$ rpki-client -vvf rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft File: 9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft (raw, json) Hash identifier: BJo/QbrPBBpPOEq5AmtiB+C70hMQuB4iNCjuTMhzID8= Subject key identifier: 98:D8:A5:60:A3:F0:35:7D:11:BF:42:98:19:AD:F4:26:D4:CB:10:97 Authority key identifier: 9C:47:04:20:4D:F8:9C:A1:B4:1C:1A:06:44:39:95:B3:CC:E3:86:CB Certificate issuer: /CN=9C4704204DF89CA1B41C1A06443995B3CCE386CB Certificate serial: 7FDB2202B21A26A574C93DF2BE9C349581EBCD6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 00:39:56 +0000 Manifest this update: Fri 24 Jul 2026 00:34:56 +0000 Manifest next update: Sat 25 Jul 2026 01:51:56 +0000 Files and hashes: 1: AS23693.roa (hash: MYMD6pbt4sKz7OvRtkhiGBT2mMS6OgawmPYOhNxznnw=) 2: 9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl (hash: fpUluOA82Mo8cujhOO08Sr3jBmX98AAKFKExl964OCc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:db:22:02:b2:1a:26:a5:74:c9:3d:f2:be:9c:34:95:81:eb:cd:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C4704204DF89CA1B41C1A06443995B3CCE386CB Validity Not Before: Jul 24 00:34:56 2026 GMT Not After : Jul 25 01:51:56 2026 GMT Subject: CN=98D8A560A3F0357D11BF429819ADF426D4CB1097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:11:65:04:50:0e:e6:07:a0:a5:ac:6d:70:a4: 23:cf:14:d9:78:a2:f5:e5:ae:4a:74:f7:a4:8e:dc: 8f:ec:91:27:83:7d:6c:4f:15:b7:54:7f:e4:b6:3f: 23:44:0c:3f:33:72:8c:a1:ae:d2:07:03:1f:af:ca: de:34:57:05:77:07:d3:e3:b0:ca:12:dd:01:8f:63: 6a:43:b9:a4:87:b4:90:7b:91:16:37:7a:42:21:93: 9f:98:15:5b:87:9c:49:bb:cd:f5:f4:eb:17:f2:d2: 9b:d5:f4:93:ac:3e:35:62:87:61:fd:97:f1:e1:83: 2e:58:ea:c6:89:df:3e:ae:eb:f5:2f:ce:91:aa:07: 2a:18:98:41:7f:74:69:60:a2:aa:ef:ab:ed:79:f5: 7d:1d:ce:3e:9c:06:c8:41:1c:18:d7:c1:98:38:18: 19:00:24:a2:f3:fe:17:7a:0a:c8:b7:73:0e:75:9f: aa:d2:79:1e:6e:08:70:ef:92:81:dd:3d:b6:32:01: 17:27:d8:4a:2c:32:e3:1b:d0:f7:e5:53:b8:ec:53: af:d5:1a:84:80:d5:5c:c2:4b:ec:59:00:50:73:47: 26:2b:f3:a9:eb:fd:2a:a8:08:a2:f7:e6:f0:70:fa: 73:07:16:37:c1:f9:fd:13:8e:21:12:06:d9:35:4d: b3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D8:A5:60:A3:F0:35:7D:11:BF:42:98:19:AD:F4:26:D4:CB:10:97 X509v3 Authority Key Identifier: keyid:9C:47:04:20:4D:F8:9C:A1:B4:1C:1A:06:44:39:95:B3:CC:E3:86:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:b4:0e:1e:22:82:d4:b0:1c:15:7d:66:fb:96:3c:52:14:e4: c9:d9:43:96:ec:a9:8e:1c:de:8d:8e:80:6d:1a:14:7c:98:82: e6:11:31:7c:df:ac:4b:77:55:9b:cb:eb:58:cc:08:79:9b:a4: ab:a5:01:04:12:b7:56:1c:64:d2:88:4f:7a:04:46:21:29:59: 89:84:44:b9:91:06:66:37:b8:7c:c7:5b:47:02:54:5e:b6:8d: b5:a6:fd:ab:7d:d9:96:a3:e9:b4:b2:da:11:bd:3c:9b:df:fa: 0e:7c:27:aa:9c:5a:33:4b:2a:1f:cd:9a:2f:b3:2d:e5:82:2f: 76:91:28:d2:bf:9d:f3:99:34:5e:39:ea:8e:b8:86:8a:57:99: 89:88:de:61:10:d5:5b:70:c3:40:12:59:2d:e8:ce:6a:2e:03: 8c:5a:a6:b0:a5:22:69:8d:c0:00:f9:14:90:5e:54:05:5b:a5: 99:df:ff:39:c5:20:df:dd:88:4e:7b:6f:f2:57:5b:78:a1:98: 96:d6:0c:c3:e4:fa:e6:53:f4:28:81:a1:05:a2:3e:e8:9e:53: 24:5d:0c:5d:2b:80:1e:00:f8:c3:35:a3:a2:34:20:a4:ab:bd: 1e:3f:67:42:0f:f6:d8:74:f2:a0:d3:6b:3b:90:7c:cc:5a:c7: ed:af:b7:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf9siArIaJqV0yT3yvpw0lYHrzW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM0NzA0MjA0REY4OUNBMUI0MUMxQTA2NDQzOTk1QjND Q0UzODZDQjAeFw0yNjA3MjQwMDM0NTZaFw0yNjA3MjUwMTUxNTZaMDMxMTAvBgNV BAMTKDk4RDhBNTYwQTNGMDM1N0QxMUJGNDI5ODE5QURGNDI2RDRDQjEwOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEEWUEUA7mB6ClrG1wpCPPFNl4 ovXlrkp096SO3I/skSeDfWxPFbdUf+S2PyNEDD8zcoyhrtIHAx+vyt40VwV3B9Pj sMoS3QGPY2pDuaSHtJB7kRY3ekIhk5+YFVuHnEm7zfX06xfy0pvV9JOsPjVih2H9 l/Hhgy5Y6saJ3z6u6/UvzpGqByoYmEF/dGlgoqrvq+159X0dzj6cBshBHBjXwZg4 GBkAJKLz/hd6Csi3cw51n6rSeR5uCHDvkoHdPbYyARcn2EosMuMb0PflU7jsU6/V GoSA1VzCS+xZAFBzRyYr86nr/SqoCKL35vBw+nMHFjfB+f0TjiESBtk1TbMfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmNilYKPwNX0Rv0KYGa30JtTLEJcwHwYDVR0j BBgwFoAUnEcEIE34nKG0HBoGRDmVs8zjhsswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzMyOGYyNGUtZGM3Zi00NTYyLWE1MWQtZTJlMzhjMzY3N2QxLzAvOUM0NzA0MjA0 REY4OUNBMUI0MUMxQTA2NDQzOTk1QjNDQ0UzODZDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QzQ3MDQyMDRERjg5Q0ExQjQxQzFBMDY0NDM5OTVCM0NDRTM4 NkNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvOUM0NzA0MjA0REY4OUNBMUI0MUMxQTA2NDQzOTk1 QjNDQ0UzODZDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACW0Dh4igtSwHBV9ZvuWPFIU5MnZQ5bsqY4c 3o2OgG0aFHyYguYRMXzfrEt3VZvL61jMCHmbpKulAQQSt1YcZNKIT3oERiEpWYmE RLmRBmY3uHzHW0cCVF62jbWm/at92Zaj6bSy2hG9PJvf+g58J6qcWjNLKh/Nmi+z LeWCL3aRKNK/nfOZNF456o64hopXmYmI3mEQ1Vtww0ASWS3ozmouA4xaprClImmN wAD5FJBeVAVbpZnf/znFIN/diE57b/JXW3ihmJbWDMPk+uZT9CiBoQWiPuieUyRd DF0rgB4A+MM1o6I0IKSrvR4/Z0IP9th08qDTazuQfMxax+2vtwM= -----END CERTIFICATE-----Generated at Fri Jul 24 11:45:06 2026 by rpki-client