$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft File: 9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft (raw, json) Hash identifier: eotz47eWmdiQJ6pqvQTqT7d+mvLBBDkT9PbD+zDdXC4= Subject key identifier: 66:05:6C:D8:43:B0:A0:C7:C5:16:2D:DD:16:2C:28:35:27:BE:BF:57 Authority key identifier: 9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF Certificate issuer: /CN=9B995ECA9CF77E66AB04370A6C3562ADCD7413EF Certificate serial: 02EBB398DBFF50C6B0C4806B03386743C2576BC9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 20:27:16 +0000 Manifest this update: Sun 19 Jul 2026 20:22:16 +0000 Manifest next update: Mon 20 Jul 2026 22:29:16 +0000 Files and hashes: 1: 3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa (hash: 0GXiVqHET4FIeA3plxHWjQU7xk7vNPKZIk6ziqpvvGY=) 2: 3130332e3133302e38332e302f32342d3234203d3e20313530393636.roa (hash: +yASWV2qPXNVH0dMs+ql82F9yTnpzpBrn8UO30QUNqI=) 3: 3130332e3133302e38322e302f32332d3233203d3e20313530393636.roa (hash: oYvVYAWqY5/XajF618G7pKQtRtEqOMlHPhGTTZeide8=) 4: 9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl (hash: QqXMGyOktfOfAfGD4BfeDW19h9T2dE1tm9l/Mcpit+M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:eb:b3:98:db:ff:50:c6:b0:c4:80:6b:03:38:67:43:c2:57:6b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B995ECA9CF77E66AB04370A6C3562ADCD7413EF Validity Not Before: Jul 19 20:22:16 2026 GMT Not After : Jul 20 22:29:16 2026 GMT Subject: CN=66056CD843B0A0C7C5162DDD162C283527BEBF57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:de:e6:f1:f5:3f:78:c6:11:35:6d:78:3c:18: d1:1a:11:28:1a:11:84:65:6f:7e:12:dd:f2:bb:b3: 42:2e:1e:d7:0c:86:f5:5a:dd:ab:5c:58:21:a8:a7: 94:54:10:92:db:6d:6f:a2:49:04:9d:9e:9c:1a:94: 7c:1d:8f:01:47:d0:49:be:31:e3:81:b4:05:e8:b2: 2e:9a:ed:f5:34:d3:45:b3:ca:31:e2:55:cd:03:85: c3:3e:37:dd:e2:fe:27:b5:3f:98:4d:98:19:72:32: 13:af:b7:3f:e2:de:05:22:79:5d:5a:c1:98:74:13: 82:1a:bd:63:49:e5:d4:ae:89:f2:fb:d6:ba:c0:66: c4:f8:6d:c4:32:67:fe:5e:fc:c7:ad:24:9c:71:e5: 77:cd:f2:dd:e7:02:51:bb:fd:20:3e:13:28:d0:67: fd:05:7b:c2:b0:a2:64:2c:ab:94:e8:3b:6c:9c:88: 81:94:8c:44:c3:a1:fc:a7:e0:24:a2:bd:c5:5e:e5: f5:b1:e2:a9:dc:d1:bb:1b:40:9c:50:d0:c7:e6:f3: 2e:2f:1d:d7:0d:b4:95:75:d5:3c:08:c2:c1:51:be: bd:ad:cd:29:f4:53:0e:60:39:11:e8:24:2a:89:4d: c9:20:81:62:14:db:39:dd:6c:11:06:fa:a4:ab:89: 31:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:05:6C:D8:43:B0:A0:C7:C5:16:2D:DD:16:2C:28:35:27:BE:BF:57 X509v3 Authority Key Identifier: keyid:9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:6d:0c:61:45:c1:45:e2:56:fe:ad:f0:91:6e:fd:62:25:21: 