$ rpki-client -vvf rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft File: 9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft (raw, json) Hash identifier: JCFzmJ1vkob2QqP3w8mwacJo7lV0gMnPf2QMJNqKQ+g= Subject key identifier: 2D:5B:0F:0F:32:47:9C:DE:A6:BD:EE:EC:9B:23:F9:EB:34:28:08:6A Authority key identifier: 9F:73:03:1D:F0:49:FC:EA:B5:E8:BD:52:42:74:7E:7D:7D:C4:B4:DD Certificate issuer: /CN=9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD Certificate serial: 7423DDDEF4BD05F7CF5A8B7924FC723366F06D6E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:32:44 +0000 Manifest this update: Thu 23 Jul 2026 18:27:44 +0000 Manifest next update: Fri 24 Jul 2026 21:57:44 +0000 Files and hashes: 1: 323030313a6466353a653238303a3a2f34382d3438203d3e20313431363430.roa (hash: hxbNx1sHpQ2uA7gDNNgf9BYGTMjlNV/I+vSevN2AYMQ=) 2: 9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.crl (hash: 3OiaTD0Kd/Lv1Emiir24gMMW5fbI7W6UFHgYcp0T4O4=) 3: 3130332e3136322e31392e302f32342d3234203d3e20313431363430.roa (hash: 96iWJc2ow6yzAUODuhe0zI0zVFmk0TX0H28U4QCHRcE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.crl rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:23:dd:de:f4:bd:05:f7:cf:5a:8b:79:24:fc:72:33:66:f0:6d:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD Validity Not Before: Jul 23 18:27:44 2026 GMT Not After : Jul 24 21:57:44 2026 GMT Subject: CN=2D5B0F0F32479CDEA6BDEEEC9B23F9EB3428086A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b6:90:e2:d4:f3:24:01:d7:7d:ca:2f:2c:31: 6d:db:da:15:57:8a:fc:61:08:1d:73:9a:d4:90:a9: 68:e4:d2:42:09:4d:71:9b:bd:1c:4d:bc:a7:37:6e: f3:ad:14:3b:0a:77:bb:7e:e4:fe:f7:06:3e:a8:4c: 16:91:53:0f:d2:3d:7a:c7:3b:78:25:0c:1b:ce:a4: b3:00:13:a2:1b:a2:7d:fb:73:0e:cd:29:8f:20:05: d6:57:23:1a:1b:0d:6b:05:57:09:b3:51:d0:c6:0d: b4:6f:b9:d6:e8:9f:11:a1:45:09:d7:b8:6e:f8:31: 09:89:73:c5:36:a6:8a:fc:60:11:0b:0c:5a:cc:79: 35:a7:19:f2:a2:38:20:f2:45:23:d5:a3:68:34:23: 11:2c:bb:cb:85:9b:0e:61:58:e2:dd:a5:3f:4c:2c: 7b:91:3f:72:6c:f1:cb:95:31:34:70:0f:e5:4a:24: 47:28:e3:ad:7d:18:8e:9e:8f:e4:3b:01:62:d8:ce: ba:07:19:42:56:57:83:6c:73:1c:75:4a:c4:28:54: 1f:c4:8e:0c:48:6b:02:71:47:fb:fd:e9:d5:52:24: fb:cd:b8:27:aa:91:c7:27:51:d4:8a:0b:14:ec:62: be:70:39:90:4e:89:41:b7:51:4e:7e:c5:36:a2:42: 6f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5B:0F:0F:32:47:9C:DE:A6:BD:EE:EC:9B:23:F9:EB:34:28:08:6A X509v3 Authority Key Identifier: keyid:9F:73:03:1D:F0:49:FC:EA:B5:E8:BD:52:42:74:7E:7D:7D:C4:B4:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/9F73031DF049FCEAB5E8BD5242747E7D7DC4B4DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:df:97:f3:27:89:2e:53:05:bd:7a:e6:22:49:a8:08:dd:2e: 