$ rpki-client -vvf rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft File: 9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft (raw, json) Hash identifier: Zc8MKUgkB/wZnJGp7MZHxdoMlU6X+T9WgTXCw/2GN5k= Subject key identifier: 60:AD:09:6B:CC:30:E1:78:E5:BB:C2:C9:77:AF:C3:65:03:85:0A:1E Authority key identifier: 93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C Certificate issuer: /CN=9370AF17CF894C561A727E816DE3B11D5D8AAD9C Certificate serial: 1E0A23CEBD04239F6B233AF67C77981369BAB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 07:28:33 +0000 Manifest this update: Fri 24 Jul 2026 07:23:33 +0000 Manifest next update: Sat 25 Jul 2026 11:27:33 +0000 Files and hashes: 1: 3130332e3138362e33332e302f32342d3234203d3e20313439363930.roa (hash: 66uNmMCT6fkEdO81aZRWkTBSkfQiCejM3k2UxZQSC6k=) 2: 9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl (hash: JI7AaRnGJJM2EjCrXa/BrkslyLanKQ85qvKZTpIm2Ps=) 3: 3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa (hash: rp1e1zzn4/8hrijf1AXdkJbP5FeTjYw1wnI20jUxS/k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:0a:23:ce:bd:04:23:9f:6b:23:3a:f6:7c:77:98:13:69:ba:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9370AF17CF894C561A727E816DE3B11D5D8AAD9C Validity Not Before: Jul 24 07:23:33 2026 GMT Not After : Jul 25 11:27:33 2026 GMT Subject: CN=60AD096BCC30E178E5BBC2C977AFC36503850A1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:38:c0:e0:8e:42:90:e4:77:43:58:7e:d1:e8: de:0f:c2:f8:ec:06:10:c0:c5:ac:da:56:83:cc:1c: 43:a5:fd:59:66:e8:7c:99:9f:95:01:10:6a:96:bc: 41:1d:d6:ba:a9:a9:2c:d2:c2:00:3c:03:5c:3f:13: 32:26:fc:3b:89:45:4c:c2:11:cd:d3:02:4d:3e:61: cf:93:3c:4e:07:d1:55:29:e1:e7:2b:2a:22:a8:d2: c4:49:ee:1e:c1:cb:8c:12:e4:2a:30:d1:bd:a0:ef: 7a:eb:0c:5b:e4:50:65:2a:b7:12:7e:67:dd:ed:45: eb:52:46:f2:64:b7:6b:04:83:8c:7e:8d:0f:a6:13: 96:51:36:13:cd:e3:d0:fb:55:b8:7d:75:f0:c6:49: d7:67:2b:22:e2:d5:99:a0:22:21:63:dc:d8:f6:9a: 28:df:10:5a:2a:11:aa:ca:b3:f2:b5:b3:52:2f:6f: a6:b9:01:f5:13:bd:13:12:4b:0b:27:6b:b9:7e:26: 60:45:1f:60:e9:af:b3:ec:20:ea:4c:7d:4b:6d:29: e9:91:09:70:b7:c7:b7:d8:e9:4d:62:ac:07:6b:d8: 29:f2:a4:91:72:0d:d6:1e:06:cf:2c:48:1a:cc:67: f3:bc:6d:0d:ac:56:d0:7d:67:17:a0:c5:b4:8b:6b: 4e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AD:09:6B:CC:30:E1:78:E5:BB:C2:C9:77:AF:C3:65:03:85:0A:1E X509v3 Authority Key Identifier: keyid:93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:63:27:64:1a:4c:49:06:95:f7:0b:9f:97:5c:22:9d:01:84: