$ rpki-client -vvf rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft File: A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft (raw, json) Hash identifier: awt9iZLurmQtxb/hQZmFtxOPDPiF6O6JhhPS8a9BdWI= Subject key identifier: 9F:DA:A8:54:41:27:99:50:CC:6D:9C:3B:35:46:C1:DB:07:04:FB:87 Authority key identifier: A9:D5:86:A8:2C:B1:66:90:2F:1D:1B:2C:AE:5E:B4:20:F0:8D:23:D0 Certificate issuer: /CN=A9D586A82CB166902F1D1B2CAE5EB420F08D23D0 Certificate serial: 5D13A6CB2EE7D58D369F644DAB2868911DEE012C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 23:28:26 +0000 Manifest this update: Thu 23 Jul 2026 23:23:26 +0000 Manifest next update: Sat 25 Jul 2026 02:48:26 +0000 Files and hashes: 1: A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl (hash: cNP82NwM/atHEhL6L4qccPvlH8msT0qlKTPc4sanehs=) 2: 3130332e3135302e3135392e302f32342d3234203d3e20313430343331.roa (hash: hcBwS6YzikTq1s/P8jlWWii/vuvMdnJI6Od19w2iLTM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:13:a6:cb:2e:e7:d5:8d:36:9f:64:4d:ab:28:68:91:1d:ee:01:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D586A82CB166902F1D1B2CAE5EB420F08D23D0 Validity Not Before: Jul 23 23:23:26 2026 GMT Not After : Jul 25 02:48:26 2026 GMT Subject: CN=9FDAA85441279950CC6D9C3B3546C1DB0704FB87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1f:b0:20:86:d3:23:f2:08:5a:7d:e7:1e:3e: 81:08:f0:cb:14:f9:63:f4:c7:1f:3d:8c:0e:c9:9c: 85:0f:34:2b:7d:8c:d3:ae:42:02:76:e6:83:68:f9: 4f:9c:a3:62:6e:d3:25:8e:06:75:52:3a:6b:1e:f6: b1:5e:fc:17:e2:0d:23:39:35:7a:78:ab:de:c6:7b: 57:68:b3:fd:ac:0e:05:6a:8b:04:80:44:36:a9:01: ea:79:af:01:c8:cc:30:be:09:d8:11:32:0d:e0:4b: 66:73:16:f2:35:e5:7a:00:80:54:c9:af:9e:59:8b: a7:7a:bc:42:e5:93:a2:a1:48:9b:61:78:9d:83:72: 7f:3d:36:11:61:ee:01:45:a3:70:be:10:e4:f1:12: 20:99:76:9b:98:18:30:4a:2b:7f:4a:7d:98:40:11: 5c:84:de:3f:6f:7c:e5:ad:16:40:e2:84:32:32:c0: 7b:28:f2:1b:36:73:5f:2c:3a:60:f3:84:8d:51:e2: ed:73:14:cf:07:bf:0a:ca:e3:42:8a:50:f6:43:01: e5:ac:6a:19:b7:45:48:cf:01:34:f8:96:4b:58:fa: ff:e1:92:32:57:92:75:05:dc:fa:7d:80:dc:5b:03: 41:86:39:a5:ab:f8:8f:07:39:cd:94:94:cc:d6:85: 1e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DA:A8:54:41:27:99:50:CC:6D:9C:3B:35:46:C1:DB:07:04:FB:87 X509v3 Authority Key Identifier: keyid:A9:D5:86:A8:2C:B1:66:90:2F:1D:1B:2C:AE:5E:B4:20:F0:8D:23:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:2a:24:cc:94:cc:f0:d9:10:1e:df:09:8f:e0:fe:d7:89:62: