$ rpki-client -vvf rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft File: D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft (raw, json) Hash identifier: PJYPKCLvZMt+1xkkhNM8D0bee/AWjTY0BD68OBOcOww= Subject key identifier: 2B:07:D4:1C:F4:5B:60:36:25:BF:57:60:46:C7:8C:59:F4:8F:70:BE Authority key identifier: D9:E4:B9:E5:C2:0C:5D:24:54:5E:4B:37:44:B7:24:23:24:23:ED:B7 Certificate issuer: /CN=D9E4B9E5C20C5D24545E4B3744B724232423EDB7 Certificate serial: 7FB791F4916F4DA2949A226DF396E2A44DF48C8F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 19:35:34 +0000 Manifest this update: Mon 20 Jul 2026 19:30:34 +0000 Manifest next update: Tue 21 Jul 2026 22:03:34 +0000 Files and hashes: 1: D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl (hash: Kij4pT7udKpgxgrEHQU0p/doUp1dqzTLey6+nsPOMFg=) 2: 3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa (hash: OK8J5tFKOjzZkYFlXmJIuP/RnOPH7Dha6p0ILyYgDYQ=) 3: 323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa (hash: cHfAqVSrYWCvGTjmxTN9VKckgkvEOepk7bQUQ5YDUTM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 22:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b7:91:f4:91:6f:4d:a2:94:9a:22:6d:f3:96:e2:a4:4d:f4:8c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9E4B9E5C20C5D24545E4B3744B724232423EDB7 Validity Not Before: Jul 20 19:30:34 2026 GMT Not After : Jul 21 22:03:34 2026 GMT Subject: CN=2B07D41CF45B603625BF576046C78C59F48F70BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:be:53:a1:cb:53:42:59:6f:77:33:b4:0a:54: c5:b2:17:d1:3f:78:85:d0:d5:d4:a7:f2:21:39:41: ed:3a:41:e2:b6:6a:b9:c1:60:86:6f:c7:56:4f:83: c9:c6:f8:e7:f6:9c:e0:81:ff:7c:51:c9:8b:f9:cc: a1:3f:4e:4f:22:fb:2f:b7:a3:9c:7d:2e:d0:e2:ac: af:1b:10:c1:7d:6f:e2:4e:6d:ba:47:2e:1f:59:05: e3:bc:a3:a3:31:32:99:88:27:61:eb:a0:8d:de:81: c9:86:6b:71:e8:77:d9:d9:7d:63:3e:45:4d:31:1d: ce:61:9f:b1:78:da:b7:d6:f1:d8:ac:ea:0a:bd:29: 20:7e:a3:3b:6a:a1:e7:71:36:c2:7a:ef:c3:51:b0: ba:86:52:b7:e2:9f:4d:7b:f4:35:bf:b1:9e:c4:c0: 5c:a6:82:de:44:db:3a:f5:b0:01:2a:65:c2:4f:6a: ec:73:79:8f:b0:64:85:45:4d:d2:16:d8:14:07:81: 4b:4d:0a:af:d6:69:60:aa:c4:3a:f1:cb:a2:3e:a5: 24:00:b7:19:6a:3a:26:1b:9f:fc:e6:5d:ed:89:18: 49:7f:59:a0:4c:80:fa:01:f8:2d:64:6f:d8:20:49: 39:ad:4d:6f:a4:24:69:af:31:11:cc:d9:f9:5f:66: f5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:07:D4:1C:F4:5B:60:36:25:BF:57:60:46:C7:8C:59:F4:8F:70:BE X509v3 Authority Key Identifier: keyid:D9:E4:B9:E5:C2:0C:5D:24:54:5E:4B:37:44:B7:24:23:24:23:ED:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:36:d4:80:08:2c:ef:a1:6c:02:73:39:e2:27:87:f6:33:3f: 