$ rpki-client -vvf rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft File: 9F018573ABC40A1244EF018EE95D73D8E54A5247.mft (raw, json) Hash identifier: X77PSrM2rge/fyyWI6UpUdeIW9yP9z5CopxMq1W7huA= Subject key identifier: 20:5E:90:37:3F:1B:92:E1:1D:02:9C:9A:13:F8:E1:95:0B:12:A1:D1 Authority key identifier: 9F:01:85:73:AB:C4:0A:12:44:EF:01:8E:E9:5D:73:D8:E5:4A:52:47 Certificate issuer: /CN=9F018573ABC40A1244EF018EE95D73D8E54A5247 Certificate serial: 408AF3214E193E9A2BDE74D656074CADCA7C80B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 11:35:44 +0000 Manifest this update: Mon 20 Jul 2026 11:30:44 +0000 Manifest next update: Tue 21 Jul 2026 14:22:44 +0000 Files and hashes: 1: 9F018573ABC40A1244EF018EE95D73D8E54A5247.crl (hash: eciRdZtaznqNgyT+SiPWR0Vhr83QPUUoF10w/ybviJE=) 2: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: 5rI4L+b8xzlRIUsWxeEF2NdCqFStv1SMLdpn9443Ve4=) 3: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: On7lPgtr4muQ2OAv+z91B4cwc8QzzKQys3kXiufzPRc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.crl rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:8a:f3:21:4e:19:3e:9a:2b:de:74:d6:56:07:4c:ad:ca:7c:80:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F018573ABC40A1244EF018EE95D73D8E54A5247 Validity Not Before: Jul 20 11:30:44 2026 GMT Not After : Jul 21 14:22:44 2026 GMT Subject: CN=205E90373F1B92E11D029C9A13F8E1950B12A1D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:52:7a:e8:1a:1d:c0:ca:9a:e6:7b:ef:16:38: 1f:22:54:20:91:a8:b7:fd:75:25:72:34:85:2b:c1: 21:ea:42:48:a9:58:30:f0:6f:74:f1:6a:28:3c:47: 73:ff:eb:de:85:8c:a2:75:6a:67:19:37:cb:f8:93: 2d:f4:a5:6b:78:7b:b9:fd:23:8d:c6:4d:3e:e3:fb: ef:f5:8f:82:eb:fa:10:48:ea:3a:0b:a8:af:7c:45: 32:86:c1:35:1f:a8:95:a9:e6:ea:80:07:86:ce:a3: b9:ce:8c:58:da:55:7e:ce:ce:33:43:14:d7:a7:c4: c1:13:cb:90:65:8f:9c:2b:77:1d:c5:e0:7a:8d:74: e0:9a:ca:a1:e5:f7:10:b1:c9:26:cb:d7:b2:3f:80: 23:3c:f4:85:b1:bb:91:5e:44:47:51:36:a7:cf:38: c0:77:b8:a5:25:ab:b3:fa:e7:b1:a3:13:39:4e:4e: 71:49:8c:76:ab:be:b8:23:59:7d:32:15:e7:af:87: d7:6a:00:af:a6:5f:b6:08:c0:ea:4f:3c:73:dd:b4: a8:3d:ae:ba:69:81:a4:f7:40:30:5e:2b:10:b2:96: 64:41:b5:48:9c:9c:25:2b:f0:54:05:8c:be:44:52: cd:8b:20:cb:74:6a:87:1b:94:50:9c:35:70:98:92: dc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5E:90:37:3F:1B:92:E1:1D:02:9C:9A:13:F8:E1:95:0B:12:A1:D1 X509v3 Authority Key Identifier: keyid:9F:01:85:73:AB:C4:0A:12:44:EF:01:8E:E9:5D:73:D8:E5:4A:52:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:61:3a:bb:af:93:ba:b1:0b:9a:80:fa:de:25:e4:4d:1e:64: 