$ rpki-client -vvf rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft File: C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft (raw, json) Hash identifier: uJLAjSGmDXea0erxsZ8zwugZAdFvg7+RXnxf/P31NhA= Subject key identifier: 7D:7B:2B:54:8F:3E:7E:66:2F:ED:B6:35:42:08:4A:D0:66:01:2D:DB Authority key identifier: C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94 Certificate issuer: /CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894 Certificate serial: 524189B7A2CE774553D1A03DEA1D3E5E5A8E4F1A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 19:29:30 +0000 Manifest this update: Fri 19 Jun 2026 19:24:30 +0000 Manifest next update: Sat 20 Jun 2026 22:26:30 +0000 Files and hashes: 1: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: occ5qoM9oAkKmzdKhCiXxb0YYDDzZw7eQPlVtS1+AXA=) 2: C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl (hash: 8SAbVWyabqjdOJAigPLRluivJBZu2X27USTFh1PJYjE=) 3: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: Pfe66TELIpbboDlTlvL4smle14adEmFMF0KS3kt6HYM=) 4: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: ZVZI5MXEYgq+QpFFWNL7lGXYAS9omg0P+vD6tywGpec=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:41:89:b7:a2:ce:77:45:53:d1:a0:3d:ea:1d:3e:5e:5a:8e:4f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894 Validity Not Before: Jun 19 19:24:30 2026 GMT Not After : Jun 20 22:26:30 2026 GMT Subject: CN=7D7B2B548F3E7E662FEDB63542084AD066012DDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:37:8e:80:00:92:34:2c:2b:72:c3:fa:d3:3f: d0:e5:bb:48:a8:22:7d:18:43:80:52:a5:6d:6d:2a: ec:d4:5e:13:e1:7c:5b:08:47:69:57:42:83:6d:ad: fc:0a:1d:26:94:90:20:ac:09:ac:5a:e5:70:31:86: f7:63:e3:87:df:26:1b:d4:48:a1:6e:1c:af:46:ab: fb:e7:68:2e:78:06:81:3f:1b:08:ca:f5:8b:0c:43: 18:a1:7c:2f:51:de:66:24:65:be:0a:a3:af:b7:7d: 4e:8d:62:0b:bb:f6:ec:1e:23:5c:4e:d6:04:17:a0: b3:80:80:ce:de:20:b5:22:09:b0:87:a4:58:c8:d3: c9:ea:0a:e0:08:44:75:2c:17:b4:52:29:b9:6d:a8: d5:97:98:5e:56:19:04:63:95:60:d8:0e:e1:ad:a2: e8:d7:0e:a6:6a:29:31:0a:a8:87:08:24:98:55:62: 0c:a9:99:e1:69:64:4a:84:6b:f8:51:27:fe:96:a8: b5:8a:ea:c1:f8:d5:f2:39:24:d8:90:d6:60:48:e7: 88:29:7e:9e:96:56:c1:ef:e5:58:52:c1:02:cd:46: 7f:c0:95:41:44:bc:bb:f8:0b:78:ba:30:8d:8f:b6: 23:d4:18:5d:15:6b:65:86:a2:da:f0:51:d4:4b:7b: 7b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7B:2B:54:8F:3E:7E:66:2F:ED:B6:35:42:08:4A:D0:66:01:2D:DB X509v3 Authority Key Identifier: keyid:C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2e:14:79:23:d2:e2:10:5a:6c:84:da:5a:52:a1:72:cc:24: