$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft File: C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft (raw, json) Hash identifier: UcojiVT6s74RlwmOzZixpyYDcjUC6ZYBdZYXjBa8+ps= Subject key identifier: 96:28:85:45:C1:7E:72:8A:03:39:AD:B0:A2:2A:43:49:83:B3:46:D0 Authority key identifier: C9:A0:E9:83:26:93:84:F0:0C:CE:85:7E:3A:8E:88:87:BE:9B:7F:C8 Certificate issuer: /CN=C9A0E983269384F00CCE857E3A8E8887BE9B7FC8 Certificate serial: 635C2DFDA2BAC3EA3ECE7F6164DE00E6FD4E7524 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 00:14:24 +0000 Manifest this update: Fri 24 Jul 2026 00:09:24 +0000 Manifest next update: Sat 25 Jul 2026 00:18:24 +0000 Files and hashes: 1: C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl (hash: cC6xIDnzhmhcQuHAjzfRXDAg1Q4UZAdo6oGrHEg7DxA=) 2: 3130332e38312e3131302e302f32332d3234203d3e20313530393538.roa (hash: PAwVQ07BR901R53ceqUz7lmumWNjRRTL4GW80ND0yx0=) 3: 3130332e38312e3131312e302f32342d3234203d3e20313530393538.roa (hash: l+i6wCpyx98LrkN6bI1lbQddhWqft7YLNRfJYsyxYlA=) 4: 323030313a6466323a623263303a3a2f34382d3438203d3e20313530393538.roa (hash: DNfu6S0MfyEIbWVxydJYNYlQdSHELvJkaaSCCqoydj0=) 5: 3130332e38312e3131302e302f32342d3234203d3e20313530393538.roa (hash: 1X7ytOOeZ7baYbrptPG956jTOlJu9VRB/BLTjRkOU00=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:5c:2d:fd:a2:ba:c3:ea:3e:ce:7f:61:64:de:00:e6:fd:4e:75:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9A0E983269384F00CCE857E3A8E8887BE9B7FC8 Validity Not Before: Jul 24 00:09:24 2026 GMT Not After : Jul 25 00:18:24 2026 GMT Subject: CN=96288545C17E728A0339ADB0A22A434983B346D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:60:f4:22:47:15:e2:b6:73:04:82:74:90:dd: ac:8f:4f:a9:df:8f:e5:1a:06:85:28:d2:eb:4e:32: 89:02:13:0e:0d:2d:80:dd:95:28:7b:f6:9d:d4:8f: d5:bb:ad:dd:f7:07:ac:9f:83:61:c3:04:00:6f:7c: e9:04:b5:b5:81:a7:66:48:a4:ca:8d:6d:56:5e:13: 3e:a2:33:61:49:98:2b:7f:25:d2:11:b2:1b:b6:b4: 78:d5:e8:0e:fa:01:9a:86:87:c3:56:e6:20:01:6a: 7c:6d:d5:9c:64:d2:ab:be:cc:2e:97:5f:af:05:4a: ca:5e:b5:24:34:b8:f1:37:98:7a:c8:9d:8d:57:e6: 23:c1:19:ae:b1:af:06:94:fd:d9:a2:a2:fa:21:88: 87:f1:c4:fb:68:9a:fd:92:c2:78:27:8e:88:a0:1b: cb:71:df:bc:b4:34:42:82:1e:e8:e1:6c:98:60:3e: ef:d8:3e:14:15:d3:b2:b5:b0:99:e6:6c:c0:2c:32: 0b:43:ef:2e:1e:b9:74:f1:af:9b:6f:41:42:99:05: e1:db:87:18:a5:07:8c:a7:69:ab:2b:fc:f2:96:6d: e9:45:2c:cf:cc:98:38:51:34:ce:93:d5:02:0e:5c: 85:97:91:fb:e4:a7:76:5c:97:a5:0c:60:70:81:a1: fa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:28:85:45:C1:7E:72:8A:03:39:AD:B0:A2:2A:43:49:83:B3:46:D0 X509v3 Authority Key Identifier: