$ rpki-client -vvf rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft File: B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft (raw, json) Hash identifier: hncCqhrrF/EBQC6QbVWhBa2v4cl+TeJNLRRd3A2OXwM= Subject key identifier: 4A:A9:B3:3E:0F:3B:53:D3:03:F8:55:F8:F2:DA:60:FC:FC:79:1C:AA Authority key identifier: B9:BC:CC:BE:89:27:A7:BA:B7:85:3C:7A:BB:0A:F3:95:CD:04:78:65 Certificate issuer: /CN=B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865 Certificate serial: 418892687A6738A6E73751763A168DC5ED6E4FD1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft Manifest number: 14 Signing time: Sat 16 May 2026 20:15:31 +0000 Manifest this update: Sat 16 May 2026 20:10:31 +0000 Manifest next update: Sun 17 May 2026 21:03:31 +0000 Files and hashes: 1: B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl (hash: ly9kHpybu8VGmfbDHrI7PiRKQ8JjNe6I2wNB9KWVMaA=) 2: 3131362e35382e3139322e302f32312d3234203d3e203338313534.roa (hash: +LPJ5wMBOnCiRiVVBw9/f075KEvSA/QkdJARXOeWxBI=) 3: 3131362e35382e3139342e302f32342d3234203d3e203338313534.roa (hash: 4hL7+e18qobBBQHbTnmFkA+ZM9pKWiAv/aAZLelInyQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 21:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:88:92:68:7a:67:38:a6:e7:37:51:76:3a:16:8d:c5:ed:6e:4f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865 Validity Not Before: May 16 20:10:31 2026 GMT Not After : May 17 21:03:31 2026 GMT Subject: CN=4AA9B33E0F3B53D303F855F8F2DA60FCFC791CAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:14:a3:c8:2a:34:1a:64:f5:d9:fc:a8:8c: b0:b7:3c:e9:9d:09:ad:32:aa:f8:58:aa:b0:56:7d: dc:f7:13:4f:9c:ac:64:ca:77:4d:5c:44:10:5f:13: 3d:54:0b:f6:e1:65:21:b1:17:df:78:ab:15:55:24: 4e:9c:ec:2c:18:13:a3:bb:31:cd:39:7e:89:8c:8b: 5b:cc:24:56:cf:a5:3b:bb:d4:8c:14:f4:b8:d4:3e: f9:17:36:55:8a:27:a7:19:28:d0:aa:b2:76:f7:e2: 1d:77:e7:63:da:d8:5b:dd:f1:55:8f:36:df:bd:b5: 5e:3c:c1:45:d7:00:fe:ad:f8:26:c6:64:1b:da:3f: 1c:f9:d4:f7:c3:8c:49:31:5e:40:87:1e:be:f3:a1: c5:8e:06:b2:9d:b3:a8:89:dd:72:b9:79:20:4c:b3: dd:f7:df:d2:3f:cc:28:8a:c6:0b:e9:b6:2b:1a:1b: aa:4e:3f:b9:b6:c6:4a:c7:34:f0:8a:83:1e:14:60: a2:c3:a5:a4:30:f8:50:ef:ec:3c:da:b0:7e:36:76: 5e:6b:0b:7e:66:e1:7a:2c:b7:3d:1f:12:1b:e9:7f: a1:dd:70:a1:1a:75:28:01:d2:31:7d:60:cb:e4:26: ff:4f:5c:7c:38:91:84:a3:98:f2:e7:3d:d1:c0:6f: 8f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A9:B3:3E:0F:3B:53:D3:03:F8:55:F8:F2:DA:60:FC:FC:79:1C:AA X509v3 Authority Key Identifier: keyid:B9:BC:CC:BE:89:27:A7:BA:B7:85:3C:7A:BB:0A:F3:95:CD:04:78:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:37:74:7e:5f:bf:4b:78:30:e6:aa:54:e7:cd:36:36:7b:93: 