$ rpki-client -vvf rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft File: E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft (raw, json) Hash identifier: GhgQUN9CxuRlGgbBR9ZO9LC04VGnK3FwVAAmw2EuluA= Subject key identifier: D6:1D:2E:BC:C6:C1:A0:EA:71:64:46:0B:A7:F9:AF:FF:D6:4A:10:19 Authority key identifier: E9:DD:F9:8F:B3:21:D5:A9:77:AD:47:B0:C4:1C:D4:FE:29:A3:79:3A Certificate issuer: /CN=E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A Certificate serial: 68E3901651A657377C80F1AD63EA7051B24DD3D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 18:19:13 +0000 Manifest this update: Mon 20 Jul 2026 18:14:13 +0000 Manifest next update: Tue 21 Jul 2026 21:20:13 +0000 Files and hashes: 1: E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.crl (hash: GHfULCI8iuC4Sa1m0CxQzw6fnCX71/j17atwMG345nE=) 2: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: CNG3TKSalvuCxf+hLEGkOQvjI+uVRC0qCR05spnG4ao=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.crl rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 21:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e3:90:16:51:a6:57:37:7c:80:f1:ad:63:ea:70:51:b2:4d:d3:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A Validity Not Before: Jul 20 18:14:13 2026 GMT Not After : Jul 21 21:20:13 2026 GMT Subject: CN=D61D2EBCC6C1A0EA7164460BA7F9AFFFD64A1019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f5:35:db:e9:d8:66:fb:fc:c9:d0:1e:03:91: 2b:76:7a:5b:8d:1b:47:7f:13:92:fe:4e:6f:eb:11: c1:75:f6:27:02:89:b8:96:b2:5a:17:5d:cb:3e:40: 41:2e:e5:af:c3:cd:ee:77:b5:c8:38:fd:8b:c6:67: 1e:60:ef:64:85:a0:62:65:de:e4:8b:43:60:bc:f6: 36:08:a0:f7:9b:0e:bc:69:9e:fc:d4:59:c7:a7:ba: bf:b4:fe:09:d0:1d:67:9f:e2:df:0e:09:b1:95:38: 38:58:f1:85:8b:d8:cd:82:2a:41:f0:b7:e7:bd:bc: 51:d1:80:2e:1c:9a:23:81:5a:5d:e0:5c:39:f0:2a: 9c:e4:e5:03:12:84:5a:b9:c6:87:d6:36:91:61:cd: 69:67:f7:6e:46:db:10:68:72:ca:9c:49:d1:4d:c2: b6:2a:c2:70:b8:0c:e9:bf:13:35:db:59:eb:ba:5c: 0c:38:58:1a:3b:fc:2b:ee:e9:d8:95:db:8a:9d:54: 0e:59:ba:f0:41:04:0a:59:8a:ee:d5:21:28:c7:60: 9c:4a:28:a4:71:91:e9:54:e5:65:5f:b6:f2:a6:6e: 34:fd:33:56:83:27:d6:cb:4d:71:4f:21:b9:fe:3c: 20:b4:ce:84:72:76:cd:af:bf:b0:3c:e1:fd:c7:82: 76:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1D:2E:BC:C6:C1:A0:EA:71:64:46:0B:A7:F9:AF:FF:D6:4A:10:19 X509v3 Authority Key Identifier: keyid:E9:DD:F9:8F:B3:21:D5:A9:77:AD:47:B0:C4:1C:D4:FE:29:A3:79:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:1f:b4:6f:bc:06:8c:e2:c7:b3:14:9e:d6:db:1b:2f:21:6b: