$ rpki-client -vvf rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft File: 9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft (raw, json) Hash identifier: WFLQBTZsCt8kXdENfyeKUfQpPta/V6uc6Z8TP1VUBnc= Subject key identifier: 27:77:6B:20:12:B7:B6:1A:91:F4:A0:68:0D:A2:2C:67:06:34:BC:C5 Authority key identifier: 9F:0E:DA:9B:A3:F7:B2:4D:18:F6:E1:7A:5B:61:08:F3:E9:EC:41:E4 Certificate issuer: /CN=9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4 Certificate serial: 4A8D0DAEB1F96F3C1D8E810CB5100CE437827C6C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 12:05:00 +0000 Manifest this update: Tue 02 Jun 2026 12:00:00 +0000 Manifest next update: Wed 03 Jun 2026 12:27:00 +0000 Files and hashes: 1: 3130332e3231312e3139362e302f32342d3234203d3e20313534343130.roa (hash: J5G+McAVtr2U9Oe5SR6DxQqcZsQxCgVXssdzL4FSaj4=) 2: 9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.crl (hash: UKg2nevp028MHkM1taC1Ebhn3BrTO/Q3ESgDpctdYBg=) 3: 3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa (hash: THjdUj/zxX7Pt6OgYoGfW4AdRr45vtKFbMKetg/qeDc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.crl rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:8d:0d:ae:b1:f9:6f:3c:1d:8e:81:0c:b5:10:0c:e4:37:82:7c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4 Validity Not Before: Jun 2 12:00:00 2026 GMT Not After : Jun 3 12:27:00 2026 GMT Subject: CN=27776B2012B7B61A91F4A0680DA22C670634BCC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b3:81:9f:a7:68:7f:4c:bf:f2:60:44:b4:64: bd:d9:23:00:1f:fd:0c:e0:c9:fc:fe:26:e1:13:95: 3f:82:d7:dc:83:46:33:50:85:8a:4b:fb:ec:6b:2a: a3:64:6c:39:5a:ab:4c:7b:65:35:27:c8:e2:0c:c8: b1:ad:6f:af:77:7a:6c:44:b0:d9:15:8f:cf:de:63: 81:2e:0a:a6:6d:8a:aa:66:f3:73:f0:a1:48:ba:45: 33:1c:96:41:25:84:f9:42:c5:e8:e8:95:97:46:43: 4a:53:ad:98:9c:ef:a5:7a:3c:9b:0b:c2:c0:40:ea: 08:6e:c4:7e:01:b8:39:33:50:3b:69:fa:24:ff:7a: 6b:1b:2e:88:33:14:4f:b6:38:d8:2c:2b:1a:82:df: 67:1d:46:c9:a8:4c:94:07:9f:4e:78:7b:90:66:d4: 6e:e9:21:95:b7:c7:d0:df:33:aa:36:20:b1:09:51: c0:11:a4:96:76:e7:bb:06:b1:b2:72:cc:00:1d:d5: 34:26:14:32:03:ac:55:41:0d:a3:b6:90:a8:2a:ca: cd:a4:50:31:d8:0c:03:28:4a:cd:77:8f:5b:bb:4f: 09:3f:79:84:f3:20:8c:04:44:d1:69:11:6f:97:cf: 8a:43:b2:28:27:1e:d5:b4:59:d6:0f:17:95:6e:a9: 3c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:77:6B:20:12:B7:B6:1A:91:F4:A0:68:0D:A2:2C:67:06:34:BC:C5 X509v3 Authority Key Identifier: keyid:9F:0E:DA:9B:A3:F7:B2:4D:18:F6:E1:7A:5B:61:08:F3:E9:EC:41:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fb:62:9d:c4:4c:5b:2d:c5:ba:d4:18:d6:9e:9a:98:5b:ac: 