$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft File: B9E54455BBADEE4051F79D907B7453E95F13B467.mft (raw, json) Hash identifier: lLa2vVRUhi/8aAcdAIf1yT7VP5MV6JQSlHCMLbZUZlw= Subject key identifier: 18:22:C1:87:1E:45:21:42:D5:16:4B:08:80:4E:85:0B:1F:99:9F:AD Authority key identifier: B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67 Certificate issuer: /CN=B9E54455BBADEE4051F79D907B7453E95F13B467 Certificate serial: 1826EB0D1DF5105E628F1FB1D5E462AC8CC4B0A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 19:55:56 +0000 Manifest this update: Mon 20 Jul 2026 19:50:56 +0000 Manifest next update: Tue 21 Jul 2026 21:40:56 +0000 Files and hashes: 1: 3130332e36362e34342e302f32322d3232203d3e203233363934.roa (hash: 2snLe8yK3Bohn4tsm/dGVrhksjjX4tISeXo0oWw/2NQ=) 2: B9E54455BBADEE4051F79D907B7453E95F13B467.crl (hash: xAmM9XGRCfGPasUDNRfdSDvjv0NT0AlivdHUfrOCxQc=) 3: 323030313a6466323a623230303a3a2f34382d3438203d3e203233363934.roa (hash: /KOgzrDFq/tIyDOkqLi1nhsbulS+0UUYSYry8OoTmJg=) 4: 3130332e36362e34342e302f32332d3233203d3e203233363934.roa (hash: 7pPEEFuxF2xingEKFsHlopxNVPNMkufYI24t0NlMTEY=) 5: 3130332e36362e34372e302f32342d3234203d3e203233363934.roa (hash: 8BxjP7wp2ny7XMMIeYWn2YhapQVIdzgBdHrT8RAE1hI=) 6: 3130332e36362e34352e302f32342d3234203d3e203233363934.roa (hash: vFfmqz/S7K4aLguWPn5rp+ugEbZkxGvqsu4n1XKxUAg=) 7: 3130332e36362e34362e302f32332d3233203d3e203233363934.roa (hash: wr2AUAIBj15wOmk+O8JERfUGMC5W1ujwy25yjBMhvGA=) 8: 3130332e36362e34342e302f32342d3234203d3e203233363934.roa (hash: Mm+87+26OdYLR0WzbeBFR1Yx08pPggtvOd7SnjyjkXk=) 9: 3130332e36362e34362e302f32342d3234203d3e203233363934.roa (hash: UedpVAHn21ooqLw8ovvpIgJ1soqSurJAxq23sQ+qlfw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 21:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:26:eb:0d:1d:f5:10:5e:62:8f:1f:b1:d5:e4:62:ac:8c:c4:b0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9E54455BBADEE4051F79D907B7453E95F13B467 Validity Not Before: Jul 20 19:50:56 2026 GMT Not After : Jul 21 21:40:56 2026 GMT Subject: CN=1822C1871E452142D5164B08804E850B1F999FAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:54:55:95:3e:de:b4:90:ab:32:b7:46:12: b9:1e:de:f2:08:06:82:dd:6a:8e:4f:4d:e5:08:fc: 11:46:ef:9b:3d:a7:39:88:54:34:38:a5:5e:ea:f0: 66:81:56:7c:5f:48:f4:dd:d3:b4:4c:9f:01:1c:ae: b4:98:92:ec:00:9a:ec:49:4a:01:35:54:5a:15:e3: fe:53:59:69:9a:06:e9:d5:7d:da:8f:69:80:fa:1b: 75:b6:1e:af:b3:8b:31:05:d8:78:17:10:12:4f:e9: 24:38:81:70:99:76:1e:28:b0:6e:82:7a:d3:e6:c1: a2:b9:bb:fc:51:01:21:03:69:7f:4e:92:1e:a4:93: e6:b8:c0:cb:17:ae:e8:0b:14:39:eb:eb:e8:cc:52: 81:d9:93:ad:1b:24:31:bd:5b:3c:54:98:f4:15:5d: 6b:31:a9:e9:a8:a0:42:2a:e5:db:54:c8:aa:a8:45: 34:0e:b1:b7:05:cb:9f:4c:84:c6:9a:ca:2b:74:a2: d8:16:7c:00:85:39:09:f8:39:91:b4:4e:4d:60:75: 1d:82:cd:9e:68:25:b4:70:22:68:e4:60:df:5a:35: 