e7:a4:af:81:50:60:68:fb:76:c8:d7:97:f7:ba:83:46:97:34: 48:84:e9:3b:6d:0b:77:6d:b7:3c:3a:ee:d8:cb:c7:10:ed:e9: e9:08:5d:f6:7c:24:6c:89:76:71:b4:af:32:1a:34:00:ae:63: 12:76:6a:ab:bc:12:43:fe:8f:e7:41:04:3c:28:83:69:fe:3c: 9b:9e:7f:13:82:43:99:6d:64:b6:4c:1d:e5:ab:25:73:83:13: 11:57:3e:a4:c0:b6:de:bc:90:f1:96:73:c7:09:57:4a:e0:09: ad:3a:56:02:a7:b9:f3:dc:f2:c8:86:1e:15:45:2c:5b:73:ee: 4b:f8:01:4a:ac:df:20:f8:5a:cb:66:4d:5f:6b:d9:f2:66:a9: 44:b6:40:6f:1a:03:42:be:88:22:34:1a:a4:a2:78:09:24:f9: 57:9d:c0:91:fe:12:88:44:72:c7:66:18:9f:7a:7c:c8:01:b6: f7:49:2b:65:70:33:55:7d:00:7c:44:d5:3b:27:ca:f1:96:a8: 6a:8e:ff:f4:93:56:7c:42:2c:cd:bd:85:4c:b3:5c:7b:bf:72: 41:63:08:06:fb:c1:2a:7a:77:8f:c6:ce:e4:1b:b2:60:c8:62: 8b:30:24:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaOOQFlGmVzd8gPGtY+pwUbJN09UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlEREY5OEZCMzIxRDVBOTc3QUQ0N0IwQzQxQ0Q0RkUy OUEzNzkzQTAeFw0yNjA3MjAxODE0MTNaFw0yNjA3MjEyMTIwMTNaMDMxMTAvBgNV BAMTKEQ2MUQyRUJDQzZDMUEwRUE3MTY0NDYwQkE3RjlBRkZGRDY0QTEwMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz9TXb6dhm+/zJ0B4DkSt2eluN G0d/E5L+Tm/rEcF19icCibiWsloXXcs+QEEu5a/Dze53tcg4/YvGZx5g72SFoGJl 3uSLQ2C89jYIoPebDrxpnvzUWcenur+0/gnQHWef4t8OCbGVODhY8YWL2M2CKkHw t+e9vFHRgC4cmiOBWl3gXDnwKpzk5QMShFq5xofWNpFhzWln925G2xBocsqcSdFN wrYqwnC4DOm/EzXbWeu6XAw4WBo7/Cvu6diV24qdVA5ZuvBBBApZiu7VISjHYJxK KKRxkelU5WVftvKmbjT9M1aDJ9bLTXFPIbn+PCC0zoRyds2vv7A84f3HgnZ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1h0uvMbBoOpxZEYLp/mv/9ZKEBkwHwYDVR0j BBgwFoAU6d35j7Mh1al3rUewxBzU/imjeTowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQzM2ExYzYtMGY3MC00Yzk4LTk2YjAtY2FiNTgxMjZhYjk0LzAvRTlEREY5OEZC MzIxRDVBOTc3QUQ0N0IwQzQxQ0Q0RkUyOUEzNzkzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOURERjk4RkIzMjFENUE5NzdBRDQ3QjBDNDFDRDRGRTI5QTM3 OTNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2 YjAtY2FiNTgxMjZhYjk0LzAvRTlEREY5OEZCMzIxRDVBOTc3QUQ0N0IwQzQxQ0Q0 RkUyOUEzNzkzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMftG+8Bozix7MUntbbGy8ha+ekr4FQYGj7 dsjXl/e6g0aXNEiE6TttC3dttzw67tjLxxDt6ekIXfZ8JGyJdnG0rzIaNACuYxJ2 aqu8EkP+j+dBBDwog2n+PJuefxOCQ5ltZLZMHeWrJXODExFXPqTAtt68kPGWc8cJ V0rgCa06VgKnufPc8siGHhVFLFtz7kv4AUqs3yD4WstmTV9r2fJmqUS2QG8aA0K+ iCI0GqSieAkk+VedwJH+EohEcsdmGJ96fMgBtvdJK2VwM1V9AHxE1TsnyvGWqGqO //STVnxCLM29hUyzXHu/ckFjCAb7wSp6d4/GzuQbsmDIYoswJI0= -----END CERTIFICATE-----Generated at Tue Jul 21 09:22:06 2026 by rpki-client