$ rpki-client -vvf rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft File: 9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft (raw, json) Hash identifier: sfrcp2U6P9mZpb/7AkpbP+DGw9mQrePYrZ4k8kJJ1gs= Subject key identifier: 86:8D:F1:9D:79:C5:AC:19:65:4A:70:5E:99:CE:09:6A:EB:FF:02:55 Authority key identifier: 9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C Certificate issuer: /CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C Certificate serial: 5F96C376FCFF89CCDAB1ACE96C14E904531CCA74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 00:44:57 +0000 Manifest this update: Fri 24 Jul 2026 00:39:57 +0000 Manifest next update: Sat 25 Jul 2026 01:59:57 +0000 Files and hashes: 1: 323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa (hash: OPLg91e3QDUz0oxlHDtfye2YYgsL8tJKKqHtqB32VO0=) 2: 3130332e32332e39382e302f32332d3233203d3e20313530323435.roa (hash: 7xqE0F9v+EXRL9dCkePN1NHTFDTfqFm2QwKgbcBy4ao=) 3: 3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (hash: /Ar9BLD37pzpWiMramvnEnpVLlVnDEgU4xEdcB/AMOA=) 4: 3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (hash: w0+5fhmaBdxaqda6UhvTmcPuYEdSCtqjLZVClfvW/98=) 5: 9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl (hash: hsixDaSf2JYJdaxx6JFUYJUXVH8zOdS/4NDqcl/AA80=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:96:c3:76:fc:ff:89:cc:da:b1:ac:e9:6c:14:e9:04:53:1c:ca:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C Validity Not Before: Jul 24 00:39:57 2026 GMT Not After : Jul 25 01:59:57 2026 GMT Subject: CN=868DF19D79C5AC19654A705E99CE096AEBFF0255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:10:6c:98:17:a1:09:5e:a9:94:ca:34:8b:00: a9:92:90:61:d3:73:f5:a7:00:3c:45:01:c8:55:66: 78:7a:0f:23:fc:c1:e0:ac:40:91:9b:94:75:ab:8f: 67:33:42:27:e8:93:c2:eb:17:c4:66:a2:6c:b9:66: 22:a8:34:3e:03:79:08:b0:cf:a3:41:42:9c:80:fc: da:a0:2b:a5:9b:39:52:d4:2e:5e:54:c5:1a:ce:1c: d6:55:31:63:18:5f:df:38:c7:64:ad:ee:8a:a4:ac: a1:fe:3c:29:94:8a:ee:a2:ac:7f:88:a7:16:9d:bb: fa:eb:27:82:5f:d0:cb:d7:38:8d:00:ab:76:da:dc: 88:78:9a:47:c8:f2:9a:cc:9e:d6:65:a7:1b:7a:04: ad:c1:43:ff:57:be:1b:b2:37:a1:0e:2f:aa:66:bb: 1b:cf:1e:7c:13:1f:77:5a:86:cb:42:4e:37:00:b9: e6:85:94:5d:4d:6d:32:a2:05:af:2b:ab:b7:74:d9: b8:43:f9:c2:43:fb:a2:b7:76:21:a8:25:c6:11:45: 9a:1f:06:ea:6b:2a:ee:6d:cc:ac:e8:89:d4:38:48: 2a:6d:bf:15:7c:3c:fa:b0:9f:ba:86:9f:50:c0:78: 12:ae:97:70:e2:41:80:ea:1a:45:aa:e7:e1:bc:68: ef:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8D:F1:9D:79:C5:AC:19:65:4A:70:5E:99:CE:09:6A:EB:FF:02:55 X509v3 Authority Key Identifier: keyid:9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f0:c7:a5:59:18:42:57:77:c9:b7:95:16:ed:53:20:89:52: 81:30:f0:15:51:dc:db:b3:30:3f:dc:2e:e1:d2:ce:bc:59:8a: 64:f2:b2:68:1d:68:82:5b:1a:42:4b:fa:f4:ef:6e:0b:67:60: cc:7e:53:9d:59:07:27:69:af:0e:3e:ad:5b:d7:31:d7:70:ff: 8e:bc:29:04:9b:e7:f3:84:82:80:37:e2:e4:2b:c5:f5:f5:ed: bf:42:40:3e:12:33:d5:b2:49:f1:6f:1c:bd:2b:b3:72:9c:78: b5:97:76:89:f0:c9:9b:ad:c5:e8:34:05:57:9a:74:d0:28:99: d3:84:0e:a6:b0:f9:d3:ce:04:c5:45:55:f5:ac:0b:72:26:47: f6:5f:01:ed:94:8a:22:17:83:29:3a:0f:4c:e2:67:a0:c2:ec: 3b:c6:fd:32:c2:de:eb:a0:2d:78:b0:4a:07:b9:73:9a:d7:4b: 99:aa:86:8a:1c:f2:9e:68:10:c9:0e:fd:2f:ad:fe:d7:a2:28: a0:7e:b7:d2:73:54:ad:75:d1:42:b0:85:ed:2f:5c:c3:fe:38: 3c:7e:25:29:d4:32:83:89:41:08:45:35:81:f8:a9:51:77:9a: 81:27:c4:5c:35:79:13:8e:80:1d:bc:15:5a:b1:71:00:d3:41: dc:02:28:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX5bDdvz/iczasazpbBTpBFMcynQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURGQzdBNTE0OUQzRkNDMEFDRDlCQkVENTVDNENFOEVB ODJBMDM4QzAeFw0yNjA3MjQwMDM5NTdaFw0yNjA3MjUwMTU5NTdaMDMxMTAvBgNV BAMTKDg2OERGMTlENzlDNUFDMTk2NTRBNzA1RTk5Q0UwOTZBRUJGRjAyNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpEGyYF6EJXqmUyjSLAKmSkGHT c/WnADxFAchVZnh6DyP8weCsQJGblHWrj2czQifok8LrF8Rmomy5ZiKoND4DeQiw z6NBQpyA/NqgK6WbOVLULl5UxRrOHNZVMWMYX984x2St7oqkrKH+PCmUiu6irH+I pxadu/rrJ4Jf0MvXOI0Aq3ba3Ih4mkfI8prMntZlpxt6BK3BQ/9XvhuyN6EOL6pm uxvPHnwTH3dahstCTjcAueaFlF1NbTKiBa8rq7d02bhD+cJD+6K3diGoJcYRRZof BuprKu5tzKzoidQ4SCptvxV8PPqwn7qGn1DAeBKul3DiQYDqGkWq5+G8aO9vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUho3xnXnFrBllSnBemc4Jauv/AlUwHwYDVR0j BBgwFoAUnfx6UUnT/MCs2bvtVcTOjqgqA4wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg0NmY0MjItYzMwMi00NDYyLWI1ODQtNzAwZTkzNDZjYTA5LzAvOURGQzdBNTE0 OUQzRkNDMEFDRDlCQkVENTVDNENFOEVBODJBMDM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REZDN0E1MTQ5RDNGQ0MwQUNEOUJCRUQ1NUM0Q0U4RUE4MkEw MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg0NmY0MjItYzMwMi00NDYyLWI1 ODQtNzAwZTkzNDZjYTA5LzAvOURGQzdBNTE0OUQzRkNDMEFDRDlCQkVENTVDNENF OEVBODJBMDM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvwx6VZGEJXd8m3lRbtUyCJUoEw8BVR3Nuz MD/cLuHSzrxZimTysmgdaIJbGkJL+vTvbgtnYMx+U51ZBydprw4+rVvXMddw/468 KQSb5/OEgoA34uQrxfX17b9CQD4SM9WySfFvHL0rs3KceLWXdonwyZutxeg0BVea dNAomdOEDqaw+dPOBMVFVfWsC3ImR/ZfAe2UiiIXgyk6D0ziZ6DC7DvG/TLC3uug LXiwSge5c5rXS5mqhooc8p5oEMkO/S+t/teiKKB+t9JzVK110UKwhe0vXMP+ODx+ JSnUMoOJQQhFNYH4qVF3moEnxFw1eROOgB28FVqxcQDTQdwCKMc= -----END CERTIFICATE-----Generated at Fri Jul 24 05:16:38 2026 by rpki-client