$ rpki-client -vvf rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft File: 9290697B92D08AFAAFB01253090BE0FE28871EA9.mft (raw, json) Hash identifier: /njaw4g7xjhOps99Wv/7fU/zcy837tndblvhYO5e9fI= Subject key identifier: 60:F8:3C:A0:C2:8F:4E:DC:9C:76:75:AD:96:5F:21:15:F7:A0:F9:DB Authority key identifier: 92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9 Certificate issuer: /CN=9290697B92D08AFAAFB01253090BE0FE28871EA9 Certificate serial: 77A8DA2B5363F632BEABA413F8EE34EF268B8560 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 01:56:39 +0000 Manifest this update: Fri 24 Jul 2026 01:51:39 +0000 Manifest next update: Sat 25 Jul 2026 03:43:39 +0000 Files and hashes: 1: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: WJxpeyz7OfQNEVK9NO1sVdlmaQoTrq8jALq72l9BXpw=) 2: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: hRuNQymA0Kqk7Awfu8/hFwiPFpevo38okveHDPwRfwI=) 3: 9290697B92D08AFAAFB01253090BE0FE28871EA9.crl (hash: 5wiX41/qrkwEnkDLKUQMWqPUAOrndF2KoJ66ijDjj5s=) 4: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: ld7ZAKTrz/u5LDPP3+3DpOULg7oKh+lQm5wahDEcTNc=) 5: 323030313a6466373a376438303a3a2f34382d3438203d3e20313431393039.roa (hash: tw5oikVlx6lbDw0PXuWWK4JNZ7QDnCFmUnX8Ug8gws8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.crl rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a8:da:2b:53:63:f6:32:be:ab:a4:13:f8:ee:34:ef:26:8b:85:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9290697B92D08AFAAFB01253090BE0FE28871EA9 Validity Not Before: Jul 24 01:51:39 2026 GMT Not After : Jul 25 03:43:39 2026 GMT Subject: CN=60F83CA0C28F4EDC9C7675AD965F2115F7A0F9DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:09:c1:02:8d:65:88:43:30:f8:38:52:6e:c4: 87:66:44:08:55:04:76:18:bb:db:bc:68:73:c2:31: e5:ac:1c:9e:fb:6f:7a:bb:a8:22:9b:90:d2:0a:6c: d6:2d:00:b4:21:ad:7f:d1:19:b2:f9:80:24:75:be: bc:96:8e:7c:82:43:8c:60:8f:f2:76:4b:61:54:f2: c6:df:8d:34:0c:26:a6:db:d6:3b:3d:d1:0f:f7:01: 5d:96:d2:2f:fc:4a:d8:ad:a1:34:66:8b:5e:ce:dd: 03:e7:ed:d9:1a:42:92:b2:b3:5f:8f:2e:e3:26:a1: e0:89:40:d9:04:7c:26:f8:ee:bf:7e:95:c9:21:21: 16:2a:29:ca:fc:23:ff:7a:f6:73:7c:81:d4:5b:95: a6:9b:7d:86:e0:9d:ac:24:6e:8f:21:ad:62:89:b1: 56:07:8e:07:9d:40:8b:4a:07:ef:a3:bd:ee:f9:99: 5e:5a:75:41:ba:b2:f0:0b:b6:47:aa:43:bb:9a:9a: fc:bb:84:11:77:d9:00:e2:f5:3a:00:72:ca:fb:2c: 14:82:81:ec:b3:83:62:d8:63:d1:f9:79:7e:8f:d6: c7:18:47:9f:7e:8c:f1:0e:63:3c:bc:73:ac:72:55: 38:fe:1c:ac:db:6e:a6:22:8c:01:a2:a3:e9:b5:5a: 0d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F8:3C:A0:C2:8F:4E:DC:9C:76:75:AD:96:5F:21:15:F7:A0:F9:DB X509v3 Authority