$ rpki-client -vvf rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft File: C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft (raw, json) Hash identifier: 1OB3tnNawMrzYrDqL9harUy2zf2Akyprvd6AE2lQ1/s= Subject key identifier: 7E:B7:7D:C2:05:33:AD:A1:73:E6:00:05:9C:37:84:B1:83:89:AE:FB Authority key identifier: C9:BA:0F:8C:78:B3:A4:E5:D2:8E:CD:1C:51:7D:C9:84:38:50:87:CA Certificate issuer: /CN=C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA Certificate serial: 50119DD33EC459AB25934407415C7A41D3BE911C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:27:32 +0000 Manifest this update: Thu 23 Jul 2026 18:22:32 +0000 Manifest next update: Fri 24 Jul 2026 19:40:32 +0000 Files and hashes: 1: C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl (hash: 4xf5Qr0V6o0Uz33ln7JV3WW1gck8HWmlxhvbqffQs2Y=) 2: 3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa (hash: 45s4cJ7R43K0N6OFbVA9LlP5PkcF712Aofyn3c/ko+0=) 3: 3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa (hash: qWv000ASHZPLikMYj8Wss1d2EPIqC0119NVLho36do8=) 4: 3130332e3136372e3136372e302f32342d3234203d3e20313431393834.roa (hash: Ivj60OCLGb1xn+8XUcVw7dceegfwRxZ/Fq0NrXLwLn4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:11:9d:d3:3e:c4:59:ab:25:93:44:07:41:5c:7a:41:d3:be:91:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA Validity Not Before: Jul 23 18:22:32 2026 GMT Not After : Jul 24 19:40:32 2026 GMT Subject: CN=7EB77DC20533ADA173E600059C3784B18389AEFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:07:8c:b3:50:45:0f:dd:5c:a7:1a:66:c8: ed:23:13:5a:57:41:a8:2a:73:cd:b8:dc:a8:67:ad: 58:79:b0:71:22:f3:58:5a:3a:f7:4f:2c:91:ba:83: cc:bf:f8:f9:3e:f0:69:e9:81:6c:68:a5:2a:d8:20: be:c5:21:9c:dc:ec:20:01:8a:12:0a:e1:87:16:26: b6:82:67:10:6a:a7:79:4e:ac:7c:9b:fe:ac:40:73: 99:06:f3:e6:14:d3:93:52:6f:44:8b:f4:4b:15:1b: bc:6c:0b:c5:81:c0:7f:7f:82:9a:43:a0:63:3f:ad: bd:19:68:52:08:62:55:2e:1e:00:b5:c7:1b:ff:7a: ce:7d:af:56:1a:bb:df:a6:db:62:a0:3b:ea:26:68: fa:eb:2a:74:9b:86:67:9f:ff:4b:75:22:64:b3:3f: 45:f6:60:99:b3:24:45:8f:7a:e5:f7:bd:e0:5a:97: a5:85:03:be:dd:2e:21:0a:94:6b:c4:4c:d1:ec:01: f8:e4:a1:7e:c2:06:6a:27:d2:38:f7:19:4b:6f:a7: 01:ff:4d:20:fc:ed:3f:fc:62:d5:c1:06:7d:97:61: 17:20:3a:bf:ab:97:1b:d5:f1:6a:67:05:5c:1b:86: e2:38:53:2c:6c:69:e8:35:c5:dc:1e:bc:6d:5b:31: e6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B7:7D:C2:05:33:AD:A1:73:E6:00:05:9C:37:84:B1:83:89:AE:FB X509v3 Authority Key Identifier: keyid:C9:BA:0F:8C:78:B3:A4:E5:D2:8E:CD:1C:51:7D:C9:84:38:50:87:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:08:05:d0:c6:85:97:d3:7b:f0:92:77:d6:f0:ed:70:9b:10: 