$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft File: 9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft (raw, json) Hash identifier: 0KiBez0EU+3TCKqvlK6SUO7PGaKgZB6qLHN9QFZb4EM= Subject key identifier: DC:C8:F4:02:E2:90:01:E2:7B:93:6B:1A:19:E7:50:16:D4:16:F6:C7 Authority key identifier: 9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF Certificate issuer: /CN=9B995ECA9CF77E66AB04370A6C3562ADCD7413EF Certificate serial: 45776CD1FE3B15A2CBC36BB5B8ACB7E835083BC5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 16:40:20 +0000 Manifest this update: Thu 23 Jul 2026 16:35:20 +0000 Manifest next update: Fri 24 Jul 2026 18:31:20 +0000 Files and hashes: 1: 3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa (hash: 0GXiVqHET4FIeA3plxHWjQU7xk7vNPKZIk6ziqpvvGY=) 2: 3130332e3133302e38332e302f32342d3234203d3e20313530393636.roa (hash: +yASWV2qPXNVH0dMs+ql82F9yTnpzpBrn8UO30QUNqI=) 3: 3130332e3133302e38322e302f32332d3233203d3e20313530393636.roa (hash: oYvVYAWqY5/XajF618G7pKQtRtEqOMlHPhGTTZeide8=) 4: 9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl (hash: VDXMN36yFNgRiwp4v9g2hf5LM9gRjHjEJwEdrqgKJWU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:77:6c:d1:fe:3b:15:a2:cb:c3:6b:b5:b8:ac:b7:e8:35:08:3b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B995ECA9CF77E66AB04370A6C3562ADCD7413EF Validity Not Before: Jul 23 16:35:20 2026 GMT Not After : Jul 24 18:31:20 2026 GMT Subject: CN=DCC8F402E29001E27B936B1A19E75016D416F6C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fd:db:fe:96:7f:aa:98:c6:ac:98:06:b8:c8: 2e:e2:08:79:e0:ff:0b:fa:bd:aa:95:08:d0:fd:36: 55:b4:a9:1f:21:1d:11:04:08:0f:4a:90:16:81:6f: 67:c2:96:2a:a3:a2:6a:f9:e1:99:71:e6:e5:45:3e: 0e:1e:a0:bf:b7:fd:96:16:16:db:53:71:5e:82:88: a8:7f:38:4f:e4:82:8e:5d:02:7f:f8:1d:c6:43:d8: 0a:c1:22:55:07:48:e7:c5:c0:e3:08:cf:11:92:0b: ed:49:b6:8e:94:93:47:46:5f:5d:96:a9:85:8a:41: 5d:da:37:84:5f:59:57:9c:89:7d:33:47:b8:4c:3e: 84:9d:4f:23:bd:8a:b4:0a:1c:a1:55:d2:22:7c:65: fa:64:da:90:3c:36:1e:74:de:64:a9:dc:f5:58:8a: ae:74:32:47:c1:11:dc:6d:bb:e7:8c:93:ce:2b:ab: 60:46:71:a0:be:df:21:b2:66:4e:c2:35:4c:2a:a3: 7a:ce:f5:b5:aa:38:ad:ab:ee:0c:45:d3:52:8c:22: 0d:0d:86:98:e8:29:ab:00:f7:6a:82:78:a4:54:19: 4b:a1:dd:32:bb:68:6e:ea:3f:69:88:2e:b9:12:8c: 0d:bf:ef:b9:70:b9:33:d6:ee:14:72:9e:20:76:a6: 56:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C8:F4:02:E2:90:01:E2:7B:93:6B:1A:19:E7:50:16:D4:16:F6:C7 X509v3 Authority Key Identifier: keyid:9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:4c:c0:35:b7:f1:69:53:d9:5b:fd:30:63:1a:4a:42:5d:f6: df:3f:27:40:2b:e9:f4:a7:04:87:1b:ce:14:a1:43:7e:bf:19: 4e:4c:3f:90:4b:b5:72:ce:29:8b:fd:ab:85:d4:ee:12:1f:97: 9d:f1:56:80:6f:8a:82:ca:16:a3:09:be:76:8b:e0:ef:fc:24: 31:16:0b:0c:f9:4d:e3:8b:9a:3c:28:fa:5c:95:e9:b0:0c:c9: cf:92:6a:89:1d:c8:f2:88:03:c0:e7:9a:8e:9e:ef:b0:c4:fb: a5:b4:0e:73:97:50:57:aa:2f:76:61:ec:30:b6:f8:c4:63:97: a1:a8:aa:f2:e7:ea:01:69:d5:94:17:3e:80:a1:82:0e:2e:56: 9f:36:54:02:37:00:35:56:16:9c:dd:4d:b7:15:36:ad:5c:4d: ab:ff:36:c9:ef:67:c8:11:af:91:07:b2:09:c2:4b:c0:63:93: 7e:b4:22:c8:1b:d5:14:66:1c:78:83:d4:46:c2:30:83:33:51: 96:b8:6a:f0:09:23:21:19:c5:91:f3:0a:0a:ca:3f:93:c3:b2: 57:de:ee:cf:9e:f5:81:a9:e1:27:42:b4:14:99:0f:79:f5:eb: 29:30:49:51:b0:a2:8b:a7:47:0a:c7:50:5a:53:c0:d6:26:f3: e4:88:97:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURXds0f47FaLLw2u1uKy36DUIO8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI5OTVFQ0E5Q0Y3N0U2NkFCMDQzNzBBNkMzNTYyQURD RDc0MTNFRjAeFw0yNjA3MjMxNjM1MjBaFw0yNjA3MjQxODMxMjBaMDMxMTAvBgNV BAMTKERDQzhGNDAyRTI5MDAxRTI3QjkzNkIxQTE5RTc1MDE2RDQxNkY2QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd/dv+ln+qmMasmAa4yC7iCHng /wv6vaqVCND9NlW0qR8hHREECA9KkBaBb2fCliqjomr54Zlx5uVFPg4eoL+3/ZYW FttTcV6CiKh/OE/kgo5dAn/4HcZD2ArBIlUHSOfFwOMIzxGSC+1Jto6Uk0dGX12W qYWKQV3aN4RfWVeciX0zR7hMPoSdTyO9irQKHKFV0iJ8Zfpk2pA8Nh503mSp3PVY iq50MkfBEdxtu+eMk84rq2BGcaC+3yGyZk7CNUwqo3rO9bWqOK2r7gxF01KMIg0N hpjoKasA92qCeKRUGUuh3TK7aG7qP2mILrkSjA2/77lwuTPW7hRyniB2plaLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Mj0AuKQAeJ7k2saGedQFtQW9scwHwYDVR0j BBgwFoAUm5leypz3fmarBDcKbDVirc10E+8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE4NzA2NGItNWYyNy00MjcwLTkwZTQtOTlmNDNhZTg0ZGI3LzAvOUI5OTVFQ0E5 Q0Y3N0U2NkFCMDQzNzBBNkMzNTYyQURDRDc0MTNFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85Qjk5NUVDQTlDRjc3RTY2QUIwNDM3MEE2QzM1NjJBRENENzQx M0VGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE4NzA2NGItNWYyNy00MjcwLTkw ZTQtOTlmNDNhZTg0ZGI3LzAvOUI5OTVFQ0E5Q0Y3N0U2NkFCMDQzNzBBNkMzNTYy QURDRDc0MTNFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdMwDW38WlT2Vv9MGMaSkJd9t8/J0Ar6fSn BIcbzhShQ36/GU5MP5BLtXLOKYv9q4XU7hIfl53xVoBvioLKFqMJvnaL4O/8JDEW Cwz5TeOLmjwo+lyV6bAMyc+SaokdyPKIA8Dnmo6e77DE+6W0DnOXUFeqL3Zh7DC2 +MRjl6GoqvLn6gFp1ZQXPoChgg4uVp82VAI3ADVWFpzdTbcVNq1cTav/NsnvZ8gR r5EHsgnCS8Bjk360Isgb1RRmHHiD1EbCMIMzUZa4avAJIyEZxZHzCgrKP5PDslfe 7s+e9YGp4SdCtBSZD3n16ykwSVGwoounRwrHUFpTwNYm8+SIlwk= -----END CERTIFICATE-----Generated at Fri Jul 24 06:30:15 2026 by rpki-client