$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft File: D88374740C8E344956042586CFB98762292C9BED.mft (raw, json) Hash identifier: H+M+jqfPNqgacM4sZWpOZ5NBuoPUPOb810N1CkmQFZk= Subject key identifier: A4:9B:42:E2:AB:87:12:99:06:5A:99:E7:5A:0A:53:BF:4F:38:8E:4A Authority key identifier: D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED Certificate issuer: /CN=D88374740C8E344956042586CFB98762292C9BED Certificate serial: 19FCB01EAE9FEF6680ADD84407534FC20F4D2538 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 06:01:47 +0000 Manifest this update: Fri 24 Jul 2026 05:56:47 +0000 Manifest next update: Sat 25 Jul 2026 08:03:47 +0000 Files and hashes: 1: 3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa (hash: 5Is2TaaRgt6RZbxF5fTOe8DOSBDKMRf8+8dK8LxpkgM=) 2: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: pi4GpQEqsy5D0pG1/itP4Rd3gKkO+zB1DmoOxM7Tnmw=) 3: D88374740C8E344956042586CFB98762292C9BED.crl (hash: rMS9h6l48M7GT0mWUDbUPL07AnljPEK1V14zxLrMoxg=) 4: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: lP4x2eURdSlbv1g2ymW9KzMnGg6tWIQJ2QaIxsnxvtg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:fc:b0:1e:ae:9f:ef:66:80:ad:d8:44:07:53:4f:c2:0f:4d:25:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D88374740C8E344956042586CFB98762292C9BED Validity Not Before: Jul 24 05:56:47 2026 GMT Not After : Jul 25 08:03:47 2026 GMT Subject: CN=A49B42E2AB871299065A99E75A0A53BF4F388E4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:25:49:15:34:6e:56:03:b0:0f:96:2b:3a:39: d6:9e:0f:ce:16:2c:00:c5:cc:54:da:dc:5c:e3:e4: 58:31:28:d0:cd:45:39:c4:90:cd:40:0f:e8:c5:cf: cc:1b:96:4d:0c:26:3b:f6:ef:54:10:ef:4f:a5:81: 11:ca:97:3a:85:35:1f:88:57:de:d8:48:9c:87:17: f0:5b:d0:40:3b:2b:06:15:39:98:2e:89:31:dc:43: 1d:ae:57:48:fb:f5:3c:80:8b:fc:b1:c9:a9:a0:76: 15:e4:51:60:15:6c:9b:ef:5f:c5:c7:32:ea:89:7c: 1c:28:4f:b9:5b:b5:cf:71:4c:ef:39:9a:d1:60:8b: 43:05:be:d9:6f:d6:56:66:c7:28:6b:23:a1:4c:9d: 2e:54:60:36:d2:1f:f9:b8:d5:ee:92:36:ab:90:2a: 64:b1:fc:d1:5e:01:73:19:9a:a0:58:1d:0f:e2:56: 1e:6c:08:73:a8:42:39:3d:92:83:16:67:e8:80:fb: 55:0c:be:0c:a3:e9:81:a9:02:34:a2:f0:46:2b:01: 03:f6:cd:7d:a5:eb:e5:e2:a8:71:74:b1:6e:4f:41: e5:d2:b0:d8:17:3b:91:c6:e5:eb:b9:3f:43:ef:44: 16:a3:f1:9d:4f:76:cb:a7:b4:c7:04:b0:1c:50:b2: 5b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9B:42:E2:AB:87:12:99:06:5A:99:E7:5A:0A:53:BF:4F:38:8E:4A X509v3 Authority Key Identifier: keyid:D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3c:4f:f2:db:c2:27:03:8d:81:65:47:ac:9a:5b:3c:b5:3e: 