$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft File: 9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft (raw, json) Hash identifier: KT05AAus6pHOyylyU1TAfvNGhErUQXaPZ2h5u7nBj3Q= Subject key identifier: 1F:08:0F:8F:D3:BD:9C:71:BA:8E:9F:27:98:D4:75:AD:A0:F1:29:50 Authority key identifier: 9D:68:AC:E3:A8:F4:CD:6B:9B:D7:AB:C6:95:E6:A2:16:24:B1:C5:6C Certificate issuer: /CN=9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C Certificate serial: 5F93C074E8808C9F07B3D8AD4E9EFB1A35F33875 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:11:02 +0000 Manifest this update: Thu 23 Jul 2026 17:06:02 +0000 Manifest next update: Fri 24 Jul 2026 20:11:02 +0000 Files and hashes: 1: 3130332e3136302e3133362e302f32342d3234203d3e20313431353838.roa (hash: xiHN/v3vXzzSYuBqvcK2Zxp9gL/Vai3nTROredoBVU8=) 2: 9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.crl (hash: sbHtRulZoCWMMUPkSMcDzoDkMTODJ+nzXnVNuArDCnM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.crl rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:93:c0:74:e8:80:8c:9f:07:b3:d8:ad:4e:9e:fb:1a:35:f3:38:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C Validity Not Before: Jul 23 17:06:02 2026 GMT Not After : Jul 24 20:11:02 2026 GMT Subject: CN=1F080F8FD3BD9C71BA8E9F2798D475ADA0F12950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:44:db:58:b0:79:63:b8:85:14:3f:ef:f2:e2: 94:83:d1:d6:23:41:47:bf:02:26:07:f9:ca:ca:63: 5b:cb:bb:58:db:be:35:59:ae:3f:37:32:20:f3:04: 27:89:29:5b:19:8a:ef:1b:e3:fb:f5:fd:e8:29:66: 99:90:77:c5:95:9e:e2:24:13:a9:cd:af:08:e5:27: 29:7d:2e:98:25:51:ba:b1:58:e5:a7:4d:34:f2:38: b3:4f:24:be:b0:b6:18:24:b8:62:4d:fa:0c:57:ed: f1:44:35:fd:90:60:0c:23:68:23:7f:e8:56:00:0b: 85:85:52:7e:bc:b1:6e:60:97:46:c3:26:11:27:f5: 59:16:57:35:b5:50:04:54:54:2e:72:95:4c:38:d5: 01:54:1d:e7:f2:10:03:b8:98:cf:8c:18:35:ec:7b: 44:3f:e1:59:93:45:63:58:a1:19:b9:9b:9e:26:ce: 2c:6f:ef:9a:3f:6b:dc:32:61:5e:39:61:6f:74:55: 47:85:e8:a0:a7:6e:0b:99:33:86:14:53:5b:b0:8d: ef:4d:e5:82:c3:c9:9a:3a:2b:cc:4c:d4:ce:55:52: 1a:65:c1:5e:f0:4b:b4:f3:67:1e:c5:8a:a8:d2:31: b3:62:77:c3:95:3c:bc:bf:c3:47:f6:99:82:07:88: 2c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:08:0F:8F:D3:BD:9C:71:BA:8E:9F:27:98:D4:75:AD:A0:F1:29:50 X509v3 Authority Key Identifier: keyid:9D:68:AC:E3:A8:F4:CD:6B:9B:D7:AB:C6:95:E6:A2:16:24:B1:C5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:63:7c:ef:aa:2d:97:55:36:f3:3c:aa:3b:b0:e0:55:c7:d9: 