$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft File: 9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft (raw, json) Hash identifier: cDfbFJURC1dD7dLRm6z3SZdEfFhwkJlNzsKOk58ITJg= Subject key identifier: 59:E3:87:17:65:C4:EB:56:92:10:FC:D8:3B:25:34:10:22:0A:46:53 Authority key identifier: 91:76:CB:6B:BE:53:90:8A:B2:1A:EF:FC:4F:8F:15:1D:9A:74:7E:75 Certificate issuer: /CN=9176CB6BBE53908AB21AEFFC4F8F151D9A747E75 Certificate serial: 01436A5D195555DE74BE0CA458AE7C76792EE5CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 07:38:51 +0000 Manifest this update: Fri 24 Jul 2026 07:33:51 +0000 Manifest next update: Sat 25 Jul 2026 11:04:51 +0000 Files and hashes: 1: 9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.crl (hash: HvjNPjYfbvQTY6xn6ZDn2dw1La1r3TkOLY427HPOxQA=) 2: 3130332e3235332e302e302f32322d3234203d3e203539313339.roa (hash: 7wsmv0kZBtWJ620fNkkrSVx5J21lFglGMK7gAbjRHjo=) 3: 3131362e302e302e302f32312d3234203d3e203539313339.roa (hash: sLtYSAekx4+fWo5lqk7vJ2/nnu8bKXpxqT5BWuDEsBY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.crl rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:43:6a:5d:19:55:55:de:74:be:0c:a4:58:ae:7c:76:79:2e:e5:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9176CB6BBE53908AB21AEFFC4F8F151D9A747E75 Validity Not Before: Jul 24 07:33:51 2026 GMT Not After : Jul 25 11:04:51 2026 GMT Subject: CN=59E3871765C4EB569210FCD83B253410220A4653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d0:e5:a5:b6:7c:2b:b8:da:ae:86:53:08:1c: 3f:7f:f4:52:0b:9f:80:79:43:e0:42:8b:00:8a:a8: a7:9b:c3:8a:fd:e7:eb:1d:57:9e:58:8d:ce:22:63: f5:fe:68:8e:9f:c9:c4:f0:da:1d:46:9c:4e:aa:ad: db:2c:bc:9e:d8:ae:30:c5:db:2e:b7:30:3b:71:92: d5:9b:27:e1:78:ca:7a:60:4f:8f:53:d5:29:4b:66: a0:22:43:44:39:2f:1f:c3:29:36:4b:cb:7f:76:4c: 28:ae:84:03:24:90:38:0b:3e:6e:cd:21:87:5b:d1: f7:6f:87:50:ad:4d:bd:aa:aa:e2:48:e5:0f:78:e8: 37:b2:66:77:dd:72:0a:70:e5:86:50:4e:30:39:b3: 06:fd:f0:f0:ff:83:ac:4d:45:54:bf:0e:16:a9:09: 5e:26:24:f6:09:70:c5:a9:be:6d:55:d2:74:9d:bd: 0c:6f:74:72:0e:71:f1:48:78:a3:07:23:73:51:31: 7a:03:63:72:68:74:0b:d1:30:96:a7:63:ce:1f:aa: 1e:5b:dc:c6:4f:ec:4c:1a:04:08:a0:f6:8a:86:32: 1d:06:77:63:b7:87:8b:bc:b5:99:84:1f:8c:ec:20: 5d:d0:a4:3a:18:fa:61:9b:e4:b3:fc:15:cc:21:1a: 3b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E3:87:17:65:C4:EB:56:92:10:FC:D8:3B:25:34:10:22:0A:46:53 X509v3 Authority Key Identifier: keyid:91:76:CB:6B:BE:53:90:8A:B2:1A:EF:FC:4F:8F:15:1D:9A:74:7E:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:59:fc:d9:4f:ce:1e:6c:a7:f4:e3:f2:85:21:fb:0e:e0:c5: 