$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft File: B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft (raw, json) Hash identifier: Lgtmon7PqkQzvv4WKBnBMma0dzxhbMY9X2a7jCXwXmE= Subject key identifier: 8A:EC:45:A9:97:A5:4D:0B:08:DA:2E:BA:DD:BB:7A:70:B5:84:17:50 Authority key identifier: B9:A5:C7:ED:38:66:D3:CA:D2:44:DA:B3:64:D5:DE:AB:01:B4:1B:27 Certificate issuer: /CN=B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27 Certificate serial: 65E766D27C314519BC5381002F5B582B74D688F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 16:40:18 +0000 Manifest this update: Thu 23 Jul 2026 16:35:18 +0000 Manifest next update: Fri 24 Jul 2026 18:01:18 +0000 Files and hashes: 1: B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl (hash: tshoetye5x1H7tZuGhINiytGa5TJYPHIhVS7k4iw/Ms=) 2: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: fnDhoiL+V7XHrTgcb34geX86ATfCep/ePS+vjKoYts4=) 3: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: 0dA2mfgVhJxUx/fjGY3+Dm6GSQVEEUHFqlvFJHB2B4M=) 4: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: 4Y1mZB2qJy+rnsbtqPt0mJQCafCDh7l369bEnaFDUds=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e7:66:d2:7c:31:45:19:bc:53:81:00:2f:5b:58:2b:74:d6:88:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27 Validity Not Before: Jul 23 16:35:18 2026 GMT Not After : Jul 24 18:01:18 2026 GMT Subject: CN=8AEC45A997A54D0B08DA2EBADDBB7A70B5841750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6a:d2:ef:61:25:e5:af:c9:29:04:2b:97:15: 94:2f:a5:a4:ce:46:61:d3:d5:2a:f0:56:e4:38:d7: 3a:a6:d3:a8:1c:1e:d7:b7:8e:04:3b:46:25:d0:65: e4:df:2b:3f:aa:54:b3:fe:e9:6d:60:9d:56:d3:f0: 9d:6c:77:97:43:81:dd:00:96:56:0c:f2:1c:ec:ec: be:cf:21:47:75:f8:ec:2a:df:a3:20:58:d7:8d:f8: 68:31:74:ee:5b:6f:ec:fc:99:7a:71:fd:6c:8f:55: 7b:d3:a9:54:e8:c0:08:03:1a:cd:c9:06:27:87:a5: 74:43:87:24:0e:d2:bb:bd:a9:a4:1c:3d:00:ce:8c: 8f:7c:7b:79:d0:e5:ab:16:75:d2:bf:f9:f0:dc:01: 10:9a:0e:6a:c5:6f:5c:22:48:2a:16:c4:aa:63:31: c9:41:9d:d0:29:cb:97:04:6b:b2:f3:f8:0f:41:02: a6:a3:13:64:1c:13:f4:8e:c8:ed:f8:74:3f:f5:a8: d5:aa:8d:13:80:b0:14:2e:2e:2a:f9:a8:23:f9:67: 4c:78:bc:09:dc:9f:4c:2b:a6:bc:31:0d:03:dc:50: 4a:e0:dc:8c:62:c5:45:04:9d:3f:59:35:5d:05:de: 93:51:c5:16:0a:6b:b1:eb:fd:97:a2:d0:93:5a:0e: f2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EC:45:A9:97:A5:4D:0B:08:DA:2E:BA:DD:BB:7A:70:B5:84:17:50 X509v3 Authority Key Identifier: keyid:B9:A5:C7:ED:38:66:D3:CA:D2:44:DA:B3:64:D5:DE:AB:01:B4:1B:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:2f:87:bc:21:59:b8:ed:7e:a5:c7:f2:9f:71:cd:97:49:fb: d1:50:84:4e:ad:b9:5b:6c:a1:c7:7a:78:8c:03:c5:c6:d7:99: 1c:a2:4d:9f:12:59:99:0b:43:6f:85:04:a9:3b:f4:45:c2:bd: d4:40:6d:04:7f:65:8c:06:47:7a:6a:d6:ac:0b:97:df:bc:56: 6a:03:26:ed:5a:bb:fd:3f:5a:e0:0e:0e:d2:44:33:e4:7f:cc: 2e:37:03:a3:3b:7b:9d:40:6b:21:56:26:d4:9e:49:36:e1:97: ac:30:7c:38:f1:55:30:f5:f0:a2:c8:23:40:5a:ea:4d:24:00: c3:5a:9c:4f:26:47:03:c4:62:9b:a5:36:a6:b6:bb:b4:48:7f: 26:64:cd:25:74:82:3b:2a:09:35:65:11:45:02:a7:e5:9e:5a: 43:15:09:ab:f1:6f:b0:38:9b:68:f1:75:b3:42:2a:b5:38:12: 19:e9:0a:c3:04:b1:6d:aa:46:d2:f9:c2:c9:a8:0e:8e:54:47: f2:11:b2:ff:d0:26:16:a2:ba:f9:69:2b:7d:24:28:f7:28:1b: 4b:f9:05:a0:a1:fa:30:ee:51:32:9d:50:d0:39:89:55:c2:78: 6a:25:d2:16:49:c7:fa:e9:02:59:6f:27:bc:99:6e:a6:c0:c3: 6b:8a:20:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZedm0nwxRRm8U4EAL1tYK3TWiPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNUM3RUQzODY2RDNDQUQyNDREQUIzNjRENURFQUIw MUI0MUIyNzAeFw0yNjA3MjMxNjM1MThaFw0yNjA3MjQxODAxMThaMDMxMTAvBgNV BAMTKDhBRUM0NUE5OTdBNTREMEIwOERBMkVCQUREQkI3QTcwQjU4NDE3NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMatLvYSXlr8kpBCuXFZQvpaTO RmHT1SrwVuQ41zqm06gcHte3jgQ7RiXQZeTfKz+qVLP+6W1gnVbT8J1sd5dDgd0A llYM8hzs7L7PIUd1+Owq36MgWNeN+GgxdO5bb+z8mXpx/WyPVXvTqVTowAgDGs3J BieHpXRDhyQO0ru9qaQcPQDOjI98e3nQ5asWddK/+fDcARCaDmrFb1wiSCoWxKpj MclBndApy5cEa7Lz+A9BAqajE2QcE/SOyO34dD/1qNWqjROAsBQuLir5qCP5Z0x4 vAncn0wrprwxDQPcUErg3IxixUUEnT9ZNV0F3pNRxRYKa7Hr/Zei0JNaDvLLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiuxFqZelTQsI2i663bt6cLWEF1AwHwYDVR0j BBgwFoAUuaXH7Thm08rSRNqzZNXeqwG0GycwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkxMDY4MjctODY2ZS00YWMzLThmNzktYTZlMzIwYjIwZGU3LzAvQjlBNUM3RUQz ODY2RDNDQUQyNDREQUIzNjRENURFQUIwMUI0MUIyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUE1QzdFRDM4NjZEM0NBRDI0NERBQjM2NEQ1REVBQjAxQjQx QjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkxMDY4MjctODY2ZS00YWMzLThm NzktYTZlMzIwYjIwZGU3LzAvQjlBNUM3RUQzODY2RDNDQUQyNDREQUIzNjRENURF QUIwMUI0MUIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8vh7whWbjtfqXH8p9xzZdJ+9FQhE6tuVts ocd6eIwDxcbXmRyiTZ8SWZkLQ2+FBKk79EXCvdRAbQR/ZYwGR3pq1qwLl9+8VmoD Ju1au/0/WuAODtJEM+R/zC43A6M7e51AayFWJtSeSTbhl6wwfDjxVTD18KLII0Ba 6k0kAMNanE8mRwPEYpulNqa2u7RIfyZkzSV0gjsqCTVlEUUCp+WeWkMVCavxb7A4 m2jxdbNCKrU4EhnpCsMEsW2qRtL5wsmoDo5UR/IRsv/QJhaiuvlpK30kKPcoG0v5 BaCh+jDuUTKdUNA5iVXCeGol0hZJx/rpAllvJ7yZbqbAw2uKIG4= -----END CERTIFICATE-----Generated at Fri Jul 24 08:20:56 2026 by rpki-client