$ rpki-client -vvf rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft File: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft (raw, json) Hash identifier: DZJmuCffPB/3/f5gdfc+K0xKZc794Bq7wqVQYcVSjx0= Subject key identifier: C5:02:65:D4:7D:4E:D5:C4:52:76:CC:20:54:6B:F2:1A:68:1C:AF:9B Authority key identifier: B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A Certificate issuer: /CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A Certificate serial: 755343F9F4C3C1AACA5AD9D671A8E4AC156F6307 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 06:14:46 +0000 Manifest this update: Thu 18 Jun 2026 06:09:46 +0000 Manifest next update: Fri 19 Jun 2026 06:28:46 +0000 Files and hashes: 1: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: fDnmzf65jBSv74PMDMyNjaHpX/nCsTXRpP2C1qWxmnk=) 2: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl (hash: kHzPNMmLkTpEu90euOlP0UFq+tZSKiGlc0w74FtR52I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 06:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:53:43:f9:f4:c3:c1:aa:ca:5a:d9:d6:71:a8:e4:ac:15:6f:63:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A Validity Not Before: Jun 18 06:09:46 2026 GMT Not After : Jun 19 06:28:46 2026 GMT Subject: CN=C50265D47D4ED5C45276CC20546BF21A681CAF9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:73:be:db:ec:6a:72:fd:c5:cb:c5:a7:a8:f2: b7:41:2f:5e:cb:ce:cb:31:62:b3:84:9d:a8:40:48: 50:99:3a:22:80:ca:de:88:7f:c5:71:d4:92:4b:08: 69:77:58:3d:11:2b:61:cb:e4:40:c0:41:15:59:c5: 8d:fa:04:51:b2:74:82:7d:ce:f6:75:47:b4:6d:0e: 9f:7a:d5:57:e4:aa:0b:62:96:3c:99:75:c4:15:73: e5:25:cd:a2:53:7f:3f:e2:e6:fa:80:f9:13:61:99: 2f:1d:c8:96:9c:30:43:e4:f4:54:fc:06:44:8a:c8: 31:88:a0:84:e1:dd:28:f5:b0:70:eb:2a:ff:dc:ed: d1:cd:12:f9:76:98:3d:47:9d:e0:b4:77:31:92:29: 09:35:6c:99:0a:3f:4c:80:46:9e:de:cc:48:29:22: bf:40:59:27:b2:07:87:c3:c5:5d:f8:45:8a:86:07: 26:ab:3f:2b:d5:29:ff:69:95:4f:bb:a5:30:54:9d: 4a:cc:3d:08:66:1c:c3:d6:cb:51:5f:f5:f2:50:c4: a8:cd:96:5e:ff:74:28:bc:86:11:1b:79:5e:5c:b8: c4:08:90:20:eb:2c:28:1f:53:90:d8:2b:66:0c:6e: 0e:89:4a:e7:c7:61:71:18:65:c9:b0:00:cf:b3:32: 2e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:02:65:D4:7D:4E:D5:C4:52:76:CC:20:54:6B:F2:1A:68:1C:AF:9B X509v3 Authority Key Identifier: keyid:B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:0b:bf:ef:85:eb:5a:ff:24:f3:35:8f:05:6b:98:7a:9e:75: e6:38:6e:ec:ca:13:ff:2f:38:aa:ed:b1:43:76:c2:7f:8d:a9: b6:af:bb:9b:c3:b0:23:42:c5:07:b6:31:d7:ba:52:e9:2b:08: 54:16:38:e8:d1:43:ed:bc:a5:6d:92:21:62:57:cf:d2:db:71: 9c:03:41:58:26:f8:8b:42:d0:5e:8f:05:49:75:72:11:80:e5: 59:ab:37:f5:42:33:68:51:15:0f:e5:d6:11:58:a4:7d:ed:2c: f2:4a:03:79:b8:67:2b:c8:53:15:d4:a8:59:c6:df:e9:d3:84: 57:03:88:47:7f:5d:38:8f:47:63:1c:16:f0:85:f3:d2:23:70: 2e:bc:e8:ed:a1:ae:f6:f6:9b:54:84:81:10:51:c4:86:42:7b: 65:d9:8a:1b:fe:6f:6f:93:ef:4b:b3:7a:83:62:7c:e9:ff:02: b7:11:25:9a:1c:02:c5:ad:fe:5d:3e:71:fd:6d:e7:84:2a:12: a6:54:2a:95:57:90:96:35:69:76:5d:88:b4:f1:a0:ad:41:e8: 14:ef:dc:8e:31:5d:b3:6b:b5:95:fa:99:0a:5e:c8:a3:88:43: a8:6d:ad:04:c2:3b:0b:50:7d:9a:48:f6:a7:4d:52:74:5b:f4: 04:ab:53:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdVND+fTDwarKWtnWcajkrBVvYwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCOEE2MUQ4RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3NkFD NUZBRDI5QTAeFw0yNjA2MTgwNjA5NDZaFw0yNjA2MTkwNjI4NDZaMDMxMTAvBgNV BAMTKEM1MDI2NUQ0N0Q0RUQ1QzQ1Mjc2Q0MyMDU0NkJGMjFBNjgxQ0FGOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoc77b7Gpy/cXLxaeo8rdBL17L zssxYrOEnahASFCZOiKAyt6If8Vx1JJLCGl3WD0RK2HL5EDAQRVZxY36BFGydIJ9 zvZ1R7RtDp961VfkqgtiljyZdcQVc+UlzaJTfz/i5vqA+RNhmS8dyJacMEPk9FT8 BkSKyDGIoITh3Sj1sHDrKv/c7dHNEvl2mD1HneC0dzGSKQk1bJkKP0yARp7ezEgp Ir9AWSeyB4fDxV34RYqGByarPyvVKf9plU+7pTBUnUrMPQhmHMPWy1Ff9fJQxKjN ll7/dCi8hhEbeV5cuMQIkCDrLCgfU5DYK2YMbg6JSufHYXEYZcmwAM+zMi5RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxQJl1H1O1cRSdswgVGvyGmgcr5swHwYDVR0j BBgwFoAUubimHY6lUgzyjo5cJFAXasX60powDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE0MTc2MDgtMTZiOC00NDk3LTgxZTMtOTQ3ZDc4ZGJjZjExLzAvQjlCOEE2MUQ4 RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3NkFDNUZBRDI5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9COUI4QTYxRDhFQTU1MjBDRjI4RThFNUMyNDUwMTc2QUM1RkFE MjlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvQjlCOEE2MUQ4RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3 NkFDNUZBRDI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgLv++F61r/JPM1jwVrmHqedeY4buzKE/8v OKrtsUN2wn+Nqbavu5vDsCNCxQe2Mde6UukrCFQWOOjRQ+28pW2SIWJXz9LbcZwD QVgm+ItC0F6PBUl1chGA5VmrN/VCM2hRFQ/l1hFYpH3tLPJKA3m4ZyvIUxXUqFnG 3+nThFcDiEd/XTiPR2McFvCF89IjcC686O2hrvb2m1SEgRBRxIZCe2XZihv+b2+T 70uzeoNifOn/ArcRJZocAsWt/l0+cf1t54QqEqZUKpVXkJY1aXZdiLTxoK1B6BTv 3I4xXbNrtZX6mQpeyKOIQ6htrQTCOwtQfZpI9qdNUnRb9ASrU2M= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:51 2026 by rpki-client