$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft File: 9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft (raw, json) Hash identifier: N8WlPJZ5qM2eSv7YKgcdBvv4FfX0bo5EDlnw169WbCM= Subject key identifier: 46:FE:7F:62:C8:A7:E8:A0:FC:31:F7:83:E3:3B:F7:21:1D:97:AF:9B Authority key identifier: 9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9 Certificate issuer: /CN=9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9 Certificate serial: 4109070FC33E003BDAAD09CA24FE4C3F15448E30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:01:42 +0000 Manifest this update: Fri 24 Jul 2026 01:56:42 +0000 Manifest next update: Sat 25 Jul 2026 02:30:42 +0000 Files and hashes: 1: 3136302e32322e3230382e302f32332d3234203d3e20313532383239.roa (hash: geTlR2xlRfEtN72u5a2Y4lLKK2jTFc1FYHlhZP1ErB8=) 2: 9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl (hash: mISgW0qlGslzd8kun8NBnfgvAnx4ghft9W8JeBYrpnM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:09:07:0f:c3:3e:00:3b:da:ad:09:ca:24:fe:4c:3f:15:44:8e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9 Validity Not Before: Jul 24 01:56:42 2026 GMT Not After : Jul 25 02:30:42 2026 GMT Subject: CN=46FE7F62C8A7E8A0FC31F783E33BF7211D97AF9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ee:cf:19:92:69:35:ee:b4:63:a2:51:de:39: 9a:4c:62:6c:f0:a0:96:cb:c8:00:ea:0e:3a:2c:44: 8e:bd:ef:8d:19:2c:32:8e:78:78:6e:71:76:89:60: df:1e:95:b6:ed:12:d6:05:91:64:43:2b:e3:57:67: d9:14:e7:a6:f6:0d:d4:cd:ba:31:1a:d5:09:ef:f6: 5d:5d:15:80:fc:0c:c7:65:f0:14:4f:9b:b9:54:9c: f3:d2:ae:51:61:45:94:c8:ab:f7:3f:a5:a3:d8:d4: 72:4f:75:d4:04:56:ad:ad:b9:fb:9f:43:c4:14:1f: 33:77:21:4b:9a:7b:fe:6d:07:aa:bf:17:e3:63:da: 1a:be:56:02:e6:6f:e2:c6:6b:d3:60:4b:08:ec:15: 70:e5:13:f5:b2:90:ff:03:83:5e:44:f5:ad:50:c6: bd:91:07:64:7d:e0:ad:fc:c9:14:0f:d7:75:94:e4: 3f:cf:3b:7b:e8:2e:a4:fb:49:e1:f3:f6:7a:41:0e: a1:fa:5b:53:4c:21:3e:0f:43:b8:2d:8a:7b:55:49: 1f:48:c4:e9:e5:9b:50:c7:ec:a9:f1:e2:e8:5d:64: a2:de:c9:20:57:a5:0a:ea:7c:2e:f7:b2:4d:45:bd: 30:16:5d:2c:0a:40:6c:95:f5:b9:ce:6e:82:5c:fa: a2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FE:7F:62:C8:A7:E8:A0:FC:31:F7:83:E3:3B:F7:21:1D:97:AF:9B X509v3 Authority Key Identifier: keyid:9C:23:FB:3E:8B:85:96:1F:D4:8B:C7:80:DA:F4:4C:EF:B6:47:C6:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/9C23FB3E8B85961FD48BC780DAF44CEFB647C6E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:74:7a:4a:a8:65:d4:a5:71:be:16:5f:c9:47:f3:68:b7:f5: 