$ rpki-client -vvf rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft File: 9DE0710D199DAE298457CA63B91BD20C03F148B9.mft (raw, json) Hash identifier: JTeZaA3giYUHVgE/e5uqmNeaLAKLzaAuXuF+d4rXTCk= Subject key identifier: 23:9F:EE:A3:AD:2D:96:53:5C:52:10:14:63:66:ED:CB:E5:30:DC:EA Authority key identifier: 9D:E0:71:0D:19:9D:AE:29:84:57:CA:63:B9:1B:D2:0C:03:F1:48:B9 Certificate issuer: /CN=9DE0710D199DAE298457CA63B91BD20C03F148B9 Certificate serial: 088CF6CE3C0177B56C5407E27E1E85DA9C9A2B6A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 11:20:27 +0000 Manifest this update: Mon 20 Jul 2026 11:15:27 +0000 Manifest next update: Tue 21 Jul 2026 14:24:27 +0000 Files and hashes: 1: 9DE0710D199DAE298457CA63B91BD20C03F148B9.crl (hash: PqyMnbLdqzCLbelOQumYmyG7keZVkMOvBu0qvEsJzwo=) 2: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: Wixcu+2ilRcFPig7lum9EHWYiNT3uxWOphv6H0Og4uE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.crl rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:8c:f6:ce:3c:01:77:b5:6c:54:07:e2:7e:1e:85:da:9c:9a:2b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DE0710D199DAE298457CA63B91BD20C03F148B9 Validity Not Before: Jul 20 11:15:27 2026 GMT Not After : Jul 21 14:24:27 2026 GMT Subject: CN=239FEEA3AD2D96535C5210146366EDCBE530DCEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f4:cf:d5:2b:26:af:cb:7f:b9:f4:7d:cf:1f: e5:97:80:b2:25:4f:02:a3:9c:12:49:1d:29:64:4b: 07:41:57:7e:10:90:4b:c6:5e:b3:c3:4e:3c:da:9f: 78:81:3b:b3:e8:93:74:c3:5d:4a:7c:b5:65:5d:f8: 01:a9:5e:6f:78:19:d3:af:d3:01:2e:6e:47:54:11: 1a:64:87:25:51:ea:9f:e4:a8:d0:eb:32:3d:da:33: 4f:5b:8a:28:43:9f:17:13:b9:61:3f:df:4e:ad:b7: b1:c3:39:7b:36:88:0d:98:10:e1:1f:5a:da:22:8d: 54:3c:d9:dd:1a:9c:86:eb:11:17:cb:72:ca:63:42: 6a:64:44:14:af:d2:34:71:8f:85:71:28:d9:52:d2: 6a:be:6c:60:41:55:5b:3a:c4:93:5f:b0:ac:b3:50: a7:d1:2f:f1:71:15:50:4f:bd:13:a0:7e:57:81:be: d8:f8:bf:e6:ee:c0:ae:38:85:ba:8d:c3:8a:34:89: 8b:e4:1f:2d:6e:07:92:62:92:06:70:65:dd:12:ab: 7f:49:13:65:0c:83:86:df:41:59:0e:05:de:aa:71: fe:c1:c9:be:6e:52:b8:d8:43:11:b3:2d:83:a6:a1: a4:71:4c:ed:87:fa:4d:94:ce:b9:03:75:d0:ab:82: 48:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9F:EE:A3:AD:2D:96:53:5C:52:10:14:63:66:ED:CB:E5:30:DC:EA X509v3 Authority Key Identifier: keyid:9D:E0:71:0D:19:9D:AE:29:84:57:CA:63:B9:1B:D2:0C:03:F1:48:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:56:98:43:5a:2b:8b:69:58:c0:07:bd:e0:b7:5b:71:93:cf: 