$ rpki-client -vvf rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft File: 9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft (raw, json) Hash identifier: jY+CzMenQdTGNvOH6YBi2k25QAQ/PnjmJnrhYy9u+q8= Subject key identifier: 92:CF:EC:10:A8:94:EF:E8:DF:63:5A:BC:F0:96:A6:3B:13:E3:44:41 Authority key identifier: 9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A Certificate issuer: /CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A Certificate serial: 1FC95EE043BD47C43ECCD34A29FE6D22D0EBF657 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 15:03:21 +0000 Manifest this update: Thu 23 Jul 2026 14:58:21 +0000 Manifest next update: Fri 24 Jul 2026 18:34:21 +0000 Files and hashes: 1: 3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa (hash: rpX5Z9CNMyEUL+veiVsOhDnQwGzSm68cJVDfJbI5SIE=) 2: 3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (hash: y7jgS/ZISqQ0Ejz5jszYlUpeJRIijdmrHPSpWEnYBQg=) 3: 9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl (hash: 53PvOrvra3hdLQU/4Ye0EyRLJqZmRUP34mhn8K/Jde0=) 4: 3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa (hash: Dgai9I/TT4G/oQBQ3mEn1fS7dXTCrr7cZjoLYBavMXQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c9:5e:e0:43:bd:47:c4:3e:cc:d3:4a:29:fe:6d:22:d0:eb:f6:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A Validity Not Before: Jul 23 14:58:21 2026 GMT Not After : Jul 24 18:34:21 2026 GMT Subject: CN=92CFEC10A894EFE8DF635ABCF096A63B13E34441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:38:04:9b:c2:97:7f:59:d6:25:6c:4c:f0:63: a0:68:14:b5:95:69:f1:14:95:a3:04:f2:7b:fc:c1: ab:81:ec:21:1e:68:ed:d4:51:59:10:d0:c7:9b:03: 73:f8:04:8f:98:ac:a9:78:74:d7:d0:8b:2c:25:ec: ae:7a:5e:e9:06:95:a0:a9:c1:15:fa:b5:3e:bd:5b: d9:a9:1a:5d:44:a4:c5:06:b4:b5:39:56:1f:88:14: f2:8a:b4:f8:d5:bd:3c:6f:20:98:18:c8:da:a9:a5: 03:c2:36:1c:58:05:49:c9:55:ec:d4:92:0a:7b:04: 2a:d5:21:f6:f6:38:91:e7:6d:07:a4:68:f2:e6:34: 9e:93:95:71:9c:33:59:66:c3:30:7b:c2:94:89:37: 4f:77:a2:ed:6d:ee:f3:c0:15:b6:c9:6c:92:72:ae: 8a:a5:59:50:b2:b5:74:f8:11:08:d9:12:95:b1:49: 11:47:bb:16:05:0f:0f:15:2b:d5:c0:ce:67:70:7d: 5e:f9:68:d9:75:6a:f0:3e:16:ed:8a:33:0c:8e:87: 7e:3b:0e:0f:87:f3:f9:94:ec:a3:39:90:1a:52:f9: 38:fa:f4:37:39:fd:e8:99:72:ea:6e:ea:bd:fc:59: 28:6e:fb:a3:71:fb:43:fc:a5:dd:df:73:c7:06:16: 44:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CF:EC:10:A8:94:EF:E8:DF:63:5A:BC:F0:96:A6:3B:13:E3:44:41 X509v3 Authority Key Identifier: keyid:9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:2f:b4:78:3d:01:f8:2f:70:9e:e0:ab:ec:19:f4:95:d5:97: 