$ rpki-client -vvf rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft File: D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft (raw, json) Hash identifier: xAjlZYmwEhKu/KvG02Dw1Gi7OZpf54Uzt7Anm3N3/pg= Subject key identifier: 00:F6:41:DD:AC:59:8C:25:22:FE:5C:81:2E:CC:68:96:54:F9:FD:99 Authority key identifier: D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6 Certificate issuer: /CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6 Certificate serial: 29B3D9D0FF2D3B87735138A0A950EC0CF0D59CEA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 05:36:24 +0000 Manifest this update: Fri 24 Jul 2026 05:31:24 +0000 Manifest next update: Sat 25 Jul 2026 05:57:24 +0000 Files and hashes: 1: 3136302e32322e3133372e302f32342d3234203d3e20313532383131.roa (hash: UJBNMpcsHaasyvcJ4Sq3J89ZHMIFKcGiQvcCBcd8DHY=) 2: D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl (hash: 4+GchUK1lpWQJ/97s8SqbQs+eIgP2OPQ5Eg2dcTdivk=) 3: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: e4bsRLScbecV3EUW42ypNee+dC4atMUS4ULfB5R1TMs=) 4: 3136302e32322e3133362e302f32342d3234203d3e20313532383131.roa (hash: mzkKba2j66n6wraFNQYRS+UC4ztp7C2s0dllCrbur4g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 05:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b3:d9:d0:ff:2d:3b:87:73:51:38:a0:a9:50:ec:0c:f0:d5:9c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6 Validity Not Before: Jul 24 05:31:24 2026 GMT Not After : Jul 25 05:57:24 2026 GMT Subject: CN=00F641DDAC598C2522FE5C812ECC689654F9FD99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d2:83:ae:be:8d:45:4c:2e:15:b5:9e:f6:ef: 3a:4e:13:04:f7:f3:c9:45:ee:cf:f9:36:e2:8f:56: c8:51:d8:1e:29:b6:1b:fd:86:95:ff:8e:96:00:8d: f7:e0:3e:b5:09:64:c3:a0:46:6e:82:27:b9:69:26: 5f:fc:13:de:f1:8f:cd:d8:27:ec:84:48:f1:61:a1: 26:61:ed:a7:47:ba:00:f7:26:7a:0c:31:1c:9d:2a: b9:7a:98:a6:2c:30:84:0a:59:5b:e5:0a:68:86:35: a1:83:43:84:f7:0a:b9:01:90:6f:0d:a4:0e:ea:1d: 4a:76:dc:1c:bc:0c:81:df:2a:a9:d1:1c:d3:3e:33: 67:39:a7:3c:02:f0:f4:11:32:01:ea:a2:23:7f:de: 68:d1:f4:47:31:4a:7b:83:90:52:7a:16:c3:1e:df: d6:91:13:9a:ad:52:cb:97:30:e3:bf:61:3a:94:a8: 48:f8:b1:0c:82:9d:3e:63:d1:e4:20:74:63:a2:1a: 77:5d:5d:b2:3c:ce:b7:9e:04:93:1b:18:cc:c3:24: 16:6c:f5:75:49:c3:78:e7:49:bb:e1:40:66:b2:cb: 2a:2c:fd:29:04:a1:93:4e:7a:84:ad:ce:b3:b2:1f: 38:37:c9:49:d9:92:f2:2a:78:59:f4:df:71:d9:20: d8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F6:41:DD:AC:59:8C:25:22:FE:5C:81:2E:CC:68:96:54:F9:FD:99 X509v3 Authority Key Identifier: keyid:D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:39:fe:37:ce:dc:b9:4c:de:27:b4:a8:32:52:6a:28:e9:7b: a0:d0:26:a8:65:65:87:29:9a:80:a4:16:e9:b6:cd:80:94:61: 53:cb:a5:c6:f9:b6:60:fd:6d:5e:4b:5f:b2:1d:7a:e2:53:89: 2e:aa:3b:5b:6e:a4:a9:2c:79:a3:15:ab:48:8b:95:88:ee:02: f3:a2:b5:a2:32:59:14:4d:42:dc:c8:a9:be:81:f1:ca:f4:21: f5:0a:84:50:95:92:b4:1b:0a:8e:52:26:b9:9c:24:06:cd:9e: 3e:be:92:64:ee:46:d9:f8:a0:3c:52:b0:c7:40:16:ff:07:69: c1:cf:c2:9c:13:a5:19:36:bf:11:ef:de:dc:09:31:2f:cb:00: ff:5b:31:50:f1:9f:dc:15:16:f0:4e:dd:c8:46:af:9f:c5:7e: a3:c1:95:c5:07:29:58:44:ff:45:89:d8:a2:d9:13:d6:13:0c: d3:1d:9e:1e:e1:ac:e1:58:06:61:03:59:22:15:2c:3d:e0:42: 46:bd:a8:4d:72:cf:eb:d3:de:f7:69:eb:73:ab:c3:80:a0:b3: 4e:f4:f1:c3:15:8a:84:85:08:04:bf:ad:57:91:49:f5:6e:c6: d9:9c:f4:9c:70:ae:67:5f:7b:84:84:27:19:66:86:f2:3c:ae: 98:3b:44:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKbPZ0P8tO4dzUTigqVDsDPDVnOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDNEI2QkU4NEM5MEJDNDA2QUI2NzFFNUY3NUE4Qzg2 NTYyOTRGNjAeFw0yNjA3MjQwNTMxMjRaFw0yNjA3MjUwNTU3MjRaMDMxMTAvBgNV BAMTKDAwRjY0MUREQUM1OThDMjUyMkZFNUM4MTJFQ0M2ODk2NTRGOUZEOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+0oOuvo1FTC4VtZ727zpOEwT3 88lF7s/5NuKPVshR2B4pthv9hpX/jpYAjffgPrUJZMOgRm6CJ7lpJl/8E97xj83Y J+yESPFhoSZh7adHugD3JnoMMRydKrl6mKYsMIQKWVvlCmiGNaGDQ4T3CrkBkG8N pA7qHUp23By8DIHfKqnRHNM+M2c5pzwC8PQRMgHqoiN/3mjR9EcxSnuDkFJ6FsMe 39aRE5qtUsuXMOO/YTqUqEj4sQyCnT5j0eQgdGOiGnddXbI8zreeBJMbGMzDJBZs 9XVJw3jnSbvhQGayyyos/SkEoZNOeoStzrOyHzg3yUnZkvIqeFn033HZINjNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAPZB3axZjCUi/lyBLsxollT5/ZkwHwYDVR0j BBgwFoAU2cS2voTJC8QGq2ceX3WoyGVilPYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE5NWI0YjQtYmM4YS00Y2U1LWI1NTAtOWFhN2IzNmVlMWZhLzAvRDlDNEI2QkU4 NEM5MEJDNDA2QUI2NzFFNUY3NUE4Qzg2NTYyOTRGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EOUM0QjZCRTg0QzkwQkM0MDZBQjY3MUU1Rjc1QThDODY1NjI5 NEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvRDlDNEI2QkU4NEM5MEJDNDA2QUI2NzFFNUY3NUE4 Qzg2NTYyOTRGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGw5/jfO3LlM3ie0qDJSaijpe6DQJqhlZYcp moCkFum2zYCUYVPLpcb5tmD9bV5LX7IdeuJTiS6qO1tupKkseaMVq0iLlYjuAvOi taIyWRRNQtzIqb6B8cr0IfUKhFCVkrQbCo5SJrmcJAbNnj6+kmTuRtn4oDxSsMdA Fv8HacHPwpwTpRk2vxHv3twJMS/LAP9bMVDxn9wVFvBO3chGr5/FfqPBlcUHKVhE /0WJ2KLZE9YTDNMdnh7hrOFYBmEDWSIVLD3gQka9qE1yz+vT3vdp63Orw4Cgs070 8cMVioSFCAS/rVeRSfVuxtmc9Jxwrmdfe4SEJxlmhvI8rpg7RJg= -----END CERTIFICATE-----Generated at Fri Jul 24 08:49:42 2026 by rpki-client