$ rpki-client -vvf rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft File: C09B0826A8950269AAA9592F3B0B65A3232333C5.mft (raw, json) Hash identifier: oCUKPBopjzcvnLKLtypWy2mRrZnPESJ14wKxzzpUhOo= Subject key identifier: FA:9F:1F:26:1D:E9:CD:6F:D7:A1:A1:F3:F3:7A:38:2A:63:77:87:56 Authority key identifier: C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 Certificate issuer: /CN=C09B0826A8950269AAA9592F3B0B65A3232333C5 Certificate serial: 40A7D09FFD450CFD0F7D42131170CDBBEDE191B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 18:27:32 +0000 Manifest this update: Thu 23 Jul 2026 18:22:32 +0000 Manifest next update: Fri 24 Jul 2026 20:14:32 +0000 Files and hashes: 1: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: u7ID+/zmEfkiBk9A2DOk1aoUvKs6xhyBLUvlSwziv+4=) 2: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: qD0/6TXIm8wKpNkYb5k3M2VEq1Hkh2ZvC2u1LPq71Ck=) 3: C09B0826A8950269AAA9592F3B0B65A3232333C5.crl (hash: wEhlVKvlHPdmvI6h0ESMZGj/7F7zdM46xcCtmQEFn0U=) 4: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: /OlYgkp/JUv7mWTKG1jRIEEEMwF4cVrVtCICjMapFuQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a7:d0:9f:fd:45:0c:fd:0f:7d:42:13:11:70:cd:bb:ed:e1:91:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C09B0826A8950269AAA9592F3B0B65A3232333C5 Validity Not Before: Jul 23 18:22:32 2026 GMT Not After : Jul 24 20:14:32 2026 GMT Subject: CN=FA9F1F261DE9CD6FD7A1A1F3F37A382A63778756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b1:f8:7c:4e:40:1e:7c:92:bf:5d:3d:ab:0e: 2f:bc:87:df:36:0c:f5:fa:61:28:c0:9b:74:8a:e1: 73:81:17:e5:5c:5c:79:fc:46:6f:80:f1:ed:8a:4e: ec:82:08:61:ad:10:69:08:78:d7:7f:19:3a:3c:5c: e3:5d:04:96:f0:31:eb:05:8b:25:1a:6f:69:de:0a: c0:f2:d3:86:f0:4e:23:4e:34:e7:0f:86:2b:0b:75: 8f:9b:73:49:42:9e:10:0d:ef:64:b3:44:eb:5a:10: aa:b9:64:4e:83:a8:b4:59:7c:e0:1a:a1:ec:55:4a: 16:56:d3:e2:23:a1:2c:a2:0d:60:2a:ac:e9:b5:9b: a4:7e:bd:05:95:2b:7f:c2:fb:d7:c5:b7:9d:33:8a: ee:7d:a0:b1:de:13:a1:ef:26:ac:94:ea:be:f0:6f: 3d:3c:6b:6e:bc:dd:ec:23:bd:4f:e5:fd:32:b8:56: f2:b7:0b:06:c0:2e:20:b0:18:c2:68:03:05:dc:6b: 87:d9:33:52:00:71:36:e4:6a:ac:e9:43:64:d6:38: bf:fb:95:5b:77:17:b2:2d:ae:6d:94:09:60:95:0d: 7f:39:0a:f2:a7:9e:1a:91:e2:5e:e7:32:40:c2:bf: b4:5d:19:5b:f8:13:b2:36:c3:6e:27:3d:29:38:d1: 86:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9F:1F:26:1D:E9:CD:6F:D7:A1:A1:F3:F3:7A:38:2A:63:77:87:56 X509v3 Authority Key Identifier: keyid:C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:6c:de:ce:18:f0:7f:13:f0:4c:89:fa:fa:cf:b1:15:01:7f: 95:9c:a9:8f:79:46:15:1d:7f:5c:53:35:50:6d:2e:5f:32:67: 8d:03:9f:c9:de:3c:b2:a1:03:79:14:a1:e9:95:30:4f:3f:d0: 2f:fa:4d:74:ad:ec:b9:53:b7:a6:49:74:77:e5:4e:56:af:68: 7b:f8:51:56:ee:93:dc:7d:8a:90:da:2a:ca:f2:a0:ba:37:5a: 72:ef:60:32:e7:18:17:39:6e:43:dd:48:f1:13:1e:4d:7a:ef: 2a:f4:40:58:fc:b2:15:bd:93:c3:82:c7:81:8a:09:c0:ac:91: 5f:46:0e:76:5b:05:b2:b8:2c:69:36:a3:de:47:3a:66:eb:ff: bb:32:6b:9c:71:20:c1:c7:fe:14:bc:76:98:c0:1c:8c:1d:10: 6e:8d:e0:4b:a7:df:0e:8e:99:d6:7a:9f:4e:62:f7:55:b4:d2: 4a:ab:f2:9a:82:02:9d:0d:23:e5:38:d4:23:84:f3:75:6f:28: cf:d4:e0:59:f8:7f:e6:60:a1:04:40:85:df:d1:d2:14:72:5e: ae:5d:56:95:1b:d2:ec:4a:76:bd:8c:c1:89:92:7d:18:93:6b: a8:8a:b3:7f:4f:2d:25:9d:65:bb:b9:ba:75:ac:ce:00:6c:fd: b0:d5:d2:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQKfQn/1FDP0PfUITEXDNu+3hkbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA5QjA4MjZBODk1MDI2OUFBQTk1OTJGM0IwQjY1QTMy MzIzMzNDNTAeFw0yNjA3MjMxODIyMzJaFw0yNjA3MjQyMDE0MzJaMDMxMTAvBgNV BAMTKEZBOUYxRjI2MURFOUNENkZEN0ExQTFGM0YzN0EzODJBNjM3Nzg3NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxsfh8TkAefJK/XT2rDi+8h982 DPX6YSjAm3SK4XOBF+VcXHn8Rm+A8e2KTuyCCGGtEGkIeNd/GTo8XONdBJbwMesF iyUab2neCsDy04bwTiNONOcPhisLdY+bc0lCnhAN72SzROtaEKq5ZE6DqLRZfOAa oexVShZW0+IjoSyiDWAqrOm1m6R+vQWVK3/C+9fFt50ziu59oLHeE6HvJqyU6r7w bz08a2683ewjvU/l/TK4VvK3CwbALiCwGMJoAwXca4fZM1IAcTbkaqzpQ2TWOL/7 lVt3F7Itrm2UCWCVDX85CvKnnhqR4l7nMkDCv7RdGVv4E7I2w24nPSk40YZPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+p8fJh3pzW/XoaHz83o4KmN3h1YwHwYDVR0j BBgwFoAUwJsIJqiVAmmqqVkvOwtloyMjM8UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjhkYzA4NDktODNmYi00Y2M4LThjMjEtYmU2Y2E3YTJlZDgzLzAvQzA5QjA4MjZB ODk1MDI2OUFBQTk1OTJGM0IwQjY1QTMyMzIzMzNDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMDlCMDgyNkE4OTUwMjY5QUFBOTU5MkYzQjBCNjVBMzIzMjMz M0M1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvQzA5QjA4MjZBODk1MDI2OUFBQTk1OTJGM0IwQjY1 QTMyMzIzMzNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJs3s4Y8H8T8EyJ+vrPsRUBf5WcqY95RhUd f1xTNVBtLl8yZ40Dn8nePLKhA3kUoemVME8/0C/6TXSt7LlTt6ZJdHflTlavaHv4 UVbuk9x9ipDaKsryoLo3WnLvYDLnGBc5bkPdSPETHk167yr0QFj8shW9k8OCx4GK CcCskV9GDnZbBbK4LGk2o95HOmbr/7sya5xxIMHH/hS8dpjAHIwdEG6N4Eun3w6O mdZ6n05i91W00kqr8pqCAp0NI+U41COE83VvKM/U4Fn4f+ZgoQRAhd/R0hRyXq5d VpUb0uxKdr2MwYmSfRiTa6iKs39PLSWdZbu5unWszgBs/bDV0tQ= -----END CERTIFICATE-----Generated at Fri Jul 24 05:35:40 2026 by rpki-client