$ rpki-client -vvf rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft File: B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft (raw, json) Hash identifier: pxzRlhsYPtNedrXMvG/ENBjzoy0Z1sU5sF1bCLv1Ozo= Subject key identifier: 1D:FB:51:C7:DF:6F:16:BD:EE:A6:5E:BF:73:1B:04:1F:F9:B8:0D:7F Authority key identifier: B9:D7:A5:A4:9B:32:2E:D9:87:28:18:32:AB:CF:B5:DC:50:9A:B8:89 Certificate issuer: /CN=B9D7A5A49B322ED987281832ABCFB5DC509AB889 Certificate serial: 0C079DBF0D17CB176831FD82E08449AA02E15224 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 00:21:13 +0000 Manifest this update: Tue 21 Jul 2026 00:16:13 +0000 Manifest next update: Wed 22 Jul 2026 02:21:13 +0000 Files and hashes: 1: 3130332e3137362e3132312e302f32342d3234203d3e20313437313330.roa (hash: mPIkuQVE9R3LTUTej85wxcqgd13oKy/e6VbDwXPFIhY=) 2: 3130332e3137362e36382e302f32342d3234203d3e20313437313330.roa (hash: huLq2YMQLck+XmMqgf5+tIkuWDJY1pNSg4kGrXts0QE=) 3: B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl (hash: 6a2hUqf8DCF4j7MbtoTYfgDTOSDykmImIC3yhd/CNtE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:07:9d:bf:0d:17:cb:17:68:31:fd:82:e0:84:49:aa:02:e1:52:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9D7A5A49B322ED987281832ABCFB5DC509AB889 Validity Not Before: Jul 21 00:16:13 2026 GMT Not After : Jul 22 02:21:13 2026 GMT Subject: CN=1DFB51C7DF6F16BDEEA65EBF731B041FF9B80D7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:43:61:1d:ea:c1:fc:69:4a:7d:25:38:0d:50: 90:06:54:f1:44:c8:95:9b:03:db:08:17:44:87:30: 1e:b0:ed:3a:81:67:fe:4e:77:cb:56:60:2a:84:f2: c5:5f:35:51:fc:59:38:ab:e8:6f:7c:ee:84:94:5c: 3b:dd:23:d3:37:96:a8:cd:94:8e:af:2a:6f:47:34: 0b:1c:20:d0:19:60:69:0a:c9:fd:e8:86:d6:87:2d: 84:7d:08:b8:3a:93:be:f8:c8:63:3a:e3:16:75:5d: e9:01:ae:86:16:1d:47:66:ee:2d:15:51:b0:a3:42: e8:d2:2e:fc:12:49:b3:4a:23:d3:a3:4f:2b:1a:5a: de:09:61:f3:3d:20:c3:09:b3:a6:a1:b3:56:b4:bb: ac:a8:72:92:6a:5e:ae:f0:e1:1d:7b:f1:27:ac:ed: 5f:3b:c4:66:c8:98:92:f6:58:89:47:69:5c:c9:bc: 50:f1:94:f5:3f:94:63:c3:21:30:44:9a:8e:59:91: aa:d9:ab:db:72:83:4f:91:be:44:63:74:44:b9:dc: 04:ae:df:3e:60:31:fa:2b:da:e3:ee:12:82:97:39: d6:e7:fc:6b:f1:1b:ef:6d:65:a8:c4:bd:19:e5:b2: 3d:74:5c:43:d9:06:a6:60:74:b9:12:36:bf:54:b0: 80:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FB:51:C7:DF:6F:16:BD:EE:A6:5E:BF:73:1B:04:1F:F9:B8:0D:7F X509v3 Authority Key Identifier: keyid:B9:D7:A5:A4:9B:32:2E:D9:87:28:18:32:AB:CF:B5:DC:50:9A:B8:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:72:88:40:82:1d:f1:1c:24:b0:0b:60:21:aa:26:23:5e:43: 