$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft File: B9FC538BFBE91D32C980E6C968C96604E388FD26.mft (raw, json) Hash identifier: BTqk+B8oIk1YMwoZYkvFo5ph85kVX5BBQu0Ub+Fxw6Q= Subject key identifier: D5:BE:C8:2B:0D:CF:77:F3:99:63:09:D8:2D:BB:A3:23:81:A4:1C:E2 Authority key identifier: B9:FC:53:8B:FB:E9:1D:32:C9:80:E6:C9:68:C9:66:04:E3:88:FD:26 Certificate issuer: /CN=B9FC538BFBE91D32C980E6C968C96604E388FD26 Certificate serial: 5C1AADC56D0976119A01C55C36136C87974DC9DF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9FC538BFBE91D32C980E6C968C96604E388FD26.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 09:21:21 +0000 Manifest this update: Thu 23 Jul 2026 09:16:21 +0000 Manifest next update: Fri 24 Jul 2026 12:35:21 +0000 Files and hashes: 1: B9FC538BFBE91D32C980E6C968C96604E388FD26.crl (hash: Z17RQbcoog9O3ry06FBByW+VGEUE03cZcyCX4KkgqI0=) 2: 3130332e3138392e3235342e302f32342d3234203d3e20313439393135.roa (hash: ucIu0OXRxfc1CywG+yYTICGHOqWxj9NSpYywYNEl67o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.crl rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9FC538BFBE91D32C980E6C968C96604E388FD26.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:1a:ad:c5:6d:09:76:11:9a:01:c5:5c:36:13:6c:87:97:4d:c9:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9FC538BFBE91D32C980E6C968C96604E388FD26 Validity Not Before: Jul 23 09:16:21 2026 GMT Not After : Jul 24 12:35:21 2026 GMT Subject: CN=D5BEC82B0DCF77F3996309D82DBBA32381A41CE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:89:45:96:ef:f4:98:a0:9d:50:b0:d9:d3:ad: c4:35:56:5b:a7:13:ed:0d:fc:e3:55:03:ed:fe:66: df:5d:69:62:22:0e:0f:87:77:37:f8:7b:6b:0f:26: ff:9e:31:be:1b:49:e6:59:e7:e0:c6:e5:75:d0:4b: df:4c:45:a5:61:84:99:cb:46:a8:2a:20:d9:e7:d3: 56:c2:d6:85:b2:c2:1f:e8:a8:a9:c0:ed:3b:ff:3b: 2c:11:4b:93:b9:97:de:b1:a2:da:e8:c7:f1:86:04: b2:b6:22:5a:3c:ff:bb:61:ff:57:8c:c2:ca:3b:0d: 99:c2:db:17:43:c8:a8:25:6e:76:97:0d:69:6b:a3: 01:fc:6e:f0:e0:42:df:7a:43:68:d7:63:a8:d3:e2: c7:0c:41:be:69:49:e3:87:66:0d:83:af:6a:2b:85: 8a:a5:3c:ae:0d:1f:7a:45:50:16:6f:aa:cf:95:27: 52:2a:e7:6c:bd:57:44:54:35:a0:a4:a9:07:d0:f5: a8:be:97:de:13:e5:6b:7a:98:f8:dd:e8:e1:9b:1b: 0f:9f:06:d0:84:fd:dc:16:56:5d:34:23:19:bb:ea: 1d:84:03:a9:e0:64:5e:9d:1d:3e:b4:20:a3:25:dd: 33:58:ab:fd:fc:f6:a8:47:d4:58:5e:c3:b6:a7:7f: 55:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BE:C8:2B:0D:CF:77:F3:99:63:09:D8:2D:BB:A3:23:81:A4:1C:E2 X509v3 Authority Key Identifier: keyid:B9:FC:53:8B:FB:E9:1D:32:C9:80:E6:C9:68:C9:66:04:E3:88:FD:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9FC538BFBE91D32C980E6C968C96604E388FD26.