$ rpki-client -vvf rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft File: D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft (raw, json) Hash identifier: gUEwg98eEmb9eyK2NIWzSF9ebs5GPOyRLJBoc6ySoZ0= Subject key identifier: 8A:2A:79:99:EA:F5:D3:6C:76:AB:7E:C9:3E:8D:30:7D:20:96:47:F2 Authority key identifier: D9:E4:B9:E5:C2:0C:5D:24:54:5E:4B:37:44:B7:24:23:24:23:ED:B7 Certificate issuer: /CN=D9E4B9E5C20C5D24545E4B3744B724232423EDB7 Certificate serial: 06F4409F190EC19147536BDA8C6CC087B575C154 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft Manifest number: 71 Signing time: Fri 24 Jul 2026 08:24:48 +0000 Manifest this update: Fri 24 Jul 2026 08:19:48 +0000 Manifest next update: Sat 25 Jul 2026 08:25:48 +0000 Files and hashes: 1: D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl (hash: 3UaoxoxtuxxQxxq21MUjmbbp2VtY1pOpJBfDqNfROzA=) 2: 323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa (hash: cHfAqVSrYWCvGTjmxTN9VKckgkvEOepk7bQUQ5YDUTM=) 3: 3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa (hash: OK8J5tFKOjzZkYFlXmJIuP/RnOPH7Dha6p0ILyYgDYQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f4:40:9f:19:0e:c1:91:47:53:6b:da:8c:6c:c0:87:b5:75:c1:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9E4B9E5C20C5D24545E4B3744B724232423EDB7 Validity Not Before: Jul 24 08:19:48 2026 GMT Not After : Jul 25 08:25:48 2026 GMT Subject: CN=8A2A7999EAF5D36C76AB7EC93E8D307D209647F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:21:82:27:ba:c8:12:07:ff:35:b9:ca:e8:41: a5:d3:58:72:a7:c0:d3:b0:66:df:39:84:49:9a:36: e4:a9:6c:87:5b:ab:45:38:9a:9e:a9:dc:5c:10:4c: a3:3d:55:5a:4b:c7:6f:33:cf:5c:25:d3:69:bc:45: 24:7d:0a:a3:84:18:af:6e:fd:66:9d:67:3f:77:88: b9:ea:05:9f:b5:6e:4c:47:53:79:42:16:e8:2e:ef: 37:2f:fa:90:01:96:c6:e0:1c:25:16:d8:df:c1:47: a4:52:1a:d7:9b:09:1b:5e:5d:6c:71:68:14:b0:68: fb:d5:6a:81:d6:d7:a8:1d:e2:f0:d5:ff:91:ab:c9: 58:8b:a7:ce:69:a4:dd:fe:ed:72:c4:02:de:c9:ca: cf:f3:da:c7:5e:3d:e0:5b:9c:9c:f3:85:89:56:4b: 49:24:a8:51:96:4c:31:11:bc:48:7e:22:6c:14:d2: 68:a2:fe:c8:57:f6:63:e2:a4:fa:08:c0:1c:db:c6: 8f:86:0e:0d:fd:da:49:51:b7:1d:19:b2:1a:d3:bd: b4:b3:08:e3:eb:11:5d:e6:ff:df:69:c5:53:2d:e3: 6f:75:d5:29:ab:f3:22:10:a3:0e:96:7e:80:bc:b2: ff:e3:34:0b:9c:8a:2e:ac:61:b5:49:95:0e:40:ae: 40:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2A:79:99:EA:F5:D3:6C:76:AB:7E:C9:3E:8D:30:7D:20:96:47:F2 X509v3 Authority Key Identifier: keyid:D9:E4:B9:E5:C2:0C:5D:24:54:5E:4B:37:44:B7:24:23:24:23:ED:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:15:4d:ab:85:36:3f:ea:18:d1:99:02:f9:b6:35:08:89:c8: