$ rpki-client -vvf rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft File: 9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft (raw, json) Hash identifier: Xp8wiMlfFH/HlPNWYYTNAeU/tenTqhkDE0D7ro8lYno= Subject key identifier: 52:1F:9D:C2:A8:A7:C1:93:EC:BC:13:A3:88:0E:DE:4E:49:D7:CB:92 Authority key identifier: 9B:61:7E:3E:89:75:C5:E8:37:FD:E8:E7:E3:A6:F7:F2:B0:7D:F2:FA Certificate issuer: /CN=9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA Certificate serial: 5C4AC0E08709D0B8E3DFDE4CFEFD4EBC08414841 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft Manifest number: 6A Signing time: Tue 21 Jul 2026 02:08:22 +0000 Manifest this update: Tue 21 Jul 2026 02:03:22 +0000 Manifest next update: Wed 22 Jul 2026 04:59:22 +0000 Files and hashes: 1: 9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl (hash: zRayIGsXn4ToInzLakKl5wrB+AsBQs6wBe97cexDQ2s=) 2: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (hash: Y6VzFaG2FbyNdRwLMR4BvXhR1/TPWS0MIZ86oCceOfk=) 3: 3130332e34332e32352e302f32342d3234203d3e20313339343139.roa (hash: jbUXyMJGAUe8ArHS1H74yui1bmkFdiNku010i13gDLM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:4a:c0:e0:87:09:d0:b8:e3:df:de:4c:fe:fd:4e:bc:08:41:48:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA Validity Not Before: Jul 21 02:03:22 2026 GMT Not After : Jul 22 04:59:22 2026 GMT Subject: CN=521F9DC2A8A7C193ECBC13A3880EDE4E49D7CB92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9a:ec:c9:83:32:9f:75:ff:13:c3:50:98:14: c9:bf:e4:ec:88:94:49:ae:c8:6b:1a:f5:f5:ce:7c: d5:a6:85:d8:ca:05:f5:d9:50:68:07:1f:85:16:ca: a7:56:30:5c:8d:81:f2:a0:2d:19:aa:60:60:0e:f4: eb:fc:3e:44:eb:0a:32:b1:f9:8d:27:50:94:27:10: 67:4e:3a:36:dd:82:4a:41:ac:c8:5f:cc:29:61:e0: a2:19:1d:27:81:99:fd:1d:a4:18:ec:c4:cc:b9:e2: 41:fb:f0:eb:9f:f0:25:0d:cf:fa:31:a2:18:1f:9b: 32:db:4b:4e:de:5d:55:bb:1c:a7:b0:e4:2c:6b:97: 48:81:ea:ee:32:5e:83:40:6a:be:b0:d6:f9:5b:f0: 21:4e:78:17:a2:42:f5:23:0e:34:62:45:4d:2f:bf: 01:1f:e5:a2:0d:d5:06:bf:5a:70:ad:de:67:c5:5f: 1a:b1:a0:1e:56:80:af:ab:e4:d8:d9:0d:c8:90:fd: c2:66:e2:40:32:05:1f:6f:ab:63:a5:71:b1:c1:5a: 5f:4d:11:1f:78:41:49:d1:8b:ff:4c:69:57:1c:c2: f7:70:b7:da:c3:45:7e:24:25:6b:85:6b:91:1f:bb: 19:d7:75:85:6e:97:02:73:8a:76:6a:71:67:53:c8: 8e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1F:9D:C2:A8:A7:C1:93:EC:BC:13:A3:88:0E:DE:4E:49:D7:CB:92 X509v3 Authority Key Identifier: keyid:9B:61:7E:3E:89:75:C5:E8:37:FD:E8:E7:E3:A6:F7:F2:B0:7D:F2:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:2c:2d:f7:e2:40:e1:3b:67:85:5a:01:6d:10:76:06:c4:2d: 