16:d5:5d:54:1f:36:a5:a1:30:b3:18:d6:df:fd:9b:9d:f7:5c: 3c:fe:11:55:ff:10:44:cd:09:84:39:19:18:87:fb:4b:8a:50: 41:8c:67:ef:5f:93:30:88:ed:86:84:ad:10:71:be:a8:ea:08: ff:86:8c:37:d7:fa:73:99:d2:88:58:7b:7b:c7:4a:aa:1b:fd: a6:55:af:51:a0:ec:15:f3:fb:68:26:97:5e:97:3d:1f:64:04: 64:1c:da:51:dd:30:f1:53:e2:95:9d:a3:08:b4:3f:74:cb:5f: a3:27:87:50:55:7a:ea:e5:7c:68:dc:9a:b5:ab:4c:d8:3a:5e: f9:12:46:80:c5:00:3a:63:84:86:21:de:a8:ef:b7:e9:5f:25: df:03:f0:e1:c1:3b:1f:59:2d:16:3a:4b:9a:25:54:71:b2:54: e2:39:72:dd:f8:69:58:ee:30:ee:8a:da:89:bb:20:a8:bf:59: aa:54:fe:ca:e7:d1:2f:56:f8:b1:eb:7e:6f:25:1c:7b:e7:4b: 1c:88:bb:d1:40:05:cc:bf:37:e2:5d:47:52:80:84:d6:0f:56: 9c:fd:c2:30:ba:45:a1:34:73:89:ab:96:95:53:3b:0c:a4:48: e0:3d:78:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQIrzIU4ZPpor3nTWVgdMrcp8gLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwMTg1NzNBQkM0MEExMjQ0RUYwMThFRTk1RDczRDhF NTRBNTI0NzAeFw0yNjA3MjAxMTMwNDRaFw0yNjA3MjExNDIyNDRaMDMxMTAvBgNV BAMTKDIwNUU5MDM3M0YxQjkyRTExRDAyOUM5QTEzRjhFMTk1MEIxMkExRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxUnroGh3Ayprme+8WOB8iVCCR qLf9dSVyNIUrwSHqQkipWDDwb3Txaig8R3P/696FjKJ1amcZN8v4ky30pWt4e7n9 I43GTT7j++/1j4Lr+hBI6joLqK98RTKGwTUfqJWp5uqAB4bOo7nOjFjaVX7OzjND FNenxMETy5Blj5wrdx3F4HqNdOCayqHl9xCxySbL17I/gCM89IWxu5FeREdRNqfP OMB3uKUlq7P657GjEzlOTnFJjHarvrgjWX0yFeevh9dqAK+mX7YIwOpPPHPdtKg9 rrppgaT3QDBeKxCylmRBtUicnCUr8FQFjL5EUs2LIMt0aocblFCcNXCYktyRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIF6QNz8bkuEdApyaE/jhlQsSodEwHwYDVR0j BBgwFoAUnwGFc6vEChJE7wGO6V1z2OVKUkcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTNmNzVlOTgtMTRlZi00NDU3LTk0ZjMtZTViNzNhOTIyZmM1LzAvOUYwMTg1NzNB QkM0MEExMjQ0RUYwMThFRTk1RDczRDhFNTRBNTI0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjAxODU3M0FCQzQwQTEyNDRFRjAxOEVFOTVENzNEOEU1NEE1 MjQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0 ZjMtZTViNzNhOTIyZmM1LzAvOUYwMTg1NzNBQkM0MEExMjQ0RUYwMThFRTk1RDcz RDhFNTRBNTI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVhOruvk7qxC5qA+t4l5E0eZBbVXVQfNqWh MLMY1t/9m533XDz+EVX/EETNCYQ5GRiH+0uKUEGMZ+9fkzCI7YaErRBxvqjqCP+G jDfX+nOZ0ohYe3vHSqob/aZVr1Gg7BXz+2gml16XPR9kBGQc2lHdMPFT4pWdowi0 P3TLX6Mnh1BVeurlfGjcmrWrTNg6XvkSRoDFADpjhIYh3qjvt+lfJd8D8OHBOx9Z LRY6S5olVHGyVOI5ct34aVjuMO6K2om7IKi/WapU/srn0S9W+LHrfm8lHHvnSxyI u9FABcy/N+JdR1KAhNYPVpz9wjC6RaE0c4mrlpVTOwykSOA9eLs= -----END CERTIFICATE-----Generated at Tue Jul 21 06:39:27 2026 by rpki-client