$ rpki-client -vvf rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft File: 9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft (raw, json) Hash identifier: D0XOg2PH17RMMWS7SFhsVVjW+pLgSPV+ul8eaBItg+Q= Subject key identifier: BA:FF:C7:92:E9:6D:21:C4:D4:36:C4:75:A9:14:3A:DC:93:AA:5E:C8 Authority key identifier: 9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F Certificate issuer: /CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F Certificate serial: 5BFAAF1EEB2466A05656598B14B28C4BDB2C4B4C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:41:44 +0000 Manifest this update: Thu 23 Jul 2026 17:36:44 +0000 Manifest next update: Fri 24 Jul 2026 19:26:44 +0000 Files and hashes: 1: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: iowBD0aCpON/4cxOj5FQqoJWjlXtvZSA6Ncm7S12+nI=) 2: 9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl (hash: zC37KdWI0oXRWigeWawQ5yT5oTAuvZMuCY/EeM6ZI+A=) 3: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: q/9H11WTYoKvscn357helrrghEhYAd3OjlCKI1SD+L4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:fa:af:1e:eb:24:66:a0:56:56:59:8b:14:b2:8c:4b:db:2c:4b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F Validity Not Before: Jul 23 17:36:44 2026 GMT Not After : Jul 24 19:26:44 2026 GMT Subject: CN=BAFFC792E96D21C4D436C475A9143ADC93AA5EC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a2:7a:6e:bf:84:5e:8b:2a:07:6d:21:c6:35: cc:63:ba:da:3c:dc:74:0b:1a:c1:ae:13:a9:15:5a: 1e:68:23:9a:7f:18:d9:2b:2a:1e:91:56:81:61:1c: 43:77:3a:a2:e3:72:7d:87:cd:08:7c:32:f4:c0:4a: 83:bf:5a:10:6b:23:6b:0e:f6:0d:bc:30:54:f1:88: 0f:02:82:f5:45:44:63:82:3c:80:f2:77:0a:cc:7d: 79:7f:08:c5:3d:10:de:de:6e:e9:1f:99:55:07:2f: 8b:fa:45:29:3d:6e:c8:1d:4f:6a:70:c6:13:05:b3: 6e:24:a6:5b:a4:40:39:82:10:a7:a9:d7:9f:69:df: 96:af:8d:5e:b9:ea:cf:0e:74:d5:df:ee:63:6a:fd: b3:91:63:0f:ea:4f:23:33:e7:67:09:8a:4f:10:dd: f6:1d:10:94:28:87:f1:f4:bc:c5:12:5c:f3:74:0f: d7:d3:6e:12:00:fa:ab:a4:d8:b0:78:8c:4f:73:ca: c8:3b:4d:fc:63:4e:c7:38:46:fc:50:96:71:4d:6d: b0:6d:0e:61:c5:c5:bc:5e:44:35:11:b1:e7:55:d8: 90:7a:8d:5f:b7:97:52:b4:33:b9:9c:42:26:bf:73: a5:c0:52:29:93:9c:f8:2a:0d:e8:09:2d:48:38:82: 30:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FF:C7:92:E9:6D:21:C4:D4:36:C4:75:A9:14:3A:DC:93:AA:5E:C8 X509v3 Authority Key Identifier: keyid:9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:e7:5a:04:f3:2f:50:63:25:a6:40:80:e6:2a:74:8b:c8:63: 