$ rpki-client -vvf rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft File: 00095019ECFE138568A45C973E2550DDCDFE24F9.mft (raw, json) Hash identifier: VbIklTf/bt1UJmpk95lqHOkd1EPIYRynCXGiT3GTdsI= Subject key identifier: 9D:32:5C:9F:18:06:A0:00:A8:18:B8:C1:7F:84:D3:80:7F:41:6E:FD Authority key identifier: 00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9 Certificate issuer: /CN=00095019ECFE138568A45C973E2550DDCDFE24F9 Certificate serial: 52DDA55BF0C29840F6B1FB0A67C337D1F553A690 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 22:13:38 +0000 Manifest this update: Mon 20 Jul 2026 22:08:38 +0000 Manifest next update: Wed 22 Jul 2026 02:05:38 +0000 Files and hashes: 1: 00095019ECFE138568A45C973E2550DDCDFE24F9.crl (hash: ssHEq9bgsSrWSuxLcYUEQvkbN+v66V3cfvD386FAhWA=) 2: 3138302e39342e392e302f32342d3234203d3e20313532303430.roa (hash: 9NjGQraMtFt8WFleFmys2JeiEGfDbejk4iig/XaEVZ4=) 3: 3138302e39342e382e302f32342d3234203d3e20313532303430.roa (hash: QD46OeSAEEYRUHA+p9YKqowoXvSQlWoPfMsfotiNmwI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:dd:a5:5b:f0:c2:98:40:f6:b1:fb:0a:67:c3:37:d1:f5:53:a6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00095019ECFE138568A45C973E2550DDCDFE24F9 Validity Not Before: Jul 20 22:08:38 2026 GMT Not After : Jul 22 02:05:38 2026 GMT Subject: CN=9D325C9F1806A000A818B8C17F84D3807F416EFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:08:a2:02:80:b5:ae:e8:32:86:4a:63:c8:18: 39:ff:1d:0c:1a:a1:e8:8f:e5:62:92:f0:e2:5a:27: c0:1f:35:ac:2b:57:05:9c:92:f8:e4:79:d2:d6:da: 68:cb:fe:8c:a1:60:12:26:29:fa:b6:f4:7d:7e:8a: 19:fa:de:43:80:09:33:f4:63:7f:83:dc:7d:64:d3: 08:61:5e:97:2a:bd:b9:be:61:76:5a:5d:23:e2:22: 9b:56:93:d9:c2:d0:b8:86:d8:80:cd:ba:e0:e3:77: 5e:e2:7b:34:83:23:23:8f:3a:cc:cd:08:6c:f9:ed: 01:25:c6:a2:a8:3f:43:2b:33:46:92:8f:39:49:23: bf:10:d7:75:23:3e:3b:56:ed:76:97:f4:f2:e6:58: ed:76:a6:32:45:17:5f:90:e4:7b:66:f9:ff:16:fa: 92:15:c8:7e:f4:be:80:f5:ac:90:63:04:13:ef:23: 19:2c:42:ac:75:e2:7b:d9:91:ac:63:0f:ae:d8:0f: 96:1d:be:7d:6a:4e:22:ce:07:ce:60:56:9d:e0:04: ab:6b:b7:44:5b:34:c5:64:b8:fa:a6:a9:3f:15:60: 9f:a9:47:a9:dc:c7:c3:c6:cf:05:d6:12:ac:5d:1d: 50:bb:bf:73:49:83:26:cd:16:06:a8:8f:eb:97:d1: a8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:32:5C:9F:18:06:A0:00:A8:18:B8:C1:7F:84:D3:80:7F:41:6E:FD X509v3 Authority Key Identifier: keyid:00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:a8:a5:b9:51:35:02:dd:3c:6b:a9:e1:8c:57:81:1d:4d:80: d0:c3:2f:5a:32:c2:eb:1b:32:1f:7e:81:8c:bd:e2:44:64:06: cb:59:92:cf:41:db:90:2c:35:9a:4f:4d:9e:15:ab:08:8b:b8: 1c:58:3b:ac:65:d9:3c:48:bb:c5:6b:06:97:aa:1a:6e:61:35: f3:42:48:0e:28:a0:b5:b6:ba:2b:e2:0c:bd:91:5d:23:6c:7f: 92:bd:d8:b4:c1:cd:c8:40:28:04:6b:bb:d6:4d:f7:4b:7d:ae: d3:77:e6:95:c8:0a:1e:77:85:d6:94:b3:d0:58:7c:3f:f9:6d: 76:b4:e2:5d:c0:7f:dc:a9:57:32:45:c2:f5:44:f1:37:db:c4: a3:b1:1e:23:11:81:3a:b1:50:18:a6:67:3e:0b:7a:6c:02:6d: 37:a1:36:4f:f1:00:a4:98:41:68:d0:43:65:c8:61:f4:be:a9: 6b:2a:0e:66:1e:b7:ec:d5:2f:fb:9c:06:4b:fb:5e:d2:7f:07: 59:5c:3a:4b:5d:aa:52:eb:a4:ab:6b:d3:38:c9:1d:3d:cc:fc: f8:07:54:9a:19:64:ec:37:91:00:f7:f2:bb:a3:00:37:7d:43: a8:7b:e5:e6:8d:38:9f:aa:3c:da:95:0c:1c:f9:90:11:2a:5b: f9:18:aa:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUt2lW/DCmED2sfsKZ8M30fVTppAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAwOTUwMTlFQ0ZFMTM4NTY4QTQ1Qzk3M0UyNTUwRERD REZFMjRGOTAeFw0yNjA3MjAyMjA4MzhaFw0yNjA3MjIwMjA1MzhaMDMxMTAvBgNV BAMTKDlEMzI1QzlGMTgwNkEwMDBBODE4QjhDMTdGODREMzgwN0Y0MTZFRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnCKICgLWu6DKGSmPIGDn/HQwa oeiP5WKS8OJaJ8AfNawrVwWckvjkedLW2mjL/oyhYBImKfq29H1+ihn63kOACTP0 Y3+D3H1k0whhXpcqvbm+YXZaXSPiIptWk9nC0LiG2IDNuuDjd17iezSDIyOPOszN CGz57QElxqKoP0MrM0aSjzlJI78Q13UjPjtW7XaX9PLmWO12pjJFF1+Q5Htm+f8W +pIVyH70voD1rJBjBBPvIxksQqx14nvZkaxjD67YD5Ydvn1qTiLOB85gVp3gBKtr t0RbNMVkuPqmqT8VYJ+pR6ncx8PGzwXWEqxdHVC7v3NJgybNFgaoj+uX0ai/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnTJcnxgGoACoGLjBf4TTgH9Bbv0wHwYDVR0j BBgwFoAUAAlQGez+E4VopFyXPiVQ3c3+JPkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZmMWViNGItNDhkYy00ZWVhLTkxODEtMTI4Y2IyOGIzZGJhLzAvMDAwOTUwMTlF Q0ZFMTM4NTY4QTQ1Qzk3M0UyNTUwRERDREZFMjRGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDA5NTAxOUVDRkUxMzg1NjhBNDVDOTczRTI1NTBERENERkUy NEY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZmMWViNGItNDhkYy00ZWVhLTkx ODEtMTI4Y2IyOGIzZGJhLzAvMDAwOTUwMTlFQ0ZFMTM4NTY4QTQ1Qzk3M0UyNTUw RERDREZFMjRGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMuopblRNQLdPGup4YxXgR1NgNDDL1oywusb Mh9+gYy94kRkBstZks9B25AsNZpPTZ4VqwiLuBxYO6xl2TxIu8VrBpeqGm5hNfNC SA4ooLW2uiviDL2RXSNsf5K92LTBzchAKARru9ZN90t9rtN35pXICh53hdaUs9BY fD/5bXa04l3Af9ypVzJFwvVE8TfbxKOxHiMRgTqxUBimZz4LemwCbTehNk/xAKSY QWjQQ2XIYfS+qWsqDmYet+zVL/ucBkv7XtJ/B1lcOktdqlLrpKtr0zjJHT3M/PgH VJoZZOw3kQD38rujADd9Q6h75eaNOJ+qPNqVDBz5kBEqW/kYqkA= -----END CERTIFICATE-----Generated at Tue Jul 21 06:18:01 2026 by rpki-client