21:41:35:37:42:6b:24:9c:0a:e0:23:2c:2e:33:de:0f:b0:4b: f6:7c:26:7f:be:74:d6:44:e0:95:28:88:29:6b:87:63:76:28: 11:1b:ef:b9:cc:65:fe:76:9b:07:40:34:e4:80:87:8a:4a:6d: 34:cb:d7:79:60:03:81:8b:48:90:1a:18:fa:e6:2f:4b:65:12: 7c:29:45:5d:a5:b7:69:bc:e4:e9:51:8a:df:2a:6d:7d:21:d7: 7a:c2:ce:2e:28:39:d1:11:32:aa:ea:ef:5c:3d:ce:30:35:46: 11:7e:fd:98:93:b1:68:a1:ab:c9:68:a2:f8:3a:b8:00:4f:5c: f9:94:8f:d9:2c:12:f4:bc:64:7a:6b:7a:52:09:42:99:73:ef: df:59:ae:2a:72:6a:7c:ef:45:20:2c:a0:ab:a1:1d:55:33:06: f2:8a:39:99:83:9c:e0:1d:ee:09:14:68:8c:40:86:07:8c:88: 3d:04:83:06:83:8f:98:5b:10:41:f8:03:c8:a6:ee:04:79:76: 31:ce:8f:33:02:74:89:0c:20:d2:1a:b7:af:b6:70:42:49:aa: 8a:f0:d5:27:fb:ac:cc:22:68:bf:ae:82:f2:73:91:a2:09:1e: ca:ae:ac:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAuuzmNv/UMawxIBrAzhnQ8JXa8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI5OTVFQ0E5Q0Y3N0U2NkFCMDQzNzBBNkMzNTYyQURD RDc0MTNFRjAeFw0yNjA3MTkyMDIyMTZaFw0yNjA3MjAyMjI5MTZaMDMxMTAvBgNV BAMTKDY2MDU2Q0Q4NDNCMEEwQzdDNTE2MkRERDE2MkMyODM1MjdCRUJGNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR3ubx9T94xhE1bXg8GNEaESga EYRlb34S3fK7s0IuHtcMhvVa3atcWCGop5RUEJLbbW+iSQSdnpwalHwdjwFH0Em+ MeOBtAXosi6a7fU000WzyjHiVc0DhcM+N93i/ie1P5hNmBlyMhOvtz/i3gUieV1a wZh0E4IavWNJ5dSuifL71rrAZsT4bcQyZ/5e/MetJJxx5XfN8t3nAlG7/SA+EyjQ Z/0Fe8KwomQsq5ToO2yciIGUjETDofyn4CSivcVe5fWx4qnc0bsbQJxQ0Mfm8y4v HdcNtJV11TwIwsFRvr2tzSn0Uw5gORHoJCqJTckggWIU2zndbBEG+qSriTF9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZgVs2EOwoMfFFi3dFiwoNSe+v1cwHwYDVR0j BBgwFoAUm5leypz3fmarBDcKbDVirc10E+8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE4NzA2NGItNWYyNy00MjcwLTkwZTQtOTlmNDNhZTg0ZGI3LzAvOUI5OTVFQ0E5 Q0Y3N0U2NkFCMDQzNzBBNkMzNTYyQURDRDc0MTNFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85Qjk5NUVDQTlDRjc3RTY2QUIwNDM3MEE2QzM1NjJBRENENzQx M0VGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE4NzA2NGItNWYyNy00MjcwLTkw ZTQtOTlmNDNhZTg0ZGI3LzAvOUI5OTVFQ0E5Q0Y3N0U2NkFCMDQzNzBBNkMzNTYy QURDRDc0MTNFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALdtDGFFwUXiVv6t8JFu/WIlISFBNTdCaySc CuAjLC4z3g+wS/Z8Jn++dNZE4JUoiClrh2N2KBEb77nMZf52mwdANOSAh4pKbTTL 13lgA4GLSJAaGPrmL0tlEnwpRV2lt2m85OlRit8qbX0h13rCzi4oOdERMqrq71w9 zjA1RhF+/ZiTsWihq8loovg6uABPXPmUj9ksEvS8ZHprelIJQplz799Zripyanzv RSAsoKuhHVUzBvKKOZmDnOAd7gkUaIxAhgeMiD0EgwaDj5hbEEH4A8im7gR5djHO jzMCdIkMINIat6+2cEJJqorw1Sf7rMwiaL+ugvJzkaIJHsqurEI= -----END CERTIFICATE-----Generated at Sun Jul 19 23:02:18 2026 by rpki-client