$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft File: B9281144646657214FE1ADE5A3228E100E340E53.mft (raw, json) Hash identifier: GS8g1LQ6r4QuWM7oQvaZ1xkId98ygeOKlaKMe5+gZIs= Subject key identifier: 2E:1F:28:A6:99:C8:65:B2:A9:24:20:4D:EB:63:FF:09:8C:D9:96:36 Authority key identifier: B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 Certificate issuer: /CN=B9281144646657214FE1ADE5A3228E100E340E53 Certificate serial: 621368861582F4DF1D81E8E4326DD483D023DBAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 14:32:43 +0000 Manifest this update: Thu 23 Jul 2026 14:27:43 +0000 Manifest next update: Fri 24 Jul 2026 16:55:43 +0000 Files and hashes: 1: 3130332e3138302e302e302f32342d3234203d3e2039333431.roa (hash: Ve4ocQOUOq8AQ9gpm5lYh6lO9aEe09tZrNXe/azearo=) 2: 3130332e3138302e302e302f32332d3233203d3e2039333431.roa (hash: GkX4NBYIJf8jri1lDVBbCRWCXCtYyohsWxcf1tLEKh4=) 3: B9281144646657214FE1ADE5A3228E100E340E53.crl (hash: dOKS7lTRkIRJVDglQSKYvvIRDlvqXUyUeoyNAXi4yWE=) 4: 3130332e3138302e312e302f32342d3234203d3e2039333431.roa (hash: Tgez0mY6SPOTnuCIKB3HlrvFNAAadTv4QI32lWtN/DI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:13:68:86:15:82:f4:df:1d:81:e8:e4:32:6d:d4:83:d0:23:db:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9281144646657214FE1ADE5A3228E100E340E53 Validity Not Before: Jul 23 14:27:43 2026 GMT Not After : Jul 24 16:55:43 2026 GMT Subject: CN=2E1F28A699C865B2A924204DEB63FF098CD99636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:22:19:97:4a:e2:c1:c5:b6:7d:fd:d0:e6:2a: 24:23:3a:96:09:4d:8d:a1:ea:c5:23:3c:7a:22:64: 94:41:70:46:ac:69:aa:62:54:bc:f7:af:50:72:ea: bd:82:e6:10:71:12:d9:06:14:0d:88:e3:97:54:08: db:c1:0d:63:b8:b1:99:15:55:6c:b9:ef:7f:53:60: 7d:99:64:8d:59:d3:96:dd:96:9b:a0:49:70:69:87: a0:74:a5:48:bd:fb:4f:47:33:c4:34:66:ee:ff:77: d6:9e:6a:f2:cd:80:c0:c7:b9:0c:eb:7b:86:46:20: 6d:50:3e:1a:04:d8:93:50:3b:67:5e:69:52:59:81: a2:4e:28:fe:b8:7a:2a:9d:8f:b5:6a:7c:91:e4:64: bf:59:f0:23:ce:70:92:67:ae:e7:a6:31:89:55:82: ce:58:8e:77:86:5b:4d:41:51:f2:b3:95:aa:7b:fe: 38:5c:45:21:b0:5e:2d:bd:d2:61:c8:ce:d9:be:ee: 0d:4d:d8:74:3b:b7:8b:db:7b:04:dc:6c:21:00:aa: f3:b6:70:1e:65:9f:1d:33:67:9f:7d:c3:a1:ee:a5: 45:7a:e7:c4:7c:ae:b3:eb:d0:46:40:16:af:a2:85: cb:70:30:75:c8:5f:c8:62:e5:6e:ff:99:07:eb:0f: e8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1F:28:A6:99:C8:65:B2:A9:24:20:4D:EB:63:FF:09:8C:D9:96:36 X509v3 Authority Key Identifier: keyid:B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:2a:af:44:3e:b6:3c:29:f4:94:fd:3a:93:25:93:c5:f1:31: