$ rpki-client -vvf rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft File: 9AFC93CAEEA98CBFC0481089E308395A3234F158.mft (raw, json) Hash identifier: U0ZGRk1JL6fu7PzHB8pi6E3GZQV+elEhJKE3tvI4P+M= Subject key identifier: 93:05:98:31:D6:EB:49:0B:91:84:DE:81:0E:FA:8E:52:D6:7F:5C:BB Authority key identifier: 9A:FC:93:CA:EE:A9:8C:BF:C0:48:10:89:E3:08:39:5A:32:34:F1:58 Certificate issuer: /CN=9AFC93CAEEA98CBFC0481089E308395A3234F158 Certificate serial: 50A5749346A28DBEC0791F5F64A33AFBAC1792D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 20:26:28 +0000 Manifest this update: Mon 20 Jul 2026 20:21:28 +0000 Manifest next update: Tue 21 Jul 2026 22:27:28 +0000 Files and hashes: 1: 3130332e32312e3232382e302f32342d3234203d3e20313332363433.roa (hash: mWMxWItQIy6KIu1MttVIKoQEGs+uqMB7va6yxk2ZK/w=) 2: 3130332e3132332e3135382e302f32342d3234203d3e20313332363433.roa (hash: CJzRoBzW5EdikhLdqGZ7+quC12AshwM5y1ZUE0mtwGE=) 3: 9AFC93CAEEA98CBFC0481089E308395A3234F158.crl (hash: XuNHR7WDmTQNOpbIPQfyxbYgkj8GJYMDXDInJ6j9rug=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.crl rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 22:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a5:74:93:46:a2:8d:be:c0:79:1f:5f:64:a3:3a:fb:ac:17:92:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFC93CAEEA98CBFC0481089E308395A3234F158 Validity Not Before: Jul 20 20:21:28 2026 GMT Not After : Jul 21 22:27:28 2026 GMT Subject: CN=93059831D6EB490B9184DE810EFA8E52D67F5CBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d6:28:ad:eb:c1:85:e9:5e:00:78:9f:f9:eb: 4c:b7:e8:ca:75:5c:62:de:0f:cc:3e:e1:78:30:64: e6:79:28:6c:06:7f:ea:15:6c:7f:06:d9:d5:de:fc: ee:76:a8:c8:1f:e1:a6:d5:0f:09:fa:46:46:98:c4: 6e:74:33:79:0e:b9:67:0b:42:35:b1:b8:36:a1:61: 9c:2b:9c:c3:37:a5:38:38:f9:47:a1:c8:1b:d0:04: 62:ed:c3:ac:91:13:f6:4e:0b:2f:6b:df:bf:b6:d0: 9b:8f:65:e8:69:19:24:1d:3d:e0:d5:95:13:ee:f3: ef:36:42:dd:72:ce:c8:a1:e4:0e:bc:b3:6e:94:04: 68:bd:25:cf:34:d5:34:b0:dd:5b:b2:78:97:a1:ff: 6f:2d:28:e4:2a:35:63:f8:5a:5d:ee:d0:15:cd:bc: 6b:98:3c:6b:21:63:0c:2c:72:44:d4:3d:88:94:43: 02:ff:1e:06:2e:d3:32:92:58:ac:3c:b8:a5:c0:57: 7d:66:33:9f:56:58:4c:d1:e3:fe:aa:7a:5b:c0:6d: d5:42:76:7b:4c:be:22:da:73:e3:59:44:df:46:65: 97:f7:7d:9b:14:23:c9:76:e4:5a:da:64:77:ee:cd: 9f:34:7c:a4:9b:55:c4:91:36:58:4e:35:23:d4:16: 4f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:05:98:31:D6:EB:49:0B:91:84:DE:81:0E:FA:8E:52:D6:7F:5C:BB X509v3 Authority Key Identifier: keyid:9A:FC:93:CA:EE:A9:8C:BF:C0:48:10:89:E3:08:39:5A:32:34:F1:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:11:b8:61:56:41:39:2b:d9:04:7a:27:1e:95:2f:d3:41:69: 47:9f:07:fc:9e:cb:eb:e4:b2:8f:05:e5:72:bc:de:3a:d5:50: 60:36:90:ca:7a:9d:28:ce:b1:c3:63:0f:b4:a8:8b:96:cd:85: 8c:7b:46:ca:2f:84:2e:60:64:8c:51:ff:36:13:f9:f1:f7:6d: e9:0d:2e:50:86:cd:01:c8:c3:38:fe:86:2b:16:00:78:22:5f: 6d:ab:14:7f:18:b7:bd:bf:38:6b:4d:e4:56:26:a9:96:33:4f: 1d:c2:c7:43:cf:6d:ba:73:69:24:1e:37:67:d5:11:0b:cf:fc: 08:f7:13:b5:16:9d:d9:40:3f:38:fa:07:89:11:4f:2c:a8:09: ef:ba:48:59:82:d4:4e:01:4d:26:aa:29:9b:3c:f9:4a:12:53: 7f:7d:1d:85:6b:2e:38:1a:41:85:f4:fc:d2:90:83:e0:cc:41: a5:bb:42:88:a7:cd:74:4c:3c:a5:10:4f:9d:29:f0:f5:e3:3c: 26:4d:a1:48:73:d7:ac:f3:8f:4e:d6:c7:ce:d0:d4:1f:83:f3: 6d:fe:a7:f4:0e:e4:aa:fb:cd:27:b5:34:0c:79:14:2f:8f:85: b6:6e:29:24:fc:f6:ee:f4:32:ac:6b:8a:3f:dc:bc:d0:c8:c7: 81:f4:1b:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUKV0k0aijb7AeR9fZKM6+6wXktMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGQzkzQ0FFRUE5OENCRkMwNDgxMDg5RTMwODM5NUEz MjM0RjE1ODAeFw0yNjA3MjAyMDIxMjhaFw0yNjA3MjEyMjI3MjhaMDMxMTAvBgNV BAMTKDkzMDU5ODMxRDZFQjQ5MEI5MTg0REU4MTBFRkE4RTUyRDY3RjVDQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn1iit68GF6V4AeJ/560y36Mp1 XGLeD8w+4XgwZOZ5KGwGf+oVbH8G2dXe/O52qMgf4abVDwn6RkaYxG50M3kOuWcL QjWxuDahYZwrnMM3pTg4+UehyBvQBGLtw6yRE/ZOCy9r37+20JuPZehpGSQdPeDV lRPu8+82Qt1yzsih5A68s26UBGi9Jc801TSw3VuyeJeh/28tKOQqNWP4Wl3u0BXN vGuYPGshYwwsckTUPYiUQwL/HgYu0zKSWKw8uKXAV31mM59WWEzR4/6qelvAbdVC dntMviLac+NZRN9GZZf3fZsUI8l25FraZHfuzZ80fKSbVcSRNlhONSPUFk+ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkwWYMdbrSQuRhN6BDvqOUtZ/XLswHwYDVR0j BBgwFoAUmvyTyu6pjL/ASBCJ4wg5WjI08VgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNhZjI3MWYtYzgzZC00NDFlLWJlYTktMThhMjQ0ZDBlMDBlLzAvOUFGQzkzQ0FF RUE5OENCRkMwNDgxMDg5RTMwODM5NUEzMjM0RjE1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QUZDOTNDQUVFQTk4Q0JGQzA0ODEwODlFMzA4Mzk1QTMyMzRG MTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNhZjI3MWYtYzgzZC00NDFlLWJl YTktMThhMjQ0ZDBlMDBlLzAvOUFGQzkzQ0FFRUE5OENCRkMwNDgxMDg5RTMwODM5 NUEzMjM0RjE1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcRuGFWQTkr2QR6Jx6VL9NBaUefB/yey+vk so8F5XK83jrVUGA2kMp6nSjOscNjD7Soi5bNhYx7RsovhC5gZIxR/zYT+fH3bekN LlCGzQHIwzj+hisWAHgiX22rFH8Yt72/OGtN5FYmqZYzTx3Cx0PPbbpzaSQeN2fV EQvP/Aj3E7UWndlAPzj6B4kRTyyoCe+6SFmC1E4BTSaqKZs8+UoSU399HYVrLjga QYX0/NKQg+DMQaW7QoinzXRMPKUQT50p8PXjPCZNoUhz16zzj07Wx87Q1B+D823+ p/QO5Kr7zSe1NAx5FC+PhbZuKST89u70Mqxrij/cvNDIx4H0G7g= -----END CERTIFICATE-----Generated at Tue Jul 21 08:29:11 2026 by rpki-client