$ rpki-client -vvf rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft File: 9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft (raw, json) Hash identifier: EQLH9RPN0K6QJN2pHkg0AHXYKW6AgPbIMU8BulQslXM= Subject key identifier: BC:D7:05:F4:46:F3:88:FB:F6:87:B3:3A:02:73:7D:6E:BA:D2:36:41 Authority key identifier: 9B:61:7E:3E:89:75:C5:E8:37:FD:E8:E7:E3:A6:F7:F2:B0:7D:F2:FA Certificate issuer: /CN=9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA Certificate serial: 1F26B68B13E03FEDB0AFEB9F91E835D859FD2FE2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 03:18:17 +0000 Manifest this update: Fri 24 Jul 2026 03:13:17 +0000 Manifest next update: Sat 25 Jul 2026 06:32:17 +0000 Files and hashes: 1: 9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl (hash: dVrHhyi7Rt+gsfSH9c1EMUZJaCpiIoX7VHO9MG/Ufvc=) 2: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (hash: Y6VzFaG2FbyNdRwLMR4BvXhR1/TPWS0MIZ86oCceOfk=) 3: 3130332e34332e32352e302f32342d3234203d3e20313339343139.roa (hash: jbUXyMJGAUe8ArHS1H74yui1bmkFdiNku010i13gDLM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 06:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:26:b6:8b:13:e0:3f:ed:b0:af:eb:9f:91:e8:35:d8:59:fd:2f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA Validity Not Before: Jul 24 03:13:17 2026 GMT Not After : Jul 25 06:32:17 2026 GMT Subject: CN=BCD705F446F388FBF687B33A02737D6EBAD23641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a7:1a:cf:b5:01:2d:c9:b3:3b:e9:7b:42:ff: 6b:e9:b6:cb:98:81:d8:31:f8:9d:dc:0c:58:10:a3: df:94:91:b0:fa:09:43:67:ae:06:69:97:98:3f:fb: 90:fb:d3:c5:23:39:4b:7e:94:1e:22:10:94:a1:de: 7c:0a:ef:0b:8b:05:5f:24:95:c0:3b:f5:85:48:84: ff:40:dc:07:5d:84:92:16:84:97:88:b8:98:88:00: 5c:8e:3c:bc:1b:f2:0e:06:db:04:45:d7:d6:75:ea: 16:b6:20:61:5f:e2:36:43:58:ff:8f:a2:0e:b1:dc: db:6c:da:09:7d:60:ec:47:ad:ff:ab:39:30:74:cd: f1:98:72:79:3d:41:3d:77:45:12:70:be:ab:5c:fa: d0:04:4b:08:ce:14:93:a8:6b:1a:96:9a:95:a5:1e: 80:e3:ca:7a:71:73:d6:00:04:b9:84:17:e0:6b:92: 25:b2:3b:e9:e5:9d:50:11:b9:0d:eb:ad:3d:d1:e0: f4:12:2c:5f:5f:77:26:7a:af:4a:51:06:05:77:50: 9e:f9:03:14:ae:25:31:77:5a:c3:d8:5c:a1:df:f4: db:47:a3:86:27:70:46:93:d0:09:5b:24:fe:70:15: 79:f1:a4:f8:af:59:a6:70:a8:76:c5:bf:21:31:b6: fe:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D7:05:F4:46:F3:88:FB:F6:87:B3:3A:02:73:7D:6E:BA:D2:36:41 X509v3 Authority Key Identifier: keyid:9B:61:7E:3E:89:75:C5:E8:37:FD:E8:E7:E3:A6:F7:F2:B0:7D:F2:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:48:04:0a:8e:3c:6c:43:b5:93:37:b3:40:01:fd:9a:64:ec: ec:f1:dd:e2:18:b1:dc:6e:12:29:9c:5d:79:ad:eb:9b:6d:1d: 80:90:a8:3d:ee:b4:fc:c6:e5:33:f3:3b:72:aa:96:26:97:1c: e2:ca:26:9e:2b:e8:d4:b1:f4:64:13:9a:c0:39:c1:db:6a:e7: b3:9b:2a:62:07:01:5f:7d:7c:98:ca:83:2e:5a:82:e5:ea:24: af:fd:77:b3:6e:29:79:68:0c:cf:24:53:29:b7:dd:2d:9d:03: 85:bb:c7:23:97:1c:51:6d:d5:fe:5a:4e:8b:65:bb:63:d1:54: 8a:23:62:6b:db:26:ad:ae:32:3c:21:c2:52:6d:24:6c:93:a8: d8:12:10:71:b3:c3:06:ae:1c:44:44:53:31:7e:30:f4:90:03: 92:69:07:e2:3c:1e:df:ab:e9:e0:b0:72:1f:12:06:60:a3:6f: 3b:77:b5:24:ed:c0:88:a3:64:0c:ad:9c:e3:6e:4c:fe:7b:ee: bd:1a:2f:39:66:90:ca:2c:1f:74:58:14:2a:5a:3d:92:0f:ff: ff:0f:7a:91:e1:7f:1c:27:81:fa:ab:5f:6b:e7:f5:ff:d6:d3: 40:50:ca:45:b2:c7:33:6f:c7:5e:e9:d9:bb:17:51:56:32:64: 1a:4c:c2:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHya2ixPgP+2wr+ufkeg12Fn9L+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI2MTdFM0U4OTc1QzVFODM3RkRFOEU3RTNBNkY3RjJC MDdERjJGQTAeFw0yNjA3MjQwMzEzMTdaFw0yNjA3MjUwNjMyMTdaMDMxMTAvBgNV BAMTKEJDRDcwNUY0NDZGMzg4RkJGNjg3QjMzQTAyNzM3RDZFQkFEMjM2NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqpxrPtQEtybM76XtC/2vptsuY gdgx+J3cDFgQo9+UkbD6CUNnrgZpl5g/+5D708UjOUt+lB4iEJSh3nwK7wuLBV8k lcA79YVIhP9A3AddhJIWhJeIuJiIAFyOPLwb8g4G2wRF19Z16ha2IGFf4jZDWP+P og6x3Nts2gl9YOxHrf+rOTB0zfGYcnk9QT13RRJwvqtc+tAESwjOFJOoaxqWmpWl HoDjynpxc9YABLmEF+BrkiWyO+nlnVARuQ3rrT3R4PQSLF9fdyZ6r0pRBgV3UJ75 AxSuJTF3WsPYXKHf9NtHo4YncEaT0AlbJP5wFXnxpPivWaZwqHbFvyExtv5JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvNcF9EbziPv2h7M6AnN9brrSNkEwHwYDVR0j BBgwFoAUm2F+Pol1xeg3/ejn46b38rB98vowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDIwODNkNDQtNzgzNS00NDNkLTg1M2EtMGE3OWNmMDBlOTUwLzAvOUI2MTdFM0U4 OTc1QzVFODM3RkRFOEU3RTNBNkY3RjJCMDdERjJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QjYxN0UzRTg5NzVDNUU4MzdGREU4RTdFM0E2RjdGMkIwN0RG MkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDIwODNkNDQtNzgzNS00NDNkLTg1 M2EtMGE3OWNmMDBlOTUwLzAvOUI2MTdFM0U4OTc1QzVFODM3RkRFOEU3RTNBNkY3 RjJCMDdERjJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJIBAqOPGxDtZM3s0AB/Zpk7Ozx3eIYsdxu EimcXXmt65ttHYCQqD3utPzG5TPzO3KqliaXHOLKJp4r6NSx9GQTmsA5wdtq57Ob KmIHAV99fJjKgy5aguXqJK/9d7NuKXloDM8kUym33S2dA4W7xyOXHFFt1f5aTotl u2PRVIojYmvbJq2uMjwhwlJtJGyTqNgSEHGzwwauHEREUzF+MPSQA5JpB+I8Ht+r 6eCwch8SBmCjbzt3tSTtwIijZAytnONuTP577r0aLzlmkMosH3RYFCpaPZIP//8P epHhfxwngfqrX2vn9f/W00BQykWyxzNvx17p2bsXUVYyZBpMwrw= -----END CERTIFICATE-----Generated at Fri Jul 24 10:06:12 2026 by rpki-client