$ rpki-client -vvf rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft File: 9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft (raw, json) Hash identifier: Ts1VkwmH9ztSA1i3DIB5y93uhL90D4hQDaxuI3Z7Jy4= Subject key identifier: A0:F8:39:5B:F7:07:1E:A0:53:25:68:8F:56:C7:E6:07:A7:30:8E:B2 Authority key identifier: 9A:42:83:F9:6B:70:1E:C6:0E:A4:5F:12:4F:88:81:9D:76:D7:E8:FC Certificate issuer: /CN=9A4283F96B701EC60EA45F124F88819D76D7E8FC Certificate serial: 6967C2C32909CAE092DBF54C743F2CBCBC3613AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 14:58:14 +0000 Manifest this update: Thu 23 Jul 2026 14:53:14 +0000 Manifest next update: Fri 24 Jul 2026 15:01:14 +0000 Files and hashes: 1: 9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl (hash: dA/3ofWRNb7gPoL/7xHhNy5aTpny462hexZWhnxsRSY=) 2: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: lqSxCFv5WmyrxicOkawzjV/AVzQFgoIxemd6g7X5MqQ=) 3: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 8HBG0p89815vWKkauI6Wn4NeMLGP4fCVAgDc4tDqrGk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:67:c2:c3:29:09:ca:e0:92:db:f5:4c:74:3f:2c:bc:bc:36:13:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A4283F96B701EC60EA45F124F88819D76D7E8FC Validity Not Before: Jul 23 14:53:14 2026 GMT Not After : Jul 24 15:01:14 2026 GMT Subject: CN=A0F8395BF7071EA05325688F56C7E607A7308EB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:97:34:cd:1c:d6:56:82:59:c9:64:eb:0f:2c: 80:fc:ba:41:3c:8f:26:01:e2:f7:23:f2:c5:42:6f: 13:cc:2e:6a:1d:ab:7c:68:39:f2:e0:f5:90:77:0c: 3c:c3:cd:24:01:6e:53:3a:98:c3:84:26:cc:cc:4f: bf:19:eb:60:ae:67:5b:2c:db:4d:8e:c7:6d:9e:98: 87:0a:c7:b1:f8:93:b1:d5:66:fb:d0:f7:9b:ab:c7: eb:09:fb:82:86:e2:c2:3c:bb:28:fc:33:6a:7b:f0: a1:91:7b:a9:b5:ae:aa:16:f0:27:29:26:58:da:71: f6:e2:31:1c:bc:4d:3e:2a:4c:71:00:d5:29:55:25: 9e:08:c4:2c:49:06:c2:9f:8c:ad:5d:e1:74:cc:ea: e6:8b:9d:0c:3b:8a:18:e0:83:dd:07:61:30:20:40: 0b:83:de:7f:c7:29:07:5f:37:95:44:0c:a4:95:d8: 28:c8:30:b6:52:66:ce:96:12:4b:05:8a:c4:a9:0e: 6d:99:ca:f3:6f:e0:bb:3e:a8:9c:14:9b:3a:6c:b6: 0e:4b:3e:2e:bd:eb:9a:ab:71:16:27:89:3f:b4:7f: cc:cb:42:8c:06:41:d4:a3:30:73:1d:88:68:a5:0b: da:87:92:fd:92:b6:64:8b:d5:5c:f6:29:14:fb:28: 0e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F8:39:5B:F7:07:1E:A0:53:25:68:8F:56:C7:E6:07:A7:30:8E:B2 X509v3 Authority Key Identifier: keyid:9A:42:83:F9:6B:70:1E:C6:0E:A4:5F:12:4F:88:81:9D:76:D7:E8:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a9:0b:ed:13:cc:4b:78:c4:52:2d:8e:3c:82:1d:1f:67:60: