$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft File: C9C56B3341FC31139F57F78A815CF9851E91375E.mft (raw, json) Hash identifier: Dj4v4GaYkbZEfza/GAdN0sZDdMTtxl7NEoad8sWUhx0= Subject key identifier: BD:DD:75:5A:8D:32:DE:D3:38:79:4F:4B:89:54:35:ED:FD:C0:65:8C Authority key identifier: C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E Certificate issuer: /CN=C9C56B3341FC31139F57F78A815CF9851E91375E Certificate serial: 12C4291E2B2148AD71E9FF49062A12A2628534F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 15:03:22 +0000 Manifest this update: Thu 23 Jul 2026 14:58:22 +0000 Manifest next update: Fri 24 Jul 2026 17:19:22 +0000 Files and hashes: 1: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: ++K50lF9/3pIjVc4GT4lTLKYd8Uj+kdHUPhBXnfZ3JA=) 2: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: YDyhEGDnWg4aoTzQ4Kj70ioCxeiG+fWs6BKdMJUBP40=) 3: C9C56B3341FC31139F57F78A815CF9851E91375E.crl (hash: WirWt2Sm8XpkKvtLMLNnwtlgHeBQMMHB9H91dQl8ZK4=) 4: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: UvvLQHaYsHEf6H/EOqibK//gY5katYyU5vu1/kohXeI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c4:29:1e:2b:21:48:ad:71:e9:ff:49:06:2a:12:a2:62:85:34:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9C56B3341FC31139F57F78A815CF9851E91375E Validity Not Before: Jul 23 14:58:22 2026 GMT Not After : Jul 24 17:19:22 2026 GMT Subject: CN=BDDD755A8D32DED338794F4B895435EDFDC0658C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0b:c8:72:04:c9:43:1c:ff:89:06:91:eb:64: 94:b5:13:6d:08:4e:12:32:5e:9c:6f:97:92:79:01: 30:6f:66:3f:25:aa:e7:bd:ce:65:42:f4:37:0c:f2: 79:d3:08:6b:a2:41:45:ae:62:1f:49:46:a3:66:51: 40:95:31:b7:1c:83:72:94:39:5b:5e:2a:5f:ec:f0: ee:66:ba:76:b7:03:14:97:96:81:75:b1:7b:4b:19: a3:ba:f6:95:9d:48:dc:41:14:75:0e:2e:81:5b:cf: 3d:90:d3:d0:44:a9:ea:10:f4:0b:3d:12:fc:64:a3: 9b:dd:19:bf:3f:d9:7d:20:4a:1e:68:14:3b:4b:aa: 95:96:3f:ec:57:7d:f9:56:e5:56:a1:64:bd:29:97: 4b:62:dc:48:46:1e:7f:63:06:9c:8e:71:9a:ad:2b: 35:e5:7c:8c:0a:25:0f:84:12:e0:bf:57:24:84:ac: 95:b7:8d:51:7f:d3:52:57:0f:7e:9d:57:4f:9b:b5: 2d:84:f4:eb:70:7a:7a:e7:6d:bf:07:e0:58:a6:3d: 7d:48:7a:71:e7:f4:be:ed:5b:e7:b8:09:40:ed:ce: 4a:c8:fd:65:c0:07:b7:4e:37:7a:5b:c4:38:9c:73: b3:9d:bc:12:b5:4d:fd:50:bd:ba:8a:d7:36:af:2f: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DD:75:5A:8D:32:DE:D3:38:79:4F:4B:89:54:35:ED:FD:C0:65:8C X509v3 Authority Key Identifier: keyid:C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:7b:74:e8:6f:10:ac:5f:54:f1:8b:64:6f:d4:b9:91:51:ec: 