$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft File: 9FA20A14AF60219662C9668DE75D25F0C8B84220.mft (raw, json) Hash identifier: MHWwFbJdaJvPgBWW3MOCO+nKQqKUQ4iw9wj4luv0slI= Subject key identifier: 2C:DF:C0:20:92:29:F6:46:2B:2C:9E:95:7D:24:CD:38:7B:64:66:82 Authority key identifier: 9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20 Certificate issuer: /CN=9FA20A14AF60219662C9668DE75D25F0C8B84220 Certificate serial: 3B7D932FEE7B96CF68CC7C43C8C8ACE999C3A5DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:36:40 +0000 Manifest this update: Thu 23 Jul 2026 17:31:40 +0000 Manifest next update: Fri 24 Jul 2026 18:00:40 +0000 Files and hashes: 1: 9FA20A14AF60219662C9668DE75D25F0C8B84220.crl (hash: XC70UiGo62j8z9ShbBXK6EMXhte8Q+w+iWek3YPQ5zc=) 2: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: YS2T4alON/4lMEWof38ueY05KIoXFInJbn/EVbWzFdU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:7d:93:2f:ee:7b:96:cf:68:cc:7c:43:c8:c8:ac:e9:99:c3:a5:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FA20A14AF60219662C9668DE75D25F0C8B84220 Validity Not Before: Jul 23 17:31:40 2026 GMT Not After : Jul 24 18:00:40 2026 GMT Subject: CN=2CDFC0209229F6462B2C9E957D24CD387B646682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3b:f4:a3:ba:07:de:58:f0:70:4f:a7:dd:89: 9b:02:09:84:6d:ed:dc:62:2b:18:4c:0d:57:78:23: 80:72:c6:c5:2b:6b:cf:31:af:5d:3a:ed:18:26:70: 69:15:cb:05:bd:64:fb:a3:e2:2a:1d:6c:7d:2e:a0: 65:e6:83:0f:ab:86:cb:8c:81:de:e8:51:16:e0:9c: ee:aa:31:3a:c4:a7:6f:00:71:49:56:6a:91:60:a5: 56:ff:6b:20:04:fc:18:52:d9:a4:fc:44:9e:44:59: 08:93:5e:c1:47:39:4d:57:62:bf:28:c9:4d:f6:4b: c2:a6:15:33:9d:53:95:b7:6f:a8:8e:1e:10:6e:b1: 62:8c:e7:f0:0f:2b:c5:65:3e:1e:db:29:c5:c8:d1: 53:37:57:e2:cf:ae:c7:65:cb:cb:93:c4:d7:b7:fa: 23:20:e4:88:5e:60:b4:ec:b5:9d:a9:41:2e:72:3d: f6:2d:3a:99:4d:b4:e5:27:2e:de:b6:9f:f0:65:c0: 17:98:52:df:c8:b0:f8:ce:8b:6c:dc:ab:3f:6f:ac: 8b:c7:62:48:84:34:8e:40:a1:00:70:94:d8:81:08: c2:54:1d:65:d2:5f:af:8d:69:06:bb:1a:52:2c:b6: e8:27:8b:4f:6f:24:21:2d:51:a8:bd:73:7c:82:2e: 7b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DF:C0:20:92:29:F6:46:2B:2C:9E:95:7D:24:CD:38:7B:64:66:82 X509v3 Authority Key Identifier: keyid:9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:7e:27:81:af:93:0a:b0:35:5d:f6:99:e4:00:8e:f0:b2:51: b5:7a:b2:b1:cd:ac:b0:9b:b6:b7:92:e5:4b:f7:40:72:41:42: 