$ rpki-client -vvf rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft File: B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft (raw, json) Hash identifier: /5Br94Kad56OulA+YT3RjnP2WgqhVzuQoOIXNTWANpU= Subject key identifier: 15:5A:40:28:BA:E6:79:7D:A1:4A:B4:83:ED:09:1E:19:63:C7:C4:B7 Authority key identifier: B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC Certificate issuer: /CN=B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC Certificate serial: 502F947314244D0310E7DCBB3F81B731D5BE1433 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft Manifest number: 71 Signing time: Fri 24 Jul 2026 02:32:23 +0000 Manifest this update: Fri 24 Jul 2026 02:27:23 +0000 Manifest next update: Sat 25 Jul 2026 03:25:23 +0000 Files and hashes: 1: 3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (hash: DOdXqvIf8YC77FzkFbP1ZhH9lDDTTUCUrQuHHws44kQ=) 2: B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl (hash: J5WDq/qdfWZ5UapjSTLFG44hjV+J29R32ThB74DaD2Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:2f:94:73:14:24:4d:03:10:e7:dc:bb:3f:81:b7:31:d5:be:14:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC Validity Not Before: Jul 24 02:27:23 2026 GMT Not After : Jul 25 03:25:23 2026 GMT Subject: CN=155A4028BAE6797DA14AB483ED091E1963C7C4B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0d:77:22:1b:6b:29:bf:3c:eb:23:d6:75:54: d5:04:bc:82:68:eb:00:4b:d5:6a:01:18:5f:e8:63: 36:f7:a0:82:ba:f4:4e:61:22:fd:4b:49:fd:54:e1: 57:a2:49:cf:78:35:1f:3b:54:37:99:ac:a5:74:07: 0d:3d:06:a6:31:f4:e1:e2:b5:08:3f:44:13:20:9a: 2d:15:97:aa:ba:6f:d9:c3:31:84:9c:8e:57:c6:0e: 3a:81:fa:d2:da:33:eb:28:6d:e3:a1:d7:06:d5:c9: 7b:9d:4d:35:e5:c6:71:e5:c5:5f:91:cb:f1:3f:87: f6:ca:98:2a:09:93:fa:ae:41:ac:cb:d2:43:d4:c8: 83:fd:cd:03:41:9a:a2:c1:f2:1e:e5:75:1d:e6:e1: bf:05:45:07:18:67:d2:1c:04:e2:5c:1e:5b:5e:e9: 35:ee:a8:8c:8a:2f:77:16:21:3a:da:3a:87:e8:08: e3:3a:24:93:e9:20:0d:13:cc:4b:8f:ee:4c:d0:b3: 42:8d:7e:5c:99:93:cd:4b:18:4b:79:e7:13:14:98: e8:32:b9:8b:23:cf:75:59:e5:04:05:6b:96:ad:b1: 9e:ab:96:79:d0:69:89:1c:ff:c1:f8:15:07:c5:87: c8:71:a0:ea:97:4b:79:43:a3:63:9e:0a:9e:f7:d3: 36:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5A:40:28:BA:E6:79:7D:A1:4A:B4:83:ED:09:1E:19:63:C7:C4:B7 X509v3 Authority Key Identifier: keyid:B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ef:a3:b7:ed:97:a7:ca:c3:7f:b2:47:95:39:17:e8:15:31: d8:0f:f0:d1:4c:3c:a0:db:c0:3e:f3:86:5a:56:44:09:34:77: 