56:93:91:24:51:4c:51:ac:32:2f:f7:13:8b:21:aa:25:cb:68: 1f:5a:da:27:8b:f0:7d:1f:8f:16:2d:b1:7b:85:37:c5:be:1d: 85:3c:f2:f4:77:18:df:e3:87:50:f6:c6:c4:0e:b9:9e:85:02: b9:31:fd:43:1b:b4:22:84:8d:af:52:39:3f:34:1c:86:8a:51: d8:0d:fe:04:27:82:cb:fe:a9:e8:71:da:c6:7e:60:ea:ba:b9: e3:c0:e5:d1:ef:9d:aa:11:d3:97:61:7d:2f:9d:9e:1e:99:71: 1e:d1:01:23:ca:3b:52:2a:21:b3:37:0e:73:a7:b8:8c:9d:c1: 8a:67:6f:09:99:85:5e:52:b0:00:28:48:40:b2:f6:af:b5:d6: 4b:b1:61:43:20:f8:25:dd:84:ca:ee:59:da:c9:c2:b9:36:63: 30:11:5f:bf:02:35:f9:fa:73:da:a8:2f:22:42:16:b4:2c:10: ec:40:79:a6:69:9a:8b:cb:31:dc:46:c3:ec:a9:40:1b:04:06: 9f:cf:31:d5:34:a5:1d:71:f0:b0:36:af:a5:2d:0e:f1:12:fd: cf:c4:42:c1:4b:a5:43:5c:a0:b3:b0:ea:4b:a3:76:28:90:17: 2d:bc:08:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXErA4IcJ0Ljj395M/v1OvAhBSEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI2MTdFM0U4OTc1QzVFODM3RkRFOEU3RTNBNkY3RjJC MDdERjJGQTAeFw0yNjA3MjEwMjAzMjJaFw0yNjA3MjIwNDU5MjJaMDMxMTAvBgNV BAMTKDUyMUY5REMyQThBN0MxOTNFQ0JDMTNBMzg4MEVERTRFNDlEN0NCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBmuzJgzKfdf8Tw1CYFMm/5OyI lEmuyGsa9fXOfNWmhdjKBfXZUGgHH4UWyqdWMFyNgfKgLRmqYGAO9Ov8PkTrCjKx +Y0nUJQnEGdOOjbdgkpBrMhfzClh4KIZHSeBmf0dpBjsxMy54kH78Ouf8CUNz/ox ohgfmzLbS07eXVW7HKew5Cxrl0iB6u4yXoNAar6w1vlb8CFOeBeiQvUjDjRiRU0v vwEf5aIN1Qa/WnCt3mfFXxqxoB5WgK+r5NjZDciQ/cJm4kAyBR9vq2OlcbHBWl9N ER94QUnRi/9MaVccwvdwt9rDRX4kJWuFa5EfuxnXdYVulwJzinZqcWdTyI7TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUh+dwqinwZPsvBOjiA7eTknXy5IwHwYDVR0j BBgwFoAUm2F+Pol1xeg3/ejn46b38rB98vowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDIwODNkNDQtNzgzNS00NDNkLTg1M2EtMGE3OWNmMDBlOTUwLzAvOUI2MTdFM0U4 OTc1QzVFODM3RkRFOEU3RTNBNkY3RjJCMDdERjJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QjYxN0UzRTg5NzVDNUU4MzdGREU4RTdFM0E2RjdGMkIwN0RG MkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDIwODNkNDQtNzgzNS00NDNkLTg1 M2EtMGE3OWNmMDBlOTUwLzAvOUI2MTdFM0U4OTc1QzVFODM3RkRFOEU3RTNBNkY3 RjJCMDdERjJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQsLffiQOE7Z4VaAW0QdgbELVaTkSRRTFGs Mi/3E4shqiXLaB9a2ieL8H0fjxYtsXuFN8W+HYU88vR3GN/jh1D2xsQOuZ6FArkx /UMbtCKEja9SOT80HIaKUdgN/gQngsv+qehx2sZ+YOq6uePA5dHvnaoR05dhfS+d nh6ZcR7RASPKO1IqIbM3DnOnuIydwYpnbwmZhV5SsAAoSECy9q+11kuxYUMg+CXd hMruWdrJwrk2YzARX78CNfn6c9qoLyJCFrQsEOxAeaZpmovLMdxGw+ypQBsEBp/P MdU0pR1x8LA2r6UtDvES/c/EQsFLpUNcoLOw6kujdiiQFy28CBU= -----END CERTIFICATE-----Generated at Tue Jul 21 07:00:17 2026 by rpki-client