75:bf:f8:f2:fd:ca:3c:53:b1:e2:c3:af:a4:1e:bb:49:63:eb: 26:f1:b3:80:2d:dd:ce:98:2a:02:e7:48:59:16:05:d7:38:80: a8:84:89:58:46:df:e2:1b:d5:54:3a:5b:3d:86:aa:d1:76:ee: 80:e4:9b:02:5f:33:0b:49:d2:24:e3:3a:26:34:3e:60:b7:0b: 72:9e:4a:cd:01:73:ba:89:ea:e8:0e:ce:05:b8:dd:9f:c9:95: b4:0e:e3:e0:6a:77:53:01:8c:d5:79:ea:7e:06:ae:c9:c0:7c: 3e:ff:54:bc:c9:f3:ef:ff:3d:21:69:51:27:34:0f:5b:74:d2: 73:0d:0d:5c:99:79:ee:cc:0a:36:00:ec:7a:d1:fe:f3:3f:1e: 78:d8:72:02:41:6e:d3:6c:62:bd:54:ea:18:16:cc:b0:47:49: c0:b6:bc:5d:01:a6:0f:b0:0a:34:1a:6a:b2:b3:5b:68:4c:ee: f9:a5:02:de:1a:2f:21:a3:47:7e:2f:49:69:d3:bd:49:31:80: 47:52:19:53:fa:24:ad:48:e4:d6:04:15:b0:e0:91:f9:94:88: 2e:e7:3a:f5:cf:bc:f6:0c:9c:fb:81:13:2b:54:5c:ab:bd:03: f8:58:d6:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX5PAdOiAjJ8Hs9itTp77GjXzOHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ2OEFDRTNBOEY0Q0Q2QjlCRDdBQkM2OTVFNkEyMTYy NEIxQzU2QzAeFw0yNjA3MjMxNzA2MDJaFw0yNjA3MjQyMDExMDJaMDMxMTAvBgNV BAMTKDFGMDgwRjhGRDNCRDlDNzFCQThFOUYyNzk4RDQ3NUFEQTBGMTI5NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjRNtYsHljuIUUP+/y4pSD0dYj QUe/AiYH+crKY1vLu1jbvjVZrj83MiDzBCeJKVsZiu8b4/v1/egpZpmQd8WVnuIk E6nNrwjlJyl9LpglUbqxWOWnTTTyOLNPJL6wthgkuGJN+gxX7fFENf2QYAwjaCN/ 6FYAC4WFUn68sW5gl0bDJhEn9VkWVzW1UARUVC5ylUw41QFUHefyEAO4mM+MGDXs e0Q/4VmTRWNYoRm5m54mzixv75o/a9wyYV45YW90VUeF6KCnbguZM4YUU1uwje9N 5YLDyZo6K8xM1M5VUhplwV7wS7TzZx7FiqjSMbNid8OVPLy/w0f2mYIHiCzfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHwgPj9O9nHG6jp8nmNR1raDxKVAwHwYDVR0j BBgwFoAUnWis46j0zWub16vGleaiFiSxxWwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFlZWQwOWMtNjA2OC00MDdhLWIwYTYtNTliN2QwYjg3ODU1LzAvOUQ2OEFDRTNB OEY0Q0Q2QjlCRDdBQkM2OTVFNkEyMTYyNEIxQzU2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDY4QUNFM0E4RjRDRDZCOUJEN0FCQzY5NUU2QTIxNjI0QjFD NTZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFlZWQwOWMtNjA2OC00MDdhLWIw YTYtNTliN2QwYjg3ODU1LzAvOUQ2OEFDRTNBOEY0Q0Q2QjlCRDdBQkM2OTVFNkEy MTYyNEIxQzU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVjfO+qLZdVNvM8qjuw4FXH2XW/+PL9yjxT seLDr6Qeu0lj6ybxs4At3c6YKgLnSFkWBdc4gKiEiVhG3+Ib1VQ6Wz2GqtF27oDk mwJfMwtJ0iTjOiY0PmC3C3KeSs0Bc7qJ6ugOzgW43Z/JlbQO4+Bqd1MBjNV56n4G rsnAfD7/VLzJ8+//PSFpUSc0D1t00nMNDVyZee7MCjYA7HrR/vM/HnjYcgJBbtNs Yr1U6hgWzLBHScC2vF0Bpg+wCjQaarKzW2hM7vmlAt4aLyGjR34vSWnTvUkxgEdS GVP6JK1I5NYEFbDgkfmUiC7nOvXPvPYMnPuBEytUXKu9A/hY1uY= -----END CERTIFICATE-----Generated at Fri Jul 24 06:24:03 2026 by rpki-client