$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft File: C9C56B3341FC31139F57F78A815CF9851E91375E.mft (raw, json) Hash identifier: JlMuXqSLB06bt481wGdmvrlFvv2QosRMqLevKuoHDdw= Subject key identifier: 4E:04:AA:A5:67:76:27:49:1F:99:E2:BA:E8:16:01:06:BD:68:A5:B4 Authority key identifier: C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E Certificate issuer: /CN=C9C56B3341FC31139F57F78A815CF9851E91375E Certificate serial: 2A8866D7982B1F1E33A754E094CFBDF560026BC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 09:20:52 +0000 Manifest this update: Fri 24 Jul 2026 09:15:52 +0000 Manifest next update: Sat 25 Jul 2026 10:12:52 +0000 Files and hashes: 1: C9C56B3341FC31139F57F78A815CF9851E91375E.crl (hash: 0CWWHSuofMDBgzTPkEETCeGlzR4fw45tVqxEXyBKSGI=) 2: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: YDyhEGDnWg4aoTzQ4Kj70ioCxeiG+fWs6BKdMJUBP40=) 3: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: ++K50lF9/3pIjVc4GT4lTLKYd8Uj+kdHUPhBXnfZ3JA=) 4: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: UvvLQHaYsHEf6H/EOqibK//gY5katYyU5vu1/kohXeI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:88:66:d7:98:2b:1f:1e:33:a7:54:e0:94:cf:bd:f5:60:02:6b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9C56B3341FC31139F57F78A815CF9851E91375E Validity Not Before: Jul 24 09:15:52 2026 GMT Not After : Jul 25 10:12:52 2026 GMT Subject: CN=4E04AAA5677627491F99E2BAE8160106BD68A5B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a5:56:c8:6d:c7:88:48:2d:4e:23:1f:44:a9: 27:07:a8:02:2a:6b:5b:1a:45:8a:cf:b2:8d:53:db: 20:3c:c7:fa:5f:6d:0b:19:8e:20:fa:88:96:33:aa: ff:e7:15:35:ab:86:3d:07:36:99:2f:38:35:88:fa: 32:0e:e9:42:14:30:d1:51:f2:60:5a:21:34:e3:30: 85:23:fd:83:b4:5b:d0:9e:3c:c2:cd:11:3c:96:2d: e1:95:d3:22:9d:82:52:ea:b2:2d:cc:00:ac:18:35: e3:3e:6a:db:f4:4d:70:76:e3:69:c3:6d:98:c0:ea: 81:46:97:7f:73:d1:83:58:f2:d8:7e:c0:40:8d:a1: e0:8d:69:6f:a1:82:fc:82:3c:21:2f:95:15:5e:24: de:52:df:1d:20:b2:82:6f:78:ea:1a:b3:8f:63:28: 18:22:a3:32:53:b5:ca:56:3a:23:4a:52:77:61:ea: f7:be:2c:71:34:a4:b2:4f:43:fa:62:08:0b:a0:3e: 2a:66:89:3d:aa:15:10:4c:b0:74:cf:49:81:ea:c6: 7c:2a:d6:c2:9b:00:e0:ac:b4:48:75:f4:87:c0:6e: 1a:28:71:a4:63:60:2d:06:a2:d8:7a:fd:8f:5d:05: 77:98:83:c6:59:ac:54:c5:58:67:69:76:5e:8e:ca: 39:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:04:AA:A5:67:76:27:49:1F:99:E2:BA:E8:16:01:06:BD:68:A5:B4 X509v3 Authority Key Identifier: keyid:C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:04:3a:c8:2f:03:8f:44:2d:35:e6:24:9b:34:fd:3e:50:26: 