$ rpki-client -vvf rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft File: A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft (raw, json) Hash identifier: mtV6ydD3sJcRCBHPuR139vlNE2YNC2VdrmHTrw9+fTo= Subject key identifier: B9:A4:17:74:7A:52:7C:A5:BB:AE:20:19:EF:3B:85:5D:62:C5:40:3F Authority key identifier: A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE Certificate issuer: /CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE Certificate serial: 3C4EB41E9B462BAC493D36A908BF3402AF83093B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 20:14:47 +0000 Manifest this update: Thu 23 Jul 2026 20:09:47 +0000 Manifest next update: Fri 24 Jul 2026 20:44:47 +0000 Files and hashes: 1: A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl (hash: XTsUGO3uuZaW8Jrv7jKeqFUe9x08Ka45m2vzVOzeLG0=) 2: 3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa (hash: ICLSFvgSRRkmlVey9F0aZzpRAm3MpVToF57RNv3826o=) 3: 3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (hash: XjEh4h/m9O4zav0oJbGUt3KwmUOKS7DwqIAy5aQ35aY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:4e:b4:1e:9b:46:2b:ac:49:3d:36:a9:08:bf:34:02:af:83:09:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE Validity Not Before: Jul 23 20:09:47 2026 GMT Not After : Jul 24 20:44:47 2026 GMT Subject: CN=B9A417747A527CA5BBAE2019EF3B855D62C5403F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9d:a1:f6:d4:c5:47:48:c4:30:8a:7a:d2:bd: 7f:7c:44:85:6b:a2:f8:33:99:79:37:16:30:64:bd: fa:9f:43:00:63:78:96:c9:f2:dd:13:b3:2d:39:5d: 8d:bd:ec:28:2c:38:f8:70:e0:22:63:63:09:f0:36: 9e:a5:5d:3d:8e:ee:87:46:c0:e5:39:1d:3c:dd:8a: 3d:1d:0d:d6:d5:31:ce:7a:20:76:cb:b0:56:81:12: 87:d0:1f:c6:61:94:41:c8:97:4d:4b:1f:d5:31:75: e8:e5:dd:b1:75:24:8e:14:ba:b1:bb:b8:0e:d2:aa: 8d:5c:c2:5e:2c:ba:0d:f6:6d:e7:b5:08:08:9e:b2: 78:7e:e3:5f:4b:11:d7:fd:8e:43:9b:b9:76:1b:9d: 8f:35:1a:fa:fc:64:65:50:f0:a9:1e:0c:e9:26:ac: d3:3a:7b:19:90:f0:4a:07:0e:5a:20:7c:c3:43:ab: df:63:92:48:30:96:64:39:d7:3a:5b:44:54:c8:73: 4b:0d:66:40:7b:14:02:19:8c:a6:0a:1f:28:49:6f: 84:e8:66:2a:64:c5:06:ab:55:54:e1:34:a3:ec:83: b6:b9:55:dc:78:a0:71:3d:de:c8:87:4e:a5:0a:a0: be:2e:0e:e7:76:f7:93:14:7f:d4:9f:93:98:44:03: df:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A4:17:74:7A:52:7C:A5:BB:AE:20:19:EF:3B:85:5D:62:C5:40:3F X509v3 Authority Key Identifier: keyid:A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c6:58:8e:9d:49:ad:55:8f:4b:48:2c:d5:b6:37:a2:0e:4f: 