$ rpki-client -vvf rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft File: 09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft (raw, json) Hash identifier: Nd9pOy8DMVVlBBvU3j5x95udgmH25fHU++dzLt1Sg4g= Subject key identifier: F4:1F:AB:B9:5D:15:ED:53:00:C6:5D:0E:F3:CA:54:AE:3E:03:0C:74 Authority key identifier: 09:C4:BA:8A:F7:41:A5:1F:DD:8C:55:09:17:C9:6D:39:5C:BE:0F:FD Certificate issuer: /CN=09C4BA8AF741A51FDD8C550917C96D395CBE0FFD Certificate serial: 2031F244BE330A3C3D20AE3B8AC945A6B6BF9E7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 22:13:36 +0000 Manifest this update: Mon 20 Jul 2026 22:08:36 +0000 Manifest next update: Wed 22 Jul 2026 01:25:36 +0000 Files and hashes: 1: 09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.crl (hash: nBUblAVfa4rsWqv3Fdra306dxCt1n4Nxcj+ejMvM6h0=) 2: 3131332e32302e3133362e302f32312d3234203d3e203435373136.roa (hash: 9Dp0sbY0tRdXCsPfX1Bi/rh765yhn92aMlIVBuucvDU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.crl rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:25:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:31:f2:44:be:33:0a:3c:3d:20:ae:3b:8a:c9:45:a6:b6:bf:9e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09C4BA8AF741A51FDD8C550917C96D395CBE0FFD Validity Not Before: Jul 20 22:08:36 2026 GMT Not After : Jul 22 01:25:36 2026 GMT Subject: CN=F41FABB95D15ED5300C65D0EF3CA54AE3E030C74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a5:3d:7c:5d:1f:da:0e:38:52:6a:be:2f:2c: f4:a4:4e:cf:81:07:57:ae:77:e6:a0:48:76:17:14: 74:eb:da:1c:00:b7:32:b3:62:c6:72:92:40:91:f8: 7c:35:de:ad:e6:42:5f:2c:48:7d:fd:e5:b5:c9:14: 28:16:78:b3:d4:f6:0f:e8:73:0b:bc:de:b6:f5:12: 3f:84:4e:03:13:a2:04:ae:17:12:0d:b7:0c:12:6a: be:01:dc:f6:9f:55:51:34:cb:4c:f7:85:ed:b4:65: f6:92:c3:a3:ee:c1:d6:3b:02:3c:31:3f:a2:c0:b5: 40:f9:10:8d:8c:05:ef:9c:46:7e:c2:0c:ec:ef:34: 08:b4:37:73:f7:90:26:05:4d:4d:5c:25:1d:a8:1e: ca:b9:95:3f:79:af:30:07:f1:d2:dc:35:14:19:26: 9e:a7:8b:0a:98:2e:3a:b6:22:25:0a:a9:1e:3c:f0: 96:0d:b6:43:d0:6b:c6:58:2c:6c:ed:83:d2:84:a4: 44:23:b6:dc:c2:4e:cf:2a:25:c6:83:4e:c6:38:09: 06:06:06:c4:e0:f8:13:f8:29:d2:05:75:cd:5b:3a: 42:8b:dd:9c:8c:d1:d6:70:01:fd:5c:4e:d8:51:b8: 28:d8:4d:3d:df:dd:3c:cd:8c:60:2c:ca:cd:24:33: 0d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1F:AB:B9:5D:15:ED:53:00:C6:5D:0E:F3:CA:54:AE:3E:03:0C:74 X509v3 Authority Key Identifier: keyid:09:C4:BA:8A:F7:41:A5:1F:DD:8C:55:09:17:C9:6D:39:5C:BE:0F:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:8a:3b:f1:4b:f4:bb:95:a4:c8:ae:84:a7:0a:a3:a3:fc:97: 