$ rpki-client -vvf rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft File: 1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft (raw, json) Hash identifier: BbBxmKv+Vd9V/oJwivFfCxu3Waqn0DOJr2rm6Mv8rfA= Subject key identifier: D6:C7:40:B0:90:4D:D4:88:BC:AA:54:21:FA:86:18:39:37:1D:97:5A Authority key identifier: 1D:91:17:06:C9:A5:E8:A4:99:3B:1A:D5:19:49:8D:E9:F6:09:FD:97 Certificate issuer: /CN=1D911706C9A5E8A4993B1AD519498DE9F609FD97 Certificate serial: 3B4592C49B1CB8C7D57C65841CFDE01ACA5ABED4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:53:14 +0000 Manifest this update: Thu 23 Jul 2026 18:48:14 +0000 Manifest next update: Fri 24 Jul 2026 19:19:14 +0000 Files and hashes: 1: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: F4rX5kdBMIK+q1JAnOl0J4l31YWcV9qdCJ59RuEth5I=) 2: 1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl (hash: 14gfNh2YEqp9A+5WjapEaV4bNglQUW4k2MfWYslnH/E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:45:92:c4:9b:1c:b8:c7:d5:7c:65:84:1c:fd:e0:1a:ca:5a:be:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D911706C9A5E8A4993B1AD519498DE9F609FD97 Validity Not Before: Jul 23 18:48:14 2026 GMT Not After : Jul 24 19:19:14 2026 GMT Subject: CN=D6C740B0904DD488BCAA5421FA861839371D975A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:43:70:f6:d9:52:f4:16:1a:84:50:f7:ec:c4: ae:ed:ae:08:db:33:32:a1:3e:0b:7c:2c:16:00:21: e8:7d:14:61:2d:cf:0a:8a:93:7d:c2:cb:22:fd:47: 4b:8c:ec:b7:29:9b:0d:93:11:68:04:bb:bb:9c:f8: dc:b7:cc:ff:4b:d2:a2:99:9a:84:e6:2a:82:e9:a9: 74:8c:4a:16:2b:bb:8e:8f:a7:c6:86:0e:b5:38:71: 2f:e1:fc:f1:ca:ff:8c:94:6a:46:73:84:00:44:fd: 02:91:27:48:d2:94:71:ef:7e:af:17:6e:15:25:6c: 64:e6:2a:31:91:71:9e:84:de:47:f9:22:86:ea:34: 99:26:4a:25:30:a4:03:cd:6a:a6:64:43:01:89:14: fb:17:42:1b:be:45:5b:7f:5b:c3:6a:1e:9f:ec:23: 6b:f8:86:14:d3:bd:e2:d4:a0:b7:e2:9d:08:86:a2: 18:37:0a:9f:e6:ab:eb:25:7a:51:e2:be:ea:fe:85: 89:1a:f8:be:10:b1:c0:12:8f:30:73:66:d2:d0:5a: 1d:75:d1:d5:c0:8a:f8:e2:29:64:c2:83:e0:be:cd: 8f:8e:7a:35:29:ce:22:ba:c5:a6:49:83:2e:dc:47: 92:49:44:12:96:82:8f:41:54:4f:ab:5a:6e:03:28: 54:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C7:40:B0:90:4D:D4:88:BC:AA:54:21:FA:86:18:39:37:1D:97:5A X509v3 Authority Key Identifier: keyid:1D:91:17:06:C9:A5:E8:A4:99:3B:1A:D5:19:49:8D:E9:F6:09:FD:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1f:4a:23:b9:27:e3:7d:61:ea:51:87:3c:fb:09:6f:8d:34: 