0d:34:d3:5e:31:f4:69:28:69:dd:fb:7e:d2:b1:64:17:63:ab: 6e:c6:05:e8:f5:15:ee:6b:71:c5:ff:89:30:5a:ff:32:b1:82: 45:c7:52:45:94:bc:a2:96:c5:eb:79:1f:77:3c:9e:ea:92:38: 6e:cc:c4:46:8b:06:ff:a7:fa:53:9c:d6:5c:c3:81:54:07:f7: 0c:f3:86:17:4c:b3:8f:68:72:e9:77:fe:2c:a9:38:6e:4b:37: 38:0d:d1:51:30:20:75:d8:f7:18:04:64:50:7a:b5:fd:3d:4c: 16:d2:47:d7:57:6f:06:b2:2d:fe:69:7f:da:4d:9a:38:e4:89: 55:39:8f:4a:f2:5b:18:84:cb:f4:0c:ba:d3:3f:42:fb:45:09: f2:9b:5f:8a:4a:53:fd:d5:68:ad:0a:2a:23:8c:e7:d9:09:30: 5d:dc:7c:d2:39:c7:89:19:93:ee:9d:ea:5e:dc:b0:a6:9f:26: d1:5d:7c:08:b2:ad:c0:7f:6e:62:9b:ad:c7:1d:21:40:64:7d: 9a:dc:2d:79:d0:02:01:2d:a1:fb:2d:87:29:15:d2:48:fb:e3: 32:bf:32:21:b4:3c:d6:1f:6b:09:9d:98:b6:1f:c0:4f:32:58: 2c:bc:c2:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf7eR9JFvTaKUmiJt85bipE30jI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFNEI5RTVDMjBDNUQyNDU0NUU0QjM3NDRCNzI0MjMy NDIzRURCNzAeFw0yNjA3MjAxOTMwMzRaFw0yNjA3MjEyMjAzMzRaMDMxMTAvBgNV BAMTKDJCMDdENDFDRjQ1QjYwMzYyNUJGNTc2MDQ2Qzc4QzU5RjQ4RjcwQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbvlOhy1NCWW93M7QKVMWyF9E/ eIXQ1dSn8iE5Qe06QeK2arnBYIZvx1ZPg8nG+Of2nOCB/3xRyYv5zKE/Tk8i+y+3 o5x9LtDirK8bEMF9b+JObbpHLh9ZBeO8o6MxMpmIJ2HroI3egcmGa3Hod9nZfWM+ RU0xHc5hn7F42rfW8dis6gq9KSB+oztqoedxNsJ678NRsLqGUrfin0179DW/sZ7E wFymgt5E2zr1sAEqZcJPauxzeY+wZIVFTdIW2BQHgUtNCq/WaWCqxDrxy6I+pSQA txlqOiYbn/zmXe2JGEl/WaBMgPoB+C1kb9ggSTmtTW+kJGmvMRHM2flfZvUFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKwfUHPRbYDYlv1dgRseMWfSPcL4wHwYDVR0j BBgwFoAU2eS55cIMXSRUXks3RLckIyQj7bcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzBhMzkyZGMtMmU0ZS00NzcwLThmNjgtYmM2MWY4MGI3NGE3LzAvRDlFNEI5RTVD MjBDNUQyNDU0NUU0QjM3NDRCNzI0MjMyNDIzRURCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOUU0QjlFNUMyMEM1RDI0NTQ1RTRCMzc0NEI3MjQyMzI0MjNF REI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzBhMzkyZGMtMmU0ZS00NzcwLThm NjgtYmM2MWY4MGI3NGE3LzAvRDlFNEI5RTVDMjBDNUQyNDU0NUU0QjM3NDRCNzI0 MjMyNDIzRURCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHw21IAILO+hbAJzOeInh/YzPw00014x9Gko ad37ftKxZBdjq27GBej1Fe5rccX/iTBa/zKxgkXHUkWUvKKWxet5H3c8nuqSOG7M xEaLBv+n+lOc1lzDgVQH9wzzhhdMs49ocul3/iypOG5LNzgN0VEwIHXY9xgEZFB6 tf09TBbSR9dXbwayLf5pf9pNmjjkiVU5j0ryWxiEy/QMutM/QvtFCfKbX4pKU/3V aK0KKiOM59kJMF3cfNI5x4kZk+6d6l7csKafJtFdfAiyrcB/bmKbrccdIUBkfZrc LXnQAgEtofsthykV0kj74zK/MiG0PNYfawmdmLYfwE8yWCy8wsg= -----END CERTIFICATE-----Generated at Tue Jul 21 06:39:51 2026 by rpki-client