$ rpki-client -vvf rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft File: 9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft (raw, json) Hash identifier: qLEni2G1q+a3mwDMHjE4NE3Snc1J3NX7JHSbgsCk82o= Subject key identifier: 06:3D:C4:10:DD:FF:86:ED:73:84:BB:F3:16:EB:4E:42:D6:15:DA:CF Authority key identifier: 9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D Certificate issuer: /CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D Certificate serial: 0C252F013099B73050C1DAEE75093F890B937208 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 23:55:41 +0000 Manifest this update: Mon 20 Jul 2026 23:50:41 +0000 Manifest next update: Wed 22 Jul 2026 01:26:41 +0000 Files and hashes: 1: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: JPXdi6WPGd4vFTIpgnAdhhx+7oMRZdsbWTFXkRgyRnk=) 2: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: npHUpI+a7i9Ge4o0vqbUWZs/Np3+nJB1Rs4IQBwLbvY=) 3: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: JZInvaWprZojdT0ogHnGT0fyYlzFziTH86i1Q0tvWkY=) 4: 9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl (hash: gG01KfBt0jKeq3BwgpRMcwUu94EGVDKUMdVcolWTTU0=) 5: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: 2hLM0mgbr0R6ifa3vNzIdaR5NaWhmXwQFTpATyRbVPI=) 6: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: H+4huOKuCZJDgCcIRHG5F336v2zTL76hXwSaEF33ZKg=) 7: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: Pbg7HMIUocxPePd7OOnLCPLrq3CDhKhitltGyutZn2w=) 8: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: zmwA1y/xC2vL0cjTkZM+ObOlDKLV7xKiwSOMXdyAr5Q=) 9: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: BTFNI8KSCzEVQjrkzQTwBs7yIRfL1AV/7o2X6tYhvoE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:25:2f:01:30:99:b7:30:50:c1:da:ee:75:09:3f:89:0b:93:72:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D Validity Not Before: Jul 20 23:50:41 2026 GMT Not After : Jul 22 01:26:41 2026 GMT Subject: CN=063DC410DDFF86ED7384BBF316EB4E42D615DACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:05:1c:0c:7b:09:bd:41:81:07:68:34:3c: 27:e2:50:d8:91:12:53:8c:59:a9:1a:bf:41:d8:0e: 63:d8:07:67:62:50:a3:35:d4:53:bf:08:23:ab:6f: 2c:f8:f9:aa:ac:99:3a:9a:46:02:12:f1:25:a2:71: c3:d0:25:7d:b5:61:ea:20:25:72:e1:22:7e:c0:c8: 3a:59:2d:f4:ce:15:46:55:fb:a9:c9:be:98:6c:b4: 52:d5:78:67:9d:7d:7a:cb:0e:1b:74:45:69:a2:fd: 08:20:d3:76:92:ca:93:63:56:c6:ed:76:8c:6b:29: c2:27:c4:32:67:14:74:04:00:11:f1:e3:cf:c0:18: 80:8a:82:e9:4f:2a:02:34:3b:dc:f5:09:c8:e6:38: 54:0e:e7:12:90:fb:87:24:ed:a0:eb:3e:f3:ca:f1: 87:f1:a8:71:bc:61:a3:ca:36:d0:21:17:ee:60:78: 93:40:c3:ff:79:e5:d8:bf:b7:9f:48:03:15:37:ce: d1:4a:1e:db:1d:ec:ac:b6:00:89:a2:7c:65:82:1f: 2a:15:e8:eb:c2:a7:33:53:58:b9:a0:46:24:93:a2: aa:c3:48:37:88:ad:d2:0e:dd:24:28:a6:3e:5c:e0: a0:f1:ea:1d:62:bd:d5:1f:8d:9f:ea:21:8e:d4:84: 45:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3D:C4:10:DD:FF:86:ED:73:84:BB:F3:16:EB:4E:42:D6:15:DA:CF X509v3 Authority Key Identifier: keyid:9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:b3:22:d9:8d:6f:cb:d0:6f:ec:64:fb:31:32:b0:fe:ff:5c: 4a:53:63:fa:df:31:f4:1d:01:4a:65:81:93:76:32:ce:e9:f5: 10:99:50:a5:5a:d3:d7:39:f8:d5:82:99:ff:c9:31:13:ec:09: 55:83:93:32:50:d5:f8:27:3f:ca:9b:e9:e3:67:c2:7d:4d:46: 98:a6:36:14:6b:15:30:c6:23:e6:7b:7a:44:9c:57:81:53:0f: 7c:7d:47:4f:9c:42:a1:b4:d2:f0:95:39:c2:65:73:2d:55:33: c7:6b:76:8b:49:89:38:5a:4f:8b:f0:fb:21:60:ad:af:94:3f: 8b:ed:bf:79:8a:4f:3a:85:6a:16:a1:95:4b:d8:f3:5c:4c:8c: fb:cb:07:c0:0b:17:93:04:b5:8c:d2:4c:04:fd:86:12:e6:8d: 83:62:d5:75:28:51:28:6a:be:e5:4d:45:4e:22:43:63:f7:c7: 0f:06:b7:68:d9:ea:cf:64:ec:cd:42:0f:4c:de:a8:56:16:0a: b3:5e:f7:9b:cd:28:76:46:0c:f5:97:a6:81:4a:56:34:0c:00: b2:67:43:14:a8:da:39:b5:8d:29:63:ea:58:95:f4:e2:77:aa: c9:07:4f:25:ad:9b:ff:6b:38:81:81:a2:46:94:4c:2b:db:13: 4e:61:74:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDCUvATCZtzBQwdrudQk/iQuTcggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUREN0ZEMUMwQTc0RkUzMTdFREE0MUU0RDFDREM4NTdB RkMxNzc5RDAeFw0yNjA3MjAyMzUwNDFaFw0yNjA3MjIwMTI2NDFaMDMxMTAvBgNV BAMTKDA2M0RDNDEwRERGRjg2RUQ3Mzg0QkJGMzE2RUI0RTQyRDYxNURBQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUTQUcDHsJvUGBB2g0PCfiUNiR ElOMWakav0HYDmPYB2diUKM11FO/CCOrbyz4+aqsmTqaRgIS8SWiccPQJX21Yeog JXLhIn7AyDpZLfTOFUZV+6nJvphstFLVeGedfXrLDht0RWmi/Qgg03aSypNjVsbt doxrKcInxDJnFHQEABHx48/AGICKgulPKgI0O9z1CcjmOFQO5xKQ+4ck7aDrPvPK 8YfxqHG8YaPKNtAhF+5geJNAw/955di/t59IAxU3ztFKHtsd7Ky2AImifGWCHyoV 6OvCpzNTWLmgRiSToqrDSDeIrdIO3SQopj5c4KDx6h1ivdUfjZ/qIY7UhEWHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBj3EEN3/hu1zhLvzFutOQtYV2s8wHwYDVR0j BBgwFoAUndf9HAp0/jF+2kHk0c3IV6/Bd50wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjkwYzkwMDktYWQ1My00ZmE2LWExODMtMzRiMzQ1N2JlYTAzLzAvOUREN0ZEMUMw QTc0RkUzMTdFREE0MUU0RDFDREM4NTdBRkMxNzc5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REQ3RkQxQzBBNzRGRTMxN0VEQTQxRTREMUNEQzg1N0FGQzE3 NzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvOUREN0ZEMUMwQTc0RkUzMTdFREE0MUU0RDFDREM4 NTdBRkMxNzc5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqzItmNb8vQb+xk+zEysP7/XEpTY/rfMfQd AUplgZN2Ms7p9RCZUKVa09c5+NWCmf/JMRPsCVWDkzJQ1fgnP8qb6eNnwn1NRpim NhRrFTDGI+Z7ekScV4FTD3x9R0+cQqG00vCVOcJlcy1VM8drdotJiThaT4vw+yFg ra+UP4vtv3mKTzqFahahlUvY81xMjPvLB8ALF5MEtYzSTAT9hhLmjYNi1XUoUShq vuVNRU4iQ2P3xw8Gt2jZ6s9k7M1CD0zeqFYWCrNe95vNKHZGDPWXpoFKVjQMALJn QxSo2jm1jSlj6liV9OJ3qskHTyWtm/9rOIGBokaUTCvbE05hdGk= -----END CERTIFICATE-----Generated at Tue Jul 21 06:52:40 2026 by rpki-client