$ rpki-client -vvf rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft File: 9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft (raw, json) Hash identifier: tpTa4HMLNnlX6JipZVozUIh+kUlGgbyXXq+VjOBKIw0= Subject key identifier: C5:D4:D6:BE:AF:15:DD:3C:AC:5A:5F:39:3C:AA:39:92:ED:9E:B4:46 Authority key identifier: 9D:8E:FC:0D:64:AA:98:41:BE:1E:38:43:21:BB:2C:12:15:3F:F1:D9 Certificate issuer: /CN=9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9 Certificate serial: 6C17D7E4BCA4465A14D2A2EC3D299F13F074FE31 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 11:59:45 +0000 Manifest this update: Thu 23 Jul 2026 11:54:45 +0000 Manifest next update: Fri 24 Jul 2026 13:31:45 +0000 Files and hashes: 1: 3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa (hash: 1YCliMmBjyp95uqeBYgoOHcVWy+xU/Vfr+PcnyYk678=) 2: 9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl (hash: E17w8b1N1TlIFKLovH9+o6eQT+Td8Q4fwConpLnq41A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:17:d7:e4:bc:a4:46:5a:14:d2:a2:ec:3d:29:9f:13:f0:74:fe:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9 Validity Not Before: Jul 23 11:54:45 2026 GMT Not After : Jul 24 13:31:45 2026 GMT Subject: CN=C5D4D6BEAF15DD3CAC5A5F393CAA3992ED9EB446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:93:57:01:a1:4f:69:d2:f4:99:6a:86:5e:b1: 14:c5:b5:06:85:99:21:70:98:56:7c:78:e2:45:f7: 0a:99:8b:c2:5a:6c:62:f4:0b:ea:d1:d9:34:f5:0f: 74:07:26:65:29:85:ac:8f:f8:ec:33:fa:8c:be:20: 00:e7:23:08:5f:d5:04:a1:8d:51:df:c9:fe:18:ea: 80:f5:50:48:ad:35:46:0f:63:de:01:56:db:cc:54: a4:13:65:36:41:50:ac:99:8b:2c:57:04:db:38:c7: 8a:9e:ff:6f:28:b5:88:36:a5:61:e1:42:53:ad:c8: 62:76:7f:4f:cd:26:27:1a:d4:b8:eb:32:f1:2b:c4: 45:ef:42:c2:f7:e9:d4:9a:cf:66:33:c9:45:6e:17: 0d:ee:aa:b0:72:9e:19:dd:41:08:00:de:56:55:6f: 39:95:ab:05:aa:5d:23:ea:aa:d2:33:ee:fe:05:b9: 23:b7:7e:95:f1:5d:29:9d:f7:92:10:9a:77:6b:b7: 31:a5:87:9a:a6:69:4b:bb:7e:26:74:69:60:21:ce: fd:18:10:86:30:36:7c:fd:00:eb:2a:3b:b9:4d:63: 47:98:06:d3:38:38:39:50:06:d1:be:66:29:b7:d2: f4:b2:59:13:74:b9:60:39:ab:0b:27:66:c1:9e:0d: ca:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D4:D6:BE:AF:15:DD:3C:AC:5A:5F:39:3C:AA:39:92:ED:9E:B4:46 X509v3 Authority Key Identifier: keyid:9D:8E:FC:0D:64:AA:98:41:BE:1E:38:43:21:BB:2C:12:15:3F:F1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c2:27:42:f6:b3:ad:b4:32:ba:ea:8f:bd:53:91:aa:5b:c1: 0a:c1:c7:c6:11:ae:66:75:5b:92:66:48:6c:fc:91:0f:76:69: c4:60:d4:9d:0a:e3:4e:e5:f4:3b:42:af:42:0c:75:50:da:ea: 68:8f:10:0b:36:da:db:51:ac:e9:df:b2:8e:53:76:57:66:f6: 32:ed:90:88:7c:a3:0a:d6:17:19:f3:2f:4d:2e:23:1e:0d:d4: 0b:f4:cd:7c:7a:d8:30:bd:81:08:d1:9a:fd:bc:4e:90:26:b2: ac:5a:ea:4d:2a:fb:d3:09:e2:40:56:1a:f3:18:3b:14:37:f7: 25:fe:50:7a:4e:4b:32:d2:cf:52:ab:e5:1a:e5:34:24:01:88: 3d:fa:d7:41:47:ae:94:7a:56:a3:95:50:0f:e3:25:df:35:13: 0e:d3:80:88:f9:03:76:5d:72:a9:76:b8:1f:b4:f0:02:b6:5c: a5:61:bd:3a:47:f1:f0:8c:69:03:f0:e2:09:60:aa:fe:b2:56: c2:ac:77:3d:b9:02:4e:74:0c:00:9d:6c:7a:44:5a:f0:77:0f: 3f:b0:5e:e4:07:67:c2:11:66:ca:af:c3:e8:b0:98:4f:53:a7: c5:e6:cd:51:79:91:9f:35:21:2d:62:db:6a:50:e5:67:57:64: b7:20:68:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbBfX5LykRloU0qLsPSmfE/B0/jEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ4RUZDMEQ2NEFBOTg0MUJFMUUzODQzMjFCQjJDMTIx NTNGRjFEOTAeFw0yNjA3MjMxMTU0NDVaFw0yNjA3MjQxMzMxNDVaMDMxMTAvBgNV BAMTKEM1RDRENkJFQUYxNUREM0NBQzVBNUYzOTNDQUEzOTkyRUQ5RUI0NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEk1cBoU9p0vSZaoZesRTFtQaF mSFwmFZ8eOJF9wqZi8JabGL0C+rR2TT1D3QHJmUphayP+Owz+oy+IADnIwhf1QSh jVHfyf4Y6oD1UEitNUYPY94BVtvMVKQTZTZBUKyZiyxXBNs4x4qe/28otYg2pWHh QlOtyGJ2f0/NJica1LjrMvErxEXvQsL36dSaz2YzyUVuFw3uqrBynhndQQgA3lZV bzmVqwWqXSPqqtIz7v4FuSO3fpXxXSmd95IQmndrtzGlh5qmaUu7fiZ0aWAhzv0Y EIYwNnz9AOsqO7lNY0eYBtM4ODlQBtG+Zim30vSyWRN0uWA5qwsnZsGeDcrVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxdTWvq8V3TysWl85PKo5ku2etEYwHwYDVR0j BBgwFoAUnY78DWSqmEG+HjhDIbssEhU/8dkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDFkNTFkNDEtYjZjYy00MjBhLWI1YTgtNjdjOGJkNmIwMmFmLzAvOUQ4RUZDMEQ2 NEFBOTg0MUJFMUUzODQzMjFCQjJDMTIxNTNGRjFEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDhFRkMwRDY0QUE5ODQxQkUxRTM4NDMyMUJCMkMxMjE1M0ZG MUQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDFkNTFkNDEtYjZjYy00MjBhLWI1 YTgtNjdjOGJkNmIwMmFmLzAvOUQ4RUZDMEQ2NEFBOTg0MUJFMUUzODQzMjFCQjJD MTIxNTNGRjFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/CJ0L2s620Mrrqj71TkapbwQrBx8YRrmZ1 W5JmSGz8kQ92acRg1J0K407l9DtCr0IMdVDa6miPEAs22ttRrOnfso5Tdldm9jLt kIh8owrWFxnzL00uIx4N1Av0zXx62DC9gQjRmv28TpAmsqxa6k0q+9MJ4kBWGvMY OxQ39yX+UHpOSzLSz1Kr5RrlNCQBiD3610FHrpR6VqOVUA/jJd81Ew7TgIj5A3Zd cql2uB+08AK2XKVhvTpH8fCMaQPw4glgqv6yVsKsdz25Ak50DACdbHpEWvB3Dz+w XuQHZ8IRZsqvw+iwmE9Tp8XmzVF5kZ81IS1i22pQ5WdXZLcgaD0= -----END CERTIFICATE-----Generated at Fri Jul 24 05:54:57 2026 by rpki-client