$ rpki-client -vvf rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft File: 9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft (raw, json) Hash identifier: alI/QSSb7hajt2H3r/v9O1ZHReJtsXZjsnnCNeGGvPQ= Subject key identifier: 51:43:0D:6C:77:00:98:CA:FA:BA:00:A7:A6:81:77:35:44:ED:53:01 Authority key identifier: 9E:5A:74:B4:E1:E6:2D:25:BA:36:E3:E7:A4:40:2D:90:6E:F7:0E:2A Certificate issuer: /CN=9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A Certificate serial: 3429C6C762777BDC2991DB2114B4F4FAD10E46FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 12:31:55 +0000 Manifest this update: Mon 20 Jul 2026 12:26:55 +0000 Manifest next update: Tue 21 Jul 2026 15:57:55 +0000 Files and hashes: 1: 3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa (hash: lw3Ph+05xOCfBGre0101Mumi0SBmIeVe3yfjhxly5RI=) 2: 9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl (hash: 2RvQ+8nqq4l61XeUzDWnwyJAc47dwWvU03noqAt/9uM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:29:c6:c7:62:77:7b:dc:29:91:db:21:14:b4:f4:fa:d1:0e:46:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A Validity Not Before: Jul 20 12:26:55 2026 GMT Not After : Jul 21 15:57:55 2026 GMT Subject: CN=51430D6C770098CAFABA00A7A681773544ED5301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:92:a4:a3:ae:95:37:3d:5f:e7:13:f0:26: 19:22:92:ff:91:44:c4:a9:0c:24:a2:4e:8e:a2:90: 8c:87:72:d1:d8:a1:f6:d3:1d:90:8e:1b:b4:3e:b0: a0:c3:fb:cf:83:2f:d2:57:c3:ec:a7:d1:a3:43:7b: be:b6:ff:c7:31:37:40:81:0c:f6:f5:1f:b1:33:32: 31:7b:0d:d8:39:c1:5e:54:9b:1b:81:d2:c9:7f:af: 6c:f3:b0:f3:ef:b0:11:c6:52:bc:db:61:69:d1:b9: e5:92:c8:cf:61:73:43:e6:b5:37:c9:57:c9:0c:80: 40:79:c2:86:0c:44:ef:44:dc:79:1d:79:2e:20:73: 6e:83:df:a8:6f:8c:78:05:d9:dd:b6:e4:99:9a:08: 96:c7:bd:50:1f:9e:8e:30:82:02:e8:b2:c4:3e:5b: 8b:3a:21:9d:44:7e:16:e6:ae:e1:3c:a9:91:ce:a1: fd:84:f7:c7:b3:21:11:c6:54:0c:c9:c7:e6:50:15: 6b:b7:65:db:f5:0c:09:c7:87:e0:02:59:89:62:36: 72:07:1b:21:42:9c:7b:9b:35:05:ee:0c:70:0d:2c: e3:eb:c3:c0:c6:40:21:fd:92:e7:dd:b8:3e:5f:7b: 9d:1e:a3:e4:2d:e8:b4:25:76:08:63:a3:f0:6d:00: f5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:43:0D:6C:77:00:98:CA:FA:BA:00:A7:A6:81:77:35:44:ED:53:01 X509v3 Authority Key Identifier: keyid:9E:5A:74:B4:E1:E6:2D:25:BA:36:E3:E7:A4:40:2D:90:6E:F7:0E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:6f:39:3c:ef:3e:cc:1d:55:66:f9:c4:77:f4:08:1d:94:73: 8f:a8:1d:d5:d0:41:ae:44:10:ad:5e:8d:55:2d:40:0b:dd:36: 