$ rpki-client -vvf rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft File: 9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft (raw, json) Hash identifier: Dr0ePap0jMlXJ8Y+7ocxqJATjSa4DLitAWSym+QJUz4= Subject key identifier: 0B:F9:D0:BB:EA:0B:50:77:94:75:86:7A:94:CF:64:A5:B7:7B:34:6A Authority key identifier: 9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C Certificate issuer: /CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Certificate serial: 456E31BEFDA09032644E91D6442EB3E447D4AECA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 20:50:30 +0000 Manifest this update: Thu 23 Jul 2026 20:45:30 +0000 Manifest next update: Fri 24 Jul 2026 23:41:30 +0000 Files and hashes: 1: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (hash: C5EXjolwl07zRhpLr0tmhZ7KpZpGgWZO494eyJEQSqk=) 2: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (hash: byBg5cGc6s1YP8fDSR7s5sO6wrvfj9UFsOHI5fDaKjw=) 3: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (hash: 0uTllQF8wo+NL3Ts0DUiJLkGlZst9OmTPcws3XPvVM8=) 4: 9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl (hash: MIdpP57jFJlNQaaRYEhoRqajE2LvILD+P5B6RPUBCfU=) 5: 3230322e35372e32312e302f32342d3234203d3e20313431363733.roa (hash: 2uayKWV7qVJbZpJZiiGrPFO3R21PwEyriXpTW2MB4pQ=) 6: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (hash: o+t6IXXZJ4nVKh7Fjs01qIsZ6gI4rdJ87aU7Y1okiOU=) 7: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (hash: tedUTTSe47lCMR7mgNFb3hX/nrYcz1gvH0zDmHz42Os=) 8: 3230322e35372e32342e302f32332d3233203d3e20313430343639.roa (hash: d1pFnM2SYbSdXqGP4WVzR+cUntyYSCzP9FKk6VY+PFE=) 9: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (hash: FVzH7nhWf9HlKEhd9diqlsZY20NWlRxKMpXnnJ7+h6Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:6e:31:be:fd:a0:90:32:64:4e:91:d6:44:2e:b3:e4:47:d4:ae:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Validity Not Before: Jul 23 20:45:30 2026 GMT Not After : Jul 24 23:41:30 2026 GMT Subject: CN=0BF9D0BBEA0B50779475867A94CF64A5B77B346A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:42:dc:96:ad:c2:96:5d:39:5c:d5:b3:09:d5: d3:8a:55:b8:12:8a:77:01:b9:c6:a8:2c:fe:73:af: 07:c5:80:50:27:10:d1:d1:cd:82:a9:76:cb:62:c2: 3c:14:33:8a:a0:49:d3:fc:36:24:f9:04:3d:7c:fa: 42:df:24:e5:d3:df:bf:60:2f:3c:ba:52:9e:38:05: 87:aa:be:4c:18:2d:ad:7c:05:2f:9b:1a:84:91:0c: 47:22:f3:ec:3d:72:a2:20:1a:6c:8d:8a:9b:35:15: 2c:f5:29:b6:59:2c:fd:67:b8:53:a8:0a:67:80:63: 01:55:d6:8a:30:ce:8f:46:bb:69:57:82:32:2c:ec: 74:6f:cf:b3:e1:2b:5e:1f:b2:85:ba:b3:8a:6f:80: f4:c2:33:53:39:8b:07:de:67:00:8b:fa:f1:2c:3f: c4:34:93:25:be:94:64:b0:5a:ce:d1:c8:00:4e:97: 6b:33:80:d1:9c:98:62:e6:82:f8:67:d2:27:86:9c: a4:ca:85:63:19:7a:2a:a8:17:59:c6:7d:17:9a:56: 77:91:7a:de:bd:89:0b:bd:de:2d:c6:d5:34:9f:92: 6b:c9:95:e1:ff:6a:0e:c8:1c:aa:b2:20:a6:7f:a0: 