$ rpki-client -vvf rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft File: 509D7A005D22B25F29771D4736A9F3273A87402B.mft (raw, json) Hash identifier: 9kgjM3wUrhghBLEm0TRONWBlWCv0G/ZmaaCnguXHSw8= Subject key identifier: B7:17:59:A8:F5:3A:A3:6C:87:27:99:87:61:AD:E0:DB:39:19:C1:F7 Authority key identifier: 50:9D:7A:00:5D:22:B2:5F:29:77:1D:47:36:A9:F3:27:3A:87:40:2B Certificate issuer: /CN=509D7A005D22B25F29771D4736A9F3273A87402B Certificate serial: 1A5F755495E07701CBD75D68E90F1D41DB764143 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 14:09:08 +0000 Manifest this update: Mon 20 Jul 2026 14:04:08 +0000 Manifest next update: Tue 21 Jul 2026 17:56:08 +0000 Files and hashes: 1: 3130332e39372e372e302f32342d3234203d3e20313336313237.roa (hash: u9MbGwZTtdpRxvA0JKGeSH6mVkoh1gSizjeQTtefh6M=) 2: 3130332e39372e362e302f32342d3234203d3e20313336313237.roa (hash: RQSgO7tNppNvAC3aE8/fyIG2xxaOqC+3ztcNnXjPeng=) 3: 3130332e39372e342e302f32342d3234203d3e20313336313237.roa (hash: 3XT6Qf//u+3dqP7/6tKzMllxBOnpkDd6boyw9AssiHI=) 4: 323430313a383034303a3a2f33322d3332203d3e20313336313237.roa (hash: Dj85ZEdEHR8+WCo+8/1VIzd5RABBzm91ckkaaPaldnM=) 5: 3130332e39372e342e302f32322d3234203d3e20313336313237.roa (hash: JKx5cXFJ9JwbuaKvmzbMBf7ucrHYe7PUJvHjTqORfvc=) 6: 509D7A005D22B25F29771D4736A9F3273A87402B.crl (hash: ftcV5ytVL9PYBcCmyPzir49OeiG/jxTpYdKox+OQD4o=) 7: 3130332e39372e352e302f32342d3234203d3e20313336313237.roa (hash: gia04ffSWp+0qNudeLLR7irdY7oXCN/dKfEZqry+RoQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.crl rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:5f:75:54:95:e0:77:01:cb:d7:5d:68:e9:0f:1d:41:db:76:41:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509D7A005D22B25F29771D4736A9F3273A87402B Validity Not Before: Jul 20 14:04:08 2026 GMT Not After : Jul 21 17:56:08 2026 GMT Subject: CN=B71759A8F53AA36C8727998761ADE0DB3919C1F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fb:a1:c5:9a:1b:45:14:af:47:c7:60:bb:d8: f9:1b:53:97:e3:81:12:00:9e:bf:97:f9:fa:8d:f7: 6f:98:92:5e:22:26:cb:3f:e1:ff:17:03:43:53:e6: ac:8e:c4:08:83:85:95:05:ea:c7:cd:17:ab:7f:62: 52:42:bc:08:ff:0f:61:fe:2a:01:79:8f:16:21:0f: 4d:b4:87:0c:19:dd:8b:0f:32:2f:35:e8:a8:97:4c: 4a:45:81:e3:a0:a4:50:90:92:7e:5b:41:94:80:b8: 0e:eb:82:2b:e6:9f:f9:10:fe:2a:7b:37:4d:4d:ec: e5:4b:ad:05:b9:a1:42:98:6b:72:40:96:f5:bd:00: a0:1a:31:9d:b5:43:78:32:a3:8b:dc:c3:c5:dd:6b: c7:c3:21:35:65:1c:bf:5f:56:dd:35:87:2e:89:24: f8:b3:68:d3:49:6f:9d:59:ed:73:39:53:f1:be:eb: 6a:6c:8d:40:c3:19:c7:58:59:e8:1b:22:64:a5:a7: 8f:20:d2:4f:cf:d0:b9:15:5c:1d:2a:ad:a8:ae:c3: b1:1a:06:e5:9d:a1:c7:f3:d8:20:2c:48:54:c3:ce: 5e:28:08:4a:c1:82:f5:c7:46:1e:ab:23:ce:6a:eb: b5:4e:b6:75:0d:42:83:c5:f3:c3:99:18:2d:89:0d: 