keyid:C9:A0:E9:83:26:93:84:F0:0C:CE:85:7E:3A:8E:88:87:BE:9B:7F:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:9a:1e:a4:af:7a:be:d1:4e:b6:21:a4:6c:e9:3c:13:4d:ae: c7:6c:57:13:11:6b:6c:fb:54:47:24:b3:c3:f7:7c:01:2c:55: 17:0c:4a:d6:47:82:16:d8:47:5c:ad:75:bc:36:b4:9e:e3:45: 25:05:ce:eb:a8:a4:09:5d:f2:6e:da:7e:da:71:bd:ac:7d:ed: 3e:bc:ad:ae:05:43:cc:06:4d:5a:b5:b6:f4:4d:2a:8b:37:51: df:25:13:a2:ba:4b:b2:17:4d:cd:89:83:82:42:9a:6d:47:e0: 8a:c5:2e:94:06:50:89:75:e5:88:48:53:44:60:f7:22:8a:a3: 9c:83:76:23:ce:07:12:2d:1f:c9:04:5c:4d:a5:79:7e:e4:3a: ff:9c:4f:65:5e:96:72:e2:5e:46:9c:a4:d8:b6:d1:5f:c0:63: 4d:83:ad:cf:ed:20:e8:ba:a8:86:8d:46:1a:d2:cf:58:fe:58: 6e:6d:07:d7:18:ab:c8:a2:a4:1c:6b:d2:59:c3:fb:9f:3a:9d: 0b:f6:a8:b5:58:ce:a6:cb:e0:55:7a:ad:bd:e6:7d:5a:96:fc: 4f:2a:f5:0d:6a:f5:44:b5:f5:81:b0:af:89:20:7e:35:ca:00: 9e:d4:73:10:e4:97:24:3d:9f:e2:9a:b5:23:c9:9c:60:fd:11: 26:cc:ef:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY1wt/aK6w+o+zn9hZN4A5v1OdSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlBMEU5ODMyNjkzODRGMDBDQ0U4NTdFM0E4RTg4ODdC RTlCN0ZDODAeFw0yNjA3MjQwMDA5MjRaFw0yNjA3MjUwMDE4MjRaMDMxMTAvBgNV BAMTKDk2Mjg4NTQ1QzE3RTcyOEEwMzM5QURCMEEyMkE0MzQ5ODNCMzQ2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBYPQiRxXitnMEgnSQ3ayPT6nf j+UaBoUo0utOMokCEw4NLYDdlSh79p3Uj9W7rd33B6yfg2HDBABvfOkEtbWBp2ZI pMqNbVZeEz6iM2FJmCt/JdIRshu2tHjV6A76AZqGh8NW5iABanxt1Zxk0qu+zC6X X68FSspetSQ0uPE3mHrInY1X5iPBGa6xrwaU/dmiovohiIfxxPtomv2Swngnjoig G8tx37y0NEKCHujhbJhgPu/YPhQV07K1sJnmbMAsMgtD7y4euXTxr5tvQUKZBeHb hxilB4ynaasr/PKWbelFLM/MmDhRNM6T1QIOXIWXkfvkp3Zcl6UMYHCBofpHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUliiFRcF+cooDOa2woipDSYOzRtAwHwYDVR0j BBgwFoAUyaDpgyaThPAMzoV+Oo6Ih76bf8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGYwYmNkYzMtMGZlYS00NzQ3LTk5MDctNjU2NDg2YmFlOGRhLzAvQzlBMEU5ODMy NjkzODRGMDBDQ0U4NTdFM0E4RTg4ODdCRTlCN0ZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUEwRTk4MzI2OTM4NEYwMENDRTg1N0UzQThFODg4N0JFOUI3 RkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGYwYmNkYzMtMGZlYS00NzQ3LTk5 MDctNjU2NDg2YmFlOGRhLzAvQzlBMEU5ODMyNjkzODRGMDBDQ0U4NTdFM0E4RTg4 ODdCRTlCN0ZDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeaHqSver7RTrYhpGzpPBNNrsdsVxMRa2z7 VEcks8P3fAEsVRcMStZHghbYR1ytdbw2tJ7jRSUFzuuopAld8m7aftpxvax97T68 ra4FQ8wGTVq1tvRNKos3Ud8lE6K6S7IXTc2Jg4JCmm1H4IrFLpQGUIl15YhIU0Rg 9yKKo5yDdiPOBxItH8kEXE2leX7kOv+cT2VelnLiXkacpNi20V/AY02Drc/tIOi6 qIaNRhrSz1j+WG5tB9cYq8iipBxr0lnD+586nQv2qLVYzqbL4FV6rb3mfVqW/E8q 9Q1q9US19YGwr4kgfjXKAJ7UcxDklyQ9n+KatSPJnGD9ESbM73w= -----END CERTIFICATE-----Generated at Fri Jul 24 06:23:57 2026 by rpki-client