$ rpki-client -vvf rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft File: 9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft (raw, json) Hash identifier: dwVWDoicF7Km+i1KeXGgdLpkq5gYYBro1+YZEGh1KSg= Subject key identifier: 44:E5:F2:2C:56:26:16:02:AC:67:CD:DA:5B:42:3B:DC:34:A7:00:26 Authority key identifier: 9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D Certificate issuer: /CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D Certificate serial: 38227EEEA6FE7D59F8BAE31AD336E5F527258233 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 22:32:28 +0000 Manifest this update: Thu 23 Jul 2026 22:27:28 +0000 Manifest next update: Fri 24 Jul 2026 22:45:28 +0000 Files and hashes: 1: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: Pbg7HMIUocxPePd7OOnLCPLrq3CDhKhitltGyutZn2w=) 2: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: zmwA1y/xC2vL0cjTkZM+ObOlDKLV7xKiwSOMXdyAr5Q=) 3: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: JZInvaWprZojdT0ogHnGT0fyYlzFziTH86i1Q0tvWkY=) 4: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: BTFNI8KSCzEVQjrkzQTwBs7yIRfL1AV/7o2X6tYhvoE=) 5: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: JPXdi6WPGd4vFTIpgnAdhhx+7oMRZdsbWTFXkRgyRnk=) 6: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: H+4huOKuCZJDgCcIRHG5F336v2zTL76hXwSaEF33ZKg=) 7: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: 2hLM0mgbr0R6ifa3vNzIdaR5NaWhmXwQFTpATyRbVPI=) 8: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: npHUpI+a7i9Ge4o0vqbUWZs/Np3+nJB1Rs4IQBwLbvY=) 9: 9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl (hash: +uK8/n+fsZV/LPZX3mm2R/QCS/mKSJeqofyJC6onsxs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:22:7e:ee:a6:fe:7d:59:f8:ba:e3:1a:d3:36:e5:f5:27:25:82:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D Validity Not Before: Jul 23 22:27:28 2026 GMT Not After : Jul 24 22:45:28 2026 GMT Subject: CN=44E5F22C56261602AC67CDDA5B423BDC34A70026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:94:84:18:2f:da:4a:bc:b7:d1:43:48:5c:f3: d3:f2:aa:da:b6:d8:de:9f:7a:6e:45:cb:d1:01:b8: 30:b5:80:2a:a0:b7:c1:6d:ec:7b:a6:31:01:45:ed: 5a:12:03:33:18:39:e0:38:f3:c6:96:4d:61:ed:ce: e7:ed:6e:12:a6:f6:68:a9:69:be:87:e5:56:f3:59: 8c:79:77:1f:f1:a5:f5:bd:44:d5:05:e8:4f:0f:c6: 40:a1:cc:0f:05:66:b7:9e:f9:64:b1:9f:63:e7:56: 6c:a8:37:bf:2e:25:d7:22:17:a4:6f:3b:72:01:c6: 44:21:1e:8a:22:ee:b6:8e:4e:ba:0a:48:2c:b6:7c: 2b:b9:6d:a6:9e:95:16:48:1d:5c:bd:1b:7c:63:f0: 96:67:97:45:5d:84:86:04:ba:f3:7a:fd:dd:c3:49: f8:25:da:03:b6:06:b3:65:c4:5a:78:04:b3:05:7c: 47:ef:b5:0b:7c:50:a1:0f:60:23:f2:1e:b1:3c:d1: da:bc:ce:9e:70:06:86:d4:f1:68:a3:de:69:7b:4a: 75:e9:e9:c4:83:2e:01:fe:05:43:f4:f3:9e:1c:ce: da:dc:ff:a4:64:17:96:38:08:c6:5c:96:d2:31:28: 