6a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:17:59:A8:F5:3A:A3:6C:87:27:99:87:61:AD:E0:DB:39:19:C1:F7 X509v3 Authority Key Identifier: keyid:50:9D:7A:00:5D:22:B2:5F:29:77:1D:47:36:A9:F3:27:3A:87:40:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c8:b3:bb:19:d1:6e:0b:23:0b:cc:86:37:3f:0a:11:3c:c1: be:6b:05:99:74:a0:5e:6e:b1:64:a8:b5:ad:20:7f:6f:e3:79: fc:68:45:1d:f4:1e:33:bc:5f:2d:cf:63:ca:06:38:1a:61:15: b2:b8:58:8e:db:18:a2:24:0f:fd:62:f3:3b:7e:18:95:c4:a2: 96:b5:f7:79:96:5b:c0:09:da:16:71:42:c6:a5:57:0e:ab:9d: 8d:4b:0e:6a:6a:ba:57:3e:f2:36:36:94:46:46:c1:1b:17:ba: 39:b6:5b:4d:63:89:6c:c7:f7:33:7a:1b:b1:c0:6c:10:db:47: 13:11:f5:fb:3a:ac:e5:d0:84:f5:38:be:65:b1:8c:99:ac:33: aa:5c:3f:e7:48:c4:1b:d4:40:e8:de:40:ab:f1:9d:5a:8b:01: 15:a0:5f:12:f5:45:01:4c:d9:ce:e3:8b:3d:54:e1:b0:59:e1: 1c:15:f4:a2:59:ed:b1:e4:2f:6b:15:a6:5a:e5:05:aa:d1:9c: e2:be:10:e2:07:32:c8:53:6a:1a:12:04:d2:2a:f9:c6:a9:b5: e8:80:df:ed:e0:00:f1:8d:ab:29:ef:54:87:b3:27:a9:42:5d: 08:4a:4e:75:b3:4e:5f:ab:60:66:1d:0c:bc:fd:68:c4:04:03: d6:1b:24:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGl91VJXgdwHL111o6Q8dQdt2QUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA5RDdBMDA1RDIyQjI1RjI5NzcxRDQ3MzZBOUYzMjcz QTg3NDAyQjAeFw0yNjA3MjAxNDA0MDhaFw0yNjA3MjExNzU2MDhaMDMxMTAvBgNV BAMTKEI3MTc1OUE4RjUzQUEzNkM4NzI3OTk4NzYxQURFMERCMzkxOUMxRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg+6HFmhtFFK9Hx2C72PkbU5fj gRIAnr+X+fqN92+Ykl4iJss/4f8XA0NT5qyOxAiDhZUF6sfNF6t/YlJCvAj/D2H+ KgF5jxYhD020hwwZ3YsPMi816KiXTEpFgeOgpFCQkn5bQZSAuA7rgivmn/kQ/ip7 N01N7OVLrQW5oUKYa3JAlvW9AKAaMZ21Q3gyo4vcw8Xda8fDITVlHL9fVt01hy6J JPizaNNJb51Z7XM5U/G+62psjUDDGcdYWegbImSlp48g0k/P0LkVXB0qraiuw7Ea BuWdocfz2CAsSFTDzl4oCErBgvXHRh6rI85q67VOtnUNQoPF88OZGC2JDWo/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtxdZqPU6o2yHJ5mHYa3g2zkZwfcwHwYDVR0j BBgwFoAUUJ16AF0isl8pdx1HNqnzJzqHQCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDRiMjczMDMtOWUzZC00ZDQyLWFmMjUtNmEwZjExODA4ZjI3LzAvNTA5RDdBMDA1 RDIyQjI1RjI5NzcxRDQ3MzZBOUYzMjczQTg3NDAyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MDlEN0EwMDVEMjJCMjVGMjk3NzFENDczNkE5RjMyNzNBODc0 MDJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDRiMjczMDMtOWUzZC00ZDQyLWFm MjUtNmEwZjExODA4ZjI3LzAvNTA5RDdBMDA1RDIyQjI1RjI5NzcxRDQ3MzZBOUYz MjczQTg3NDAyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvIs7sZ0W4LIwvMhjc/ChE8wb5rBZl0oF5u sWSota0gf2/jefxoRR30HjO8Xy3PY8oGOBphFbK4WI7bGKIkD/1i8zt+GJXEopa1 93mWW8AJ2hZxQsalVw6rnY1LDmpqulc+8jY2lEZGwRsXujm2W01jiWzH9zN6G7HA bBDbRxMR9fs6rOXQhPU4vmWxjJmsM6pcP+dIxBvUQOjeQKvxnVqLARWgXxL1RQFM 2c7jiz1U4bBZ4RwV9KJZ7bHkL2sVplrlBarRnOK+EOIHMshTahoSBNIq+capteiA 3+3gAPGNqynvVIezJ6lCXQhKTnWzTl+rYGYdDLz9aMQEA9YbJKM= -----END CERTIFICATE-----Generated at Tue Jul 21 06:47:42 2026 by rpki-client