0e:86:f3:b1:d6:ba:45:06:5c:e5:a0:98:bf:91:e5:ad:f5:f9: ad:f8:d1:85:84:3f:60:c1:00:f1:59:05:1f:29:9f:d0:7c:8a: ab:f1:0c:76:0a:a7:74:97:91:09:d4:db:7e:bd:d0:f2:50:8c: bd:d1:c1:de:4a:74:9a:a4:00:71:66:71:bb:b6:e1:c3:57:c7: 1b:d7:ee:6a:e2:9e:6f:a5:d2:dc:19:c8:09:02:52:c9:72:62: 35:3e:0d:f2:2e:29:b3:54:f8:2b:3a:c9:41:8b:62:3c:a2:a4: 03:58:37:2d:30:d0:b1:c9:a7:b3:30:ef:31:3a:80:fa:70:bb: 08:2d:1d:84:e2:ed:5b:90:e1:a0:e9:3f:db:92:3d:43:34:e7: a6:92:0b:16:40:e0:f2:8c:19:9f:5c:9f:af:66:bd:69:01:6c: 53:9f:c3:b2:04:22:82:2a:87:08:34:83:de:67:87:05:55:bf: 04:33:48:1d:08:d6:51:28:09:0a:b9:83:87:00:62:ef:f9:f6: 4c:b2:03:84:59:cb:0c:22:c0:da:11:79:73:74:9f:0b:40:e4: b5:05:c7:9a:fe:32:8a:4c:72:30:55:2a:a4:9e:1f:f5:8d:b2: bc:4d:5a:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQQkHD8M+ADvarQnKJP5MPxVEjjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMyM0ZCM0U4Qjg1OTYxRkQ0OEJDNzgwREFGNDRDRUZC NjQ3QzZFOTAeFw0yNjA3MjQwMTU2NDJaFw0yNjA3MjUwMjMwNDJaMDMxMTAvBgNV BAMTKDQ2RkU3RjYyQzhBN0U4QTBGQzMxRjc4M0UzM0JGNzIxMUQ5N0FGOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC37s8Zkmk17rRjolHeOZpMYmzw oJbLyADqDjosRI69740ZLDKOeHhucXaJYN8elbbtEtYFkWRDK+NXZ9kU56b2DdTN ujEa1Qnv9l1dFYD8DMdl8BRPm7lUnPPSrlFhRZTIq/c/paPY1HJPddQEVq2tufuf Q8QUHzN3IUuae/5tB6q/F+Nj2hq+VgLmb+LGa9NgSwjsFXDlE/WykP8Dg15E9a1Q xr2RB2R94K38yRQP13WU5D/PO3voLqT7SeHz9npBDqH6W1NMIT4PQ7gtintVSR9I xOnlm1DH7Knx4uhdZKLeySBXpQrqfC73sk1FvTAWXSwKQGyV9bnOboJc+qJ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURv5/Ysin6KD8MfeD4zv3IR2Xr5swHwYDVR0j BBgwFoAUnCP7PouFlh/Ui8eA2vRM77ZHxukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNjYjUwYjAtNDNjYy00OGQwLTkxZjQtMDViYmRlN2FjMWQwLzAvOUMyM0ZCM0U4 Qjg1OTYxRkQ0OEJDNzgwREFGNDRDRUZCNjQ3QzZFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85QzIzRkIzRThCODU5NjFGRDQ4QkM3ODBEQUY0NENFRkI2NDdD NkU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvOUMyM0ZCM0U4Qjg1OTYxRkQ0OEJDNzgwREFGNDRD RUZCNjQ3QzZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMJ0ekqoZdSlcb4WX8lH82i39Q6G87HWukUG XOWgmL+R5a31+a340YWEP2DBAPFZBR8pn9B8iqvxDHYKp3SXkQnU23690PJQjL3R wd5KdJqkAHFmcbu24cNXxxvX7mrinm+l0twZyAkCUslyYjU+DfIuKbNU+Cs6yUGL YjyipANYNy0w0LHJp7Mw7zE6gPpwuwgtHYTi7VuQ4aDpP9uSPUM056aSCxZA4PKM GZ9cn69mvWkBbFOfw7IEIoIqhwg0g95nhwVVvwQzSB0I1lEoCQq5g4cAYu/59kyy A4RZywwiwNoReXN0nwtA5LUFx5r+MopMcjBVKqSeH/WNsrxNWvA= -----END CERTIFICATE-----Generated at Fri Jul 24 05:13:14 2026 by rpki-client