23:f1:e0:c4:25:43:a8:dc:3c:43:85:4a:7d:5d:e7:e5:64:31: fc:d4:20:5d:4b:89:c5:fe:7d:03:95:17:11:ed:f6:d8:da:cb: 59:30:ff:35:22:12:77:3b:7c:89:b1:2b:b6:32:cd:9d:86:c0: 75:9b:09:c9:12:fe:9d:34:f6:21:58:cb:b7:d4:fc:14:4e:90: 34:5c:3e:63:7f:65:c0:75:8e:27:2f:44:2e:8d:9c:87:53:55: d0:cd:fb:19:9e:39:b1:8d:cc:eb:44:d4:16:18:23:ec:29:41: cc:28:fa:91:b3:2b:e1:83:8a:ec:fb:1f:5c:3f:b0:b5:31:f7: ad:1b:18:d7:27:6b:85:05:a9:8e:de:60:f7:88:36:5c:76:58: 5b:66:0f:f9:51:81:8c:d8:bb:2a:4e:eb:7b:0c:0f:0e:49:32: 57:d4:b2:09:ef:e3:0f:6a:22:4e:85:9f:63:f0:ba:04:aa:7c: 67:68:f8:32:d9:e4:4c:47:c1:28:56:68:3d:c8:9f:32:63:05: 34:04:4a:b7:84:2b:df:b1:e3:c2:3b:6a:d0:ca:f5:39:9f:f2: 5a:ba:66:52:6a:d6:d7:ba:b3:6f:0f:18:37:fa:be:df:6e:1a: d5:ee:cb:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUBGd0z7EWaslk0QHQVx6QdO+kRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTBGOEM3OEIzQTRFNUQyOEVDRDFDNTE3REM5ODQz ODUwODdDQTAeFw0yNjA3MjMxODIyMzJaFw0yNjA3MjQxOTQwMzJaMDMxMTAvBgNV BAMTKDdFQjc3REMyMDUzM0FEQTE3M0U2MDAwNTlDMzc4NEIxODM4OUFFRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7lAeMs1BFD91cpxpmyO0jE1pX Qagqc8243KhnrVh5sHEi81haOvdPLJG6g8y/+Pk+8GnpgWxopSrYIL7FIZzc7CAB ihIK4YcWJraCZxBqp3lOrHyb/qxAc5kG8+YU05NSb0SL9EsVG7xsC8WBwH9/gppD oGM/rb0ZaFIIYlUuHgC1xxv/es59r1Yau9+m22KgO+omaPrrKnSbhmef/0t1ImSz P0X2YJmzJEWPeuX3veBal6WFA77dLiEKlGvETNHsAfjkoX7CBmon0jj3GUtvpwH/ TSD87T/8YtXBBn2XYRcgOr+rlxvV8WpnBVwbhuI4Uyxsaeg1xdwevG1bMeZ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfrd9wgUzraFz5gAFnDeEsYOJrvswHwYDVR0j BBgwFoAUyboPjHizpOXSjs0cUX3JhDhQh8owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU0MGNmODAtOTMxNS00MmMxLTg0NGUtYmIwMzYyMmEwNWMxLzAvQzlCQTBGOEM3 OEIzQTRFNUQyOEVDRDFDNTE3REM5ODQzODUwODdDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUJBMEY4Qzc4QjNBNEU1RDI4RUNEMUM1MTdEQzk4NDM4NTA4 N0NBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU0MGNmODAtOTMxNS00MmMxLTg0 NGUtYmIwMzYyMmEwNWMxLzAvQzlCQTBGOEM3OEIzQTRFNUQyOEVDRDFDNTE3REM5 ODQzODUwODdDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgIBdDGhZfTe/CSd9bw7XCbECPx4MQlQ6jc PEOFSn1d5+VkMfzUIF1LicX+fQOVFxHt9tjay1kw/zUiEnc7fImxK7YyzZ2GwHWb CckS/p009iFYy7fU/BROkDRcPmN/ZcB1jicvRC6NnIdTVdDN+xmeObGNzOtE1BYY I+wpQcwo+pGzK+GDiuz7H1w/sLUx960bGNcna4UFqY7eYPeINlx2WFtmD/lRgYzY uypO63sMDw5JMlfUsgnv4w9qIk6Fn2PwugSqfGdo+DLZ5ExHwShWaD3InzJjBTQE SreEK9+x48I7atDK9Tmf8lq6ZlJq1te6s28PGDf6vt9uGtXuy5k= -----END CERTIFICATE-----Generated at Fri Jul 24 04:32:39 2026 by rpki-client