3d:83:7e:49:70:5d:0e:61:a9:5b:f2:4c:34:a7:eb:d8:8f:43: ef:cb:b7:21:35:7a:e7:34:dc:b6:a5:bf:b1:5d:17:2d:12:29: 81:09:c7:54:ff:31:b3:d2:15:a9:83:e2:0a:e8:ff:b6:57:b2: cb:64:a4:ff:54:73:29:7a:55:64:80:ce:01:0f:b9:f2:91:db: 7c:f8:d0:38:d9:2a:e9:db:f5:61:67:08:14:5a:b4:95:c2:ac: 1a:8b:2b:a1:00:b8:8e:b1:81:4f:39:ff:64:dc:8c:4e:54:62: 1b:e9:db:68:89:d6:6b:15:78:08:7c:d2:ba:e8:12:7c:8f:47: b1:68:aa:3e:12:fc:b6:89:7d:61:5f:50:90:aa:ec:d1:a6:22: 2b:61:a1:e3:11:45:69:bd:24:2c:04:2e:94:83:d7:ce:c9:af: 75:8d:fb:63:20:c4:20:ed:e2:70:1f:5c:d9:a3:d6:7e:22:09: 20:d4:86:4f:d4:f0:9f:cb:0d:67:b7:7f:23:4b:df:7f:a8:5c: b5:40:d3:03:60:42:34:67:ed:69:53:3c:f4:0f:bd:a4:76:36: c9:c0:80:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNCnGx2J3e9wpkdshFLT0+tEORv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU1QTc0QjRFMUU2MkQyNUJBMzZFM0U3QTQ0MDJEOTA2 RUY3MEUyQTAeFw0yNjA3MjAxMjI2NTVaFw0yNjA3MjExNTU3NTVaMDMxMTAvBgNV BAMTKDUxNDMwRDZDNzcwMDk4Q0FGQUJBMDBBN0E2ODE3NzM1NDRFRDUzMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCHpKko66VNz1f5xPwJhkikv+R RMSpDCSiTo6ikIyHctHYofbTHZCOG7Q+sKDD+8+DL9JXw+yn0aNDe762/8cxN0CB DPb1H7EzMjF7Ddg5wV5UmxuB0sl/r2zzsPPvsBHGUrzbYWnRueWSyM9hc0PmtTfJ V8kMgEB5woYMRO9E3HkdeS4gc26D36hvjHgF2d225JmaCJbHvVAfno4wggLossQ+ W4s6IZ1EfhbmruE8qZHOof2E98ezIRHGVAzJx+ZQFWu3Zdv1DAnHh+ACWYliNnIH GyFCnHubNQXuDHANLOPrw8DGQCH9kufduD5fe50eo+Qt6LQldghjo/BtAPVTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUUMNbHcAmMr6ugCnpoF3NUTtUwEwHwYDVR0j BBgwFoAUnlp0tOHmLSW6NuPnpEAtkG73DiowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZjMGNkNWQtZDA4NS00ZTJmLWIyMzAtN2I3ZTY2ZDEzOTNmLzAvOUU1QTc0QjRF MUU2MkQyNUJBMzZFM0U3QTQ0MDJEOTA2RUY3MEUyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RTVBNzRCNEUxRTYyRDI1QkEzNkUzRTdBNDQwMkQ5MDZFRjcw RTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZjMGNkNWQtZDA4NS00ZTJmLWIy MzAtN2I3ZTY2ZDEzOTNmLzAvOUU1QTc0QjRFMUU2MkQyNUJBMzZFM0U3QTQ0MDJE OTA2RUY3MEUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxvOTzvPswdVWb5xHf0CB2Uc4+oHdXQQa5E EK1ejVUtQAvdNj2DfklwXQ5hqVvyTDSn69iPQ+/LtyE1euc03Lalv7FdFy0SKYEJ x1T/MbPSFamD4gro/7ZXsstkpP9Ucyl6VWSAzgEPufKR23z40DjZKunb9WFnCBRa tJXCrBqLK6EAuI6xgU85/2TcjE5UYhvp22iJ1msVeAh80rroEnyPR7Foqj4S/LaJ fWFfUJCq7NGmIithoeMRRWm9JCwELpSD187Jr3WN+2MgxCDt4nAfXNmj1n4iCSDU hk/U8J/LDWe3fyNL33+oXLVA0wNgQjRn7WlTPPQPvaR2NsnAgNc= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:05 2026 by rpki-client