84:2b:2b:17:1f:c4:5f:a1:b9:a3:cf:35:0d:02:4d:9f:03:bc: 56:43:41:4c:b6:84:50:74:f8:b7:82:f3:8b:0f:12:66:e0:62: 22:2c:c6:96:03:14:10:16:33:56:a9:e9:2d:5f:94:dd:42:eb: 50:11:2b:6c:95:d8:d8:f6:62:2c:4c:a4:e8:03:96:21:02:ff: 8c:3e:04:bf:1c:7f:3f:d3:ed:91:90:8a:c1:c5:b4:fe:59:be: 38:c4:97:c9:f8:ea:0f:c9:c6:d0:54:7e:47:03:d4:4a:88:52: ec:00:c7:82:f3:77:cd:1a:4b:e9:d7:85:1e:d2:ec:43:2b:70: ff:62:37:69:2d:d2:90:8f:a1:0d:09:f5:63:31:1e:c9:ec:1a: a4:b8:b1:d5:a6:95:d4:35:6d:d4:a4:c1:ff:9e:84:96:5f:91: de:e0:89:d0:56:75:5a:a0:c2:c1:38:0d:95:d1:c4:05:c2:5e: 8e:f3:68:85:f1:50:15:81:9d:75:e9:9f:00:6d:99:a6:6c:e3: d4:3a:a5:8d:82:cc:fe:16:a5:f2:ed:d2:aa:c5:0f:ad:1e:4e: 10:56:5a:6f:86:0b:f7:16:cb:af:84:f1:96:84:7f:9e:fb:10: df:8e:2c:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/qvHuskZqBWVlmLFLKMS9ssS0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJDRjI2MUYxRUVCRDBBOTYxNDg3NjFGQTJFOThFOTNG QkFGQjA2RjAeFw0yNjA3MjMxNzM2NDRaFw0yNjA3MjQxOTI2NDRaMDMxMTAvBgNV BAMTKEJBRkZDNzkyRTk2RDIxQzRENDM2QzQ3NUE5MTQzQURDOTNBQTVFQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlonpuv4ReiyoHbSHGNcxjuto8 3HQLGsGuE6kVWh5oI5p/GNkrKh6RVoFhHEN3OqLjcn2HzQh8MvTASoO/WhBrI2sO 9g28MFTxiA8CgvVFRGOCPIDydwrMfXl/CMU9EN7ebukfmVUHL4v6RSk9bsgdT2pw xhMFs24kplukQDmCEKep159p35avjV656s8OdNXf7mNq/bORYw/qTyMz52cJik8Q 3fYdEJQoh/H0vMUSXPN0D9fTbhIA+quk2LB4jE9zysg7TfxjTsc4RvxQlnFNbbBt DmHFxbxeRDURsedV2JB6jV+3l1K0M7mcQia/c6XAUimTnPgqDegJLUg4gjDhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuv/HkultIcTUNsR1qRQ63JOqXsgwHwYDVR0j BBgwFoAUm88mHx7r0KlhSHYfoumOk/uvsG8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIzNGVmMWQtNzM0ZC00YzcxLThiYTctZDMxZTE2OGI2MzJjLzAvOUJDRjI2MUYx RUVCRDBBOTYxNDg3NjFGQTJFOThFOTNGQkFGQjA2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkNGMjYxRjFFRUJEMEE5NjE0ODc2MUZBMkU5OEU5M0ZCQUZC MDZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvOUJDRjI2MUYxRUVCRDBBOTYxNDg3NjFGQTJFOThF OTNGQkFGQjA2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnnWgTzL1BjJaZAgOYqdIvIY4QrKxcfxF+h uaPPNQ0CTZ8DvFZDQUy2hFB0+LeC84sPEmbgYiIsxpYDFBAWM1ap6S1flN1C61AR K2yV2Nj2YixMpOgDliEC/4w+BL8cfz/T7ZGQisHFtP5ZvjjEl8n46g/JxtBUfkcD 1EqIUuwAx4Lzd80aS+nXhR7S7EMrcP9iN2kt0pCPoQ0J9WMxHsnsGqS4sdWmldQ1 bdSkwf+ehJZfkd7gidBWdVqgwsE4DZXRxAXCXo7zaIXxUBWBnXXpnwBtmaZs49Q6 pY2CzP4WpfLt0qrFD60eThBWWm+GC/cWy6+E8ZaEf577EN+OLAg= -----END CERTIFICATE-----Generated at Fri Jul 24 05:35:29 2026 by rpki-client