c5:79:d9:f5:30:d5:3c:0a:46:c8:91:99:21:cf:79:f0:6b:a4: 5c:73:68:ba:c2:e7:f1:ad:d5:6e:be:0f:de:0a:da:5d:41:b3: dd:bb:53:a7:bb:44:bd:98:16:f9:6f:c2:db:1a:4d:9e:9b:0d: db:ff:c1:57:92:f9:cf:2b:27:33:08:18:b4:b3:e3:a2:61:17: ee:2c:ce:0e:90:e5:af:51:47:c2:71:b6:d4:83:30:47:3e:9e: a7:a4:98:6f:bc:fa:0c:5d:2e:e9:ad:91:1a:e6:36:28:86:fd: 7a:72:44:b7:7d:6e:90:65:fb:c6:83:ee:c2:c7:13:36:4e:fc: 36:6e:72:63:19:99:9c:ef:b9:27:c6:2a:91:3e:9e:1b:4c:bd: 87:fd:51:64:44:61:5e:97:20:8c:b9:d3:5f:76:f7:30:80:de: 8e:2e:b2:99:ac:fc:10:16:ed:01:a7:17:22:ea:97:95:2d:43: 02:d9:17:12:f9:79:d3:9d:aa:8d:15:55:8e:36:7d:12:49:00: e3:e6:3e:dd:d5:64:fd:f0:e5:2b:85:fd:f9:fd:05:f2:71:6b: b8:6a:38:19:3c:f5:29:a9:ea:d2:b3:ac:de:f0:df:a1:72:e3: 51:02:e1:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaWfCwykJyuCS2/VMdD8svLw2E6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0MjgzRjk2QjcwMUVDNjBFQTQ1RjEyNEY4ODgxOUQ3 NkQ3RThGQzAeFw0yNjA3MjMxNDUzMTRaFw0yNjA3MjQxNTAxMTRaMDMxMTAvBgNV BAMTKEEwRjgzOTVCRjcwNzFFQTA1MzI1Njg4RjU2QzdFNjA3QTczMDhFQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKlzTNHNZWglnJZOsPLID8ukE8 jyYB4vcj8sVCbxPMLmodq3xoOfLg9ZB3DDzDzSQBblM6mMOEJszMT78Z62CuZ1ss 202Ox22emIcKx7H4k7HVZvvQ95urx+sJ+4KG4sI8uyj8M2p78KGRe6m1rqoW8Ccp JljacfbiMRy8TT4qTHEA1SlVJZ4IxCxJBsKfjK1d4XTM6uaLnQw7ihjgg90HYTAg QAuD3n/HKQdfN5VEDKSV2CjIMLZSZs6WEksFisSpDm2ZyvNv4Ls+qJwUmzpstg5L Pi6965qrcRYniT+0f8zLQowGQdSjMHMdiGilC9qHkv2StmSL1Vz2KRT7KA7zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoPg5W/cHHqBTJWiPVsfmB6cwjrIwHwYDVR0j BBgwFoAUmkKD+WtwHsYOpF8ST4iBnXbX6PwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODMyYzgyM2QtYTRiNy00MDA1LTlhYjgtZDNiMmM4YmJmNzYzLzAvOUE0MjgzRjk2 QjcwMUVDNjBFQTQ1RjEyNEY4ODgxOUQ3NkQ3RThGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTQyODNGOTZCNzAxRUM2MEVBNDVGMTI0Rjg4ODE5RDc2RDdF OEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh YjgtZDNiMmM4YmJmNzYzLzAvOUE0MjgzRjk2QjcwMUVDNjBFQTQ1RjEyNEY4ODgx OUQ3NkQ3RThGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCpC+0TzEt4xFItjjyCHR9nYMV52fUw1TwK RsiRmSHPefBrpFxzaLrC5/Gt1W6+D94K2l1Bs927U6e7RL2YFvlvwtsaTZ6bDdv/ wVeS+c8rJzMIGLSz46JhF+4szg6Q5a9RR8JxttSDMEc+nqekmG+8+gxdLumtkRrm NiiG/XpyRLd9bpBl+8aD7sLHEzZO/DZucmMZmZzvuSfGKpE+nhtMvYf9UWREYV6X IIy501929zCA3o4uspms/BAW7QGnFyLql5UtQwLZFxL5edOdqo0VVY42fRJJAOPm Pt3VZP3w5SuF/fn9BfJxa7hqOBk89Smp6tKzrN7w36Fy41EC4WA= -----END CERTIFICATE-----Generated at Fri Jul 24 02:36:52 2026 by rpki-client