5a:3a:7d:11:d0:63:05:d8:0f:4d:1e:e9:6b:48:60:49:14:37: c7:78:7e:0c:b2:d5:0e:fa:28:40:ad:81:1a:19:e8:55:d0:4a: 45:d1:64:05:7f:f2:33:4e:eb:b0:4b:7c:45:a3:06:f4:d1:83: ba:5e:5b:e2:53:7b:66:39:eb:fc:b8:8b:53:93:c3:0b:70:26: be:06:a3:ff:97:ea:05:fd:83:bb:0f:e6:d0:dd:43:b6:c8:23: 08:93:5c:1d:0c:90:8f:fb:47:76:61:0f:56:e0:7d:8e:26:9d: f6:45:fb:a6:c1:24:47:1f:7b:c7:ed:46:57:ae:78:c1:cb:36: f4:02:d5:97:28:09:ff:67:1d:f8:5d:97:1a:cb:df:7e:56:31: e7:65:85:3f:3a:87:4f:b0:42:0e:dd:64:6e:d2:f1:ee:5f:d8: fb:21:0a:07:39:60:86:ac:6a:87:31:2a:c6:18:4d:60:08:20: 60:3f:d6:93:ab:a0:49:00:05:f1:87:47:1e:03:aa:b3:d7:70: 74:ac:43:ff:d5:c0:12:42:a7:f9:05:9a:4f:be:ef:f3:03:f6: dc:29:30:2a:71:46:57:0a:11:ba:45:c1:16:4d:c0:40:61:60: c0:2d:71:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH8le4EO9R8Q+zNNKKf5tItDr9lcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBODgwMDU2RENGOUFEQjdBNzBENDYxRkY4MzA4NkQ4 RkU4ODk3QTAeFw0yNjA3MjMxNDU4MjFaFw0yNjA3MjQxODM0MjFaMDMxMTAvBgNV BAMTKDkyQ0ZFQzEwQTg5NEVGRThERjYzNUFCQ0YwOTZBNjNCMTNFMzQ0NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCOASbwpd/WdYlbEzwY6BoFLWV afEUlaME8nv8wauB7CEeaO3UUVkQ0MebA3P4BI+YrKl4dNfQiywl7K56XukGlaCp wRX6tT69W9mpGl1EpMUGtLU5Vh+IFPKKtPjVvTxvIJgYyNqppQPCNhxYBUnJVezU kgp7BCrVIfb2OJHnbQekaPLmNJ6TlXGcM1lmwzB7wpSJN093ou1t7vPAFbbJbJJy roqlWVCytXT4EQjZEpWxSRFHuxYFDw8VK9XAzmdwfV75aNl1avA+Fu2KMwyOh347 Dg+H8/mU7KM5kBpS+Tj69Dc5/eiZcupu6r38WShu+6Nx+0P8pd3fc8cGFkQ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUks/sEKiU7+jfY1q88JamOxPjREEwHwYDVR0j BBgwFoAUn6iABW3Pmtt6cNRh/4MIbY/oiXowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0NDI1MmItZDMwZS00YmRjLTgzMmYtYjM4YjA1YzdhMDM1LzAvOUZBODgwMDU2 RENGOUFEQjdBNzBENDYxRkY4MzA4NkQ4RkU4ODk3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkE4ODAwNTZEQ0Y5QURCN0E3MEQ0NjFGRjgzMDg2RDhGRTg4 OTdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0NDI1MmItZDMwZS00YmRjLTgz MmYtYjM4YjA1YzdhMDM1LzAvOUZBODgwMDU2RENGOUFEQjdBNzBENDYxRkY4MzA4 NkQ4RkU4ODk3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgvtHg9AfgvcJ7gq+wZ9JXVl1o6fRHQYwXY D00e6WtIYEkUN8d4fgyy1Q76KECtgRoZ6FXQSkXRZAV/8jNO67BLfEWjBvTRg7pe W+JTe2Y56/y4i1OTwwtwJr4Go/+X6gX9g7sP5tDdQ7bIIwiTXB0MkI/7R3ZhD1bg fY4mnfZF+6bBJEcfe8ftRleueMHLNvQC1ZcoCf9nHfhdlxrL335WMedlhT86h0+w Qg7dZG7S8e5f2PshCgc5YIasaocxKsYYTWAIIGA/1pOroEkABfGHRx4DqrPXcHSs Q//VwBJCp/kFmk++7/MD9twpMCpxRlcKEbpFwRZNwEBhYMAtcR4= -----END CERTIFICATE-----Generated at Fri Jul 24 01:24:09 2026 by rpki-client