41:ee:48:7e:fd:70:31:c1:12:08:35:b8:7f:bb:9d:86:44:72: fb:ea:30:4f:b0:61:db:bd:93:a8:09:9c:05:7a:3f:f4:04:0f: 39:fb:4a:e5:12:14:7f:ec:c2:58:13:70:63:1d:aa:94:10:de: 33:a9:88:19:08:f4:5a:47:18:b6:82:a4:b3:f7:00:d1:4d:2e: 7c:ac:e5:c0:43:8b:a5:d3:4f:b8:b8:8c:0a:16:22:de:59:a1: 52:32:42:ae:c8:ec:73:9a:25:27:30:8d:20:5f:c3:e0:6c:6a: c2:79:7e:24:6e:76:5c:b1:36:10:3c:ee:fc:3d:97:fb:99:de: 76:ba:98:67:e8:ea:35:7f:f9:5c:63:c8:21:92:8f:aa:67:77: a8:90:33:87:ad:f4:7a:91:7d:8a:2a:a5:aa:71:00:14:b0:fc: 23:2e:88:ab:17:ed:3e:5f:83:3e:0f:79:81:26:81:14:25:c5: ba:45:ae:86:f3:55:23:ea:61:11:be:27:6a:70:26:b0:a2:13: ab:4c:e5:63:bd:44:45:73:4c:b4:4a:40:c1:6a:59:72:29:25: f0:21:90:85:4d:7b:76:a6:ce:90:55:8d:8e:5d:92:4a:47:73: 10:2d:ab:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAUNqXRlVVd50vgykWK58dnku5cswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3NkNCNkJCRTUzOTA4QUIyMUFFRkZDNEY4RjE1MUQ5 QTc0N0U3NTAeFw0yNjA3MjQwNzMzNTFaFw0yNjA3MjUxMTA0NTFaMDMxMTAvBgNV BAMTKDU5RTM4NzE3NjVDNEVCNTY5MjEwRkNEODNCMjUzNDEwMjIwQTQ2NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0OWltnwruNquhlMIHD9/9FIL n4B5Q+BCiwCKqKebw4r95+sdV55Yjc4iY/X+aI6fycTw2h1GnE6qrdssvJ7YrjDF 2y63MDtxktWbJ+F4ynpgT49T1SlLZqAiQ0Q5Lx/DKTZLy392TCiuhAMkkDgLPm7N IYdb0fdvh1CtTb2qquJI5Q946DeyZnfdcgpw5YZQTjA5swb98PD/g6xNRVS/Dhap CV4mJPYJcMWpvm1V0nSdvQxvdHIOcfFIeKMHI3NRMXoDY3JodAvRMJanY84fqh5b 3MZP7EwaBAig9oqGMh0Gd2O3h4u8tZmEH4zsIF3QpDoY+mGb5LP8FcwhGjtfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWeOHF2XE61aSEPzYOyU0ECIKRlMwHwYDVR0j BBgwFoAUkXbLa75TkIqyGu/8T48VHZp0fnUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U4Y2Q5N2UtNTZmNS00Y2E1LWE4NWMtNTVhMzIzZjA2MDhjLzAvOTE3NkNCNkJC RTUzOTA4QUIyMUFFRkZDNEY4RjE1MUQ5QTc0N0U3NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTc2Q0I2QkJFNTM5MDhBQjIxQUVGRkM0RjhGMTUxRDlBNzQ3 RTc1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U4Y2Q5N2UtNTZmNS00Y2E1LWE4 NWMtNTVhMzIzZjA2MDhjLzAvOTE3NkNCNkJCRTUzOTA4QUIyMUFFRkZDNEY4RjE1 MUQ5QTc0N0U3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtZ/NlPzh5sp/Tj8oUh+w7gxUHuSH79cDHB Egg1uH+7nYZEcvvqME+wYdu9k6gJnAV6P/QEDzn7SuUSFH/swlgTcGMdqpQQ3jOp iBkI9FpHGLaCpLP3ANFNLnys5cBDi6XTT7i4jAoWIt5ZoVIyQq7I7HOaJScwjSBf w+BsasJ5fiRudlyxNhA87vw9l/uZ3na6mGfo6jV/+VxjyCGSj6pnd6iQM4et9HqR fYoqpapxABSw/CMuiKsX7T5fgz4PeYEmgRQlxbpFrobzVSPqYRG+J2pwJrCiE6tM 5WO9REVzTLRKQMFqWXIpJfAhkIVNe3amzpBVjY5dkkpHcxAtq4w= -----END CERTIFICATE-----Generated at Fri Jul 24 09:58:09 2026 by rpki-client