74:2a:1d:d9:2d:d8:67:63:a9:34:7e:85:da:01:f9:66:a1:88: 62:3f:e5:6f:0b:49:08:ff:0d:f6:82:04:76:c5:66:c7:ff:10: 08:47:b3:b2:8c:bc:46:a9:91:28:12:23:eb:de:a2:2e:9e:5f: 40:ad:8f:d6:5c:29:30:9d:22:2e:52:c1:ae:92:13:68:85:6f: 3b:67:f6:f8:0e:5b:40:11:c1:01:72:3c:29:88:2a:a5:5d:3c: 8b:66:95:4b:9c:cd:ce:00:cd:93:f2:d5:97:d3:74:ea:91:b8: ad:38:01:3b:d1:00:11:c9:4b:c9:19:45:c4:04:cf:83:5e:54: 42:8a:d7:2c:f9:9a:d5:85:35:d1:36:8c:ce:3a:14:75:81:20: 71:b0:1c:9d:55:c2:57:b8:36:ef:2d:db:a2:d7:48:ef:3d:48: 2d:3f:4f:60:2d:ef:14:cb:b3:5c:6f:81:06:38:63:97:6b:77: 97:33:d1:67:e7:0f:80:f5:fe:2c:5a:4c:2c:dc:da:57:de:66: 42:c0:f3:eb:24:76:f6:e1:e4:25:75:91:fe:cd:dc:5a:d8:ce: 7f:3f:33:bf:03:50:5a:76:76:0a:9d:5a:94:4b:b0:da:8a:00: b2:5b:61:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQYiSaHpnOKbnN1F2OhaNxe1uT9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCQ0NDQkU4OTI3QTdCQUI3ODUzQzdBQkIwQUYzOTVD RDA0Nzg2NTAeFw0yNjA1MTYyMDEwMzFaFw0yNjA1MTcyMTAzMzFaMDMxMTAvBgNV BAMTKDRBQTlCMzNFMEYzQjUzRDMwM0Y4NTVGOEYyREE2MEZDRkM3OTFDQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0oRSjyCo0GmT12fyojLC3POmd Ca0yqvhYqrBWfdz3E0+crGTKd01cRBBfEz1UC/bhZSGxF994qxVVJE6c7CwYE6O7 Mc05fomMi1vMJFbPpTu71IwU9LjUPvkXNlWKJ6cZKNCqsnb34h1352Pa2Fvd8VWP Nt+9tV48wUXXAP6t+CbGZBvaPxz51PfDjEkxXkCHHr7zocWOBrKds6iJ3XK5eSBM s93339I/zCiKxgvptisaG6pOP7m2xkrHNPCKgx4UYKLDpaQw+FDv7DzasH42dl5r C35m4Xostz0fEhvpf6HdcKEadSgB0jF9YMvkJv9PXHw4kYSjmPLnPdHAb48jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSqmzPg87U9MD+FX48tpg/Px5HKowHwYDVR0j BBgwFoAUubzMvoknp7q3hTx6uwrzlc0EeGUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmZlYmI2OGEtOGE1ZC00MTFjLThiYjMtODMzNDIzMTAwYjZlLzAvQjlCQ0NDQkU4 OTI3QTdCQUI3ODUzQzdBQkIwQUYzOTVDRDA0Nzg2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUJDQ0NCRTg5MjdBN0JBQjc4NTNDN0FCQjBBRjM5NUNEMDQ3 ODY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmZlYmI2OGEtOGE1ZC00MTFjLThi YjMtODMzNDIzMTAwYjZlLzAvQjlCQ0NDQkU4OTI3QTdCQUI3ODUzQzdBQkIwQUYz OTVDRDA0Nzg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQ3dH5fv0t4MOaqVOfNNjZ7k3QqHdkt2Gdj qTR+hdoB+WahiGI/5W8LSQj/DfaCBHbFZsf/EAhHs7KMvEapkSgSI+veoi6eX0Ct j9ZcKTCdIi5Swa6SE2iFbztn9vgOW0ARwQFyPCmIKqVdPItmlUuczc4AzZPy1ZfT dOqRuK04ATvRABHJS8kZRcQEz4NeVEKK1yz5mtWFNdE2jM46FHWBIHGwHJ1Vwle4 Nu8t26LXSO89SC0/T2At7xTLs1xvgQY4Y5drd5cz0WfnD4D1/ixaTCzc2lfeZkLA 8+skdvbh5CV1kf7N3FrYzn8/M78DUFp2dgqdWpRLsNqKALJbYdI= -----END CERTIFICATE-----Generated at Sun May 17 03:14:32 2026 by rpki-client