$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft File: 0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft (raw, json) Hash identifier: vvcAdP/tUZwxIBHPXTzjbjNsrqenKbxdbnIm1P+Zp+Q= Subject key identifier: 17:BD:0D:9C:AD:0D:DC:43:A3:EF:27:0B:3B:09:BA:38:4E:3C:88:F4 Authority key identifier: 0A:9E:60:F4:AC:7A:C7:1E:24:68:93:5B:CA:5D:0D:97:0A:AC:E8:F6 Certificate issuer: /CN=0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6 Certificate serial: 2A4FB16FB7C5C7026B1B4F63D743441CCFF88D26 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:21:22 +0000 Manifest this update: Thu 23 Jul 2026 13:16:22 +0000 Manifest next update: Fri 24 Jul 2026 15:29:22 +0000 Files and hashes: 1: 0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl (hash: Wo12kuJGdUK4SFW7dwnvCRN7qfMX16PS7z0Ss6uiBNo=) 2: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: ccmy2LH8bOvIWU+GPrMO4FL2775rB00lVz7jkl8O1gM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:4f:b1:6f:b7:c5:c7:02:6b:1b:4f:63:d7:43:44:1c:cf:f8:8d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6 Validity Not Before: Jul 23 13:16:22 2026 GMT Not After : Jul 24 15:29:22 2026 GMT Subject: CN=17BD0D9CAD0DDC43A3EF270B3B09BA384E3C88F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:96:26:4a:12:b9:d7:14:d5:a2:fa:0f:ff:54: 5f:a8:b7:b2:ba:c6:0a:62:cf:e7:7e:3c:fc:77:c5: e9:b6:72:cb:6d:ad:5b:a3:49:48:57:c2:ab:d6:92: 67:9e:ee:f5:f6:2d:f1:ad:eb:4e:38:62:4e:0e:a3: 35:a2:8d:48:e2:f1:ca:6d:ff:fd:77:46:cd:58:60: ba:3d:29:b0:63:95:c8:ef:df:b8:ea:76:ab:e5:b0: 52:f2:49:20:04:42:05:80:ea:40:45:df:9c:d1:80: da:33:a7:b4:46:29:5e:e5:ef:79:f9:87:d6:5a:3c: 4c:0f:1a:8d:b8:d2:1e:07:ee:50:fe:7e:79:5a:9a: 6f:dc:66:d4:4a:6c:8c:54:e9:d9:f6:43:f3:6a:08: 12:c3:a5:d8:ca:d2:30:3c:c5:3c:4b:19:77:2e:35: 76:8e:9f:4a:aa:45:66:bc:06:8f:c2:02:dc:ed:90: 51:de:98:c2:0a:80:92:c8:06:fc:ff:36:64:b6:62: 92:30:3d:e1:2b:84:6b:eb:6f:19:52:59:52:1e:c7: 05:17:45:b6:f3:c5:ec:06:c4:7e:44:48:98:b8:79: 71:42:dc:f7:80:4a:60:a2:e8:10:ac:9d:86:76:df: 96:7b:6d:37:70:fc:00:c3:d4:fe:cc:b3:49:94:a7: c5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BD:0D:9C:AD:0D:DC:43:A3:EF:27:0B:3B:09:BA:38:4E:3C:88:F4 X509v3 Authority Key Identifier: keyid:0A:9E:60:F4:AC:7A:C7:1E:24:68:93:5B:CA:5D:0D:97:0A:AC:E8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0c:fd:7c:7f:2f:a0:07:ab:04:d7:5f:e2:42:4c:9f:6f:1a: