$ rpki-client -vvf rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft File: C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft (raw, json) Hash identifier: C86eZRuYHfJhnzCoL/o23+R0bub/SRLHPbKwlgy01aM= Subject key identifier: 29:91:1B:28:0E:E3:3C:22:C7:6F:67:4C:42:19:14:BE:1F:2D:F4:2F Authority key identifier: C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94 Certificate issuer: /CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894 Certificate serial: 2AF95753FB09C49AD5CF92F482284417A4319AA4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 10:43:08 +0000 Manifest this update: Thu 23 Jul 2026 10:38:08 +0000 Manifest next update: Fri 24 Jul 2026 14:32:08 +0000 Files and hashes: 1: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: Pfe66TELIpbboDlTlvL4smle14adEmFMF0KS3kt6HYM=) 2: C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl (hash: QKnGTxHh/ZYhrymM3aNVaB8dwkoTc62/HgbewMcRlpY=) 3: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: occ5qoM9oAkKmzdKhCiXxb0YYDDzZw7eQPlVtS1+AXA=) 4: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: ZVZI5MXEYgq+QpFFWNL7lGXYAS9omg0P+vD6tywGpec=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f9:57:53:fb:09:c4:9a:d5:cf:92:f4:82:28:44:17:a4:31:9a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894 Validity Not Before: Jul 23 10:38:08 2026 GMT Not After : Jul 24 14:32:08 2026 GMT Subject: CN=29911B280EE33C22C76F674C421914BE1F2DF42F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4d:8e:53:cf:e6:ac:86:fb:3a:04:5f:35:7a: c9:90:0b:05:e5:bf:aa:50:05:27:fd:28:55:58:41: 36:0f:b6:87:33:6e:6c:62:78:3d:85:a7:0a:7f:69: c2:80:5d:4e:a2:52:10:f4:5b:ba:87:e7:f3:fe:7a: f0:3c:cc:4b:a0:b1:a8:e8:c9:ce:0c:c6:6a:f6:26: 67:6b:ff:6e:54:fb:25:4f:d6:57:d7:e9:8d:25:38: 36:6c:be:6c:f1:0a:fa:7f:ad:11:8c:1d:2f:6f:66: b6:70:d6:bc:41:91:ea:41:32:9e:8e:cf:06:ef:57: f6:a7:24:bf:db:fe:87:3a:ed:0b:70:94:92:68:fe: dc:00:f5:3f:8b:65:a5:3e:3a:22:9e:8a:f9:3a:9a: f0:89:ef:ba:d9:a4:cd:bc:b9:8c:0c:2f:7c:6e:bc: e5:23:d5:89:82:90:ac:e8:b1:54:00:c3:ac:d6:fd: 58:79:ee:f0:5f:32:f1:1f:de:4d:fa:20:e0:a4:d0: f4:59:16:c4:6a:4d:ef:34:9c:78:bf:61:ca:f4:82: 7c:ee:db:18:d9:22:71:3b:fa:fc:94:34:1e:5a:64: e0:2d:c2:c3:bc:81:30:ff:14:44:03:ba:b5:ef:d4: 8a:bc:44:33:bd:1b:df:b7:e1:38:5b:87:ad:78:75: f2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:91:1B:28:0E:E3:3C:22:C7:6F:67:4C:42:19:14:BE:1F:2D:F4:2F X509v3 Authority Key Identifier: keyid:C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:09:00:49:3f:3f:5a:d4:87:a3:bc:df:83:e3:7c:69:f2:24: 