$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft File: 9FA20A14AF60219662C9668DE75D25F0C8B84220.mft (raw, json) Hash identifier: JE6+bewDgIczq7SNpyfZzsHkMaMNJXwsH/olJy3vlOE= Subject key identifier: 95:E4:F0:DB:0E:7E:55:8B:F7:21:4E:5E:D8:18:77:AA:8B:32:BD:2C Authority key identifier: 9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20 Certificate issuer: /CN=9FA20A14AF60219662C9668DE75D25F0C8B84220 Certificate serial: 3C341F233A65E486F6B575BB509A223C0676A064 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 10:01:42 +0000 Manifest this update: Fri 24 Jul 2026 09:56:42 +0000 Manifest next update: Sat 25 Jul 2026 11:19:42 +0000 Files and hashes: 1: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: YS2T4alON/4lMEWof38ueY05KIoXFInJbn/EVbWzFdU=) 2: 9FA20A14AF60219662C9668DE75D25F0C8B84220.crl (hash: 7xazs+k+9JQ6tTE5S9ClCVse9HaVSfeWzgON+v7Rth0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:34:1f:23:3a:65:e4:86:f6:b5:75:bb:50:9a:22:3c:06:76:a0:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FA20A14AF60219662C9668DE75D25F0C8B84220 Validity Not Before: Jul 24 09:56:42 2026 GMT Not After : Jul 25 11:19:42 2026 GMT Subject: CN=95E4F0DB0E7E558BF7214E5ED81877AA8B32BD2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d8:69:45:cd:d7:ba:a9:50:55:ba:fc:e3:c6: 1a:52:4a:10:64:1a:09:3f:f4:de:4d:5f:05:a0:13: 5a:73:79:41:94:4b:89:fa:48:76:e9:94:65:9e:0b: be:84:4a:ef:08:c3:88:c3:fa:41:ac:8b:b3:8f:c6: 0d:8d:b0:21:3d:eb:68:b3:04:19:83:1c:d2:d3:5d: 22:cf:21:ba:77:28:9e:79:89:bb:cf:59:b4:c7:f4: a7:14:72:7e:d5:f9:36:a0:80:23:e7:ba:56:3d:90: 4a:f0:cf:88:89:ec:94:54:e9:20:88:ac:3e:a7:b2: d3:ce:e2:9b:0e:2d:c3:d6:eb:09:1e:79:33:05:0b: 23:bb:ef:2f:cb:b3:e7:01:18:2b:60:de:f3:39:c9: 5f:d3:bf:c6:1b:37:cd:f0:f4:8b:14:75:63:62:82: a1:ad:cb:07:17:dd:09:ef:3c:e9:30:4a:b2:a1:de: e1:44:b1:95:07:b5:c3:b7:4c:7f:0e:5e:be:be:ab: 61:f3:65:e4:40:d3:10:98:6f:ac:98:dd:f0:db:bf: 04:1a:a1:a1:57:f5:1c:66:18:de:82:19:a3:00:f1: d8:03:34:d5:1a:b5:a2:8c:2e:93:b3:a3:4b:cc:4f: 61:a1:2a:77:4e:74:c9:7b:37:16:c8:ce:73:21:03: 2d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E4:F0:DB:0E:7E:55:8B:F7:21:4E:5E:D8:18:77:AA:8B:32:BD:2C X509v3 Authority Key Identifier: keyid:9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ba:a4:6c:63:d6:f3:b7:0e:d7:14:f7:b9:d3:da:df:10:e0: 03:b8:0f:96:5e:6f:aa:26:92:47:90:37:2c:d4:a8:58:db:4d: ca:ff:c4:25:47:ce:d4:48:e3:e9:08:e0:54:a7:82:f9:0a:c4: c9:0e:12:fa:f5:5c:6e:22:1b:a8:84:d8:1e:6d:d2:e0:53:52: 8a:4c:62:6d:f5:fc:0a:1c:52:c2:7e:d6:30:4d:ab:f5:6e:56: 62:49:79:aa:63:29:00:3d:1e:39:8e:0e:78:d9:2a:70:c1:e8: c8:66:dd:46:6d:76:36:1b:5c:8e:6f:6f:34:b2:90:7e:9d:45: 04:d8:27:3a:2a:a4:f5:13:54:e0:33:c2:63:be:48:3b:57:3d: 0b:de:dc:e6:62:0a:70:99:d2:09:a4:95:da:2d:ed:a0:fb:62: f0:93:11:2b:d6:09:eb:4e:9b:39:41:9b:5c:88:f4:af:e0:80: 91:6c:b6:d3:24:34:d8:62:eb:f0:a9:76:d7:9c:f2:8f:bd:f1: cf:3e:02:fa:c0:77:28:51:de:8a:10:2c:14:e7:16:0c:b7:3c: b0:c9:dd:b9:7d:69:3b:58:95:83:79:ac:37:f0:88:f0:2e:2a: 8b:06:10:90:56:46:7c:03:a4:58:0e:46:26:a7:71:42:20:72: 9f:8f:fc:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPDQfIzpl5Ib2tXW7UJoiPAZ2oGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBMjBBMTRBRjYwMjE5NjYyQzk2NjhERTc1RDI1RjBD OEI4NDIyMDAeFw0yNjA3MjQwOTU2NDJaFw0yNjA3MjUxMTE5NDJaMDMxMTAvBgNV BAMTKDk1RTRGMERCMEU3RTU1OEJGNzIxNEU1RUQ4MTg3N0FBOEIzMkJEMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC02GlFzde6qVBVuvzjxhpSShBk Ggk/9N5NXwWgE1pzeUGUS4n6SHbplGWeC76ESu8Iw4jD+kGsi7OPxg2NsCE962iz BBmDHNLTXSLPIbp3KJ55ibvPWbTH9KcUcn7V+TaggCPnulY9kErwz4iJ7JRU6SCI rD6nstPO4psOLcPW6wkeeTMFCyO77y/Ls+cBGCtg3vM5yV/Tv8YbN83w9IsUdWNi gqGtywcX3QnvPOkwSrKh3uFEsZUHtcO3TH8OXr6+q2HzZeRA0xCYb6yY3fDbvwQa oaFX9RxmGN6CGaMA8dgDNNUataKMLpOzo0vMT2GhKndOdMl7NxbIznMhAy3jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUleTw2w5+VYv3IU5e2Bh3qosyvSwwHwYDVR0j BBgwFoAUn6IKFK9gIZZiyWaN510l8Mi4QiAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzVlNTQ2OGMtMGFjNy00NGE5LTg4MjEtMjgyNTdjNWE4NjA3LzAvOUZBMjBBMTRB RjYwMjE5NjYyQzk2NjhERTc1RDI1RjBDOEI4NDIyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkEyMEExNEFGNjAyMTk2NjJDOTY2OERFNzVEMjVGMEM4Qjg0 MjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvOUZBMjBBMTRBRjYwMjE5NjYyQzk2NjhERTc1RDI1 RjBDOEI4NDIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+6pGxj1vO3DtcU97nT2t8Q4AO4D5Zeb6om kkeQNyzUqFjbTcr/xCVHztRI4+kI4FSngvkKxMkOEvr1XG4iG6iE2B5t0uBTUopM Ym31/AocUsJ+1jBNq/VuVmJJeapjKQA9HjmODnjZKnDB6Mhm3UZtdjYbXI5vbzSy kH6dRQTYJzoqpPUTVOAzwmO+SDtXPQve3OZiCnCZ0gmkldot7aD7YvCTESvWCetO mzlBm1yI9K/ggJFsttMkNNhi6/Cpdtec8o+98c8+AvrAdyhR3ooQLBTnFgy3PLDJ 3bl9aTtYlYN5rDfwiPAuKosGEJBWRnwDpFgORiancUIgcp+P/Dc= -----END CERTIFICATE-----Generated at Fri Jul 24 13:08:18 2026 by rpki-client