$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft File: 9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft (raw, json) Hash identifier: 6ozl9o95AmMMAEPlhyI+G8icCncBXZQxKHVpCo8f73I= Subject key identifier: AA:06:F0:4F:D7:06:95:BD:67:A7:47:C5:54:5A:90:C6:C8:01:BE:77 Authority key identifier: 9B:AA:D5:D1:F3:6F:59:43:A3:5A:6E:E8:00:1A:5E:5F:C2:4D:9B:1E Certificate issuer: /CN=9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E Certificate serial: 438D84B6B962BA0B3F6956AAB39C65B662B3D09B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 03:03:02 +0000 Manifest this update: Fri 24 Jul 2026 02:58:02 +0000 Manifest next update: Sat 25 Jul 2026 06:45:02 +0000 Files and hashes: 1: 9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl (hash: 338upQFln6gUnhtGKdyNzKFkkoZzpF5ykJ45Hvt5D40=) 2: 33362e35302e39362e302f32342d3234203d3e20313532333536.roa (hash: WdJUD9VymB093sIE0zYyqec++4X5oG27MXfWK367p8g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8d:84:b6:b9:62:ba:0b:3f:69:56:aa:b3:9c:65:b6:62:b3:d0:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E Validity Not Before: Jul 24 02:58:02 2026 GMT Not After : Jul 25 06:45:02 2026 GMT Subject: CN=AA06F04FD70695BD67A747C5545A90C6C801BE77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:20:1a:46:c0:9f:20:27:c8:2e:3a:4d:6e:b5: 74:6b:13:ce:9b:eb:97:5d:14:1e:4b:07:86:7d:46: d8:22:d7:96:04:6e:ee:cb:2b:80:3c:07:33:b9:0e: af:8c:ce:4b:c4:2e:eb:70:5f:58:3e:ea:9f:67:10: bf:b3:bd:65:1c:48:f8:8a:97:b5:3b:80:13:2d:74: 4c:35:a2:42:9c:66:ad:c1:16:7c:e8:e1:43:fc:94: 4d:44:26:62:3e:cb:ba:06:63:32:07:0f:eb:35:6e: 52:65:7d:6a:91:8d:99:db:cb:89:d2:f9:0f:57:f4: a3:26:c9:00:17:9a:37:30:38:de:f2:29:21:86:65: 41:56:a3:a7:05:00:86:fc:88:83:b5:9b:8e:1a:51: 9e:ba:20:53:9b:62:a8:23:3f:97:b1:53:39:b8:1d: 64:b2:ea:c6:f3:4f:bc:17:5b:d9:eb:23:52:3c:80: 96:e0:60:66:32:a5:02:fc:43:0e:58:00:a3:e5:f5: 00:01:7d:71:61:5f:44:1e:47:ed:bd:10:d6:03:c8: 0a:9a:3f:fb:f6:56:77:82:6a:25:f7:d7:45:3e:a9: 1c:5c:38:38:94:5b:05:61:c0:b7:56:2d:df:26:ef: 0b:bd:9c:17:49:e1:de:9d:25:55:8d:60:b9:82:f7: ac:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:06:F0:4F:D7:06:95:BD:67:A7:47:C5:54:5A:90:C6:C8:01:BE:77 X509v3 Authority Key Identifier: keyid:9B:AA:D5:D1:F3:6F:59:43:A3:5A:6E:E8:00:1A:5E:5F:C2:4D:9B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:f7:a4:11:7c:b1:af:c4:a4:9d:0c:08:af:40:14:5f:b2:07: 67:18:72:68:13:37:d6:aa:39:e8:7f:bb:2d:f7:c4:43:57:6d: dc:fe:84:9a:f9:fd:7a:9f:75:ac:cd:3a:88:10:2e:6d:a5:ac: 7b:d7:f1:79:2f:8e:4d:98:af:44:bf:08:f7:98:eb:6f:32:1c: 0f:96:e4:84:91:55:ea:c6:eb:3e:6c:ea:a8:d4:bb:20:bb:c1: 1e:ec:e8:f7:11:dc:28:1c:54:56:a4:89:2b:00:31:bd:63:f8: d7:38:9e:d5:a9:da:f3:2f:1d:10:fe:3f:e9:aa:30:cf:88:61: e3:08:92:1d:9a:41:5b:c9:24:0e:b0:5a:34:2d:c7:ea:d2:9b: 17:f8:9a:06:a5:67:3b:b2:f0:56:ce:f0:91:35:8c:d0:ae:c4: e5:9c:f1:87:0d:76:96:02:44:f6:ab:77:11:eb:61:eb:53:42: 99:38:d9:2d:45:a4:c1:dd:53:f9:99:98:c4:ed:07:29:61:fe: d9:34:42:7f:85:93:b5:99:0c:db:74:3a:cc:04:ce:c2:d0:a9: 3e:7d:bc:a7:3b:6d:82:02:20:3a:05:26:61:fa:3b:04:76:13: 78:10:ee:df:de:84:20:6f:01:01:35:71:91:68:9f:56:50:44: fb:cc:9e:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ42Etrliugs/aVaqs5xltmKz0JswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJBQUQ1RDFGMzZGNTk0M0EzNUE2RUU4MDAxQTVFNUZD MjREOUIxRTAeFw0yNjA3MjQwMjU4MDJaFw0yNjA3MjUwNjQ1MDJaMDMxMTAvBgNV BAMTKEFBMDZGMDRGRDcwNjk1QkQ2N0E3NDdDNTU0NUE5MEM2QzgwMUJFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnIBpGwJ8gJ8guOk1utXRrE86b 65ddFB5LB4Z9Rtgi15YEbu7LK4A8BzO5Dq+MzkvELutwX1g+6p9nEL+zvWUcSPiK l7U7gBMtdEw1okKcZq3BFnzo4UP8lE1EJmI+y7oGYzIHD+s1blJlfWqRjZnby4nS +Q9X9KMmyQAXmjcwON7yKSGGZUFWo6cFAIb8iIO1m44aUZ66IFObYqgjP5exUzm4 HWSy6sbzT7wXW9nrI1I8gJbgYGYypQL8Qw5YAKPl9QABfXFhX0QeR+29ENYDyAqa P/v2VneCaiX310U+qRxcODiUWwVhwLdWLd8m7wu9nBdJ4d6dJVWNYLmC96w/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqgbwT9cGlb1np0fFVFqQxsgBvncwHwYDVR0j BBgwFoAUm6rV0fNvWUOjWm7oABpeX8JNmx4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ5MGQ4NmItMGIwZC00NTZmLTg0MWEtYmZkYjlkODA3ZmI3LzAvOUJBQUQ1RDFG MzZGNTk0M0EzNUE2RUU4MDAxQTVFNUZDMjREOUIxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkFBRDVEMUYzNkY1OTQzQTM1QTZFRTgwMDFBNUU1RkMyNEQ5 QjFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ5MGQ4NmItMGIwZC00NTZmLTg0 MWEtYmZkYjlkODA3ZmI3LzAvOUJBQUQ1RDFGMzZGNTk0M0EzNUE2RUU4MDAxQTVF NUZDMjREOUIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJn3pBF8sa/EpJ0MCK9AFF+yB2cYcmgTN9aq Oeh/uy33xENXbdz+hJr5/XqfdazNOogQLm2lrHvX8Xkvjk2Yr0S/CPeY628yHA+W 5ISRVerG6z5s6qjUuyC7wR7s6PcR3CgcVFakiSsAMb1j+Nc4ntWp2vMvHRD+P+mq MM+IYeMIkh2aQVvJJA6wWjQtx+rSmxf4mgalZzuy8FbO8JE1jNCuxOWc8YcNdpYC RPardxHrYetTQpk42S1FpMHdU/mZmMTtBylh/tk0Qn+Fk7WZDNt0OswEzsLQqT59 vKc7bYICIDoFJmH6OwR2E3gQ7t/ehCBvAQE1cZFon1ZQRPvMnv4= -----END CERTIFICATE-----Generated at Fri Jul 24 05:14:12 2026 by rpki-client