4b:dd:9e:7c:bb:90:b2:15:8d:c6:76:2a:44:3a:29:ef:e3:bb: bb:f9:37:cd:b2:ba:18:0b:02:f7:31:6d:76:dd:25:b1:a7:8a: a9:31:d2:11:ab:ab:30:bf:0f:f6:f0:7a:e9:7d:7e:46:1a:9a: e4:a4:63:83:72:cf:81:2f:ca:c5:f9:62:7f:f8:e7:b4:40:b2: 52:04:cf:ac:bb:eb:0a:4f:1a:ba:57:b5:f0:2f:6b:79:d3:4e: c0:f5:7f:28:7d:e7:68:09:a3:0e:3b:fb:d5:a8:71:fa:cc:43: 17:0b:ae:fa:cd:b3:81:3b:39:4c:61:ad:11:73:8a:e0:a3:38: bb:bc:5f:a6:d3:d8:2a:99:57:82:ea:a5:6b:d4:e3:2c:d8:aa: db:ff:71:d9:c1:55:ac:cc:a4:63:50:6b:a2:42:18:2e:2f:10: e3:69:4b:69:c3:95:31:49:94:57:31:f3:ac:03:c1:3c:07:f4: 38:ae:60:47:f9:bc:c8:e7:fd:e8:bd:86:54:b5:01:c6:00:c6: d4:4f:4d:9b:b8:40:93:10:58:53:22:8c:fd:9b:12:e0:60:b6: 52:70:b8:db:fa:37:ed:0f:38:ff:f1:78:95:dd:3b:ae:30:ed: fb:a7:d6:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIDHyRL4zCjw9IK47islFpra/nn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlDNEJBOEFGNzQxQTUxRkREOEM1NTA5MTdDOTZEMzk1 Q0JFMEZGRDAeFw0yNjA3MjAyMjA4MzZaFw0yNjA3MjIwMTI1MzZaMDMxMTAvBgNV BAMTKEY0MUZBQkI5NUQxNUVENTMwMEM2NUQwRUYzQ0E1NEFFM0UwMzBDNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTpT18XR/aDjhSar4vLPSkTs+B B1eud+agSHYXFHTr2hwAtzKzYsZykkCR+Hw13q3mQl8sSH395bXJFCgWeLPU9g/o cwu83rb1Ej+ETgMTogSuFxINtwwSar4B3PafVVE0y0z3he20ZfaSw6PuwdY7Ajwx P6LAtUD5EI2MBe+cRn7CDOzvNAi0N3P3kCYFTU1cJR2oHsq5lT95rzAH8dLcNRQZ Jp6niwqYLjq2IiUKqR488JYNtkPQa8ZYLGztg9KEpEQjttzCTs8qJcaDTsY4CQYG BsTg+BP4KdIFdc1bOkKL3ZyM0dZwAf1cTthRuCjYTT3f3TzNjGAsys0kMw3JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9B+ruV0V7VMAxl0O88pUrj4DDHQwHwYDVR0j BBgwFoAUCcS6ivdBpR/djFUJF8ltOVy+D/0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhZjAwZWMtZDA4My00YTlmLTgyMWYtN2RhMThmODE1NDE3LzAvMDlDNEJBOEFG NzQxQTUxRkREOEM1NTA5MTdDOTZEMzk1Q0JFMEZGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOUM0QkE4QUY3NDFBNTFGREQ4QzU1MDkxN0M5NkQzOTVDQkUw RkZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhZjAwZWMtZDA4My00YTlmLTgy MWYtN2RhMThmODE1NDE3LzAvMDlDNEJBOEFGNzQxQTUxRkREOEM1NTA5MTdDOTZE Mzk1Q0JFMEZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2KO/FL9LuVpMiuhKcKo6P8l0vdnny7kLIV jcZ2KkQ6Ke/ju7v5N82yuhgLAvcxbXbdJbGniqkx0hGrqzC/D/bweul9fkYamuSk Y4Nyz4EvysX5Yn/457RAslIEz6y76wpPGrpXtfAva3nTTsD1fyh952gJow47+9Wo cfrMQxcLrvrNs4E7OUxhrRFziuCjOLu8X6bT2CqZV4LqpWvU4yzYqtv/cdnBVazM pGNQa6JCGC4vEONpS2nDlTFJlFcx86wDwTwH9DiuYEf5vMjn/ei9hlS1AcYAxtRP TZu4QJMQWFMijP2bEuBgtlJwuNv6N+0POP/xeJXdO64w7fun1sU= -----END CERTIFICATE-----Generated at Tue Jul 21 06:52:35 2026 by rpki-client