dc:6e:ec:46:20:48:7a:a1:9d:d4:d3:6c:0f:c5:80:a3:18:06: 8a:0a:ee:30:a0:b7:90:69:17:9b:91:b6:dc:10:ec:65:9d:11: c0:d2:20:33:30:6e:29:5a:96:25:48:35:5f:df:4c:90:a5:af: a1:d8:2f:35:4b:54:35:b9:d9:ce:d7:59:85:94:a2:f2:11:71: a3:04:cf:ee:cd:01:d4:9f:72:6f:f1:18:33:42:62:03:c1:33: da:73:90:59:7f:86:30:dd:bf:53:3a:f1:79:94:c0:90:3f:93: 0e:fe:49:0a:34:25:c5:45:dc:77:98:23:65:bd:6a:9a:ff:a3: d7:dd:7b:41:39:4f:20:2b:ff:53:6b:25:53:65:75:80:e2:5a: 71:80:4b:c1:a7:2c:52:e2:17:b5:51:cf:66:3a:7a:c3:d5:e7: 96:49:28:74:7a:21:a9:03:1d:0d:73:82:16:d5:2f:ee:c1:d2: 47:25:a1:67:2d:aa:40:6c:ae:4f:8e:08:6c:26:a6:9e:58:9a: 2d:de:cc:b6:79:74:c4:a7:45:a8:cc:d1:80:42:1d:78:02:44: 58:95:c8:4c:19:14:89:e1:66:15:f6:27:fb:ca:a2:93:0d:1f: 92:85:f8:e2 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITHgojzr0EI59rIzr2fHeYE2m6tzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg5MzcwQUYxN0NGODk0QzU2MUE3MjdFODE2REUzQjExRDVE OEFBRDlDMB4XDTI2MDcyNDA3MjMzM1oXDTI2MDcyNTExMjczM1owMzExMC8GA1UE AxMoNjBBRDA5NkJDQzMwRTE3OEU1QkJDMkM5NzdBRkMzNjUwMzg1MEExRTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ84wOCOQpDkd0NYftHo3g/C+OwG EMDFrNpWg8wcQ6X9WWbofJmflQEQapa8QR3WuqmpLNLCADwDXD8TMib8O4lFTMIR zdMCTT5hz5M8TgfRVSnh5ysqIqjSxEnuHsHLjBLkKjDRvaDveusMW+RQZSq3En5n 3e1F61JG8mS3awSDjH6ND6YTllE2E83j0PtVuH118MZJ12crIuLVmaAiIWPc2Paa KN8QWioRqsqz8rWzUi9vprkB9RO9ExJLCydruX4mYEUfYOmvs+wg6kx9S20p6ZEJ cLfHt9jpTWKsB2vYKfKkkXIN1h4GzyxIGsxn87xtDaxW0H1nF6DFtItrTvkCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBRgrQlrzDDheOW7wsl3r8NlA4UKHjAfBgNVHSME GDAWgBSTcK8Xz4lMVhpyfoFt47EdXYqtnDAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9k Y2U5ZjQzZC0wOGJhLTRkMDItOGYzOC03NDczMmYxNWNkOGMvMC85MzcwQUYxN0NG ODk0QzU2MUE3MjdFODE2REUzQjExRDVEOEFBRDlDLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzkzNzBBRjE3Q0Y4OTRDNTYxQTcyN0U4MTZERTNCMTFENUQ4QUFE OUMuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kY2U5ZjQzZC0wOGJhLTRkMDItOGYz OC03NDczMmYxNWNkOGMvMC85MzcwQUYxN0NGODk0QzU2MUE3MjdFODE2REUzQjEx RDVEOEFBRDlDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAIWMnZBpMSQaV9wufl1winQGE3G7sRiBIeqGd 1NNsD8WAoxgGigruMKC3kGkXm5G23BDsZZ0RwNIgMzBuKVqWJUg1X99MkKWvodgv NUtUNbnZztdZhZSi8hFxowTP7s0B1J9yb/EYM0JiA8Ez2nOQWX+GMN2/UzrxeZTA kD+TDv5JCjQlxUXcd5gjZb1qmv+j1917QTlPICv/U2slU2V1gOJacYBLwacsUuIX tVHPZjp6w9XnlkkodHohqQMdDXOCFtUv7sHSRyWhZy2qQGyuT44IbCamnliaLd7M tnl0xKdFqMzRgEIdeAJEWJXITBkUieFmFfYn+8qikw0fkoX44g== -----END CERTIFICATE-----Generated at Fri Jul 24 21:11:46 2026 by rpki-client