$ rpki-client -vvf rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft File: 9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft (raw, json) Hash identifier: mCkbegWlaUgixMndbjwGy+/S0Enlo8iMWXc+ZQjg89I= Subject key identifier: 73:16:77:D6:98:4A:75:60:0C:7A:1D:C1:31:97:54:84:D2:2D:73:FE Authority key identifier: 9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A Certificate issuer: /CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A Certificate serial: 370DCE1CAC6F6D38C89F888CF880CDC6A020F5EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 16:42:11 +0000 Manifest this update: Mon 20 Jul 2026 16:37:11 +0000 Manifest next update: Tue 21 Jul 2026 19:19:11 +0000 Files and hashes: 1: 3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa (hash: Dgai9I/TT4G/oQBQ3mEn1fS7dXTCrr7cZjoLYBavMXQ=) 2: 9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl (hash: HGMwkgYmOvoLDjsy0fgqZ+ptANUWkVlK4IGts0XvfJw=) 3: 3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (hash: y7jgS/ZISqQ0Ejz5jszYlUpeJRIijdmrHPSpWEnYBQg=) 4: 3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa (hash: rpX5Z9CNMyEUL+veiVsOhDnQwGzSm68cJVDfJbI5SIE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:0d:ce:1c:ac:6f:6d:38:c8:9f:88:8c:f8:80:cd:c6:a0:20:f5:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A Validity Not Before: Jul 20 16:37:11 2026 GMT Not After : Jul 21 19:19:11 2026 GMT Subject: CN=731677D6984A75600C7A1DC131975484D22D73FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8a:ff:5d:7e:9a:64:3b:f2:cc:0b:ff:9d:1d: 2b:c6:55:03:ec:3d:48:6b:00:f8:72:68:48:05:64: 59:d6:0b:6f:2e:a7:8c:d9:8c:36:9d:d9:d9:99:92: 21:3b:f9:b4:00:16:36:e9:3a:09:f9:96:54:8d:84: 4d:82:61:a4:02:f7:18:ec:6c:59:bd:97:4d:c7:d4: 4a:48:ff:0f:a7:b9:1d:12:4f:56:f5:68:29:01:8e: 11:59:34:66:0d:38:ba:bb:56:cc:a0:49:f3:46:97: 99:ad:7f:3e:3a:d0:2d:73:f5:55:e3:f3:a6:46:bb: 68:39:89:e7:1e:bf:a2:f1:e1:46:35:a8:b7:f2:d7: b8:f6:78:2e:a9:4d:20:f2:56:b3:c3:d6:f4:cc:78: 0b:44:9b:2d:ae:1d:b6:52:04:0a:bc:d8:59:dc:d0: 89:87:19:2b:38:e3:27:5e:3b:65:f2:44:b1:08:7e: 37:e2:ce:41:13:50:1a:e8:5f:75:18:cd:a1:0c:5b: cf:95:a2:3d:4d:62:c0:21:19:6a:db:c1:87:3f:a6: cc:e5:6b:d9:43:f6:51:4e:20:b7:01:0f:03:25:f1: 14:41:db:fc:b5:94:fc:dc:f1:73:27:6b:40:16:6a: a0:c5:63:3a:a8:6e:48:c5:57:8b:d2:f3:5c:7e:f5: bd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:16:77:D6:98:4A:75:60:0C:7A:1D:C1:31:97:54:84:D2:2D:73:FE X509v3 Authority Key Identifier: keyid:9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:13:b9:d3:86:fb:cf:f3:0c:6d:fd:e4:7e:9f:b3:77:ed:1b: b9:75:a6:5e:72:26:c9:7c:ad:41:9c:1f:98:23:78:e0:de:bf: 84:2e:37:c5:4a:72:d6:8c:0e:57:21:8a:07:3c:42:e8:63:93: 21:16:c9:33:c6:32:d5:e6:f5:76:54:4f:03:a8:f3:72:09:dd: 0a:7e:cc:84:4d:bd:93:8e:5b:7d:07:d8:4c:03:3f:3b:c2:f6: 50:96:c4:93:46:85:65:d3:9d:73:44:f4:8a:05:7a:f7:9c:46: d5:ad:7c:51:ce:4c:6c:19:45:ac:f8:d5:af:d5:98:fd:7b:de: 2d:47:a2:fe:b6:a6:b7:88:4b:63:e2:59:e8:9f:c4:cb:a7:83: 8b:35:fe:b2:da:02:ef:3e:75:be:76:be:67:1d:80:40:4c:45: 7b:c6:1d:cb:0b:bd:22:b9:74:eb:46:10:f5:cc:38:b0:dd:01: ad:ac:82:54:ed:61:f5:49:86:11:a0:6c:e8:b6:39:16:11:71: d8:38:34:76:62:51:cd:52:71:85:85:90:4d:70:aa:e8:fe:15: 1d:af:c4:d5:5a:d0:f5:68:96:ea:e6:3b:1f:60:db:ae:c0:ad: 41:a0:b2:44:99:0f:a0:6e:db:a4:8d:af:75:43:c0:6e:bc:c6: 64:fe:f4:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNw3OHKxvbTjIn4iM+IDNxqAg9e8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBODgwMDU2RENGOUFEQjdBNzBENDYxRkY4MzA4NkQ4 RkU4ODk3QTAeFw0yNjA3MjAxNjM3MTFaFw0yNjA3MjExOTE5MTFaMDMxMTAvBgNV BAMTKDczMTY3N0Q2OTg0QTc1NjAwQzdBMURDMTMxOTc1NDg0RDIyRDczRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwiv9dfppkO/LMC/+dHSvGVQPs PUhrAPhyaEgFZFnWC28up4zZjDad2dmZkiE7+bQAFjbpOgn5llSNhE2CYaQC9xjs bFm9l03H1EpI/w+nuR0ST1b1aCkBjhFZNGYNOLq7VsygSfNGl5mtfz460C1z9VXj 86ZGu2g5iecev6Lx4UY1qLfy17j2eC6pTSDyVrPD1vTMeAtEmy2uHbZSBAq82Fnc 0ImHGSs44ydeO2XyRLEIfjfizkETUBroX3UYzaEMW8+Voj1NYsAhGWrbwYc/pszl a9lD9lFOILcBDwMl8RRB2/y1lPzc8XMna0AWaqDFYzqobkjFV4vS81x+9b1DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcxZ31phKdWAMeh3BMZdUhNItc/4wHwYDVR0j BBgwFoAUn6iABW3Pmtt6cNRh/4MIbY/oiXowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0NDI1MmItZDMwZS00YmRjLTgzMmYtYjM4YjA1YzdhMDM1LzAvOUZBODgwMDU2 RENGOUFEQjdBNzBENDYxRkY4MzA4NkQ4RkU4ODk3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkE4ODAwNTZEQ0Y5QURCN0E3MEQ0NjFGRjgzMDg2RDhGRTg4 OTdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0NDI1MmItZDMwZS00YmRjLTgz MmYtYjM4YjA1YzdhMDM1LzAvOUZBODgwMDU2RENGOUFEQjdBNzBENDYxRkY4MzA4 NkQ4RkU4ODk3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUTudOG+8/zDG395H6fs3ftG7l1pl5yJsl8 rUGcH5gjeODev4QuN8VKctaMDlchigc8QuhjkyEWyTPGMtXm9XZUTwOo83IJ3Qp+ zIRNvZOOW30H2EwDPzvC9lCWxJNGhWXTnXNE9IoFevecRtWtfFHOTGwZRaz41a/V mP173i1Hov62preIS2PiWeifxMung4s1/rLaAu8+db52vmcdgEBMRXvGHcsLvSK5 dOtGEPXMOLDdAa2sglTtYfVJhhGgbOi2ORYRcdg4NHZiUc1ScYWFkE1wquj+FR2v xNVa0PVolurmOx9g267ArUGgskSZD6Bu26SNr3VDwG68xmT+9Ac= -----END CERTIFICATE-----Generated at Tue Jul 21 06:39:47 2026 by rpki-client