15:e6:b4:d3:59:85:80:00:51:e4:60:ee:c2:ed:33:cb:fb:ae: f8:26:0d:4c:b1:c3:10:eb:5a:b4:7f:08:1a:95:26:c8:5f:bb: 3e:fe:80:47:1e:83:d6:3f:0f:e1:3a:86:d5:a4:ff:72:40:1f: 4c:b8:d9:ab:34:6c:1e:2b:f6:5b:80:b7:1d:dd:51:23:c4:24: 20:cb:f1:ae:f5:dc:96:ce:7b:70:06:fc:47:5a:dc:ff:9c:bf: fc:b3:d3:ae:27:8e:e1:f6:30:a2:37:93:fa:1d:a0:0d:c7:b0: 80:3b:03:12:7e:be:db:4a:82:90:e2:c5:3f:6b:65:cb:3d:17: cc:9e:79:3f:e4:2d:7c:36:fc:dc:65:d9:ac:56:6c:6c:6f:20: b0:9f:6d:0c:69:d2:fc:e3:5f:b4:9e:d4:4e:69:90:1b:f5:29: 97:6f:0b:bc:6a:eb:4b:a8:fe:6b:51:e4:cb:e8:c1:fa:b1:5d: fd:15:44:1b:1c:40:7a:aa:b9:3a:b4:6b:7b:9f:46:38:82:65: 3c:88:b3:b2:1a:d2:3f:df:fb:26:c9:ad:90:8a:94:01:14:9b: f2:41:1c:f3:81:44:e7:bb:1c:61:cb:5e:a8:3c:8e:93:92:ba: 30:5f:0a:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCIz2zjwBd7VsVAfifh6F2pyaK2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURFMDcxMEQxOTlEQUUyOTg0NTdDQTYzQjkxQkQyMEMw M0YxNDhCOTAeFw0yNjA3MjAxMTE1MjdaFw0yNjA3MjExNDI0MjdaMDMxMTAvBgNV BAMTKDIzOUZFRUEzQUQyRDk2NTM1QzUyMTAxNDYzNjZFRENCRTUzMERDRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW9M/VKyavy3+59H3PH+WXgLIl TwKjnBJJHSlkSwdBV34QkEvGXrPDTjzan3iBO7Pok3TDXUp8tWVd+AGpXm94GdOv 0wEubkdUERpkhyVR6p/kqNDrMj3aM09biihDnxcTuWE/306tt7HDOXs2iA2YEOEf WtoijVQ82d0anIbrERfLcspjQmpkRBSv0jRxj4VxKNlS0mq+bGBBVVs6xJNfsKyz UKfRL/FxFVBPvROgfleBvtj4v+buwK44hbqNw4o0iYvkHy1uB5JikgZwZd0Sq39J E2UMg4bfQVkOBd6qcf7Byb5uUrjYQxGzLYOmoaRxTO2H+k2UzrkDddCrgkgXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI5/uo60tllNcUhAUY2bty+Uw3OowHwYDVR0j BBgwFoAUneBxDRmdrimEV8pjuRvSDAPxSLkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjVmODQyNzgtZTA2ZC00MTE5LWJhNDQtNWMzMjk2OGE4YmJkLzAvOURFMDcxMEQx OTlEQUUyOTg0NTdDQTYzQjkxQkQyMEMwM0YxNDhCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REUwNzEwRDE5OURBRTI5ODQ1N0NBNjNCOTFCRDIwQzAzRjE0 OEI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjVmODQyNzgtZTA2ZC00MTE5LWJh NDQtNWMzMjk2OGE4YmJkLzAvOURFMDcxMEQxOTlEQUUyOTg0NTdDQTYzQjkxQkQy MEMwM0YxNDhCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpWmENaK4tpWMAHveC3W3GTzxXmtNNZhYAA UeRg7sLtM8v7rvgmDUyxwxDrWrR/CBqVJshfuz7+gEceg9Y/D+E6htWk/3JAH0y4 2as0bB4r9luAtx3dUSPEJCDL8a713JbOe3AG/Eda3P+cv/yz064njuH2MKI3k/od oA3HsIA7AxJ+vttKgpDixT9rZcs9F8yeeT/kLXw2/Nxl2axWbGxvILCfbQxp0vzj X7Se1E5pkBv1KZdvC7xq60uo/mtR5MvowfqxXf0VRBscQHqquTq0a3ufRjiCZTyI s7Ia0j/f+ybJrZCKlAEUm/JBHPOBROe7HGHLXqg8jpOSujBfCtk= -----END CERTIFICATE-----Generated at Tue Jul 21 06:40:46 2026 by rpki-client