29:8b:99:d5:4b:ea:ff:21:29:56:cc:9e:f8:0e:99:09:2e:f7: 6f:1d:69:63:14:0f:cb:9c:05:b9:69:25:d9:02:22:43:58:0c: 1e:df:ee:41:89:93:71:3e:2c:29:d4:14:21:dd:a9:a4:d4:f9: ca:6d:4d:ac:5c:54:ee:ba:b9:0c:95:0c:13:d7:40:dd:7d:be: 4b:58:03:c6:7b:90:29:c1:e7:77:1b:8f:d2:10:64:a3:e8:e2: a9:bf:4d:f9:79:24:85:3e:59:64:b7:f8:da:62:5c:df:84:c0: 95:3f:dd:bf:af:9c:77:c0:2d:1b:2c:e8:75:95:96:74:72:a7: 55:61:be:69:a1:d7:1c:59:e4:f8:41:f4:be:c1:9e:71:a3:72: ae:32:76:8c:dd:6e:bf:d3:0d:a7:49:4c:65:bf:81:c2:a6:fc: 5b:e4:4f:29:49:a5:1b:09:32:a8:1a:0e:39:6f:e1:b8:4b:36: 74:bf:ad:e0:c6:7a:21:fd:1a:41:91:85:63:ab:45:ee:71:83: 41:f4:33:5d:a2:08:bc:68:5c:05:75:08:e7:8f:fb:0e:4d:de: 32:59:64:ce:4a:f0:ec:3f:87:b2:bd:90:72:05:12:ee:41:09: a2:4e:e5:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDAedvw0XyxdoMf2C4IRJqgLhUiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlEN0E1QTQ5QjMyMkVEOTg3MjgxODMyQUJDRkI1REM1 MDlBQjg4OTAeFw0yNjA3MjEwMDE2MTNaFw0yNjA3MjIwMjIxMTNaMDMxMTAvBgNV BAMTKDFERkI1MUM3REY2RjE2QkRFRUE2NUVCRjczMUIwNDFGRjlCODBEN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLQ2Ed6sH8aUp9JTgNUJAGVPFE yJWbA9sIF0SHMB6w7TqBZ/5Od8tWYCqE8sVfNVH8WTir6G987oSUXDvdI9M3lqjN lI6vKm9HNAscINAZYGkKyf3ohtaHLYR9CLg6k774yGM64xZ1XekBroYWHUdm7i0V UbCjQujSLvwSSbNKI9OjTysaWt4JYfM9IMMJs6ahs1a0u6yocpJqXq7w4R178Ses 7V87xGbImJL2WIlHaVzJvFDxlPU/lGPDITBEmo5ZkarZq9tyg0+RvkRjdES53ASu 3z5gMfor2uPuEoKXOdbn/GvxG+9tZajEvRnlsj10XEPZBqZgdLkSNr9UsIB/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHftRx99vFr3upl6/cxsEH/m4DX8wHwYDVR0j BBgwFoAUudelpJsyLtmHKBgyq8+13FCauIkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTk1MWRmZWUtYTc1Yi00NDIwLWE3NTUtMmM3MzU4YmFmN2QzLzAvQjlEN0E1QTQ5 QjMyMkVEOTg3MjgxODMyQUJDRkI1REM1MDlBQjg4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUQ3QTVBNDlCMzIyRUQ5ODcyODE4MzJBQkNGQjVEQzUwOUFC ODg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTk1MWRmZWUtYTc1Yi00NDIwLWE3 NTUtMmM3MzU4YmFmN2QzLzAvQjlEN0E1QTQ5QjMyMkVEOTg3MjgxODMyQUJDRkI1 REM1MDlBQjg4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHByiECCHfEcJLALYCGqJiNeQymLmdVL6v8h KVbMnvgOmQku928daWMUD8ucBblpJdkCIkNYDB7f7kGJk3E+LCnUFCHdqaTU+cpt TaxcVO66uQyVDBPXQN19vktYA8Z7kCnB53cbj9IQZKPo4qm/Tfl5JIU+WWS3+Npi XN+EwJU/3b+vnHfALRss6HWVlnRyp1Vhvmmh1xxZ5PhB9L7BnnGjcq4ydozdbr/T DadJTGW/gcKm/FvkTylJpRsJMqgaDjlv4bhLNnS/reDGeiH9GkGRhWOrRe5xg0H0 M12iCLxoXAV1COeP+w5N3jJZZM5K8Ow/h7K9kHIFEu5BCaJO5Rs= -----END CERTIFICATE-----Generated at Tue Jul 21 06:46:32 2026 by rpki-client