3a:45:5d:8a:cb:3d:37:18:98:0f:b0:eb:18:3b:e6:a9:eb:9e: ab:c8:dc:23:84:29:12:44:ea:9d:fa:c8:5c:db:40:b4:e7:0d: 5c:f3:3d:bf:2f:e9:a5:c9:dc:0b:b5:53:f2:46:49:c6:df:4c: 89:b6:45:9d:5e:f5:bd:25:cb:a8:5e:62:f5:99:43:f6:2c:54: 1d:42:70:d3:f0:cc:3a:33:35:db:d0:33:fe:b1:76:96:52:db: 69:de:d0:8d:77:9d:1c:7a:3c:0f:be:4c:b0:45:19:0c:88:bd: 7d:52:05:da:fd:78:e1:27:a1:48:4c:38:74:4e:45:9b:b6:87: 07:e9:6f:38:33:0f:88:bb:06:8e:88:d7:e1:93:a5:6b:38:47: 3a:fe:02:53:54:69:a9:08:4d:07:64:ea:84:df:0a:a5:57:76: 6b:50:e9:94:bc:32:99:f8:fb:c3:6c:ed:0e:7c:35:ea:7f:03: 6e:60:e1:68:18:42:19:52:55:62:35:95:a8:b3:4b:ca:0c:44: 17:19:52:37:c9:2a:1e:07:da:ad:19:ae:8d:f9:96:fb:f1:31: 82:d6:23:30:0a:97:6b:40:4e:d1:61:56:75:65:be:56:4f:fd: f7:47:f9:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKvlXU/sJxJrVz5L0gihEF6QxmqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQkRGMEVBMTRERERGMEM1NTFERjE4NjMzMkNCODU5 RUI5RDg5NDAeFw0yNjA3MjMxMDM4MDhaFw0yNjA3MjQxNDMyMDhaMDMxMTAvBgNV BAMTKDI5OTExQjI4MEVFMzNDMjJDNzZGNjc0QzQyMTkxNEJFMUYyREY0MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKTY5Tz+ashvs6BF81esmQCwXl v6pQBSf9KFVYQTYPtoczbmxieD2Fpwp/acKAXU6iUhD0W7qH5/P+evA8zEugsajo yc4Mxmr2Jmdr/25U+yVP1lfX6Y0lODZsvmzxCvp/rRGMHS9vZrZw1rxBkepBMp6O zwbvV/anJL/b/oc67QtwlJJo/twA9T+LZaU+OiKeivk6mvCJ77rZpM28uYwML3xu vOUj1YmCkKzosVQAw6zW/Vh57vBfMvEf3k36IOCk0PRZFsRqTe80nHi/Ycr0gnzu 2xjZInE7+vyUNB5aZOAtwsO8gTD/FEQDurXv1Iq8RDO9G9+34Thbh614dfIPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKZEbKA7jPCLHb2dMQhkUvh8t9C8wHwYDVR0j BBgwFoAUybvfDqFN3fDFUd8YYzLLhZ652JQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTk1OTAxY2MtMWI4ZS00ZjNmLWEzZDAtMzI2OWYwZTE2YzQxLzAvQzlCQkRGMEVB MTRERERGMEM1NTFERjE4NjMzMkNCODU5RUI5RDg5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUJCREYwRUExNEREREYwQzU1MURGMTg2MzMyQ0I4NTlFQjlE ODk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTk1OTAxY2MtMWI4ZS00ZjNmLWEz ZDAtMzI2OWYwZTE2YzQxLzAvQzlCQkRGMEVBMTRERERGMEM1NTFERjE4NjMzMkNC ODU5RUI5RDg5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgJAEk/P1rUh6O834PjfGnyJDpFXYrLPTcY mA+w6xg75qnrnqvI3COEKRJE6p36yFzbQLTnDVzzPb8v6aXJ3Au1U/JGScbfTIm2 RZ1e9b0ly6heYvWZQ/YsVB1CcNPwzDozNdvQM/6xdpZS22ne0I13nRx6PA++TLBF GQyIvX1SBdr9eOEnoUhMOHRORZu2hwfpbzgzD4i7Bo6I1+GTpWs4Rzr+AlNUaakI TQdk6oTfCqVXdmtQ6ZS8Mpn4+8Ns7Q58Nep/A25g4WgYQhlSVWI1laizS8oMRBcZ UjfJKh4H2q0Zro35lvvxMYLWIzAKl2tATtFhVnVlvlZP/fdH+Vo= -----END CERTIFICATE-----Generated at Fri Jul 24 06:20:27 2026 by rpki-client