$ rpki-client -vvf rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft File: 9E6973F078195021DC7E37753A16BDC3BD2CE345.mft (raw, json) Hash identifier: KIdUWwNfarYI2AOCjRYuzyY9jPQa+5ujvdJj23R4rps= Subject key identifier: 56:2B:62:40:C8:D4:BF:25:C1:60:10:9B:DF:C3:1E:70:22:76:BC:D2 Authority key identifier: 9E:69:73:F0:78:19:50:21:DC:7E:37:75:3A:16:BD:C3:BD:2C:E3:45 Certificate issuer: /CN=9E6973F078195021DC7E37753A16BDC3BD2CE345 Certificate serial: 6DDEA591DA22BB009B25BE902D9568B1ED1F1A7B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 20:36:49 +0000 Manifest this update: Mon 20 Jul 2026 20:31:49 +0000 Manifest next update: Tue 21 Jul 2026 20:44:49 +0000 Files and hashes: 1: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: 70nvBnU+j3RyzkTv1EtBoPc4XFT8NOWYE+TEopumrFA=) 2: 9E6973F078195021DC7E37753A16BDC3BD2CE345.crl (hash: 308k83ATF+MV4g21Ix5xra+HMdvbCuCU5giO4zwPG7c=) 3: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: rDhWNdSE+MiC9nWV9xic84xxhEExen6QKYzm8hSRAZY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.crl rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:de:a5:91:da:22:bb:00:9b:25:be:90:2d:95:68:b1:ed:1f:1a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6973F078195021DC7E37753A16BDC3BD2CE345 Validity Not Before: Jul 20 20:31:49 2026 GMT Not After : Jul 21 20:44:49 2026 GMT Subject: CN=562B6240C8D4BF25C160109BDFC31E702276BCD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d1:b4:23:35:0a:14:57:02:07:86:da:73:6a: b1:fc:62:88:e0:11:d1:33:30:ba:c3:9f:99:5c:87: 55:c7:d4:a4:69:f1:99:05:70:60:a5:00:8f:6a:8c: 8b:53:eb:f0:c2:d6:ca:1e:57:09:fb:69:4a:eb:1f: ad:f0:a4:1e:d5:64:95:f6:f9:74:20:de:78:c7:49: d2:9c:a5:75:83:15:2d:26:62:4a:06:d2:d3:6b:88: 99:ee:5a:aa:c0:7e:90:25:57:eb:d7:98:32:25:f6: 45:a8:3c:c6:fb:8e:d5:77:07:c9:de:b2:d8:b3:35: 1d:8f:ea:e2:ee:0d:aa:c1:9e:b7:26:b8:3b:0d:a1: f4:96:fa:83:e7:1e:a7:1e:a0:f2:f4:96:8c:43:dd: 68:fb:e4:1b:84:60:a7:c0:a0:c6:bc:6e:e5:13:86: dd:21:bf:1c:97:07:63:50:17:d7:f6:c6:12:bd:e5: 41:44:9e:97:ce:2d:08:2b:89:35:82:05:04:5f:fb: 30:8c:9f:ff:e6:e9:ae:62:2b:17:52:59:18:cd:0e: 29:9d:09:71:37:ff:c9:e7:a0:07:39:cb:49:6b:b3: 1f:3b:15:93:92:cf:c4:db:71:d7:40:90:ab:a0:82: 1f:a8:cd:1a:9d:63:ea:61:47:9b:3f:70:06:cb:69: b0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2B:62:40:C8:D4:BF:25:C1:60:10:9B:DF:C3:1E:70:22:76:BC:D2 X509v3 Authority Key Identifier: keyid:9E:69:73:F0:78:19:50:21:DC:7E:37:75:3A:16:BD:C3:BD:2C:E3:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:82:0f:38:2a:16:83:56:82:e5:92:48:e7:a5:8d:28:bc:ed: e4:ec:57:11:6f:cf:d1:45:a1:c9:39:34:d5:6a:59:cc:90:e7: 3c:18:81:5e:75:54:49:8e:fb:e2:18:10:4f:7e:48:68:25:18: e8:4d:df:11:13:1d:93:f0:c3:fb:13:98:47:26:24:8a:a6:6d: 0a:e1:19:dc:55:c4:1f:2b:b8:5e:13:ba:9f:85:e4:9f:61:65: 3d:46:00:24:a7:d5:da:05:74:3b:de:f0:ea:33:24:83:d0:38: 1f:8d:1d:89:57:06:1b:30:f8:d3:b3:b6:e1:97:1f:5b:b3:32: 98:f9:88:7a:e0:e8:44:ce:fa:66:c9:6e:1a:68:45:0f:00:a6: 28:98:d2:40:c9:6e:31:34:f4:aa:92:1a:10:a9:11:cf:bf:65: 19:27:a3:48:c1:eb:a0:ae:6b:82:88:d0:bc:b1:c3:0f:e2:97: c4:fd:77:dd:c5:ed:31:c7:48:1c:30:1f:d9:77:a8:4d:ee:61: 05:4c:af:4a:01:92:cf:91:48:db:64:09:03:55:34:dc:47:7a: 89:eb:fd:56:6b:83:cd:b4:c0:61:87:03:8d:82:26:55:7b:50: f2:00:1a:73:e7:01:e0:ba:bc:11:64:63:d2:d9:24:3d:e3:fd: 4b:73:d5:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbd6lkdoiuwCbJb6QLZVose0fGnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2OTczRjA3ODE5NTAyMURDN0UzNzc1M0ExNkJEQzNC RDJDRTM0NTAeFw0yNjA3MjAyMDMxNDlaFw0yNjA3MjEyMDQ0NDlaMDMxMTAvBgNV BAMTKDU2MkI2MjQwQzhENEJGMjVDMTYwMTA5QkRGQzMxRTcwMjI3NkJDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0bQjNQoUVwIHhtpzarH8Yojg EdEzMLrDn5lch1XH1KRp8ZkFcGClAI9qjItT6/DC1soeVwn7aUrrH63wpB7VZJX2 +XQg3njHSdKcpXWDFS0mYkoG0tNriJnuWqrAfpAlV+vXmDIl9kWoPMb7jtV3B8ne stizNR2P6uLuDarBnrcmuDsNofSW+oPnHqceoPL0loxD3Wj75BuEYKfAoMa8buUT ht0hvxyXB2NQF9f2xhK95UFEnpfOLQgriTWCBQRf+zCMn//m6a5iKxdSWRjNDimd CXE3/8nnoAc5y0lrsx87FZOSz8TbcddAkKuggh+ozRqdY+phR5s/cAbLabBbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVitiQMjUvyXBYBCb38MecCJ2vNIwHwYDVR0j BBgwFoAUnmlz8HgZUCHcfjd1Oha9w70s40UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjdkYjIzYjctOTE1OS00NmM3LTg4NTMtMDY2NTRhZTQ3YWVkLzAvOUU2OTczRjA3 ODE5NTAyMURDN0UzNzc1M0ExNkJEQzNCRDJDRTM0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RTY5NzNGMDc4MTk1MDIxREM3RTM3NzUzQTE2QkRDM0JEMkNF MzQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjdkYjIzYjctOTE1OS00NmM3LTg4 NTMtMDY2NTRhZTQ3YWVkLzAvOUU2OTczRjA3ODE5NTAyMURDN0UzNzc1M0ExNkJE QzNCRDJDRTM0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALmCDzgqFoNWguWSSOeljSi87eTsVxFvz9FF ock5NNVqWcyQ5zwYgV51VEmO++IYEE9+SGglGOhN3xETHZPww/sTmEcmJIqmbQrh GdxVxB8ruF4Tup+F5J9hZT1GACSn1doFdDve8OozJIPQOB+NHYlXBhsw+NOztuGX H1uzMpj5iHrg6ETO+mbJbhpoRQ8ApiiY0kDJbjE09KqSGhCpEc+/ZRkno0jB66Cu a4KI0Lyxww/il8T9d93F7THHSBwwH9l3qE3uYQVMr0oBks+RSNtkCQNVNNxHeonr /VZrg820wGGHA42CJlV7UPIAGnPnAeC6vBFkY9LZJD3j/Utz1Tc= -----END CERTIFICATE-----Generated at Tue Jul 21 08:34:46 2026 by rpki-client