b9:9b:ef:b1:69:f6:09:b0:84:e6:9a:bb:ba:b6:5b:e8:72:9d: 05:48:54:02:dd:52:44:be:d6:ce:f7:80:ad:ac:28:21:3d:75: 48:fc:a6:ac:78:fe:95:73:e9:05:c0:48:b6:99:d0:8c:5b:bb: 47:4d:15:39:70:18:9b:7c:62:82:2c:54:c8:c0:05:67:47:b0: f0:14:52:d0:d8:0f:45:fe:ed:fa:3b:23:d6:06:dd:a1:82:b9: 22:c8:f9:69:13:6e:54:7e:40:95:55:85:39:86:67:06:b7:07: e7:05:69:ef:ca:d8:7a:dc:95:f1:43:8e:dd:99:f6:d2:f2:4e: d9:2e:74:f8:a6:28:2e:01:91:9e:8c:ca:d2:6e:bd:b0:c5:59: da:2d:11:58:b4:54:43:41:b0:44:c6:a3:59:5b:d8:8e:88:39: 28:04:26:7b:5b:1d:ef:8e:14:54:a9:7c:79:b0:53:47:f2:39: e9:8e:1e:c0:04:d3:61:08:ec:6d:c8:61:6a:d7:75:4e:21:93: 86:8f:b8:4d:55:84:cb:37:6c:56:11:b9:87:c2:4f:95:2e:5e: 88:32:c5:f1:e4:83:22:a4:e4:00:74:98:2b:bc:8b:bf:84:6d: 8a:e3:03:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKk+xb7fFxwJrG09j10NEHM/4jSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE5RTYwRjRBQzdBQzcxRTI0Njg5MzVCQ0E1RDBEOTcw QUFDRThGNjAeFw0yNjA3MjMxMzE2MjJaFw0yNjA3MjQxNTI5MjJaMDMxMTAvBgNV BAMTKDE3QkQwRDlDQUQwRERDNDNBM0VGMjcwQjNCMDlCQTM4NEUzQzg4RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYliZKErnXFNWi+g//VF+ot7K6 xgpiz+d+PPx3xem2csttrVujSUhXwqvWkmee7vX2LfGt6044Yk4OozWijUji8cpt //13Rs1YYLo9KbBjlcjv37jqdqvlsFLySSAEQgWA6kBF35zRgNozp7RGKV7l73n5 h9ZaPEwPGo240h4H7lD+fnlamm/cZtRKbIxU6dn2Q/NqCBLDpdjK0jA8xTxLGXcu NXaOn0qqRWa8Bo/CAtztkFHemMIKgJLIBvz/NmS2YpIwPeErhGvrbxlSWVIexwUX RbbzxewGxH5ESJi4eXFC3PeASmCi6BCsnYZ235Z7bTdw/ADD1P7Ms0mUp8V3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF70NnK0N3EOj7ycLOwm6OE48iPQwHwYDVR0j BBgwFoAUCp5g9Kx6xx4kaJNbyl0Nlwqs6PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0Zjc5MzQtY2RjNy00MDgyLTgzZmItZGY3ZDRmODIxOWFmLzAvMEE5RTYwRjRB QzdBQzcxRTI0Njg5MzVCQ0E1RDBEOTcwQUFDRThGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wQTlFNjBGNEFDN0FDNzFFMjQ2ODkzNUJDQTVEMEQ5NzBBQUNF OEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzAvMEE5RTYwRjRBQzdBQzcxRTI0Njg5MzVCQ0E1RDBE OTcwQUFDRThGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoM/Xx/L6AHqwTXX+JCTJ9vGrmb77Fp9gmw hOaau7q2W+hynQVIVALdUkS+1s73gK2sKCE9dUj8pqx4/pVz6QXASLaZ0Ixbu0dN FTlwGJt8YoIsVMjABWdHsPAUUtDYD0X+7fo7I9YG3aGCuSLI+WkTblR+QJVVhTmG Zwa3B+cFae/K2HrclfFDjt2Z9tLyTtkudPimKC4BkZ6MytJuvbDFWdotEVi0VENB sETGo1lb2I6IOSgEJntbHe+OFFSpfHmwU0fyOemOHsAE02EI7G3IYWrXdU4hk4aP uE1VhMs3bFYRuYfCT5UuXogyxfHkgyKk5AB0mCu8i7+EbYrjA3w= -----END CERTIFICATE-----Generated at Fri Jul 24 08:44:57 2026 by rpki-client