3d:f9:cf:4a:ee:aa:0d:c0:4a:d5:c3:e8:58:48:c6:b5:ad:2f: 39:7c:01:c3:7a:04:c3:b6:d4:30:f6:20:4b:a7:44:05:c3:55: 40:f5:d6:d9:5f:e9:61:15:0d:72:1e:ba:0b:af:77:df:01:3a: 76:01:83:2d:a3:f4:ae:cb:06:10:34:30:e5:26:a5:23:49:68: fe:f8:98:85:62:9d:b3:78:b5:07:6d:4d:3c:5a:3c:78:ae:eb: fd:76:70:54:85:19:c4:58:0c:3c:a3:af:e7:86:1b:86:42:db: a6:b5:88:b6:f6:2c:16:01:4f:30:8b:b7:87:b7:6b:b3:70:09: e0:e0:a9:6f:4a:71:08:f9:be:1d:b0:e2:cd:37:61:7c:47:63: 97:81:0f:1f:c6:56:e0:47:91:3e:57:fe:1d:11:70:05:b4:b7: 9f:d6:29:51:f0:01:db:25:02:9b:5c:69:32:86:57:7e:b7:12: 53:cd:01:fa:02:ea:1e:7f:07:52:2a:da:56:69:9a:22:b8:19: fb:4a:78:8a:22:07:a7:8a:7c:c2:75:1d:6a:dc:21:27:6e:b7: 8f:d0:e0:60:d6:0e:ce:8b:26:e0:04:22:b2:2f:d1:49:d1:54: bd:62:a6:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPE60HptGK6xJPTapCL80Aq+DCTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFOTdDOERDNTNFRDRCOTRGMDYyMDdEQUUyQjNCMjFC QTA4RDNGRTAeFw0yNjA3MjMyMDA5NDdaFw0yNjA3MjQyMDQ0NDdaMDMxMTAvBgNV BAMTKEI5QTQxNzc0N0E1MjdDQTVCQkFFMjAxOUVGM0I4NTVENjJDNTQwM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4naH21MVHSMQwinrSvX98RIVr ovgzmXk3FjBkvfqfQwBjeJbJ8t0Tsy05XY297CgsOPhw4CJjYwnwNp6lXT2O7odG wOU5HTzdij0dDdbVMc56IHbLsFaBEofQH8ZhlEHIl01LH9Uxdejl3bF1JI4UurG7 uA7Sqo1cwl4sug32bee1CAiesnh+419LEdf9jkObuXYbnY81Gvr8ZGVQ8KkeDOkm rNM6exmQ8EoHDlogfMNDq99jkkgwlmQ51zpbRFTIc0sNZkB7FAIZjKYKHyhJb4To ZipkxQarVVThNKPsg7a5Vdx4oHE93siHTqUKoL4uDud295MUf9Sfk5hEA9/5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuaQXdHpSfKW7riAZ7zuFXWLFQD8wHwYDVR0j BBgwFoAUoel8jcU+1LlPBiB9ris7IboI0/4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA1MGRjYzMtODRkZC00NTk1LWJhMmMtYmM2OTk4OTY5MmYxLzAvQTFFOTdDOERD NTNFRDRCOTRGMDYyMDdEQUUyQjNCMjFCQTA4RDNGRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUU5N0M4REM1M0VENEI5NEYwNjIwN0RBRTJCM0IyMUJBMDhE M0ZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvQTFFOTdDOERDNTNFRDRCOTRGMDYyMDdEQUUyQjNC MjFCQTA4RDNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7GWI6dSa1Vj0tILNW2N6IOTz35z0ruqg3A StXD6FhIxrWtLzl8AcN6BMO21DD2IEunRAXDVUD11tlf6WEVDXIeuguvd98BOnYB gy2j9K7LBhA0MOUmpSNJaP74mIVinbN4tQdtTTxaPHiu6/12cFSFGcRYDDyjr+eG G4ZC26a1iLb2LBYBTzCLt4e3a7NwCeDgqW9KcQj5vh2w4s03YXxHY5eBDx/GVuBH kT5X/h0RcAW0t5/WKVHwAdslAptcaTKGV363ElPNAfoC6h5/B1Iq2lZpmiK4GftK eIoiB6eKfMJ1HWrcISdut4/Q4GDWDs6LJuAEIrIv0UnRVL1ipoE= -----END CERTIFICATE-----Generated at Fri Jul 24 05:11:18 2026 by rpki-client