Key Identifier: keyid:92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a0:2d:fa:25:5d:73:e5:1c:b0:75:73:c8:a4:18:ff:5a:c8: b7:02:77:ed:cb:a5:b3:81:d3:ea:29:41:f1:42:55:84:dc:a7: 2a:d2:0e:9f:e2:b9:5c:51:3d:9a:d3:bc:8a:63:13:3e:35:af: c2:36:84:fe:4f:6b:24:7a:32:e1:6d:61:2e:3b:ae:f5:48:de: fb:98:90:68:74:50:4b:3e:f3:49:25:e8:93:a3:f5:9d:af:37: c3:bf:6b:a8:92:4e:07:66:a5:6f:d9:e4:cf:23:99:5a:fa:a6: 07:b9:b6:4d:80:e9:69:af:b4:8d:c9:2a:40:d6:c2:65:7f:c8: a3:1a:bf:4e:8a:44:ba:c6:cf:58:9a:9d:32:34:f6:6e:03:ca: cb:71:ab:f0:9a:63:fd:2e:c5:bf:cf:b5:5e:5e:57:be:e1:37: e2:c6:be:84:5a:8d:d3:83:7a:ab:b5:a7:1d:7e:71:e4:bb:04: 51:93:7f:04:48:c0:fd:cb:24:32:3f:fb:c5:8f:16:71:0f:ef: 3c:83:51:f7:2e:37:c4:a5:55:be:bb:77:b9:81:8c:ab:b4:b7: bb:5f:41:8d:41:26:39:47:0e:e2:0a:b9:ca:95:a4:4f:e6:34: 8a:43:02:38:8e:c1:6f:0e:bd:50:b1:3f:5b:b5:e4:77:28:b3: 65:4f:78:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd6jaK1Nj9jK+q6QT+O407yaLhWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI5MDY5N0I5MkQwOEFGQUFGQjAxMjUzMDkwQkUwRkUy ODg3MUVBOTAeFw0yNjA3MjQwMTUxMzlaFw0yNjA3MjUwMzQzMzlaMDMxMTAvBgNV BAMTKDYwRjgzQ0EwQzI4RjRFREM5Qzc2NzVBRDk2NUYyMTE1RjdBMEY5REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxCcECjWWIQzD4OFJuxIdmRAhV BHYYu9u8aHPCMeWsHJ77b3q7qCKbkNIKbNYtALQhrX/RGbL5gCR1vryWjnyCQ4xg j/J2S2FU8sbfjTQMJqbb1js90Q/3AV2W0i/8StitoTRmi17O3QPn7dkaQpKys1+P LuMmoeCJQNkEfCb47r9+lckhIRYqKcr8I/969nN8gdRblaabfYbgnawkbo8hrWKJ sVYHjgedQItKB++jve75mV5adUG6svALtkeqQ7uamvy7hBF32QDi9ToAcsr7LBSC geyzg2LYY9H5eX6P1scYR59+jPEOYzy8c6xyVTj+HKzbbqYijAGio+m1Wg3jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYPg8oMKPTtycdnWtll8hFfeg+dswHwYDVR0j BBgwFoAUkpBpe5LQivqvsBJTCQvg/iiHHqkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAxYzRkNjEtZGNlZi00YTIwLWJkNGMtYTI4MmEzN2FhNjllLzAvOTI5MDY5N0I5 MkQwOEFGQUFGQjAxMjUzMDkwQkUwRkUyODg3MUVBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjkwNjk3QjkyRDA4QUZBQUZCMDEyNTMwOTBCRTBGRTI4ODcx RUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAxYzRkNjEtZGNlZi00YTIwLWJk NGMtYTI4MmEzN2FhNjllLzAvOTI5MDY5N0I5MkQwOEFGQUFGQjAxMjUzMDkwQkUw RkUyODg3MUVBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOgLfolXXPlHLB1c8ikGP9ayLcCd+3LpbOB 0+opQfFCVYTcpyrSDp/iuVxRPZrTvIpjEz41r8I2hP5PayR6MuFtYS47rvVI3vuY kGh0UEs+80kl6JOj9Z2vN8O/a6iSTgdmpW/Z5M8jmVr6pge5tk2A6WmvtI3JKkDW wmV/yKMav06KRLrGz1ianTI09m4Dystxq/CaY/0uxb/PtV5eV77hN+LGvoRajdOD equ1px1+ceS7BFGTfwRIwP3LJDI/+8WPFnEP7zyDUfcuN8SlVb67d7mBjKu0t7tf QY1BJjlHDuIKucqVpE/mNIpDAjiOwW8OvVCxP1u15Hcos2VPeCY= -----END CERTIFICATE-----Generated at Fri Jul 24 13:34:03 2026 by rpki-client