71:23:12:2f:9f:69:de:91:db:95:c3:65:74:eb:73: 0d:de:dd:23:f7:23:e8:eb:4c:74:bb:d5:99:21:1c: 43:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:22:C1:87:1E:45:21:42:D5:16:4B:08:80:4E:85:0B:1F:99:9F:AD X509v3 Authority Key Identifier: keyid:B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a3:2c:02:ee:30:62:9f:6a:7c:e4:b4:83:6c:da:27:41:e1: b2:d8:17:e4:ce:2b:b2:65:c2:a9:28:51:67:bc:47:37:e1:6e: 23:d8:a8:bd:86:ba:1f:1a:f1:9a:cd:73:45:32:20:0f:86:83: de:0b:b8:26:75:e9:5b:9d:0c:62:65:81:ed:75:ad:7c:64:58: 49:73:3f:c5:26:5c:10:1b:65:d2:b3:12:a6:6f:ac:02:47:57: c9:b5:ef:ed:b8:a0:47:72:4c:22:6f:7c:54:2e:bd:27:3b:41: c4:3e:cc:43:8a:2b:cd:81:03:68:d0:66:91:63:81:72:8b:41: d0:e6:cd:21:3c:56:47:47:6e:db:9b:57:a8:a5:c4:cf:e1:34: 53:83:3d:b9:c9:ac:05:c5:e5:51:49:ea:93:1a:7e:9d:b0:2c: 37:8b:70:2c:09:5b:9c:24:77:82:d2:42:4d:cb:49:6e:3d:2c: 00:73:24:a0:da:71:46:88:b9:f2:07:5c:b5:b6:ec:d9:0e:d5: ea:3f:85:1a:8d:83:5b:fb:bb:59:3a:f8:e3:f8:d0:0d:65:5e: ba:bf:14:e8:b3:19:c6:9a:6f:4c:f3:87:a9:73:1e:df:b3:34: 60:96:d6:7e:a1:2f:d3:ec:93:9c:b2:20:63:b2:1e:30:75:08: 75:fd:7c:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGCbrDR31EF5ijx+x1eRirIzEsKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlFNTQ0NTVCQkFERUU0MDUxRjc5RDkwN0I3NDUzRTk1 RjEzQjQ2NzAeFw0yNjA3MjAxOTUwNTZaFw0yNjA3MjEyMTQwNTZaMDMxMTAvBgNV BAMTKDE4MjJDMTg3MUU0NTIxNDJENTE2NEIwODgwNEU4NTBCMUY5OTlGQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy61RVlT7etJCrMrdGErke3vII BoLdao5PTeUI/BFG75s9pzmIVDQ4pV7q8GaBVnxfSPTd07RMnwEcrrSYkuwAmuxJ SgE1VFoV4/5TWWmaBunVfdqPaYD6G3W2Hq+zizEF2HgXEBJP6SQ4gXCZdh4osG6C etPmwaK5u/xRASEDaX9Okh6kk+a4wMsXrugLFDnr6+jMUoHZk60bJDG9WzxUmPQV XWsxqemooEIq5dtUyKqoRTQOsbcFy59MhMaayit0otgWfACFOQn4OZG0Tk1gdR2C zZ5oJbRwImjkYN9aNXEjEi+fad6R25XDZXTrcw3e3SP3I+jrTHS71ZkhHEN3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGCLBhx5FIULVFksIgE6FCx+Zn60wHwYDVR0j BBgwFoAUueVEVbut7kBR952Qe3RT6V8TtGcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGI0Zjg1MTEtMDdiMy00YTYxLWJkMDQtMmU2NjVjOTI3OGZjLzAvQjlFNTQ0NTVC QkFERUU0MDUxRjc5RDkwN0I3NDUzRTk1RjEzQjQ2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUU1NDQ1NUJCQURFRTQwNTFGNzlEOTA3Qjc0NTNFOTVGMTNC NDY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGI0Zjg1MTEtMDdiMy00YTYxLWJk MDQtMmU2NjVjOTI3OGZjLzAvQjlFNTQ0NTVCQkFERUU0MDUxRjc5RDkwN0I3NDUz RTk1RjEzQjQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2jLALuMGKfanzktINs2idB4bLYF+TOK7Jl wqkoUWe8RzfhbiPYqL2Guh8a8ZrNc0UyIA+Gg94LuCZ16VudDGJlge11rXxkWElz P8UmXBAbZdKzEqZvrAJHV8m17+24oEdyTCJvfFQuvSc7QcQ+zEOKK82BA2jQZpFj gXKLQdDmzSE8VkdHbtubV6ilxM/hNFODPbnJrAXF5VFJ6pMafp2wLDeLcCwJW5wk d4LSQk3LSW49LABzJKDacUaIufIHXLW27NkO1eo/hRqNg1v7u1k6+OP40A1lXrq/ FOizGcaab0zzh6lzHt+zNGCW1n6hL9Psk5yyIGOyHjB1CHX9fOQ= -----END CERTIFICATE-----Generated at Tue Jul 21 06:33:41 2026 by rpki-client