14:8e:f6:b9:ec:c3:a2:d1:09:46:7a:c8:84:e1:38:07:fb:54: 04:f2:d8:b4:f2:31:45:5b:fe:0e:2b:ad:4f:9e:80:90:7d:18: ab:21:ed:b5:a4:93:0d:d3:fe:13:81:88:11:4c:12:34:06:c4: 77:29:56:5c:fb:4d:40:1a:8b:c6:de:00:9a:b4:21:25:d8:15: 34:55:84:06:4b:6c:de:bb:49:1b:5e:2e:d3:41:93:3f:86:11: db:28:71:07:53:eb:09:7c:9b:b9:ed:ad:00:92:26:71:3b:21: f6:78:e8:a8:96:3c:cb:11:71:df:43:d9:21:f8:2b:d2:6c:cc: 3d:0a:c6:25:69:2f:7d:77:53:5b:0f:62:35:41:0c:fe:4c:ec: 00:08:f9:26:7f:a2:55:92:e4:7d:3d:cc:7a:1f:d3:03:ef:80: 41:21:01:25:99:01:49:08:f1:34:3b:55:4c:d1:30:bd:a1:cd: 64:48:6e:44:9d:34:cd:e7:4c:61:b3:df:cb:8c:df:c5:37:d2: 11:67:f7:50:ca:6f:52:57:e5:6a:15:ac:22:94:d1:8d:7f:39: 51:00:bb:c6:8e:fc:98:c5:88:9d:d0:4c:c1:a0:58:c5:7f:34: b1:92:87:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO0WSxJscuMfVfGWEHP3gGspavtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ5MTE3MDZDOUE1RThBNDk5M0IxQUQ1MTk0OThERTlG NjA5RkQ5NzAeFw0yNjA3MjMxODQ4MTRaFw0yNjA3MjQxOTE5MTRaMDMxMTAvBgNV BAMTKEQ2Qzc0MEIwOTA0REQ0ODhCQ0FBNTQyMUZBODYxODM5MzcxRDk3NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlQ3D22VL0FhqEUPfsxK7trgjb MzKhPgt8LBYAIeh9FGEtzwqKk33CyyL9R0uM7Lcpmw2TEWgEu7uc+Ny3zP9L0qKZ moTmKoLpqXSMShYru46Pp8aGDrU4cS/h/PHK/4yUakZzhABE/QKRJ0jSlHHvfq8X bhUlbGTmKjGRcZ6E3kf5IobqNJkmSiUwpAPNaqZkQwGJFPsXQhu+RVt/W8NqHp/s I2v4hhTTveLUoLfinQiGohg3Cp/mq+slelHivur+hYka+L4QscASjzBzZtLQWh11 0dXAivjiKWTCg+C+zY+OejUpziK6xaZJgy7cR5JJRBKWgo9BVE+rWm4DKFQbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1sdAsJBN1Ii8qlQh+oYYOTcdl1owHwYDVR0j BBgwFoAUHZEXBsml6KSZOxrVGUmN6fYJ/ZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTMyOTc5M2UtOGYxOC00MTE2LTkyNjgtYTEzM2RhZjExY2VmLzAvMUQ5MTE3MDZD OUE1RThBNDk5M0IxQUQ1MTk0OThERTlGNjA5RkQ5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRDkxMTcwNkM5QTVFOEE0OTkzQjFBRDUxOTQ5OERFOUY2MDlG RDk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky NjgtYTEzM2RhZjExY2VmLzAvMUQ5MTE3MDZDOUE1RThBNDk5M0IxQUQ1MTk0OThE RTlGNjA5RkQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4fSiO5J+N9YepRhzz7CW+NNBSO9rnsw6LR CUZ6yIThOAf7VATy2LTyMUVb/g4rrU+egJB9GKsh7bWkkw3T/hOBiBFMEjQGxHcp Vlz7TUAai8beAJq0ISXYFTRVhAZLbN67SRteLtNBkz+GEdsocQdT6wl8m7ntrQCS JnE7IfZ46KiWPMsRcd9D2SH4K9JszD0KxiVpL313U1sPYjVBDP5M7AAI+SZ/olWS 5H09zHof0wPvgEEhASWZAUkI8TQ7VUzRML2hzWRIbkSdNM3nTGGz38uM38U30hFn 91DKb1JX5WoVrCKU0Y1/OVEAu8aO/JjFiJ3QTMGgWMV/NLGSh04= -----END CERTIFICATE-----Generated at Fri Jul 24 11:26:42 2026 by rpki-client