6FC8F174CCC1C0CEFCA658975A6AA26F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9705E7510801B2BD073B5BE93CC35011C7E7ADA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/F9705E7510801B2BD073B5BE93CC35011C7E7ADA.mft Manifest number: 3E Signing time: Thu 18 Jun 2026 04:17:09 +0000 Manifest this update: Thu 18 Jun 2026 04:12:09 +0000 Manifest next update: Fri 19 Jun 2026 06:19:09 +0000 Files and hashes: 1: 323030313a6466333a393034303a3a2f34382d3438203d3e20313532343139.roa (hash: jc5tVvOo4HL6FqWDRn17JJ3mtU1gi5BuQqtyRnuC4AA=) 2: F9705E7510801B2BD073B5BE93CC35011C7E7ADA.crl (hash: xndkrWhdIUY4ww81ARQ4Vd90hzBaJf5Tkh9MzENYdkI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/F9705E7510801B2BD073B5BE93CC35011C7E7ADA.crl rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/F9705E7510801B2BD073B5BE93CC35011C7E7ADA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9705E7510801B2BD073B5BE93CC35011C7E7ADA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 06:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:00:ab:d6:fc:8f:17:4c:cc:1c:0c:ef:ca:65:89:75:a6:aa:26:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9705E7510801B2BD073B5BE93CC35011C7E7ADA Validity Not Before: Jun 18 04:12:09 2026 GMT Not After : Jun 19 06:19:09 2026 GMT Subject: CN=9BDB738840D6A8F5DDB54A3AB9798D94BF94A2B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:95:ee:10:59:5e:bc:4b:b4:d0:13:b2:68:e9: f0:8e:5b:f4:28:16:fb:01:77:2d:4c:e6:2f:f1:5b: a5:95:c5:a7:8d:98:fd:a8:26:e4:36:1d:8f:0a:74: ce:1a:96:ac:45:b1:10:c7:a5:ee:38:f0:fd:3c:72: 59:dc:a0:e7:f3:0e:70:9d:6a:90:79:dd:76:63:98: 4a:22:d3:52:60:46:b8:d5:ac:ae:68:dc:0f:dd:b0: 24:6b:92:62:ef:77:75:51:d6:61:53:9c:28:e0:95: 36:be:1e:e5:b0:d8:ca:de:c0:35:12:26:40:8d:50: 59:9f:41:2d:18:b8:41:64:b5:74:05:26:f2:2f:27: ff:25:c5:67:7c:9b:83:58:a9:36:b5:d5:8d:c5:17: 11:0f:3d:ba:b9:46:e3:a5:ad:b4:a3:ad:7d:00:60: 79:d3:87:7d:aa:bb:45:2d:61:7e:e8:a4:ee:1e:f3: c2:c3:1d:8a:99:23:6d:ac:a0:a6:f5:55:f2:50:3b: 59:1a:2d:55:3c:2d:22:e6:1c:06:a0:bf:7c:e6:5f: fd:ab:e1:ae:b2:e0:f7:90:57:ef:0f:21:4d:71:99: d8:6f:26:81:7b:ea:29:2f:ff:09:38:81:75:44:bf: 92:cf:66:bf:db:f7:12:b3:ef:1f:69:0e:78:6e:b9: ad:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DB:73:88:40:D6:A8:F5:DD:B5:4A:3A:B9:79:8D:94:BF:94:A2:B0 X509v3 Authority Key Identifier: keyid:F9:70:5E:75:10:80:1B:2B:D0:73:B5:BE:93:CC:35:01:1C:7E:7A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/F9705E7510801B2BD073B5BE93CC35011C7E7ADA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9705E7510801B2BD073B5BE93CC35011C7E7ADA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/F9705E7510801B2BD073B5BE93CC35011C7E7ADA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ab:78:64:9e:fb:1a:b4:fb:8e:4a:fb:4d:40:ca:14:1b:a1: