$ rpki-client -vvf rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft File: B9306D640F988742BB1CB2B19AB9D729636922A3.mft (raw, json) Hash identifier: ULjnJKUCpYqRDLEYxw2IG+JeGGBwGYUzy+RFClD4/wc= Subject key identifier: 26:5D:91:FD:31:5F:DB:74:FC:82:D6:E6:0F:71:B0:14:F3:DF:1B:DB Authority key identifier: B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3 Certificate issuer: /CN=B9306D640F988742BB1CB2B19AB9D729636922A3 Certificate serial: 7BE8B421388B89EEBA81D6A6600D79F6DF580A85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 18:07:11 +0000 Manifest this update: Thu 23 Jul 2026 18:02:11 +0000 Manifest next update: Fri 24 Jul 2026 20:20:11 +0000 Files and hashes: 1: B9306D640F988742BB1CB2B19AB9D729636922A3.crl (hash: cXFEPHC3GmiQsRcCAe/IEsV7KHBDIugoXI+QTBQhghM=) 2: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: axp2eq8WjJ3oyW6DrRyrSevP2DkGuYbEvHXLlB0V2P0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e8:b4:21:38:8b:89:ee:ba:81:d6:a6:60:0d:79:f6:df:58:0a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9306D640F988742BB1CB2B19AB9D729636922A3 Validity Not Before: Jul 23 18:02:11 2026 GMT Not After : Jul 24 20:20:11 2026 GMT Subject: CN=265D91FD315FDB74FC82D6E60F71B014F3DF1BDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:da:4a:ed:3a:79:46:fd:5f:b3:ff:a5:81:1c: dc:2e:01:1d:ff:b5:27:05:a3:59:39:7f:8c:cd:40: 69:9c:19:49:11:f5:5d:e1:68:8b:c2:d6:06:c3:f1: f2:68:13:61:88:77:03:68:a2:82:bd:14:aa:3e:4d: b9:60:69:ab:8e:b2:31:8b:cd:01:66:42:00:fa:6b: 3d:c7:63:bc:60:91:8b:0b:a9:f7:f2:d1:fc:52:a6: d9:87:a4:e6:f4:a3:02:e2:0c:67:a8:32:91:d9:91: 9e:a5:2a:ca:4b:01:ef:bb:b6:4b:8b:62:cf:6c:39: 3c:01:cb:ac:10:e5:1a:c4:79:c8:3f:bd:5f:db:e2: 4b:72:b5:4d:a6:8b:a5:b1:2a:72:7c:73:49:02:17: 57:1a:8c:4c:6e:8f:7e:e1:a7:8c:24:0c:bb:19:f3: 81:c1:46:2b:67:75:51:44:61:0c:9e:43:33:f4:dc: 84:34:cd:dc:15:50:70:9e:d5:62:fd:62:f9:53:bf: 07:69:b1:11:d7:9e:81:64:5a:6a:f9:9d:17:8d:65: 36:a3:0d:fc:dd:6a:7f:e1:87:17:e5:37:5d:29:9f: f7:6d:a2:20:17:9b:a2:67:a5:3b:21:5c:fc:e7:62: 7e:29:3f:d6:fd:7b:37:de:93:27:25:b9:55:61:c6: 20:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:5D:91:FD:31:5F:DB:74:FC:82:D6:E6:0F:71:B0:14:F3:DF:1B:DB X509v3 Authority Key Identifier: keyid:B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d3:f9:08:d0:5d:41:bd:c1:11:f3:23:eb:88:89:bd:e6:3e: 77:3b:3e:7b:6c:36:d6:e6:71:8d:5e:df:09:7e:8e:c7:b5:48: fa:bf:86:f5:0b:f2:95:64:e5:8b:4d:7c:0b:b0:ec:bf:c7:4e: 9a:d8:c3:86:4b:d9:71:fd:86:b5:c1:8b:2b:67:5e:6a:33:50: 5c:bb:c8:47:7d:b4:5d:55:06:1e:5f:42:c7:e0:b8:82:0f:84: 07:f7:02:22:e9:0e:d9:a6:ea:6d:51:e3:e3:9e:03:5a:68:eb: 98:98:a4:55:d7:db:39:af:7b:ce:4c:2a:2f:15:4b:5e:67:39: c6:00:b3:b0:a2:33:26:61:11:19:38:57:09:46:b4:22:fa:d3: 85:af:42:06:7c:9c:8c:ed:a2:ef:7c:e3:5f:2a:b2:41:11:e8: 0e:06:04:f0:4a:17:38:ea:e1:5a:ab:1f:ca:fa:79:b0:1d:2e: 99:e3:76:cc:1c:0a:77:37:3f:16:00:4d:a1:7a:6b:8e:c2:0a: 3d:dc:e7:57:46:66:4b:35:b0:d5:a5:8d:c7:5f:05:44:7f:ca: 84:a6:7b:6b:86:47:ec:7e:65:66:e1:59:4b:71:64:e3:82:3c: a1:fe:89:6a:5c:f3:eb:fd:fe:60:ec:e7:0b:01:9a:35:40:22: 43:c5:70:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe+i0ITiLie66gdamYA159t9YCoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkzMDZENjQwRjk4ODc0MkJCMUNCMkIxOUFCOUQ3Mjk2 MzY5MjJBMzAeFw0yNjA3MjMxODAyMTFaFw0yNjA3MjQyMDIwMTFaMDMxMTAvBgNV BAMTKDI2NUQ5MUZEMzE1RkRCNzRGQzgyRDZFNjBGNzFCMDE0RjNERjFCREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM2krtOnlG/V+z/6WBHNwuAR3/ tScFo1k5f4zNQGmcGUkR9V3haIvC1gbD8fJoE2GIdwNoooK9FKo+TblgaauOsjGL zQFmQgD6az3HY7xgkYsLqffy0fxSptmHpOb0owLiDGeoMpHZkZ6lKspLAe+7tkuL Ys9sOTwBy6wQ5RrEecg/vV/b4ktytU2mi6WxKnJ8c0kCF1cajExuj37hp4wkDLsZ 84HBRitndVFEYQyeQzP03IQ0zdwVUHCe1WL9YvlTvwdpsRHXnoFkWmr5nReNZTaj Dfzdan/hhxflN10pn/dtoiAXm6JnpTshXPznYn4pP9b9ezfekycluVVhxiA9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJl2R/TFf23T8gtbmD3GwFPPfG9swHwYDVR0j BBgwFoAUuTBtZA+Yh0K7HLKxmrnXKWNpIqMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNiMmVlNzQtOGMzYy00YmMzLWI2ZmItZjM1YjIwMGEyMGViLzAvQjkzMDZENjQw Rjk4ODc0MkJCMUNCMkIxOUFCOUQ3Mjk2MzY5MjJBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTMwNkQ2NDBGOTg4NzQyQkIxQ0IyQjE5QUI5RDcyOTYzNjky MkEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNiMmVlNzQtOGMzYy00YmMzLWI2 ZmItZjM1YjIwMGEyMGViLzAvQjkzMDZENjQwRjk4ODc0MkJCMUNCMkIxOUFCOUQ3 Mjk2MzY5MjJBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzT+QjQXUG9wRHzI+uIib3mPnc7PntsNtbm cY1e3wl+jse1SPq/hvUL8pVk5YtNfAuw7L/HTprYw4ZL2XH9hrXBiytnXmozUFy7 yEd9tF1VBh5fQsfguIIPhAf3AiLpDtmm6m1R4+OeA1po65iYpFXX2zmve85MKi8V S15nOcYAs7CiMyZhERk4VwlGtCL604WvQgZ8nIztou98418qskER6A4GBPBKFzjq 4VqrH8r6ebAdLpnjdswcCnc3PxYATaF6a47CCj3c51dGZks1sNWljcdfBUR/yoSm e2uGR+x+ZWbhWUtxZOOCPKH+iWpc8+v9/mDs5wsBmjVAIkPFcMo= -----END CERTIFICATE-----Generated at Fri Jul 24 09:47:25 2026 by rpki-client