$ rpki-client -vvf rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft File: 9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft (raw, json) Hash identifier: TWkVkWxJRoYPgMktxuW+R5bqjwxxnQjGy/EG28qvxKk= Subject key identifier: A7:7A:F9:6A:11:F2:DB:EE:53:8B:0A:C3:EE:F7:29:61:6A:0C:9B:6F Authority key identifier: 9D:4D:B6:9E:1B:34:49:3D:B5:07:7A:AB:18:31:EA:08:E6:94:62:D1 Certificate issuer: /CN=9D4DB69E1B34493DB5077AAB1831EA08E69462D1 Certificate serial: 313EE9AB4B2BD35732CC817AF7579E644B0BAE13 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft Manifest number: 69 Signing time: Mon 20 Jul 2026 14:14:13 +0000 Manifest this update: Mon 20 Jul 2026 14:09:13 +0000 Manifest next update: Tue 21 Jul 2026 15:14:13 +0000 Files and hashes: 1: 3231302e38372e3132342e302f32332d3234203d3e20313532303539.roa (hash: F1D8qXB1kPa12d9QgeEIlBgwwS/bqZZ5YMaSMkPMuvU=) 2: 9D4DB69E1B34493DB5077AAB1831EA08E69462D1.crl (hash: LDnsA6F8y/DdglIkDW2SOHk68FJvG85Uujc8+q5I1h4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.crl rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:3e:e9:ab:4b:2b:d3:57:32:cc:81:7a:f7:57:9e:64:4b:0b:ae:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D4DB69E1B34493DB5077AAB1831EA08E69462D1 Validity Not Before: Jul 20 14:09:13 2026 GMT Not After : Jul 21 15:14:13 2026 GMT Subject: CN=A77AF96A11F2DBEE538B0AC3EEF729616A0C9B6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:05:94:40:cf:6f:e4:cc:d7:0a:c5:11:19:f0: 00:21:58:0c:29:60:d7:31:fa:41:70:59:19:34:43: f1:a6:ec:01:88:7c:d3:26:c9:30:fb:53:06:1d:16: 0b:b0:c5:1e:6f:6d:59:65:61:f7:44:45:62:b3:11: ab:75:20:ac:4b:1f:06:c6:7a:6f:9a:59:11:b4:e4: 4d:67:c8:57:d6:6b:40:e8:87:9d:7a:99:51:70:98: b4:1f:5b:a1:d1:c7:e6:7f:cc:54:7e:09:5c:f1:53: 05:72:11:8b:06:e6:dc:da:f9:e5:34:81:31:f1:70: 6d:63:3f:58:49:94:e1:1c:9f:50:49:a7:5c:13:9a: f8:a0:be:d0:c2:85:b8:20:b9:a1:58:22:cc:74:24: dd:0a:92:9f:7f:78:36:7c:1c:98:a3:74:7f:8e:50: 96:4e:f9:1c:62:bd:d0:49:1c:61:76:59:b0:60:29: d4:a6:90:d8:81:91:d7:6b:79:23:ef:3d:44:46:af: ed:fb:d0:67:1f:06:1e:34:2b:c9:04:be:0c:a5:d4: 5d:ac:fc:e6:ff:85:30:8b:7e:4a:70:21:6f:4d:3a: d3:f8:cc:e1:85:07:53:97:63:6f:24:c1:ea:a8:4e: 18:5d:80:b0:ec:79:d1:c2:9c:cc:cb:5a:5a:9a:22: 70:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7A:F9:6A:11:F2:DB:EE:53:8B:0A:C3:EE:F7:29:61:6A:0C:9B:6F X509v3 Authority Key Identifier: keyid:9D:4D:B6:9E:1B:34:49:3D:B5:07:7A:AB:18:31:EA:08:E6:94:62:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/9D4DB69E1B34493DB5077AAB1831EA08E69462D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:09:c1:c4:f1:d8:84:99:ec:65:2a:c4:13:6e:33:1c:71:8a: b2:81:82:68:9f:fc:82:64:96:fc:c6:05:f5:f8:db:20:ee:4b: 86:ca:e8:0f:7d:55:b1:5f:ce:af:68:fb:fe:e6:e1:29:ab:39: 09:70:2a:3a:10:51:a8:da:8c:43:e7:fa:72:6d:db:1b:10:df: 14:61:f3:db:fc:69:90:38:60:65:df:0a:6b:6e:a8:c8:b5:f1: 46:d6:77:4f:47:ac:bf:77:73:22:64:5a:76:6d:b6:2d:86:c9: 47:d2:03:6c:02:8b:8f:25:9d:7c:0f:73:71:97:ce:d7:b2:6b: 84:96:0a:24:99:62:4f:b0:37:f1:03:be:43:ad:4c:fc:04:aa: a3:df:ca:2d:6a:61:9a:70:5d:76:21:13:b1:2b:e0:33:03:c9: 92:9a:2e:36:7a:d3:13:43:13:cf:4f:e7:5d:8f:22:ec:d2:22: a6:c0:25:a9:dc:55:8a:85:b9:94:2c:25:1d:c1:a6:50:6e:e4: 67:95:9e:a2:4d:d5:07:6b:cb:0f:9c:1a:91:03:fd:58:ca:76: 86:97:a2:af:e7:e9:f5:ef:5f:0b:d8:bd:85:76:f7:8f:5b:bb: 9e:80:8f:0c:70:2e:49:a4:86:c2:b7:cb:7e:60:0b:66:48:d1: f9:24:ee:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMT7pq0sr01cyzIF691eeZEsLrhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ0REI2OUUxQjM0NDkzREI1MDc3QUFCMTgzMUVBMDhF Njk0NjJEMTAeFw0yNjA3MjAxNDA5MTNaFw0yNjA3MjExNTE0MTNaMDMxMTAvBgNV BAMTKEE3N0FGOTZBMTFGMkRCRUU1MzhCMEFDM0VFRjcyOTYxNkEwQzlCNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoBZRAz2/kzNcKxREZ8AAhWAwp YNcx+kFwWRk0Q/Gm7AGIfNMmyTD7UwYdFguwxR5vbVllYfdERWKzEat1IKxLHwbG em+aWRG05E1nyFfWa0Doh516mVFwmLQfW6HRx+Z/zFR+CVzxUwVyEYsG5tza+eU0 gTHxcG1jP1hJlOEcn1BJp1wTmvigvtDChbgguaFYIsx0JN0Kkp9/eDZ8HJijdH+O UJZO+RxivdBJHGF2WbBgKdSmkNiBkddreSPvPURGr+370GcfBh40K8kEvgyl1F2s /Ob/hTCLfkpwIW9NOtP4zOGFB1OXY28kweqoThhdgLDsedHCnMzLWlqaInAFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp3r5ahHy2+5TiwrD7vcpYWoMm28wHwYDVR0j BBgwFoAUnU22nhs0ST21B3qrGDHqCOaUYtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdiZThiN2MtMjMyZi00N2U4LTljZGQtODgxN2QzOWI3MGVhLzAvOUQ0REI2OUUx QjM0NDkzREI1MDc3QUFCMTgzMUVBMDhFNjk0NjJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDREQjY5RTFCMzQ0OTNEQjUwNzdBQUIxODMxRUEwOEU2OTQ2 MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdiZThiN2MtMjMyZi00N2U4LTlj ZGQtODgxN2QzOWI3MGVhLzAvOUQ0REI2OUUxQjM0NDkzREI1MDc3QUFCMTgzMUVB MDhFNjk0NjJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYJwcTx2ISZ7GUqxBNuMxxxirKBgmif/IJk lvzGBfX42yDuS4bK6A99VbFfzq9o+/7m4SmrOQlwKjoQUajajEPn+nJt2xsQ3xRh 89v8aZA4YGXfCmtuqMi18UbWd09HrL93cyJkWnZtti2GyUfSA2wCi48lnXwPc3GX zteya4SWCiSZYk+wN/EDvkOtTPwEqqPfyi1qYZpwXXYhE7Er4DMDyZKaLjZ60xND E89P512PIuzSIqbAJancVYqFuZQsJR3BplBu5GeVnqJN1Qdryw+cGpED/VjKdoaX oq/n6fXvXwvYvYV2949bu56AjwxwLkmkhsK3y35gC2ZI0fkk7l8= -----END CERTIFICATE-----Generated at Tue Jul 21 06:46:31 2026 by rpki-client