33:e2:1b:76:32:3b:99:63:98:ec:42:58:01:ba:9c:4d:d1:08: 65:0b:52:36:9c:87:90:76:20:cd:9f:12:04:7c:1e:e9:72:3b: 26:f9:39:38:26:b5:ed:a9:f8:48:5b:e5:80:dc:9a:c0:6b:07: 54:2f:6c:ac:f5:52:87:4d:15:e1:52:1e:85:4f:53:97:39:20: e4:2d:f4:7e:5b:c8:ac:86:a5:55:f6:d2:11:5a:b9:71:de:a8: ac:ac:25:a2:7b:23:b3:14:fe:68:a4:b3:01:1c:d8:6c:cd:f8: 17:e3:0a:de:6b:2d:05:bc:34:f6:b3:89:a4:e9:99:11:54:b8: 65:27:7d:8c:00:e9:2b:c0:94:68:04:2d:31:ce:b5:93:fc:45: 24:7c:ed:7c:4b:11:1a:ab:78:bb:d7:7d:5b:88:c3:c3:47:b1: 91:3b:b8:7b:b5:77:70:36:18:de:0a:af:eb:d6:af:d0:42:40: c7:d7:90:96:e5:e6:fd:31:62:45:be:5e:8f:2c:a3:86:1a:d4: 3b:d0:9d:c1:64:eb:30:88:c7:4b:9b:f1:d9:77:13:54:47:42: 4b:ee:2a:ab:1b:4c:c9:aa:97:96:2b:8f:d4:2c:97:7b:2b:30: cc:cf:98:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSo0NrrH5bzwdjoEMtRAM5DeCfGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwRURBOUJBM0Y3QjI0RDE4RjZFMTdBNUI2MTA4RjNF OUVDNDFFNDAeFw0yNjA2MDIxMjAwMDBaFw0yNjA2MDMxMjI3MDBaMDMxMTAvBgNV BAMTKDI3Nzc2QjIwMTJCN0I2MUE5MUY0QTA2ODBEQTIyQzY3MDYzNEJDQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgs4Gfp2h/TL/yYES0ZL3ZIwAf /Qzgyfz+JuETlT+C19yDRjNQhYpL++xrKqNkbDlaq0x7ZTUnyOIMyLGtb693emxE sNkVj8/eY4EuCqZtiqpm83PwoUi6RTMclkElhPlCxejolZdGQ0pTrZic76V6PJsL wsBA6ghuxH4BuDkzUDtp+iT/emsbLogzFE+2ONgsKxqC32cdRsmoTJQHn054e5Bm 1G7pIZW3x9DfM6o2ILEJUcARpJZ257sGsbJyzAAd1TQmFDIDrFVBDaO2kKgqys2k UDHYDAMoSs13j1u7Twk/eYTzIIwERNFpEW+Xz4pDsignHtW0WdYPF5VuqTyrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ3drIBK3thqR9KBoDaIsZwY0vMUwHwYDVR0j BBgwFoAUnw7am6P3sk0Y9uF6W2EI8+nsQeQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzAzODAyZTItMDNhZi00ZGQwLThkY2UtNTRjMjhhNzI1NjNkLzAvOUYwRURBOUJB M0Y3QjI0RDE4RjZFMTdBNUI2MTA4RjNFOUVDNDFFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjBFREE5QkEzRjdCMjREMThGNkUxN0E1QjYxMDhGM0U5RUM0 MUU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzAzODAyZTItMDNhZi00ZGQwLThk Y2UtNTRjMjhhNzI1NjNkLzAvOUYwRURBOUJBM0Y3QjI0RDE4RjZFMTdBNUI2MTA4 RjNFOUVDNDFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFr7Yp3ETFstxbrUGNaemphbrDPiG3YyO5lj mOxCWAG6nE3RCGULUjach5B2IM2fEgR8HulyOyb5OTgmte2p+Ehb5YDcmsBrB1Qv bKz1UodNFeFSHoVPU5c5IOQt9H5byKyGpVX20hFauXHeqKysJaJ7I7MU/mikswEc 2GzN+BfjCt5rLQW8NPaziaTpmRFUuGUnfYwA6SvAlGgELTHOtZP8RSR87XxLERqr eLvXfVuIw8NHsZE7uHu1d3A2GN4Kr+vWr9BCQMfXkJbl5v0xYkW+Xo8so4Ya1DvQ ncFk6zCIx0ub8dl3E1RHQkvuKqsbTMmql5Yrj9Qsl3srMMzPmHM= -----END CERTIFICATE-----Generated at Tue Jun 2 21:32:12 2026 by rpki-client