$ rpki-client -vvf rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft File: A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft (raw, json) Hash identifier: zoludzoW3AZyDKBh6os9aL7z7+jiba/G1ZcgmT7pWvk= Subject key identifier: EE:78:B7:92:F1:B9:10:33:CC:5A:09:6A:68:D1:92:21:9C:C6:13:B4 Authority key identifier: A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F Certificate issuer: /CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F Certificate serial: 48CDC1D085DBA1795A0691188A4F32DB3376B307 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 11:08:00 +0000 Manifest this update: Fri 24 Jul 2026 11:03:00 +0000 Manifest next update: Sat 25 Jul 2026 11:57:00 +0000 Files and hashes: 1: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: Il2995+O34HRt5QUYak7wmOSE/xt1UwsadzXH7aEOYo=) 2: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: mTSHlFZAxZWWAKZzsiMuSqeFq/VKg23JR+BpuxRfCT8=) 3: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: lknjz+xGrn74yDQTZoQhv/KjNKL2zVYWd4Swco59gWA=) 4: A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl (hash: lWLdgRlD2oBXHnbtYPFFhv78PmYB432Az1Eehii/5RE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 09:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:cd:c1:d0:85:db:a1:79:5a:06:91:18:8a:4f:32:db:33:76:b3:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F Validity Not Before: Jul 24 11:03:00 2026 GMT Not After : Jul 25 11:57:00 2026 GMT Subject: CN=EE78B792F1B91033CC5A096A68D192219CC613B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b0:eb:01:6e:c4:f5:7f:e5:ce:3c:6e:cd:2c: 1d:b5:69:6f:cf:3f:24:fc:ca:89:12:a5:2f:64:d9: e5:3f:2e:09:bc:b6:c0:a6:53:ca:2a:ea:94:b4:a4: d2:47:cc:0f:4c:b6:2b:bf:29:52:6c:0e:fd:f4:42: b5:68:66:58:02:a6:89:d0:d9:de:2e:a9:ed:3d:e4: 08:00:68:1b:5e:92:ba:75:68:64:06:23:a5:bf:04: 09:8f:17:e5:78:e5:72:f9:ac:3a:3e:fd:ca:4c:d6: ee:8e:68:32:2a:35:cb:c3:00:ee:ff:53:e5:a6:90: 2c:fc:5f:d9:19:42:b1:2f:68:a6:0c:05:ef:65:59: f4:10:80:f2:4d:97:25:d6:e5:c3:72:0a:be:37:70: 0f:f6:89:20:42:82:49:48:22:91:7a:aa:4c:c2:b2: 28:21:44:33:53:5c:4e:52:01:4c:dd:4f:de:34:38: 2b:a6:4a:0d:ed:e4:c6:97:ac:ae:83:26:dc:8d:68: a2:41:36:9b:df:20:36:1f:ff:ff:46:1e:d2:a3:a3: 3d:f5:d6:99:70:4d:0c:74:27:51:8e:fb:3d:92:c5: 6e:9c:02:ff:ca:0a:37:a9:db:e0:88:1d:1c:25:3a: aa:20:90:47:6c:b0:5a:44:ac:99:33:7e:81:ef:f9: df:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:78:B7:92:F1:B9:10:33:CC:5A:09:6A:68:D1:92:21:9C:C6:13:B4 X509v3 Authority Key Identifier: keyid:A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ef:0e:a5:19:06:a0:15:bf:e2:93:fc:2a:10:02:dc:ef:d9: b4:50:93:69:6c:24:40:73:4d:e2:de:03:30:a8:dd:f6:82:48: 90:89:8f:1c:9e:7b:6a:50:6a:71:86:51:ab:d2:01:62:be:82: 8f:b6:d2:b8:0d:e2:61:4b:3c:60:2e:55:34:13:2d:2e:15:a9: f0:09:18:af:69:3d:4c:6a:62:fa:24:f6:d0:4f:bd:32:f6:38: 22:15:ff:d8:99:63:47:60:b1:b6:7f:02:cb:da:ba:6c:9c:ed: e2:03:a0:c3:09:8e:68:0b:04:58:1a:26:4d:4a:9e:2c:b7:57: 87:a8:41:aa:6f:aa:1e:da:ee:16:b5:8e:a8:54:d2:68:1a:ba: 28:28:dd:80:b2:b3:49:53:14:6b:df:cd:93:4d:2e:43:92:f8: 37:8b:92:5b:d6:68:a0:68:c9:5d:71:02:34:ab:57:c1:15:f8: 11:80:0c:db:84:3b:6d:a3:81:45:84:48:a1:83:42:0a:ce:a4: 75:8a:67:8d:ba:a2:cc:3b:8f:70:aa:19:b2:aa:8a:68:ab:72: bd:25:45:de:46:fe:f2:3a:c2:24:31:73:df:e1:f5:99:01:7d: ab:4e:28:f9:21:eb:fa:be:bc:b5:38:49:1f:90:b4:24:2f:d7: 13:23:da:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSM3B0IXboXlaBpEYik8y2zN2swcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOEQyQzQ1RDgyMEMxRkM0MEJDRjAzQjlCMTA2OTk5 OTJEOEIyRjAeFw0yNjA3MjQxMTAzMDBaFw0yNjA3MjUxMTU3MDBaMDMxMTAvBgNV BAMTKEVFNzhCNzkyRjFCOTEwMzNDQzVBMDk2QTY4RDE5MjIxOUNDNjEzQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmsOsBbsT1f+XOPG7NLB21aW/P PyT8yokSpS9k2eU/Lgm8tsCmU8oq6pS0pNJHzA9Mtiu/KVJsDv30QrVoZlgCponQ 2d4uqe095AgAaBtekrp1aGQGI6W/BAmPF+V45XL5rDo+/cpM1u6OaDIqNcvDAO7/ U+WmkCz8X9kZQrEvaKYMBe9lWfQQgPJNlyXW5cNyCr43cA/2iSBCgklIIpF6qkzC sighRDNTXE5SAUzdT940OCumSg3t5MaXrK6DJtyNaKJBNpvfIDYf//9GHtKjoz31 1plwTQx0J1GO+z2SxW6cAv/KCjep2+CIHRwlOqogkEdssFpErJkzfoHv+d9xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7ni3kvG5EDPMWglqaNGSIZzGE7QwHwYDVR0j BBgwFoAUqejSxF2CDB/EC88DubEGmZktiy8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDgxZDU0Y2ItNTdhOS00YTE2LWE3MGUtYzVmNjAyNGUxMzlkLzAvQTlFOEQyQzQ1 RDgyMEMxRkM0MEJDRjAzQjlCMTA2OTk5OTJEOEIyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BOUU4RDJDNDVEODIwQzFGQzQwQkNGMDNCOUIxMDY5OTk5MkQ4 QjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQTlFOEQyQzQ1RDgyMEMxRkM0MEJDRjAzQjlCMTA2 OTk5OTJEOEIyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDvDqUZBqAVv+KT/CoQAtzv2bRQk2lsJEBz TeLeAzCo3faCSJCJjxyee2pQanGGUavSAWK+go+20rgN4mFLPGAuVTQTLS4VqfAJ GK9pPUxqYvok9tBPvTL2OCIV/9iZY0dgsbZ/Asvaumyc7eIDoMMJjmgLBFgaJk1K niy3V4eoQapvqh7a7ha1jqhU0mgauigo3YCys0lTFGvfzZNNLkOS+DeLklvWaKBo yV1xAjSrV8EV+BGADNuEO22jgUWESKGDQgrOpHWKZ426osw7j3CqGbKqimircr0l Rd5G/vI6wiQxc9/h9ZkBfatOKPkh6/q+vLU4SR+QtCQv1xMj2oU= -----END CERTIFICATE-----Generated at Fri Jul 24 17:27:08 2026 by rpki-client