7a:d4:2a:9b:1c:11:e1:f9:71:27:27:36:49:30:a8:9a:62:4d: fb:27:bf:df:8e:dd:3f:ba:89:5d:de:f9:78:13:a0:31:14:4d: 1b:ea:55:f1:94:e1:99:a2:b1:90:61:07:52:41:1d:bd:1f:09: ef:92:98:f6:77:4d:cd:e1:21:39:d5:3d:4f:0d:a7:16:75:4b: d3:c8:11:ed:f5:75:b9:d8:f2:46:ff:23:84:39:55:90:ba:9f: 75:6a:a4:94:c6:25:3e:df:7c:c7:c9:dd:8b:af:35:a0:65:f2: 31:50:8d:dc:69:0c:ed:b5:8d:6a:67:9f:29:0c:13:4d:56:da: 02:d8:9b:a7:71:33:10:4d:9e:32:45:c3:8c:0c:4c:b5:c2:04: b0:ef:a8:29:15:24:82:76:38:fa:63:c6:74:a1:bb:99:44:3b: 88:ea:63:1e:c7:50:65:ee:71:98:f3:ea:95:1b:35:13:d4:a8: 6a:22:76:8f:b6:f2:2e:c3:91:0f:78:7d:2f:a0:2a:d2:34:9d: 05:95:7c:3b:12:c4:66:c2:61:56:7c:ee:41:99:00:cf:49:59: 22:dc:9b:58:c3:22:4e:31:ea:ef:d0:3e:a5:00:14:ac:6f:54: 83:e6:89:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEsQpHishSK1x6f9JBioSomKFNPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlDNTZCMzM0MUZDMzExMzlGNTdGNzhBODE1Q0Y5ODUx RTkxMzc1RTAeFw0yNjA3MjMxNDU4MjJaFw0yNjA3MjQxNzE5MjJaMDMxMTAvBgNV BAMTKEJEREQ3NTVBOEQzMkRFRDMzODc5NEY0Qjg5NTQzNUVERkRDMDY1OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3C8hyBMlDHP+JBpHrZJS1E20I ThIyXpxvl5J5ATBvZj8lque9zmVC9DcM8nnTCGuiQUWuYh9JRqNmUUCVMbccg3KU OVteKl/s8O5muna3AxSXloF1sXtLGaO69pWdSNxBFHUOLoFbzz2Q09BEqeoQ9As9 Evxko5vdGb8/2X0gSh5oFDtLqpWWP+xXfflW5VahZL0pl0ti3EhGHn9jBpyOcZqt KzXlfIwKJQ+EEuC/VySErJW3jVF/01JXD36dV0+btS2E9Otwenrnbb8H4FimPX1I enHn9L7tW+e4CUDtzkrI/WXAB7dON3pbxDicc7OdvBK1Tf1QvbqK1zavL7RFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvd11Wo0y3tM4eU9LiVQ17f3AZYwwHwYDVR0j BBgwFoAUycVrM0H8MROfV/eKgVz5hR6RN14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI4YTdmYTUtZmRhMy00YTNlLTkyZjctZmFiZmVkMDVhOTVjLzAvQzlDNTZCMzM0 MUZDMzExMzlGNTdGNzhBODE1Q0Y5ODUxRTkxMzc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUM1NkIzMzQxRkMzMTEzOUY1N0Y3OEE4MTVDRjk4NTFFOTEz NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvQzlDNTZCMzM0MUZDMzExMzlGNTdGNzhBODE1Q0Y5 ODUxRTkxMzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGh7dOhvEKxfVPGLZG/UuZFR7HrUKpscEeH5 cScnNkkwqJpiTfsnv9+O3T+6iV3e+XgToDEUTRvqVfGU4ZmisZBhB1JBHb0fCe+S mPZ3Tc3hITnVPU8NpxZ1S9PIEe31dbnY8kb/I4Q5VZC6n3VqpJTGJT7ffMfJ3Yuv NaBl8jFQjdxpDO21jWpnnykME01W2gLYm6dxMxBNnjJFw4wMTLXCBLDvqCkVJIJ2 OPpjxnShu5lEO4jqYx7HUGXucZjz6pUbNRPUqGoido+28i7DkQ94fS+gKtI0nQWV fDsSxGbCYVZ87kGZAM9JWSLcm1jDIk4x6u/QPqUAFKxvVIPmiZQ= -----END CERTIFICATE-----Generated at Fri Jul 24 03:06:36 2026 by rpki-client