19:23:4e:90:47:95:ba:66:49:e4:e7:73:5e:d3:3e:32:38:2d: 33:3e:1d:bc:f0:12:6e:b0:1f:9e:dd:ab:ba:77:f8:47:70:3d: 50:50:6f:c7:03:1a:eb:87:c4:87:a6:d5:ab:d5:96:cd:9f:aa: 1d:28:60:3b:08:06:c4:3d:7b:c5:03:3a:21:c9:35:7e:3d:45: d1:d0:08:fc:b2:e1:18:63:e1:c1:59:9b:ef:09:82:32:c3:df: 7f:45:5c:67:ea:82:c6:21:45:9b:21:0a:fc:4f:de:e2:d3:5f: 0f:51:22:0d:c3:4f:94:68:65:a3:36:9a:74:51:25:78:a0:93: 84:99:c6:42:01:54:65:26:cf:ea:66:a7:1f:58:20:37:c4:cc: 13:be:ed:db:77:97:8a:c1:5b:6d:f0:ba:bc:2e:f7:f0:21:97: 6c:29:27:b2:27:ea:13:0e:33:24:93:d3:f2:6e:7d:fd:07:b4: e3:c5:5a:4c:7a:7e:e5:e6:5f:bf:b4:c7:bb:55:1c:13:9b:d9: 69:ef:51:6f:c9:ee:67:b1:09:38:a0:a6:2b:e8:4e:36:c8:6c: 06:cb:7f:c0:fa:17:5c:b6:e4:40:e0:e7:b7:64:a3:6e:86:74: 85:c4:01:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGfywHq6f72aArdhEB1NPwg9NJTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg4Mzc0NzQwQzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIy OTJDOUJFRDAeFw0yNjA3MjQwNTU2NDdaFw0yNjA3MjUwODAzNDdaMDMxMTAvBgNV BAMTKEE0OUI0MkUyQUI4NzEyOTkwNjVBOTlFNzVBMEE1M0JGNEYzODhFNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpJUkVNG5WA7APlis6OdaeD84W LADFzFTa3Fzj5FgxKNDNRTnEkM1AD+jFz8wblk0MJjv271QQ70+lgRHKlzqFNR+I V97YSJyHF/Bb0EA7KwYVOZguiTHcQx2uV0j79TyAi/yxyamgdhXkUWAVbJvvX8XH MuqJfBwoT7lbtc9xTO85mtFgi0MFvtlv1lZmxyhrI6FMnS5UYDbSH/m41e6SNquQ KmSx/NFeAXMZmqBYHQ/iVh5sCHOoQjk9koMWZ+iA+1UMvgyj6YGpAjSi8EYrAQP2 zX2l6+XiqHF0sW5PQeXSsNgXO5HG5eu5P0PvRBaj8Z1PdsuntMcEsBxQslshAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpJtC4quHEpkGWpnnWgpTv084jkowHwYDVR0j BBgwFoAU2IN0dAyONElWBCWGz7mHYiksm+0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWViZTdhZDgtZTE1Yy00MDE0LWJmYjMtYmU2OWI3ZDVkZTg4LzAvRDg4Mzc0NzQw QzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIyOTJDOUJFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODgzNzQ3NDBDOEUzNDQ5NTYwNDI1ODZDRkI5ODc2MjI5MkM5 QkVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm YjMtYmU2OWI3ZDVkZTg4LzAvRDg4Mzc0NzQwQzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3 NjIyOTJDOUJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABs8T/LbwicDjYFlR6yaWzy1PhkjTpBHlbpm SeTnc17TPjI4LTM+HbzwEm6wH57dq7p3+EdwPVBQb8cDGuuHxIem1avVls2fqh0o YDsIBsQ9e8UDOiHJNX49RdHQCPyy4Rhj4cFZm+8JgjLD339FXGfqgsYhRZshCvxP 3uLTXw9RIg3DT5RoZaM2mnRRJXigk4SZxkIBVGUmz+pmpx9YIDfEzBO+7dt3l4rB W23wurwu9/Ahl2wpJ7In6hMOMyST0/Juff0HtOPFWkx6fuXmX7+0x7tVHBOb2Wnv UW/J7mexCTigpivoTjbIbAbLf8D6F1y25EDg57dko26GdIXEAVw= -----END CERTIFICATE-----Generated at Fri Jul 24 14:16:51 2026 by rpki-client