28:bc:48:c6:8e:8f:88:e0:1a:63:00:5e:35:41:de:0e:d8:56: b4:30:fe:ca:03:14:4b:50:51:45:88:17:3f:8b:59:79:23:18: 91:8c:f6:ad:35:74:bd:c1:d4:03:95:9f:8d:51:52:af:a4:db: db:30:6c:26:b8:69:93:5d:dc:c2:12:6d:c4:6c:f9:b9:61:b6: da:e5:f1:8a:ca:7e:d8:10:55:20:e6:70:d9:23:53:42:b1:c1: d9:50:d9:c4:00:f9:bc:a6:ac:12:59:84:ab:4a:4b:4a:d5:47: 91:a4:fe:8d:ac:5e:39:c9:48:cc:89:64:6f:4c:a6:20:e8:a5: 0e:c2:61:5c:a2:49:e4:4e:36:7a:05:f6:70:21:3d:e1:83:27: f6:eb:6a:aa:76:99:a5:f6:4c:38:9e:0b:e5:d8:03:2e:21:46: 1e:16:92:d4:aa:36:eb:84:4f:5d:1a:80:9a:c3:62:ff:2f:cb: 94:e2:80:3e:b6:5d:ca:32:72:8b:7b:2b:a1:2e:f7:b4:bd:12: ff:04:53:c1:16:71:ff:dc:4e:1b:db:fb:39:81:ea:cc:89:3e: e5:cd:24:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO32TL+57ls9ozHxDyMis6ZnDpdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBMjBBMTRBRjYwMjE5NjYyQzk2NjhERTc1RDI1RjBD OEI4NDIyMDAeFw0yNjA3MjMxNzMxNDBaFw0yNjA3MjQxODAwNDBaMDMxMTAvBgNV BAMTKDJDREZDMDIwOTIyOUY2NDYyQjJDOUU5NTdEMjRDRDM4N0I2NDY2ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDO/SjugfeWPBwT6fdiZsCCYRt 7dxiKxhMDVd4I4ByxsUra88xr1067RgmcGkVywW9ZPuj4iodbH0uoGXmgw+rhsuM gd7oURbgnO6qMTrEp28AcUlWapFgpVb/ayAE/BhS2aT8RJ5EWQiTXsFHOU1XYr8o yU32S8KmFTOdU5W3b6iOHhBusWKM5/APK8VlPh7bKcXI0VM3V+LPrsdly8uTxNe3 +iMg5IheYLTstZ2pQS5yPfYtOplNtOUnLt62n/BlwBeYUt/IsPjOi2zcqz9vrIvH YkiENI5AoQBwlNiBCMJUHWXSX6+NaQa7GlIstugni09vJCEtUai9c3yCLntzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULN/AIJIp9kYrLJ6VfSTNOHtkZoIwHwYDVR0j BBgwFoAUn6IKFK9gIZZiyWaN510l8Mi4QiAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzVlNTQ2OGMtMGFjNy00NGE5LTg4MjEtMjgyNTdjNWE4NjA3LzAvOUZBMjBBMTRB RjYwMjE5NjYyQzk2NjhERTc1RDI1RjBDOEI4NDIyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkEyMEExNEFGNjAyMTk2NjJDOTY2OERFNzVEMjVGMEM4Qjg0 MjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvOUZBMjBBMTRBRjYwMjE5NjYyQzk2NjhERTc1RDI1 RjBDOEI4NDIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACN+J4GvkwqwNV32meQAjvCyUbV6srHNrLCb treS5Uv3QHJBQii8SMaOj4jgGmMAXjVB3g7YVrQw/soDFEtQUUWIFz+LWXkjGJGM 9q01dL3B1AOVn41RUq+k29swbCa4aZNd3MISbcRs+blhttrl8YrKftgQVSDmcNkj U0KxwdlQ2cQA+bymrBJZhKtKS0rVR5Gk/o2sXjnJSMyJZG9MpiDopQ7CYVyiSeRO NnoF9nAhPeGDJ/braqp2maX2TDieC+XYAy4hRh4WktSqNuuET10agJrDYv8vy5Ti gD62Xcoycot7K6Eu97S9Ev8EU8EWcf/cThvb+zmB6syJPuXNJKY= -----END CERTIFICATE-----Generated at Fri Jul 24 11:20:50 2026 by rpki-client