f7:b2:71:f3:bf:b6:ba:09:12:de:8f:c5:50:dd:ca:9b:76:57: 98:bf:2e:99:55:6c:fa:45:cd:7f:44:d1:98:92:ef:6b:02:62: 85:42:b7:b8:0b:a6:a8:78:77:3a:6c:9a:58:b1:d7:84:7a:7d: ed:c7:6b:39:f4:fb:a9:26:08:67:70:97:92:0b:d0:e6:83:90: fa:49:e4:31:46:c8:90:ff:f6:28:60:70:3c:a2:19:fd:64:87: 2e:08:86:85:03:08:75:ba:aa:f0:6c:f3:c7:76:71:e3:74:69: a4:da:59:5c:a6:88:31:84:c6:e1:3d:05:8f:18:9f:83:a6:e5: f4:7b:ea:05:95:f4:5d:d7:a1:42:1c:1c:da:b8:e8:ae:b9:30: 3c:91:7d:30:d1:6e:df:d9:e1:7a:31:e0:d6:b6:5c:43:d5:12: 78:34:65:d9:df:88:d5:d4:b9:7f:af:cc:ec:d3:f2:d9:96:8a: 15:75:27:f9:62:28:f6:02:4f:04:29:1d:8f:14:fb:b5:3f:9c: 77:52:33:d4:7a:08:aa:96:db:d4:84:0d:8a:0c:b3:77:46:a3: 46:78:21:02:77:59:51:25:08:1e:60:78:c7:a7:3c:e5:9c:33: 09:c8:ab:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBvRAnxkOwZFHU2vajGzAh7V1wVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFNEI5RTVDMjBDNUQyNDU0NUU0QjM3NDRCNzI0MjMy NDIzRURCNzAeFw0yNjA3MjQwODE5NDhaFw0yNjA3MjUwODI1NDhaMDMxMTAvBgNV BAMTKDhBMkE3OTk5RUFGNUQzNkM3NkFCN0VDOTNFOEQzMDdEMjA5NjQ3RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpIYInusgSB/81ucroQaXTWHKn wNOwZt85hEmaNuSpbIdbq0U4mp6p3FwQTKM9VVpLx28zz1wl02m8RSR9CqOEGK9u /WadZz93iLnqBZ+1bkxHU3lCFugu7zcv+pABlsbgHCUW2N/BR6RSGtebCRteXWxx aBSwaPvVaoHW16gd4vDV/5GryViLp85ppN3+7XLEAt7Jys/z2sdePeBbnJzzhYlW S0kkqFGWTDERvEh+ImwU0mii/shX9mPipPoIwBzbxo+GDg392klRtx0ZshrTvbSz COPrEV3m/99pxVMt42911Smr8yIQow6WfoC8sv/jNAucii6sYbVJlQ5ArkBnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiip5mer102x2q37JPo0wfSCWR/IwHwYDVR0j BBgwFoAU2eS55cIMXSRUXks3RLckIyQj7bcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzBhMzkyZGMtMmU0ZS00NzcwLThmNjgtYmM2MWY4MGI3NGE3LzAvRDlFNEI5RTVD MjBDNUQyNDU0NUU0QjM3NDRCNzI0MjMyNDIzRURCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOUU0QjlFNUMyMEM1RDI0NTQ1RTRCMzc0NEI3MjQyMzI0MjNF REI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzBhMzkyZGMtMmU0ZS00NzcwLThm NjgtYmM2MWY4MGI3NGE3LzAvRDlFNEI5RTVDMjBDNUQyNDU0NUU0QjM3NDRCNzI0 MjMyNDIzRURCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcVTauFNj/qGNGZAvm2NQiJyPeycfO/troJ Et6PxVDdypt2V5i/LplVbPpFzX9E0ZiS72sCYoVCt7gLpqh4dzpsmlix14R6fe3H azn0+6kmCGdwl5IL0OaDkPpJ5DFGyJD/9ihgcDyiGf1khy4IhoUDCHW6qvBs88d2 ceN0aaTaWVymiDGExuE9BY8Yn4Om5fR76gWV9F3XoUIcHNq46K65MDyRfTDRbt/Z 4Xox4Na2XEPVEng0ZdnfiNXUuX+vzOzT8tmWihV1J/liKPYCTwQpHY8U+7U/nHdS M9R6CKqW29SEDYoMs3dGo0Z4IQJ3WVElCB5geMenPOWcMwnIqz4= -----END CERTIFICATE-----Generated at Fri Jul 24 10:01:41 2026 by rpki-client