d9:9f:d3:0c:ef:12:cc:a2:c6:d8:04:91:f7:74:ae:81:c0:c9: 8e:a9:9d:fa:99:9b:34:14:e6:c7:b3:78:26:06:07:2a:90:f8: 2c:b7:4a:ff:a6:bf:0d:44:6e:a9:a8:49:71:3b:cc:64:f6:66: e7:ee:f0:e7:19:e9:5e:96:0e:90:e0:cd:5d:83:69:ae:63:83: 3b:78:0c:62:80:4c:3f:f8:19:77:e4:18:62:98:6c:ef:3e:54: 7a:72:38:a2:c0:d8:94:01:55:df:08:c5:4c:3c:61:19:b1:af: 9c:62:3f:a0:44:71:90:25:32:79:88:42:58:a8:df:a8:71:ee: 03:11:37:3e:f5:fa:7f:62:6a:0d:4c:c7:ad:8b:98:58:48:85: d9:79:15:db:fa:f3:49:6f:cd:be:da:28:98:d3:79:f6:f5:25: 5f:df:d5:01:29:43:0c:72:16:5c:fa:c6:89:e8:4f:41:64:ad: cd:7b:fa:f0:78:02:81:64:47:0d:2d:ad:4c:ca:9d:fa:ab:42: 0d:80:52:fc:f6:b0:0d:e9:5f:18:98:4d:4b:31:37:e3:15:07: a7:99:54:78:3b:ba:5d:d3:6a:3c:a9:1b:72:ac:b4:c5:1d:e0: 18:29:59:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPACr1vyPF0zMHAzvymWJdaaqJvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk3MDVFNzUxMDgwMUIyQkQwNzNCNUJFOTNDQzM1MDEx QzdFN0FEQTAeFw0yNjA2MTgwNDEyMDlaFw0yNjA2MTkwNjE5MDlaMDMxMTAvBgNV BAMTKDlCREI3Mzg4NDBENkE4RjVEREI1NEEzQUI5Nzk4RDk0QkY5NEEyQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTle4QWV68S7TQE7Jo6fCOW/Qo FvsBdy1M5i/xW6WVxaeNmP2oJuQ2HY8KdM4alqxFsRDHpe448P08clncoOfzDnCd apB53XZjmEoi01JgRrjVrK5o3A/dsCRrkmLvd3VR1mFTnCjglTa+HuWw2MrewDUS JkCNUFmfQS0YuEFktXQFJvIvJ/8lxWd8m4NYqTa11Y3FFxEPPbq5RuOlrbSjrX0A YHnTh32qu0UtYX7opO4e88LDHYqZI22soKb1VfJQO1kaLVU8LSLmHAagv3zmX/2r 4a6y4PeQV+8PIU1xmdhvJoF76ikv/wk4gXVEv5LPZr/b9xKz7x9pDnhuua0lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm9tziEDWqPXdtUo6uXmNlL+UorAwHwYDVR0j BBgwFoAU+XBedRCAGyvQc7W+k8w1ARx+etowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ4MjNiYjMtNWEwMS00NjU4LWE3ODMtZjhlODlmYWRjZjQ1LzEvRjk3MDVFNzUx MDgwMUIyQkQwNzNCNUJFOTNDQzM1MDExQzdFN0FEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTcwNUU3NTEwODAxQjJCRDA3M0I1QkU5M0NDMzUwMTFDN0U3 QURBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzEvRjk3MDVFNzUxMDgwMUIyQkQwNzNCNUJFOTNDQzM1 MDExQzdFN0FEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2reGSe+xq0+45K+01AyhQbodmf0wzvEsyi xtgEkfd0roHAyY6pnfqZmzQU5sezeCYGByqQ+Cy3Sv+mvw1EbqmoSXE7zGT2Zufu 8OcZ6V6WDpDgzV2Daa5jgzt4DGKATD/4GXfkGGKYbO8+VHpyOKLA2JQBVd8IxUw8 YRmxr5xiP6BEcZAlMnmIQlio36hx7gMRNz71+n9iag1Mx62LmFhIhdl5Fdv680lv zb7aKJjTefb1JV/f1QEpQwxyFlz6xonoT0Fkrc17+vB4AoFkRw0trUzKnfqrQg2A Uvz2sA3pXxiYTUsxN+MVB6eZVHg7ul3TajypG3KstMUd4BgpWSs= -----END CERTIFICATE-----Generated at Thu Jun 18 19:21:40 2026 by rpki-client