98:f5:90:20:83:ee:0b:33:35:8d:38:20:2c:f4:df: 32:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E5:F2:2C:56:26:16:02:AC:67:CD:DA:5B:42:3B:DC:34:A7:00:26 X509v3 Authority Key Identifier: keyid:9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:21:2a:1d:34:9a:a9:e4:c4:ec:82:74:db:aa:fa:fa:b5:5f: 6a:6b:2b:0c:41:e6:c2:15:3c:3b:e2:75:75:69:71:ce:a1:3f: 57:9a:92:49:b7:63:87:12:b5:bd:8b:79:f6:11:c7:ab:23:04: 7b:74:1f:ca:85:2f:d9:e9:f5:e9:7c:01:84:4e:43:03:f7:2e: f7:c2:73:d5:e7:89:f5:e4:50:a4:51:ae:04:7c:27:a2:ec:4d: 4b:3d:df:30:6c:45:ea:de:eb:54:a0:d9:4e:00:1b:56:d7:9c: d5:5b:27:ae:25:51:95:d1:bf:c7:c5:a4:de:d1:4e:17:c9:6d: ba:62:81:dc:81:bf:7c:23:be:47:a5:76:5f:47:9e:b5:40:af: 90:c7:d0:68:c9:a7:57:1d:90:09:ce:de:78:19:36:4c:49:68: cc:60:dc:c5:b8:9b:30:4c:a6:7e:03:4c:4e:ca:e1:a4:de:e6: 8a:29:a3:ad:28:8b:77:a2:0c:51:6a:7f:ac:64:96:e2:9c:29: 0f:d9:df:f7:0a:b4:59:77:bc:d7:2d:aa:77:ae:f8:f9:32:a6: 41:a0:29:e3:57:03:dc:9f:68:5c:56:12:14:7d:fd:88:41:52: 5c:79:89:45:e9:7e:a8:69:15:2b:b7:38:b2:f0:ce:ce:ce:7b: 7f:98:a2:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOCJ+7qb+fVn4uuMa0zbl9SclgjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUREN0ZEMUMwQTc0RkUzMTdFREE0MUU0RDFDREM4NTdB RkMxNzc5RDAeFw0yNjA3MjMyMjI3MjhaFw0yNjA3MjQyMjQ1MjhaMDMxMTAvBgNV BAMTKDQ0RTVGMjJDNTYyNjE2MDJBQzY3Q0REQTVCNDIzQkRDMzRBNzAwMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDflIQYL9pKvLfRQ0hc89Pyqtq2 2N6fem5Fy9EBuDC1gCqgt8Ft7HumMQFF7VoSAzMYOeA488aWTWHtzuftbhKm9mip ab6H5VbzWYx5dx/xpfW9RNUF6E8PxkChzA8FZree+WSxn2PnVmyoN78uJdciF6Rv O3IBxkQhHooi7raOTroKSCy2fCu5baaelRZIHVy9G3xj8JZnl0VdhIYEuvN6/d3D Sfgl2gO2BrNlxFp4BLMFfEfvtQt8UKEPYCPyHrE80dq8zp5wBobU8Wij3ml7SnXp 6cSDLgH+BUP0854cztrc/6RkF5Y4CMZcltIxKJj1kCCD7gszNY04ICz03zKZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUROXyLFYmFgKsZ83aW0I73DSnACYwHwYDVR0j BBgwFoAUndf9HAp0/jF+2kHk0c3IV6/Bd50wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjkwYzkwMDktYWQ1My00ZmE2LWExODMtMzRiMzQ1N2JlYTAzLzAvOUREN0ZEMUMw QTc0RkUzMTdFREE0MUU0RDFDREM4NTdBRkMxNzc5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REQ3RkQxQzBBNzRGRTMxN0VEQTQxRTREMUNEQzg1N0FGQzE3 NzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvOUREN0ZEMUMwQTc0RkUzMTdFREE0MUU0RDFDREM4 NTdBRkMxNzc5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMhKh00mqnkxOyCdNuq+vq1X2prKwxB5sIV PDvidXVpcc6hP1eakkm3Y4cStb2LefYRx6sjBHt0H8qFL9np9el8AYROQwP3LvfC c9XnifXkUKRRrgR8J6LsTUs93zBsRere61Sg2U4AG1bXnNVbJ64lUZXRv8fFpN7R ThfJbbpigdyBv3wjvkeldl9HnrVAr5DH0GjJp1cdkAnO3ngZNkxJaMxg3MW4mzBM pn4DTE7K4aTe5oopo60oi3eiDFFqf6xkluKcKQ/Z3/cKtFl3vNctqneu+PkypkGg KeNXA9yfaFxWEhR9/YhBUlx5iUXpfqhpFSu3OLLwzs7Oe3+YotI= -----END CERTIFICATE-----Generated at Fri Jul 24 08:53:47 2026 by rpki-client