fb:43:90:83:b0:9f:bd:79:66:a0:e8:b2:b9:ac:72:bd:0d:3e: d1:6a:ce:c2:6e:db:9d:86:57:ff:1a:ce:58:6b:ff:b2:93:8c: 1d:40:41:2a:05:5e:ee:0b:8d:37:5b:6b:cd:3f:ac:e9:a8:43: 3b:db:c6:e1:a1:f8:97:8d:8a:ce:59:e6:ca:e2:62:41:1b:49: 79:24:45:b0:eb:f2:cc:6c:ff:5e:70:98:da:93:5a:5c:c8:d2: 77:ee:3d:a3:3f:30:7b:81:f7:12:80:91:42:75:1e:5c:4c:c6: 7c:4f:a7:6c:5e:6d:25:c9:87:10:1d:6d:5d:59:4b:8e:20:0c: 78:fb:15:b1:d1:bb:45:c2:c8:eb:86:95:33:e5:dc:b4:97:ec: ae:87:b1:96:9e:f9:10:f9:70:2e:9f:ff:cf:98:62:3e:db:87: 7f:8c:1c:86:d5:b8:15:60:16:11:07:02:a7:e2:f0:97:17:b5: 17:a7:9c:dd:12:13:81:28:d7:9b:ac:a0:72:b1:e4:d5:92:b5: 32:28:44:16:5d:a7:38:e7:89:8b:bb:2d:e7:35:c6:90:d8:aa: e5:f5:34:d9:e8:2b:13:ac:e3:f9:ed:c3:c4:9d:be:71:d4:ac: ba:e4:34:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXROmyy7n1Y02n2RNqyhokR3uASwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENTg2QTgyQ0IxNjY5MDJGMUQxQjJDQUU1RUI0MjBG MDhEMjNEMDAeFw0yNjA3MjMyMzIzMjZaFw0yNjA3MjUwMjQ4MjZaMDMxMTAvBgNV BAMTKDlGREFBODU0NDEyNzk5NTBDQzZEOUMzQjM1NDZDMURCMDcwNEZCODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmH7AghtMj8ghafecePoEI8MsU +WP0xx89jA7JnIUPNCt9jNOuQgJ25oNo+U+co2Ju0yWOBnVSOmse9rFe/BfiDSM5 NXp4q97Ge1dos/2sDgVqiwSARDapAep5rwHIzDC+CdgRMg3gS2ZzFvI15XoAgFTJ r55Zi6d6vELlk6KhSJtheJ2Dcn89NhFh7gFFo3C+EOTxEiCZdpuYGDBKK39KfZhA EVyE3j9vfOWtFkDihDIywHso8hs2c18sOmDzhI1R4u1zFM8HvwrK40KKUPZDAeWs ahm3RUjPATT4lktY+v/hkjJXknUF3Pp9gNxbA0GGOaWr+I8HOc2UlMzWhR5/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn9qoVEEnmVDMbZw7NUbB2wcE+4cwHwYDVR0j BBgwFoAUqdWGqCyxZpAvHRssrl60IPCNI9AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODE2NWU0ODEtNWE3OS00ODY4LWE0ZTQtZmFjZmQ5MjJkODEzLzAvQTlENTg2QTgy Q0IxNjY5MDJGMUQxQjJDQUU1RUI0MjBGMDhEMjNEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOUQ1ODZBODJDQjE2NjkwMkYxRDFCMkNBRTVFQjQyMEYwOEQy M0QwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODE2NWU0ODEtNWE3OS00ODY4LWE0 ZTQtZmFjZmQ5MjJkODEzLzAvQTlENTg2QTgyQ0IxNjY5MDJGMUQxQjJDQUU1RUI0 MjBGMDhEMjNEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcqJMyUzPDZEB7fCY/g/teJYvtDkIOwn715 ZqDosrmscr0NPtFqzsJu252GV/8azlhr/7KTjB1AQSoFXu4LjTdba80/rOmoQzvb xuGh+JeNis5Z5sriYkEbSXkkRbDr8sxs/15wmNqTWlzI0nfuPaM/MHuB9xKAkUJ1 HlxMxnxPp2xebSXJhxAdbV1ZS44gDHj7FbHRu0XCyOuGlTPl3LSX7K6HsZae+RD5 cC6f/8+YYj7bh3+MHIbVuBVgFhEHAqfi8JcXtRennN0SE4Eo15usoHKx5NWStTIo RBZdpzjniYu7Lec1xpDYquX1NNnoKxOs4/ntw8SdvnHUrLrkNFw= -----END CERTIFICATE-----Generated at Fri Jul 24 07:40:18 2026 by rpki-client