$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft File: 9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft (raw, json) Hash identifier: Tc4eIr5Uix9mHjRYg8BEEyx9Q1oZSuu5s0CtVya9m2A= Subject key identifier: EE:75:3E:B8:71:9A:91:6B:DB:B8:4B:E0:1D:FF:5F:39:96:51:AB:E2 Authority key identifier: 9B:AA:D5:D1:F3:6F:59:43:A3:5A:6E:E8:00:1A:5E:5F:C2:4D:9B:1E Certificate issuer: /CN=9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E Certificate serial: 299E32F5B15F0BDB43DAFB7A32457F8A71F045D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft Manifest number: 6A Signing time: Tue 21 Jul 2026 04:16:10 +0000 Manifest this update: Tue 21 Jul 2026 04:11:10 +0000 Manifest next update: Wed 22 Jul 2026 07:37:10 +0000 Files and hashes: 1: 9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl (hash: 7EgM1Eu7AckF/8o7Rs513m9NCE44WFyQa/xKhDEwcaw=) 2: 33362e35302e39362e302f32342d3234203d3e20313532333536.roa (hash: WdJUD9VymB093sIE0zYyqec++4X5oG27MXfWK367p8g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:9e:32:f5:b1:5f:0b:db:43:da:fb:7a:32:45:7f:8a:71:f0:45:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E Validity Not Before: Jul 21 04:11:10 2026 GMT Not After : Jul 22 07:37:10 2026 GMT Subject: CN=EE753EB8719A916BDBB84BE01DFF5F399651ABE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a2:5b:f9:63:55:6e:9b:c6:72:58:9a:47:68: d0:b7:64:02:4f:12:3f:68:59:a9:3f:93:8e:3d:15: 68:c7:c9:57:59:18:8a:ce:12:b4:8f:7d:e9:ed:35: f4:04:0c:6e:bf:e9:94:9b:09:93:8d:a7:fc:20:9f: 29:18:6b:92:33:14:0a:94:26:54:c6:a0:aa:fd:df: bb:13:e6:b0:2e:45:47:bd:ec:53:65:55:be:1f:18: 43:70:c7:c4:d5:f6:54:78:02:5b:bb:d2:ee:8b:ad: 00:66:a2:d6:9b:de:41:10:1d:46:8e:61:44:85:31: 2f:6a:73:e1:0d:78:1e:59:cf:f0:51:6a:c3:41:bf: 45:91:6b:1b:81:94:62:d8:5f:aa:0a:06:84:40:fb: a0:be:f0:fd:dc:5d:7a:a2:d6:a5:28:c2:d3:2d:10: eb:fe:cc:ea:16:27:d6:6d:aa:0b:d3:2b:67:78:13: b6:49:95:4d:ff:a6:91:97:d2:db:8e:6d:79:3b:00: 76:24:cd:bd:ea:0a:fa:d5:c8:30:f5:f0:ce:dd:b3: 79:f9:c1:ea:08:90:07:1a:0c:6a:33:f0:9f:2c:7f: 9b:8f:b7:85:35:6a:44:77:05:f9:79:e5:cb:38:09: a0:43:2c:d7:e8:d4:fb:39:de:b5:cc:fb:6f:ef:29: b1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:75:3E:B8:71:9A:91:6B:DB:B8:4B:E0:1D:FF:5F:39:96:51:AB:E2 X509v3 Authority Key Identifier: keyid:9B:AA:D5:D1:F3:6F:59:43:A3:5A:6E:E8:00:1A:5E:5F:C2:4D:9B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:3d:a2:f9:f1:19:4c:ca:98:48:47:bd:5d:f3:6e:5a:5a:de: ed:98:14:8f:4b:c2:7b:c2:67:7d:e9:fd:f2:84:db:62:f6:d4: e2:11:fb:52:71:d6:e8:c7:88:10:a9:3a:8a:b1:69:33:74:e3: ca:5c:42:de:c2:7b:5b:53:7b:f6:0b:6d:b6:ba:a3:a9:74:43: 1c:38:7f:ec:b3:e5:3b:21:79:09:ea:aa:68:e8:60:75:e4:a0: 88:fa:fa:d4:87:d7:d2:f7:28:69:0d:ad:48:b0:62:03:bc:a7: 07:e2:45:73:cf:09:41:d2:5e:22:0c:57:72:b4:99:cd:07:cd: 03:a2:89:1b:84:54:67:ec:26:bd:89:6e:7d:22:cd:57:3e:67: ed:27:66:cc:60:dc:e4:88:29:76:9d:aa:09:32:16:0e:6a:41: 83:01:47:9d:7f:ba:7c:12:56:b8:b1:9b:b5:61:ff:a1:7c:07: 3f:d4:8a:e7:70:38:aa:ae:82:9a:f7:7f:b3:70:6d:15:76:92: 96:d3:a3:2c:21:9c:e7:7a:f0:fc:64:77:11:07:1f:93:d8:e0: a3:60:4c:eb:56:68:33:c7:6b:48:4e:f7:c7:66:51:1a:3e:39: 05:54:ba:ff:ac:2c:5d:7c:d5:5f:c9:98:94:bb:d4:a1:f8:af: dc:d2:59:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKZ4y9bFfC9tD2vt6MkV/inHwRdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJBQUQ1RDFGMzZGNTk0M0EzNUE2RUU4MDAxQTVFNUZD MjREOUIxRTAeFw0yNjA3MjEwNDExMTBaFw0yNjA3MjIwNzM3MTBaMDMxMTAvBgNV BAMTKEVFNzUzRUI4NzE5QTkxNkJEQkI4NEJFMDFERkY1RjM5OTY1MUFCRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEolv5Y1Vum8ZyWJpHaNC3ZAJP Ej9oWak/k449FWjHyVdZGIrOErSPfentNfQEDG6/6ZSbCZONp/wgnykYa5IzFAqU JlTGoKr937sT5rAuRUe97FNlVb4fGENwx8TV9lR4Alu70u6LrQBmotab3kEQHUaO YUSFMS9qc+ENeB5Zz/BRasNBv0WRaxuBlGLYX6oKBoRA+6C+8P3cXXqi1qUowtMt EOv+zOoWJ9ZtqgvTK2d4E7ZJlU3/ppGX0tuObXk7AHYkzb3qCvrVyDD18M7ds3n5 weoIkAcaDGoz8J8sf5uPt4U1akR3Bfl55cs4CaBDLNfo1Ps53rXM+2/vKbFbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7nU+uHGakWvbuEvgHf9fOZZRq+IwHwYDVR0j BBgwFoAUm6rV0fNvWUOjWm7oABpeX8JNmx4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ5MGQ4NmItMGIwZC00NTZmLTg0MWEtYmZkYjlkODA3ZmI3LzAvOUJBQUQ1RDFG MzZGNTk0M0EzNUE2RUU4MDAxQTVFNUZDMjREOUIxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkFBRDVEMUYzNkY1OTQzQTM1QTZFRTgwMDFBNUU1RkMyNEQ5 QjFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ5MGQ4NmItMGIwZC00NTZmLTg0 MWEtYmZkYjlkODA3ZmI3LzAvOUJBQUQ1RDFGMzZGNTk0M0EzNUE2RUU4MDAxQTVF NUZDMjREOUIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQ9ovnxGUzKmEhHvV3zblpa3u2YFI9LwnvC Z33p/fKE22L21OIR+1Jx1ujHiBCpOoqxaTN048pcQt7Ce1tTe/YLbba6o6l0Qxw4 f+yz5TsheQnqqmjoYHXkoIj6+tSH19L3KGkNrUiwYgO8pwfiRXPPCUHSXiIMV3K0 mc0HzQOiiRuEVGfsJr2Jbn0izVc+Z+0nZsxg3OSIKXadqgkyFg5qQYMBR51/unwS Vrixm7Vh/6F8Bz/UiudwOKqugpr3f7NwbRV2kpbToywhnOd68PxkdxEHH5PY4KNg TOtWaDPHa0hO98dmURo+OQVUuv+sLF181V/JmJS71KH4r9zSWRA= -----END CERTIFICATE-----Generated at Tue Jul 21 06:52:09 2026 by rpki-client