e3:f5:3c:5c:63:8e:fe:13:5a:69:6f:36:2c:d0:a9:0f:98:4c: a4:e8:b9:8d:fa:58:f4:da:f4:0d:18:7b:0d:21:33:ed:23:b1: db:b1:dc:fc:a4:e9:a2:7d:56:f2:e1:63:ab:64:7f:aa:31:a5: a6:70:71:f6:46:bd:0d:40:41:a7:c9:a2:bf:4e:af:31:90:fa: 3c:b5:27:b7:44:23:f0:dc:a6:ce:f5:6a:17:cd:a4:14:4e:31: c7:0d:98:28:e7:b4:fb:5d:2f:5d:63:51:3e:0b:b7:ee:c5:32: 47:c7:f2:22:14:88:3f:bb:ca:3d:19:ea:bc:8a:6b:af:cf:f1: 9b:19:9e:5e:a1:9d:83:d1:76:2d:e7:75:62:b4:30:f9:79:e2: 05:7e:d1:59:34:1e:63:d6:08:0c:d4:32:c2:b0:75:d6:ab:06: a2:4a:de:04:d7:62:f4:13:89:1e:ba:08:b7:d7:3f:15:d2:cc: 3e:cd:d5:97:a0:f1:42:38:7a:cf:53:4f:40:43:e2:64:05:f1: 6f:4f:dc:2f:c3:5d:fc:70:86:7a:e8:40:e2:61:af:35:8e:d8: ad:c6:96:c9:c9:19:d0:63:3d:a2:ea:28:fb:fd:7d:84:15:8e: 81:6d:de:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUkGJt6LOd0VT0aA96h0+XlqOTxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQkRGMEVBMTRERERGMEM1NTFERjE4NjMzMkNCODU5 RUI5RDg5NDAeFw0yNjA2MTkxOTI0MzBaFw0yNjA2MjAyMjI2MzBaMDMxMTAvBgNV BAMTKDdEN0IyQjU0OEYzRTdFNjYyRkVEQjYzNTQyMDg0QUQwNjYwMTJEREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtN46AAJI0LCtyw/rTP9Dlu0io In0YQ4BSpW1tKuzUXhPhfFsIR2lXQoNtrfwKHSaUkCCsCaxa5XAxhvdj44ffJhvU SKFuHK9Gq/vnaC54BoE/GwjK9YsMQxihfC9R3mYkZb4Ko6+3fU6NYgu79uweI1xO 1gQXoLOAgM7eILUiCbCHpFjI08nqCuAIRHUsF7RSKbltqNWXmF5WGQRjlWDYDuGt oujXDqZqKTEKqIcIJJhVYgypmeFpZEqEa/hRJ/6WqLWK6sH41fI5JNiQ1mBI54gp fp6WVsHv5VhSwQLNRn/AlUFEvLv4C3i6MI2PtiPUGF0Va2WGotrwUdRLe3vJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfXsrVI8+fmYv7bY1QghK0GYBLdswHwYDVR0j BBgwFoAUybvfDqFN3fDFUd8YYzLLhZ652JQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTk1OTAxY2MtMWI4ZS00ZjNmLWEzZDAtMzI2OWYwZTE2YzQxLzAvQzlCQkRGMEVB MTRERERGMEM1NTFERjE4NjMzMkNCODU5RUI5RDg5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUJCREYwRUExNEREREYwQzU1MURGMTg2MzMyQ0I4NTlFQjlE ODk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTk1OTAxY2MtMWI4ZS00ZjNmLWEz ZDAtMzI2OWYwZTE2YzQxLzAvQzlCQkRGMEVBMTRERERGMEM1NTFERjE4NjMzMkNC ODU5RUI5RDg5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHouFHkj0uIQWmyE2lpSoXLMJOP1PFxjjv4T WmlvNizQqQ+YTKTouY36WPTa9A0Yew0hM+0jsdux3Pyk6aJ9VvLhY6tkf6oxpaZw cfZGvQ1AQafJor9OrzGQ+jy1J7dEI/Dcps71ahfNpBROMccNmCjntPtdL11jUT4L t+7FMkfH8iIUiD+7yj0Z6ryKa6/P8ZsZnl6hnYPRdi3ndWK0MPl54gV+0Vk0HmPW CAzUMsKwddarBqJK3gTXYvQTiR66CLfXPxXSzD7N1Zeg8UI4es9TT0BD4mQF8W9P 3C/DXfxwhnroQOJhrzWO2K3GlsnJGdBjPaLqKPv9fYQVjoFt3v4= -----END CERTIFICATE-----Generated at Sat Jun 20 11:24:29 2026 by rpki-client