$ rpki-client -vvf rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft File: 9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft (raw, json) Hash identifier: WbWYHJUjaoK5HtClIN1lFMkdMp9puVr8LIvqWqF6uUU= Subject key identifier: B6:DF:E2:C2:DC:C0:04:D3:27:63:09:6B:8A:30:47:76:3D:D8:2C:A8 Authority key identifier: 93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C Certificate issuer: /CN=9370AF17CF894C561A727E816DE3B11D5D8AAD9C Certificate serial: 3DF896A4A0DD965183A818FA4D463309E52D6D43 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft Manifest number: 4E Signing time: Sun 28 Jun 2026 22:44:32 +0000 Manifest this update: Sun 28 Jun 2026 22:39:32 +0000 Manifest next update: Mon 29 Jun 2026 22:49:32 +0000 Files and hashes: 1: 3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa (hash: rp1e1zzn4/8hrijf1AXdkJbP5FeTjYw1wnI20jUxS/k=) 2: 9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl (hash: c4o6WZRJYN61of0XHq1W496pFuJDu/p7Lk+r5cE+GYc=) 3: 3130332e3138362e33332e302f32342d3234203d3e20313439363930.roa (hash: 66uNmMCT6fkEdO81aZRWkTBSkfQiCejM3k2UxZQSC6k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 22:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f8:96:a4:a0:dd:96:51:83:a8:18:fa:4d:46:33:09:e5:2d:6d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9370AF17CF894C561A727E816DE3B11D5D8AAD9C Validity Not Before: Jun 28 22:39:32 2026 GMT Not After : Jun 29 22:49:32 2026 GMT Subject: CN=B6DFE2C2DCC004D32763096B8A3047763DD82CA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:03:cd:01:7c:dc:34:54:70:f4:04:89:ca: 51:92:9c:67:63:3f:0d:5e:e6:6f:de:df:f6:04:97: f5:ed:a0:4b:2d:a6:9f:90:3a:ff:21:18:0e:ad:f0: 5f:d4:5b:23:58:95:f6:6d:e9:07:c3:1b:f1:71:a5: eb:67:4f:92:9e:a1:2a:4c:2e:6e:8a:5c:3e:ee:7a: f9:51:e9:e7:bb:f8:f9:bb:f0:98:04:1a:bc:a6:6e: 6d:8c:06:9e:0a:54:9b:ac:bd:44:db:b8:ff:45:8d: 29:59:bb:bc:de:ab:82:1e:e6:ff:5f:a1:7c:3a:f6: be:6d:98:7b:de:80:b1:2c:5e:da:f4:63:5f:ef:b1: e8:b3:15:5a:05:3b:e4:ac:4a:a9:1b:62:f2:7e:44: 92:53:dc:f5:a0:24:c4:ea:7f:c7:42:dd:b0:42:27: 13:8f:b8:b9:12:e9:88:4f:c9:a0:9d:11:c3:22:ef: 98:50:ca:36:cc:cd:11:d6:ca:74:c2:3b:16:72:65: 90:6e:24:4b:ff:16:b7:6d:83:5a:e6:96:b5:44:35: 79:f9:c3:92:36:ee:e3:46:15:c3:5e:70:7b:c6:49: 48:7c:0f:5d:42:47:ad:d9:b6:fc:43:0a:1e:c2:d3: 99:07:ad:d7:25:fb:17:e9:17:e3:db:53:e3:13:19: bd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DF:E2:C2:DC:C0:04:D3:27:63:09:6B:8A:30:47:76:3D:D8:2C:A8 X509v3 Authority Key Identifier: keyid:93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:e9:f1:d5:fb:ee:aa:4c:5d:e4:c1:5d:81:a7:dd:c8:db:36: f8:55:a2:0f:02:f3:87:33:03:dc:53:9e:bb:c4:65:eb:86:a0: fa:32:a5:f7:6c:69:e4:51:0a:d9:c9:29:a8:55:64:4a:c5:ea: b7:73:39:b9:8e:69:24:53:d2:ce:a7:0c:63:44:f9:e6:70:c2: 30:5b:27:67:c6:84:ba:a4:2a:fb:a3:0f:ba:a1:6b:67:a2:a7: 55:bc:a2:f0:d0:c8:25:9f:40:bc:9a:87:d5:55:31:70:4b:68: 1a:43:8e:53:aa:5a:ff:c7:c8:ab:93:e0:a5:8a:a0:25:2c:c1: d5:3f:3e:6e:a8:8e:95:58:95:bc:6b:a8:ae:f6:8c:2b:46:3c: f6:3a:a8:a9:39:ec:d1:78:32:0f:7e:c4:e3:25:36:51:30:ca: ed:9b:5b:92:be:9e:ef:e7:de:89:32:5c:88:3f:ad:fc:19:eb: fb:78:cb:56:91:e7:46:70:3b:6b:21:6e:b6:59:ee:7a:b9:d3: d7:df:b6:73:e2:26:29:e5:bc:65:d8:fe:8b:f3:1b:b6:c5:95: 55:80:77:64:66:a0:d4:93:34:6c:61:25:e9:a0:e0:ca:04:58: 26:82:b7:5a:a1:62:e7:37:01:4b:49:06:a9:50:c3:a3:b9:ae: 69:6b:1e:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPfiWpKDdllGDqBj6TUYzCeUtbUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM3MEFGMTdDRjg5NEM1NjFBNzI3RTgxNkRFM0IxMUQ1 RDhBQUQ5QzAeFw0yNjA2MjgyMjM5MzJaFw0yNjA2MjkyMjQ5MzJaMDMxMTAvBgNV BAMTKEI2REZFMkMyRENDMDA0RDMyNzYzMDk2QjhBMzA0Nzc2M0REODJDQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAuQPNAXzcNFRw9ASJylGSnGdj Pw1e5m/e3/YEl/XtoEstpp+QOv8hGA6t8F/UWyNYlfZt6QfDG/FxpetnT5KeoSpM Lm6KXD7uevlR6ee7+Pm78JgEGrymbm2MBp4KVJusvUTbuP9FjSlZu7zeq4Ie5v9f oXw69r5tmHvegLEsXtr0Y1/vseizFVoFO+SsSqkbYvJ+RJJT3PWgJMTqf8dC3bBC JxOPuLkS6YhPyaCdEcMi75hQyjbMzRHWynTCOxZyZZBuJEv/Frdtg1rmlrVENXn5 w5I27uNGFcNecHvGSUh8D11CR63ZtvxDCh7C05kHrdcl+xfpF+PbU+MTGb0jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtt/iwtzABNMnYwlrijBHdj3YLKgwHwYDVR0j BBgwFoAUk3CvF8+JTFYacn6BbeOxHV2KrZwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGNlOWY0M2QtMDhiYS00ZDAyLThmMzgtNzQ3MzJmMTVjZDhjLzAvOTM3MEFGMTdD Rjg5NEM1NjFBNzI3RTgxNkRFM0IxMUQ1RDhBQUQ5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzcwQUYxN0NGODk0QzU2MUE3MjdFODE2REUzQjExRDVEOEFB RDlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGNlOWY0M2QtMDhiYS00ZDAyLThm MzgtNzQ3MzJmMTVjZDhjLzAvOTM3MEFGMTdDRjg5NEM1NjFBNzI3RTgxNkRFM0Ix MUQ1RDhBQUQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnp8dX77qpMXeTBXYGn3cjbNvhVog8C84cz A9xTnrvEZeuGoPoypfdsaeRRCtnJKahVZErF6rdzObmOaSRT0s6nDGNE+eZwwjBb J2fGhLqkKvujD7qha2eip1W8ovDQyCWfQLyah9VVMXBLaBpDjlOqWv/HyKuT4KWK oCUswdU/Pm6ojpVYlbxrqK72jCtGPPY6qKk57NF4Mg9+xOMlNlEwyu2bW5K+nu/n 3okyXIg/rfwZ6/t4y1aR50ZwO2shbrZZ7nq509fftnPiJinlvGXY/ovzG7bFlVWA d2RmoNSTNGxhJemg4MoEWCaCt1qhYuc3AUtJBqlQw6O5rmlrHn8= -----END CERTIFICATE-----Generated at Mon Jun 29 15:47:11 2026 by rpki-client