95:08:46:5f:c7:d4:0a:2b:ab:1c:72:55:ec:64:49: 9d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F9:D0:BB:EA:0B:50:77:94:75:86:7A:94:CF:64:A5:B7:7B:34:6A X509v3 Authority Key Identifier: keyid:9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f1:8b:0e:a4:dd:20:f9:a3:f3:40:70:ba:41:81:43:3c:5c: 0c:37:29:5a:31:39:2c:aa:e9:a5:d9:aa:41:b1:3a:4b:28:b6: 02:1d:9a:e8:d6:b9:77:5a:a4:e3:7f:31:62:97:a8:75:df:64: ad:c6:21:92:a8:09:ce:15:fd:be:09:7d:fe:76:8f:d2:d9:f6: f4:13:b2:76:fa:c0:27:37:87:6a:7f:8c:c0:a9:53:23:95:ec: c4:82:47:5c:52:b8:66:96:b2:6f:23:73:ef:f2:3b:03:55:24: e4:6b:b3:90:d0:3f:a1:ad:c8:bd:fd:69:07:b7:b5:be:37:15: 09:60:31:63:5c:21:15:19:81:32:04:83:4b:b0:bd:8f:00:91: 49:ae:5d:77:bf:8d:85:40:cf:23:23:27:44:fe:8c:59:7c:2a: a3:16:56:fe:bb:6c:b6:44:3e:36:f3:be:c3:d3:c4:59:5a:2a: 7e:c3:fe:eb:e3:f9:fd:92:8f:e5:1c:40:a5:c5:f0:18:a4:cf: d0:92:4d:52:5e:27:5b:90:24:ca:98:50:5a:e2:22:c1:84:38: 3e:95:6e:2a:2a:e9:85:80:8d:b9:19:42:04:a3:27:71:ee:c0: a5:3b:82:2d:1f:97:04:5a:db:2c:51:7b:42:fb:ca:5c:51:fb: b2:fa:a0:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURW4xvv2gkDJkTpHWRC6z5EfUrsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURCOEM0NzIzRTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1 QzgyQ0Q5QzAeFw0yNjA3MjMyMDQ1MzBaFw0yNjA3MjQyMzQxMzBaMDMxMTAvBgNV BAMTKDBCRjlEMEJCRUEwQjUwNzc5NDc1ODY3QTk0Q0Y2NEE1Qjc3QjM0NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRQtyWrcKWXTlc1bMJ1dOKVbgS incBucaoLP5zrwfFgFAnENHRzYKpdstiwjwUM4qgSdP8NiT5BD18+kLfJOXT379g Lzy6Up44BYeqvkwYLa18BS+bGoSRDEci8+w9cqIgGmyNips1FSz1KbZZLP1nuFOo CmeAYwFV1oowzo9Gu2lXgjIs7HRvz7PhK14fsoW6s4pvgPTCM1M5iwfeZwCL+vEs P8Q0kyW+lGSwWs7RyABOl2szgNGcmGLmgvhn0ieGnKTKhWMZeiqoF1nGfReaVneR et69iQu93i3G1TSfkmvJleH/ag7IHKqyIKZ/oJUIRl/H1AorqxxyVexkSZ3fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC/nQu+oLUHeUdYZ6lM9kpbd7NGowHwYDVR0j BBgwFoAUnbjEcj47/dATinkWqLsSxFyCzZwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGQzZjA5NWItNzEzMC00MTIyLWFmMjUtN2QyZTdhMTFiMWIxLzAvOURCOEM0NzIz RTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1QzgyQ0Q5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REI4QzQ3MjNFM0JGREQwMTM4QTc5MTZBOEJCMTJDNDVDODJD RDlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGQzZjA5NWItNzEzMC00MTIyLWFm MjUtN2QyZTdhMTFiMWIxLzAvOURCOEM0NzIzRTNCRkREMDEzOEE3OTE2QThCQjEy QzQ1QzgyQ0Q5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHxiw6k3SD5o/NAcLpBgUM8XAw3KVoxOSyq 6aXZqkGxOksotgIdmujWuXdapON/MWKXqHXfZK3GIZKoCc4V/b4Jff52j9LZ9vQT snb6wCc3h2p/jMCpUyOV7MSCR1xSuGaWsm8jc+/yOwNVJORrs5DQP6GtyL39aQe3 tb43FQlgMWNcIRUZgTIEg0uwvY8AkUmuXXe/jYVAzyMjJ0T+jFl8KqMWVv67bLZE PjbzvsPTxFlaKn7D/uvj+f2Sj+UcQKXF8Bikz9CSTVJeJ1uQJMqYUFriIsGEOD6V bioq6YWAjbkZQgSjJ3HuwKU7gi0flwRa2yxRe0L7ylxR+7L6oFg= -----END CERTIFICATE-----Generated at Fri Jul 24 08:21:38 2026 by rpki-client