15:f7:a9:f1:b9:ad:9f:31:9e:ef:f5:be:35:7e:f0:c5:45:1d: 44:02:8d:49:4f:38:6f:99:fd:74:3c:58:7d:d4:f3:c6:19:9c: a5:77:72:87:1f:46:50:eb:83:27:d2:21:b7:3c:1d:51:c6:0f: d0:8b:6b:aa:a5:b2:a3:f6:43:59:8c:04:da:85:50:93:31:a2: 16:5f:1a:70:18:3e:f7:94:a0:9a:49:c2:f9:1e:6a:6f:dd:3d: 03:eb:a6:ba:41:59:6c:c7:fe:16:62:6b:b6:e1:52:45:63:63: 8d:7c:1c:b1:01:91:ea:cc:64:08:c5:9a:38:aa:69:53:5d:13: b0:bd:5d:c4:3f:a8:ef:58:e4:e7:d1:cb:f0:b1:03:40:0e:c6: 2d:1b:5b:e6:d7:22:01:62:2c:48:2a:1a:87:06:7e:24:6a:94: 07:7d:9e:5f:2d:d1:fd:14:ec:e6:21:0c:c8:bb:c7:df:4d:a1: 76:b8:9b:c0:a1:9f:ba:76:62:aa:fe:fe:0b:00:73:84:a4:13: 10:01:73:be:2a:2b:3d:c4:69:e4:a9:43:c1:95:28:b6:00:0f: d6:33:b7:d1:d5:aa:2c:6c:2b:83:57:a3:67:b3:75:a9:aa:01: 8c:a9:72:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdCPd3vS9BffPWot5JPxyM2bwbW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY3MzAzMURGMDQ5RkNFQUI1RThCRDUyNDI3NDdFN0Q3 REM0QjRERDAeFw0yNjA3MjMxODI3NDRaFw0yNjA3MjQyMTU3NDRaMDMxMTAvBgNV BAMTKDJENUIwRjBGMzI0NzlDREVBNkJERUVFQzlCMjNGOUVCMzQyODA4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCtpDi1PMkAdd9yi8sMW3b2hVX ivxhCB1zmtSQqWjk0kIJTXGbvRxNvKc3bvOtFDsKd7t+5P73Bj6oTBaRUw/SPXrH O3glDBvOpLMAE6Ibon37cw7NKY8gBdZXIxobDWsFVwmzUdDGDbRvudbonxGhRQnX uG74MQmJc8U2por8YBELDFrMeTWnGfKiOCDyRSPVo2g0IxEsu8uFmw5hWOLdpT9M LHuRP3Js8cuVMTRwD+VKJEco4619GI6ej+Q7AWLYzroHGUJWV4Nscxx1SsQoVB/E jgxIawJxR/v96dVSJPvNuCeqkccnUdSKCxTsYr5wOZBOiUG3UU5+xTaiQm/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULVsPDzJHnN6mve7smyP56zQoCGowHwYDVR0j BBgwFoAUn3MDHfBJ/Oq16L1SQnR+fX3EtN0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWNjNjM3YmQtNTk3MS00MjY0LTk5N2EtNzQ5ZDgwNGE2ODU4LzAvOUY3MzAzMURG MDQ5RkNFQUI1RThCRDUyNDI3NDdFN0Q3REM0QjRERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjczMDMxREYwNDlGQ0VBQjVFOEJENTI0Mjc0N0U3RDdEQzRC NERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWNjNjM3YmQtNTk3MS00MjY0LTk5 N2EtNzQ5ZDgwNGE2ODU4LzAvOUY3MzAzMURGMDQ5RkNFQUI1RThCRDUyNDI3NDdF N0Q3REM0QjRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPfl/MniS5TBb165iJJqAjdLhX3qfG5rZ8x nu/1vjV+8MVFHUQCjUlPOG+Z/XQ8WH3U88YZnKV3cocfRlDrgyfSIbc8HVHGD9CL a6qlsqP2Q1mMBNqFUJMxohZfGnAYPveUoJpJwvkeam/dPQPrprpBWWzH/hZia7bh UkVjY418HLEBkerMZAjFmjiqaVNdE7C9XcQ/qO9Y5OfRy/CxA0AOxi0bW+bXIgFi LEgqGocGfiRqlAd9nl8t0f0U7OYhDMi7x99NoXa4m8Chn7p2Yqr+/gsAc4SkExAB c74qKz3EaeSpQ8GVKLYAD9Yzt9HVqixsK4NXo2ezdamqAYypcsY= -----END CERTIFICATE-----Generated at Fri Jul 24 01:48:02 2026 by rpki-client