a5:62:9a:a4:d0:9e:61:d0:bf:65:77:ca:10:af:59:ec:08:c7: 48:1d:7f:b4:62:6a:f5:fb:c7:f4:2c:ae:66:9f:23:27:e1:f8: d9:01:8f:c5:52:5b:43:3a:92:ee:49:e5:2b:cf:ec:f3:7f:78: 3a:67:cb:0f:3e:9d:94:b9:68:4f:6a:95:94:3e:b3:38:78:54: 00:b9:dc:c2:01:d9:59:db:de:77:da:63:77:a5:23:8f:10:d4: c3:19:2b:47:51:85:20:bb:a5:4d:e6:00:f0:32:1d:6c:a5:8e: bf:f2:75:44:a2:71:c6:c8:26:6c:d6:db:24:7f:d4:bd:00:ba: 01:d2:b8:28:c0:9a:5f:1e:d9:21:f8:5b:2a:64:6a:5a:21:ce: f7:81:c9:16:9b:0d:34:15:32:d4:6a:62:6b:9d:13:2f:e5:9c: 58:3e:13:5f:c4:97:90:4f:bf:c0:b9:9c:64:6f:fd:e5:ad:95: f6:6e:cd:cf:39:da:35:b9:6c:1e:f7:fd:e8:67:57:eb:4a:0c: ba:45:79:cd:ba:c1:bd:88:71:8c:4b:87:e3:c0:07:70:69:71: 6f:5a:9a:83:42:71:a8:ec:2c:c3:71:a4:b7:48:f9:14:ab:3b: 34:94:65:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYhNohhWC9N8dgejkMm3Ug9Aj264wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAw RTM0MEU1MzAeFw0yNjA3MjMxNDI3NDNaFw0yNjA3MjQxNjU1NDNaMDMxMTAvBgNV BAMTKDJFMUYyOEE2OTlDODY1QjJBOTI0MjA0REVCNjNGRjA5OENEOTk2MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXIhmXSuLBxbZ9/dDmKiQjOpYJ TY2h6sUjPHoiZJRBcEasaapiVLz3r1By6r2C5hBxEtkGFA2I45dUCNvBDWO4sZkV VWy5739TYH2ZZI1Z05bdlpugSXBph6B0pUi9+09HM8Q0Zu7/d9aeavLNgMDHuQzr e4ZGIG1QPhoE2JNQO2deaVJZgaJOKP64eiqdj7VqfJHkZL9Z8CPOcJJnruemMYlV gs5YjneGW01BUfKzlap7/jhcRSGwXi290mHIztm+7g1N2HQ7t4vbewTcbCEAqvO2 cB5lnx0zZ599w6HupUV658R8rrPr0EZAFq+ihctwMHXIX8hi5W7/mQfrD+hDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULh8oppnIZbKpJCBN62P/CYzZljYwHwYDVR0j BBgwFoAUuSgRRGRmVyFP4a3loyKOEA40DlMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E4YTlhODEtMGE1Mi00YTUwLWI3ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2 NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAwRTM0MEU1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTI4MTE0NDY0NjY1NzIxNEZFMUFERTVBMzIyOEUxMDBFMzQw RTUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E4YTlhODEtMGE1Mi00YTUwLWI3 ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhF MTAwRTM0MEU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAqr0Q+tjwp9JT9OpMlk8XxMaVimqTQnmHQ v2V3yhCvWewIx0gdf7RiavX7x/QsrmafIyfh+NkBj8VSW0M6ku5J5SvP7PN/eDpn yw8+nZS5aE9qlZQ+szh4VAC53MIB2Vnb3nfaY3elI48Q1MMZK0dRhSC7pU3mAPAy HWyljr/ydUSiccbIJmzW2yR/1L0AugHSuCjAml8e2SH4WypkalohzveByRabDTQV MtRqYmudEy/lnFg+E1/El5BPv8C5nGRv/eWtlfZuzc852jW5bB73/ehnV+tKDLpF ec26wb2IcYxLh+PAB3BpcW9amoNCcajsLMNxpLdI+RSrOzSUZc8= -----END CERTIFICATE-----Generated at Fri Jul 24 06:21:13 2026 by rpki-client