$ rpki-client -vvf rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft File: 509D7A005D22B25F29771D4736A9F3273A87402B.mft (raw, json) Hash identifier: HRN/YIIDlIe1i/GqNEs7Dvawgl6IqEp1bFadab0xG1k= Subject key identifier: 90:C6:A3:E4:B1:DD:18:B5:67:DC:83:0A:25:51:A1:98:4D:CD:C3:F6 Authority key identifier: 50:9D:7A:00:5D:22:B2:5F:29:77:1D:47:36:A9:F3:27:3A:87:40:2B Certificate issuer: /CN=509D7A005D22B25F29771D4736A9F3273A87402B Certificate serial: 704B4D6DDE14EDF59ED01DA7B8712F94309D3039 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 15:39:00 +0000 Manifest this update: Thu 23 Jul 2026 15:34:00 +0000 Manifest next update: Fri 24 Jul 2026 17:43:00 +0000 Files and hashes: 1: 509D7A005D22B25F29771D4736A9F3273A87402B.crl (hash: v3Iao0cTZQHX5H/iTk+yeVXhyxLVU24N3i8oXQ5GGW4=) 2: 3130332e39372e352e302f32342d3234203d3e20313336313237.roa (hash: gia04ffSWp+0qNudeLLR7irdY7oXCN/dKfEZqry+RoQ=) 3: 3130332e39372e362e302f32342d3234203d3e20313336313237.roa (hash: RQSgO7tNppNvAC3aE8/fyIG2xxaOqC+3ztcNnXjPeng=) 4: 3130332e39372e342e302f32342d3234203d3e20313336313237.roa (hash: 3XT6Qf//u+3dqP7/6tKzMllxBOnpkDd6boyw9AssiHI=) 5: 323430313a383034303a3a2f33322d3332203d3e20313336313237.roa (hash: Dj85ZEdEHR8+WCo+8/1VIzd5RABBzm91ckkaaPaldnM=) 6: 3130332e39372e372e302f32342d3234203d3e20313336313237.roa (hash: u9MbGwZTtdpRxvA0JKGeSH6mVkoh1gSizjeQTtefh6M=) 7: 3130332e39372e342e302f32322d3234203d3e20313336313237.roa (hash: JKx5cXFJ9JwbuaKvmzbMBf7ucrHYe7PUJvHjTqORfvc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.crl rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:4b:4d:6d:de:14:ed:f5:9e:d0:1d:a7:b8:71:2f:94:30:9d:30:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509D7A005D22B25F29771D4736A9F3273A87402B Validity Not Before: Jul 23 15:34:00 2026 GMT Not After : Jul 24 17:43:00 2026 GMT Subject: CN=90C6A3E4B1DD18B567DC830A2551A1984DCDC3F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:95:b3:e2:e9:66:f6:94:10:02:af:34:c6:6f: 26:69:c6:04:c7:a9:f7:c7:88:3e:1f:23:0b:0d:90: 6b:3d:27:f7:78:ae:be:47:d1:cc:7a:91:2f:5e:fc: 40:26:7f:30:86:8b:5d:e6:68:5d:a3:14:9c:ce:7a: aa:1e:f7:a3:ce:ab:ff:b0:f1:db:a3:7b:2c:f0:26: 4f:c3:60:47:2f:01:d6:7b:6c:4c:dd:d2:86:2e:ec: 90:8c:67:38:75:d3:bc:aa:a3:df:28:f5:0f:bd:84: 32:4f:c2:43:8e:e4:74:fe:53:d5:07:14:65:78:21: 9b:34:3c:2a:ab:83:1a:e3:2c:43:d2:27:14:13:5a: 4f:4e:15:01:b0:e4:e7:e1:5b:24:c5:6f:c3:70:61: 47:15:c1:ee:cc:c9:79:c0:d4:d5:9c:0d:6b:f6:29: f4:1c:a6:bd:79:a3:53:0f:a9:d8:6d:62:35:1b:01: 31:57:e0:3f:79:c7:02:bd:1a:ee:f0:c2:e6:b7:04: 8f:34:9f:8e:4a:4a:92:3f:38:35:07:32:40:13:8b: 78:6a:b9:fa:3a:d1:70:88:ab:b0:bd:66:be:d0:d8: ab:78:86:2d:3a:0e:10:dd:74:fa:2b:18:33:2e:92: 2f:2b:cc:d0:45:43:c4:96:bf:66:3d:91:da:e8:90: dc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C6:A3:E4:B1:DD:18:B5:67:DC:83:0A:25:51:A1:98:4D:CD:C3:F6 X509v3 Authority Key Identifier: keyid:50:9D:7A:00:5D:22:B2:5F:29:77:1D:47:36:A9:F3:27:3A:87:40:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:bd:d1:a5:7b:be:aa:46:9e:c3:0b:78:2f:39:90:64:60:38: 4d:af:d4:28:b2:cb:5c:8c:d7:1f:b7:a6:f1:72:ef:4b:5b:d3: 61:97:0f:d1:d7:f7:5c:06:70:aa:64:9a:db:a3:cc:5a:3d:0a: 70:82:ee:d1:91:ce:6d:08:83:70:5c:aa:13:2b:2d:99:35:32: e0:21:81:7d:66:59:0a:36:61:25:7a:33:52:b1:74:0b:35:d7: 01:72:8e:62:31:66:36:49:41:40:e4:88:cd:5e:ba:38:a1:7f: 9b:03:89:14:9d:44:12:57:04:b2:4a:20:b7:22:a5:63:81:8b: 23:7d:4e:75:52:29:62:24:1c:23:b2:1e:79:fa:f3:7f:a3:ab: 47:85:5a:c2:c5:99:90:02:02:08:71:7e:42:39:46:2d:5e:5e: 38:65:14:db:26:d5:f8:1d:fe:e2:31:4d:3e:33:82:14:9e:31: d4:be:12:28:5a:00:89:30:43:48:e1:80:06:f9:93:91:70:63: c7:14:8e:38:53:a1:46:ca:47:3f:59:ca:d9:55:d8:0e:d0:4a: 81:b7:5b:e1:94:6c:2c:07:33:22:58:9d:38:d1:b1:f4:1b:b7: a0:bf:10:d2:26:a9:04:77:b3:25:33:49:37:19:c2:d3:63:d0: 09:29:4d:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcEtNbd4U7fWe0B2nuHEvlDCdMDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA5RDdBMDA1RDIyQjI1RjI5NzcxRDQ3MzZBOUYzMjcz QTg3NDAyQjAeFw0yNjA3MjMxNTM0MDBaFw0yNjA3MjQxNzQzMDBaMDMxMTAvBgNV BAMTKDkwQzZBM0U0QjFERDE4QjU2N0RDODMwQTI1NTFBMTk4NERDREMzRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnlbPi6Wb2lBACrzTGbyZpxgTH qffHiD4fIwsNkGs9J/d4rr5H0cx6kS9e/EAmfzCGi13maF2jFJzOeqoe96POq/+w 8dujeyzwJk/DYEcvAdZ7bEzd0oYu7JCMZzh107yqo98o9Q+9hDJPwkOO5HT+U9UH FGV4IZs0PCqrgxrjLEPSJxQTWk9OFQGw5OfhWyTFb8NwYUcVwe7MyXnA1NWcDWv2 KfQcpr15o1MPqdhtYjUbATFX4D95xwK9Gu7wwua3BI80n45KSpI/ODUHMkATi3hq ufo60XCIq7C9Zr7Q2Kt4hi06DhDddPorGDMuki8rzNBFQ8SWv2Y9kdrokNzhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkMaj5LHdGLVn3IMKJVGhmE3Nw/YwHwYDVR0j BBgwFoAUUJ16AF0isl8pdx1HNqnzJzqHQCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDRiMjczMDMtOWUzZC00ZDQyLWFmMjUtNmEwZjExODA4ZjI3LzAvNTA5RDdBMDA1 RDIyQjI1RjI5NzcxRDQ3MzZBOUYzMjczQTg3NDAyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MDlEN0EwMDVEMjJCMjVGMjk3NzFENDczNkE5RjMyNzNBODc0 MDJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDRiMjczMDMtOWUzZC00ZDQyLWFm MjUtNmEwZjExODA4ZjI3LzAvNTA5RDdBMDA1RDIyQjI1RjI5NzcxRDQ3MzZBOUYz MjczQTg3NDAyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+90aV7vqpGnsMLeC85kGRgOE2v1Ciyy1yM 1x+3pvFy70tb02GXD9HX91wGcKpkmtujzFo9CnCC7tGRzm0Ig3BcqhMrLZk1MuAh gX1mWQo2YSV6M1KxdAs11wFyjmIxZjZJQUDkiM1eujihf5sDiRSdRBJXBLJKILci pWOBiyN9TnVSKWIkHCOyHnn683+jq0eFWsLFmZACAghxfkI5Ri1eXjhlFNsm1fgd /uIxTT4zghSeMdS+EihaAIkwQ0jhgAb5k5FwY8cUjjhToUbKRz9ZytlV2A7QSoG3 W+GUbCwHMyJYnTjRsfQbt6C/ENImqQR3syUzSTcZwtNj0AkpTfo= -----END CERTIFICATE-----Generated at Fri Jul 24 06:44:55 2026 by rpki-client