47:fe:83:7d:b0:8f:54:23:4d:88:7c:89:6d:2b:0e:63:64:cb: 45:f5:52:12:8c:cb:5a:d3:1b:82:35:c0:bc:98:19:ad:95:47: c1:12:3b:da:f2:dd:98:24:ad:5a:54:b6:28:ce:6c:d1:50:cd: 87:93:fd:7b:dd:df:9e:5a:6d:57:d0:62:86:44:4d:49:d8:f9: 3c:c2:a7:ce:7a:76:24:57:66:d7:20:98:56:a0:92:57:d7:1c: c9:bb:71:80:7b:0c:92:9f:49:c5:af:ca:66:32:05:c1:d2:40: df:b9:45:23:ed:8d:71:4e:b0:21:d9:a5:a2:d0:12:66:17:d8: 7a:5c:96:39:37:13:25:c5:c7:91:6f:5a:fb:e5:4e:e9:68:83: 02:36:8b:ef:22:ff:32:be:a5:ce:9d:f5:92:70:f2:67:15:f9: a5:80:b4:c1:59:cb:80:dd:be:0c:2c:90:a9:34:65:b6:7b:30: 3f:ac:9d:74:69:e8:92:15:ef:60:39:de:61:37:b2:cf:cd:5a: e0:82:30:cc:7f:64:bd:ac:fb:09:c4:c4:8a:58:96:0a:93:65: 90:8d:28:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUC+UcxQkTQMQ59y7P4G3MdW+FDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk5MDhGNTk0RTYzMEJFQTFFRUEwRERCRjRBMzBEQzhD RjEyN0NBQzAeFw0yNjA3MjQwMjI3MjNaFw0yNjA3MjUwMzI1MjNaMDMxMTAvBgNV BAMTKDE1NUE0MDI4QkFFNjc5N0RBMTRBQjQ4M0VEMDkxRTE5NjNDN0M0QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNDXciG2spvzzrI9Z1VNUEvIJo 6wBL1WoBGF/oYzb3oIK69E5hIv1LSf1U4VeiSc94NR87VDeZrKV0Bw09BqYx9OHi tQg/RBMgmi0Vl6q6b9nDMYScjlfGDjqB+tLaM+sobeOh1wbVyXudTTXlxnHlxV+R y/E/h/bKmCoJk/quQazL0kPUyIP9zQNBmqLB8h7ldR3m4b8FRQcYZ9IcBOJcHlte 6TXuqIyKL3cWITraOofoCOM6JJPpIA0TzEuP7kzQs0KNflyZk81LGEt55xMUmOgy uYsjz3VZ5QQFa5atsZ6rlnnQaYkc/8H4FQfFh8hxoOqXS3lDo2OeCp730za3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFVpAKLrmeX2hSrSD7QkeGWPHxLcwHwYDVR0j BBgwFoAUuZCPWU5jC+oe6g3b9KMNyM8SfKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZlY2M3MmEtZTk1NC00MzAyLTkyYzQtZjRmMjMwNzBiOTk3LzAvQjk5MDhGNTk0 RTYzMEJFQTFFRUEwRERCRjRBMzBEQzhDRjEyN0NBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTkwOEY1OTRFNjMwQkVBMUVFQTBEREJGNEEzMERDOENGMTI3 Q0FDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZlY2M3MmEtZTk1NC00MzAyLTky YzQtZjRmMjMwNzBiOTk3LzAvQjk5MDhGNTk0RTYzMEJFQTFFRUEwRERCRjRBMzBE QzhDRjEyN0NBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/vo7ftl6fKw3+yR5U5F+gVMdgP8NFMPKDb wD7zhlpWRAk0d0f+g32wj1QjTYh8iW0rDmNky0X1UhKMy1rTG4I1wLyYGa2VR8ES O9ry3ZgkrVpUtijObNFQzYeT/Xvd355abVfQYoZETUnY+TzCp856diRXZtcgmFag klfXHMm7cYB7DJKfScWvymYyBcHSQN+5RSPtjXFOsCHZpaLQEmYX2Hpcljk3EyXF x5FvWvvlTulogwI2i+8i/zK+pc6d9ZJw8mcV+aWAtMFZy4DdvgwskKk0ZbZ7MD+s nXRp6JIV72A53mE3ss/NWuCCMMx/ZL2s+wnExIpYlgqTZZCNKCc= -----END CERTIFICATE-----Generated at Fri Jul 24 05:25:07 2026 by rpki-client