$ rpki-client -vvf rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft File: 9E6973F078195021DC7E37753A16BDC3BD2CE345.mft (raw, json) Hash identifier: PfEjIR+rYDND5XPFRFZwOl61PUceg9SFK7T+8iCf6ko= Subject key identifier: 94:24:7C:F1:63:B3:0E:F8:BC:93:EF:B5:F6:9A:CC:91:72:A0:FC:DF Authority key identifier: 9E:69:73:F0:78:19:50:21:DC:7E:37:75:3A:16:BD:C3:BD:2C:E3:45 Certificate issuer: /CN=9E6973F078195021DC7E37753A16BDC3BD2CE345 Certificate serial: 3A7397B032338B14FC2F000A85BEEAD7238E8314 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 20:55:37 +0000 Manifest this update: Thu 23 Jul 2026 20:50:37 +0000 Manifest next update: Fri 24 Jul 2026 22:52:37 +0000 Files and hashes: 1: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: 70nvBnU+j3RyzkTv1EtBoPc4XFT8NOWYE+TEopumrFA=) 2: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: rDhWNdSE+MiC9nWV9xic84xxhEExen6QKYzm8hSRAZY=) 3: 9E6973F078195021DC7E37753A16BDC3BD2CE345.crl (hash: 5IOGXqXDTcycuIQYbNLIhM4Z3BIIA8xyNtmZx4t1wF8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.crl rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:73:97:b0:32:33:8b:14:fc:2f:00:0a:85:be:ea:d7:23:8e:83:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6973F078195021DC7E37753A16BDC3BD2CE345 Validity Not Before: Jul 23 20:50:37 2026 GMT Not After : Jul 24 22:52:37 2026 GMT Subject: CN=94247CF163B30EF8BC93EFB5F69ACC9172A0FCDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5f:81:5d:3d:05:af:4d:ac:f5:7e:98:20:bd: 1f:db:f6:2e:8d:78:1b:4f:3b:24:e5:6d:00:73:bd: 26:6f:9c:72:13:35:83:59:07:f4:81:fd:10:5c:49: 01:20:23:ec:13:42:46:09:54:16:eb:8d:14:6a:bd: e8:76:a3:5f:8c:61:04:df:a4:14:1d:7d:a0:24:c8: 10:93:74:9d:43:6b:b5:6a:10:90:43:88:30:44:7c: 9a:85:a8:d8:f7:06:e7:b9:3c:a9:13:20:81:2a:c4: 2c:8c:22:97:97:b2:b9:5b:fe:be:a1:75:84:0e:0c: 5a:1d:b9:e9:5a:ce:d7:01:92:7e:6e:98:4c:5d:29: fd:16:62:b8:b4:34:c7:43:ef:e1:c4:ae:10:74:74: 43:e6:46:61:34:d8:1c:6e:59:f0:f3:4b:9a:56:dd: 7d:70:94:48:5c:47:e8:fb:a4:49:83:59:05:d2:75: b4:c4:86:a9:a7:6b:f1:b2:9b:77:3e:43:f4:f4:e3: 1d:51:3e:46:d2:8c:a3:2a:22:2d:99:dd:f4:83:8b: d3:55:4f:9a:01:50:a2:73:cd:f5:2c:0d:11:b0:1c: 8b:04:e6:2a:ba:8b:63:6b:2d:59:44:0a:ef:b6:9c: 5a:13:8c:3c:a9:ad:78:a1:a4:f0:75:e9:b9:1e:28: 85:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:24:7C:F1:63:B3:0E:F8:BC:93:EF:B5:F6:9A:CC:91:72:A0:FC:DF X509v3 Authority Key Identifier: keyid:9E:69:73:F0:78:19:50:21:DC:7E:37:75:3A:16:BD:C3:BD:2C:E3:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:9e:5c:b4:3b:a2:4a:e8:91:13:3f:de:68:a6:90:44:4c:47: b2:65:86:fd:56:c5:fb:b1:20:0d:d6:a7:97:39:b5:d1:23:99: f3:34:6e:5a:53:a8:8d:58:99:2c:c6:d1:4b:ce:e7:11:b9:14: 6d:fd:c9:34:0f:bf:b8:18:9a:ba:a9:5f:65:45:90:fc:d3:0a: 83:4a:fd:d7:d0:27:3a:8a:98:59:ae:32:74:65:8b:a7:c7:c4: 47:ab:22:65:5d:ab:88:54:e2:ac:c0:2d:4f:5b:e2:7a:0e:62: 96:1b:ea:61:c7:ac:fe:5c:30:ce:84:90:1a:44:b4:2f:10:09: 96:b2:ad:9a:7d:06:21:f3:49:42:5d:9c:61:64:d4:89:e1:89: fb:d3:b9:b6:36:0c:fe:08:4d:6a:d6:e2:0f:3b:f4:9c:6d:ef: ba:ce:13:3a:08:a5:d8:f5:c3:02:16:c8:89:1f:da:54:9d:9f: cf:fb:bb:fb:23:f9:6b:30:14:de:9c:8e:83:c1:63:c0:01:c8: f4:8b:8e:1d:58:f9:d8:09:3f:42:bf:06:4f:a0:a2:f3:d2:c9: b6:15:b5:7a:98:81:04:f9:84:9f:ca:92:39:19:0c:30:d3:f0: f5:a7:7a:a5:e8:05:f4:9c:7a:62:a3:23:1d:20:1e:7a:53:0d: a6:36:d2:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOnOXsDIzixT8LwAKhb7q1yOOgxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2OTczRjA3ODE5NTAyMURDN0UzNzc1M0ExNkJEQzNC RDJDRTM0NTAeFw0yNjA3MjMyMDUwMzdaFw0yNjA3MjQyMjUyMzdaMDMxMTAvBgNV BAMTKDk0MjQ3Q0YxNjNCMzBFRjhCQzkzRUZCNUY2OUFDQzkxNzJBMEZDREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaX4FdPQWvTaz1fpggvR/b9i6N eBtPOyTlbQBzvSZvnHITNYNZB/SB/RBcSQEgI+wTQkYJVBbrjRRqveh2o1+MYQTf pBQdfaAkyBCTdJ1Da7VqEJBDiDBEfJqFqNj3Bue5PKkTIIEqxCyMIpeXsrlb/r6h dYQODFoduelaztcBkn5umExdKf0WYri0NMdD7+HErhB0dEPmRmE02BxuWfDzS5pW 3X1wlEhcR+j7pEmDWQXSdbTEhqmna/Gym3c+Q/T04x1RPkbSjKMqIi2Z3fSDi9NV T5oBUKJzzfUsDRGwHIsE5iq6i2NrLVlECu+2nFoTjDyprXihpPB16bkeKIUVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlCR88WOzDvi8k++19prMkXKg/N8wHwYDVR0j BBgwFoAUnmlz8HgZUCHcfjd1Oha9w70s40UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjdkYjIzYjctOTE1OS00NmM3LTg4NTMtMDY2NTRhZTQ3YWVkLzAvOUU2OTczRjA3 ODE5NTAyMURDN0UzNzc1M0ExNkJEQzNCRDJDRTM0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RTY5NzNGMDc4MTk1MDIxREM3RTM3NzUzQTE2QkRDM0JEMkNF MzQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjdkYjIzYjctOTE1OS00NmM3LTg4 NTMtMDY2NTRhZTQ3YWVkLzAvOUU2OTczRjA3ODE5NTAyMURDN0UzNzc1M0ExNkJE QzNCRDJDRTM0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaeXLQ7okrokRM/3mimkERMR7Jlhv1Wxfux IA3Wp5c5tdEjmfM0blpTqI1YmSzG0UvO5xG5FG39yTQPv7gYmrqpX2VFkPzTCoNK /dfQJzqKmFmuMnRli6fHxEerImVdq4hU4qzALU9b4noOYpYb6mHHrP5cMM6EkBpE tC8QCZayrZp9BiHzSUJdnGFk1InhifvTubY2DP4ITWrW4g879Jxt77rOEzoIpdj1 wwIWyIkf2lSdn8/7u/sj+WswFN6cjoPBY8AByPSLjh1Y+dgJP0K/Bk+govPSybYV tXqYgQT5hJ/KkjkZDDDT8PWneqXoBfScemKjIx0gHnpTDaY20vA= -----END CERTIFICATE-----Generated at Fri Jul 24 04:38:49 2026 by rpki-client