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:f4:e7:42:0d:15:50:91:5d:de:6e:ac:c8:c1:34:b6:e7:69: d7:c0:46:ac:85:16:c0:6e:49:d9:4e:20:ec:92:ac:18:8e:34: 53:13:eb:3d:ca:4a:a7:92:9e:c0:c2:3b:2a:cd:85:32:2f:c4: 4c:9c:1c:f1:e3:6a:e7:3a:25:c9:bc:ee:20:e6:d9:c3:28:31: 39:d3:de:1e:89:cc:ec:d6:f2:d5:62:61:11:f8:68:a5:f2:82: ab:d2:4a:a4:ca:8e:87:a3:e5:e0:5e:2c:ad:93:29:b1:bf:e6: 78:b5:a5:00:8d:55:67:03:f2:a7:8a:11:59:b1:de:b3:38:98: a3:62:9b:51:d3:36:28:cb:a2:b2:e5:e7:56:bd:cb:e1:ff:e1: 14:2d:33:66:3b:c9:70:20:26:07:1b:f3:38:7a:04:25:df:a0: 94:50:47:dc:3f:20:1c:b7:ce:a8:d4:fd:8d:8f:be:48:15:9d: 74:df:14:83:ff:f5:76:2d:50:0e:67:8b:f5:3a:33:09:6d:3d: b5:0a:9f:0c:b6:94:fe:9e:cc:01:71:86:ba:42:da:58:8e:75: dd:d6:98:e5:0e:bf:ca:2b:a4:e6:2b:3e:33:d1:7e:d5:d1:bb: 22:88:88:79:f7:5f:22:ab:4d:5d:df:89:e9:6d:5e:2d:2a:d5: 59:19:f5:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXBqtxW0JdhGaAcVcNhNsh5dNyd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlGQzUzOEJGQkU5MUQzMkM5ODBFNkM5NjhDOTY2MDRF Mzg4RkQyNjAeFw0yNjA3MjMwOTE2MjFaFw0yNjA3MjQxMjM1MjFaMDMxMTAvBgNV BAMTKEQ1QkVDODJCMERDRjc3RjM5OTYzMDlEODJEQkJBMzIzODFBNDFDRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAiUWW7/SYoJ1QsNnTrcQ1Vlun E+0N/ONVA+3+Zt9daWIiDg+Hdzf4e2sPJv+eMb4bSeZZ5+DG5XXQS99MRaVhhJnL RqgqINnn01bC1oWywh/oqKnA7Tv/OywRS5O5l96xotrox/GGBLK2Ilo8/7th/1eM wso7DZnC2xdDyKglbnaXDWlrowH8bvDgQt96Q2jXY6jT4scMQb5pSeOHZg2Dr2or hYqlPK4NH3pFUBZvqs+VJ1Iq52y9V0RUNaCkqQfQ9ai+l94T5Wt6mPjd6OGbGw+f BtCE/dwWVl00Ixm76h2EA6ngZF6dHT60IKMl3TNYq/389qhH1Fhew7anf1UnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1b7IKw3Pd/OZYwnYLbujI4GkHOIwHwYDVR0j BBgwFoAUufxTi/vpHTLJgObJaMlmBOOI/SYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMwMDU2YjQtZjAyNy00NGZhLTk3NGQtNGExZWQxOTFhZTU2LzAvQjlGQzUzOEJG QkU5MUQzMkM5ODBFNkM5NjhDOTY2MDRFMzg4RkQyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUZDNTM4QkZCRTkxRDMyQzk4MEU2Qzk2OEM5NjYwNEUzODhG RDI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMwMDU2YjQtZjAyNy00NGZhLTk3 NGQtNGExZWQxOTFhZTU2LzAvQjlGQzUzOEJGQkU5MUQzMkM5ODBFNkM5NjhDOTY2 MDRFMzg4RkQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJL050INFVCRXd5urMjBNLbnadfARqyFFsBu SdlOIOySrBiONFMT6z3KSqeSnsDCOyrNhTIvxEycHPHjauc6Jcm87iDm2cMoMTnT 3h6JzOzW8tViYRH4aKXygqvSSqTKjoej5eBeLK2TKbG/5ni1pQCNVWcD8qeKEVmx 3rM4mKNim1HTNijLorLl51a9y+H/4RQtM2Y7yXAgJgcb8zh6BCXfoJRQR9w/IBy3 zqjU/Y2PvkgVnXTfFIP/9XYtUA5ni/U6MwltPbUKnwy2lP6ezAFxhrpC2liOdd3W mOUOv8orpOYrPjPRftXRuyKIiHn3XyKrTV3fieltXi0q1VkZ9cE= -----END CERTIFICATE-----Generated at Fri Jul 24 05:23:29 2026 by rpki-client