2c:14:20:6a:4c:a1:49:98:42:d6:b0:93:12:e0:5e:94:94:b8: c2:45:dc:86:7b:d3:ef:5d:af:69:0a:3f:2c:fe:d1:98:4d:0b: a4:b5:3b:24:dc:4f:0e:67:9a:fb:8a:75:bc:e1:ce:74:1f:1b: fc:cb:9b:4c:7c:6a:55:c8:c7:84:68:81:2b:2e:37:ea:94:a6: 47:75:bc:00:4e:da:a9:a7:69:2c:8c:4e:a0:8f:5c:86:01:8a: 97:4b:5e:ca:a9:f9:9e:dd:47:33:4a:92:5d:a3:37:f5:af:c2: 60:09:0a:a1:b7:85:cf:e7:6f:38:75:f8:f2:01:25:8a:1f:b2: f0:43:df:3f:b3:e9:b4:74:ee:04:5a:78:96:e1:ab:b9:8b:6d: d7:78:e1:77:64:a4:5e:47:a8:82:d0:bc:04:39:38:7f:0b:75: ed:af:8b:8a:78:fe:b7:41:38:e7:78:87:89:88:08:ee:94:76: db:44:b9:cd:80:22:83:9e:c0:f7:1a:28:eb:cc:81:56:e7:9d: 26:be:8c:7e:a3:c2:34:09:ff:f1:6e:af:21:e1:cd:94:b2:da: e2:84:7d:47:3c:22:f8:f7:bf:37:f5:93:ad:30:7b:aa:54:c2: 0f:ac:69:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKohm15grHx4zp1TglM+99WACa8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlDNTZCMzM0MUZDMzExMzlGNTdGNzhBODE1Q0Y5ODUx RTkxMzc1RTAeFw0yNjA3MjQwOTE1NTJaFw0yNjA3MjUxMDEyNTJaMDMxMTAvBgNV BAMTKDRFMDRBQUE1Njc3NjI3NDkxRjk5RTJCQUU4MTYwMTA2QkQ2OEE1QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTpVbIbceISC1OIx9EqScHqAIq a1saRYrPso1T2yA8x/pfbQsZjiD6iJYzqv/nFTWrhj0HNpkvODWI+jIO6UIUMNFR 8mBaITTjMIUj/YO0W9CePMLNETyWLeGV0yKdglLqsi3MAKwYNeM+atv0TXB242nD bZjA6oFGl39z0YNY8th+wECNoeCNaW+hgvyCPCEvlRVeJN5S3x0gsoJveOoas49j KBgiozJTtcpWOiNKUndh6ve+LHE0pLJPQ/piCAugPipmiT2qFRBMsHTPSYHqxnwq 1sKbAOCstEh19IfAbhoocaRjYC0Goth6/Y9dBXeYg8ZZrFTFWGdpdl6OyjlbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTgSqpWd2J0kfmeK66BYBBr1opbQwHwYDVR0j BBgwFoAUycVrM0H8MROfV/eKgVz5hR6RN14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI4YTdmYTUtZmRhMy00YTNlLTkyZjctZmFiZmVkMDVhOTVjLzAvQzlDNTZCMzM0 MUZDMzExMzlGNTdGNzhBODE1Q0Y5ODUxRTkxMzc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUM1NkIzMzQxRkMzMTEzOUY1N0Y3OEE4MTVDRjk4NTFFOTEz NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvQzlDNTZCMzM0MUZDMzExMzlGNTdGNzhBODE1Q0Y5 ODUxRTkxMzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQEOsgvA49ELTXmJJs0/T5QJiwUIGpMoUmY QtawkxLgXpSUuMJF3IZ70+9dr2kKPyz+0ZhNC6S1OyTcTw5nmvuKdbzhznQfG/zL m0x8alXIx4RogSsuN+qUpkd1vABO2qmnaSyMTqCPXIYBipdLXsqp+Z7dRzNKkl2j N/WvwmAJCqG3hc/nbzh1+PIBJYofsvBD3z+z6bR07gRaeJbhq7mLbdd44XdkpF5H qILQvAQ5OH8Lde2vi4p4/rdBOOd4h4mICO6UdttEuc2AIoOewPcaKOvMgVbnnSa+ jH6jwjQJ//FuryHhzZSy2uKEfUc8Ivj3vzf1k60we6pUwg+saRY= -----END CERTIFICATE-----Generated at Fri Jul 24 13:20:58 2026 by rpki-client