$ rpki-client -vvf rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft File: 9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft (raw, json) Hash identifier: RUEbQzQqHGsUX45HRFL6im44iyTneyabcMDVQIOljMY= Subject key identifier: 37:CF:1C:CE:69:F9:52:A8:64:92:73:81:19:07:7F:48:7A:3E:B8:F6 Authority key identifier: 9F:2F:D5:F0:22:2A:23:10:19:36:82:C9:DC:2C:AB:6A:7F:4C:EE:F0 Certificate issuer: /CN=9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0 Certificate serial: 51B59D012524A90D65F3F70A3F1FE2504536E36D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 21:07:21 +0000 Manifest this update: Mon 20 Jul 2026 21:02:21 +0000 Manifest next update: Tue 21 Jul 2026 23:09:21 +0000 Files and hashes: 1: 3130332e3137342e36352e302f32342d3234203d3e20313437313236.roa (hash: wlJasn9sEpBfYIb16xYXhPNZ1TeKQ7fHYr3qJmH4nLE=) 2: 3130332e3137342e36342e302f32342d3234203d3e20313437313236.roa (hash: ZGD3gvwBGhA/oYppfcua832gpcsap+01GHOd/NYuTUc=) 3: 9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.crl (hash: mbJihRjZN2E1Aj8zkYuBjsgc9sw1czY0uePiPXXz61w=) 4: 3130332e3137342e36342e302f32332d3234203d3e20313437313236.roa (hash: BwYpBlP3m28Tfj+hQxoec6R8e4UN5PECSBz/IAuPt0w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.crl rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b5:9d:01:25:24:a9:0d:65:f3:f7:0a:3f:1f:e2:50:45:36:e3:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0 Validity Not Before: Jul 20 21:02:21 2026 GMT Not After : Jul 21 23:09:21 2026 GMT Subject: CN=37CF1CCE69F952A86492738119077F487A3EB8F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d2:6b:c7:41:c0:ba:db:6a:48:3f:15:41:e6: 8b:eb:81:0f:33:c0:c4:c1:c2:9b:af:f1:68:08:f8: 37:0c:d5:10:86:e3:b9:60:97:04:72:5d:1c:a2:7e: 7b:82:10:f5:64:9f:34:8c:73:bd:b1:b2:8b:c2:d7: 79:ab:29:54:da:54:24:86:68:d5:37:73:33:0b:68: 76:a4:23:62:a5:ab:92:54:bc:62:c9:02:49:c1:67: 35:1c:eb:7a:f4:17:ca:1f:27:96:94:b4:77:b7:75: dd:01:52:4f:f7:44:78:31:f8:1b:22:ee:27:72:fa: 93:41:39:f2:c1:5b:7f:6b:59:7a:53:7f:c9:21:94: da:48:96:32:d6:d6:b6:d5:b3:7b:67:4b:06:1f:48: 2b:bf:b4:47:07:4f:83:27:f3:09:60:0a:2c:6d:19: 3b:63:2c:6d:01:64:45:33:1d:4d:6c:07:a5:79:9b: 46:fe:6b:80:bd:07:e9:6c:d1:46:39:2b:45:f4:8d: e9:c2:37:07:61:1d:6e:26:6d:5a:c6:8b:1a:26:33: 7d:2a:fe:e2:c1:a8:0b:d1:06:bb:87:02:f7:b1:1b: 62:72:f5:4a:73:f5:bc:61:79:30:a0:4b:6c:6c:b7: 15:38:3b:f6:5c:c3:62:6f:31:8d:af:78:55:a6:53: 66:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CF:1C:CE:69:F9:52:A8:64:92:73:81:19:07:7F:48:7A:3E:B8:F6 X509v3 Authority Key Identifier: keyid:9F:2F:D5:F0:22:2A:23:10:19:36:82:C9:DC:2C:AB:6A:7F:4C:EE:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:90:4f:a4:95:2e:2c:28:8f:1b:e5:7e:99:1c:f6:4f:dd:73: 32:84:66:8a:9c:a9:04:64:37:7c:f3:dc:b5:28:03:14:1b:1a: 8d:1d:71:21:bc:b9:6b:9a:37:be:4f:c8:69:19:5b:ce:2c:fb: 8a:7d:c0:f6:37:33:b1:82:a9:b9:5f:ed:c1:8c:60:ac:9c:be: 49:de:48:cb:03:87:b8:77:c8:9a:90:81:e4:6f:88:32:d8:28: a7:4d:46:71:30:0f:e8:9f:8d:c4:bd:63:0a:b9:aa:02:2b:57: af:c8:f1:46:9e:7c:22:3b:73:18:f9:48:08:66:f7:01:34:02: 58:26:22:d0:42:ab:e5:33:5c:85:1c:27:43:46:a3:3f:b7:f9: d1:6d:a2:31:f6:b0:c5:ef:be:03:d3:c4:98:2c:f9:99:15:64: 72:8a:13:71:6d:51:13:14:c8:4b:56:9b:1a:b2:e1:af:38:54: c9:04:69:70:30:21:88:8d:2e:82:69:32:cf:27:1c:50:97:52: 60:a5:43:d4:53:14:75:b5:2e:34:e4:6e:35:23:fd:fc:5b:95: 76:0a:b1:b2:d1:aa:30:a2:85:9b:de:d2:35:2d:3d:84:75:2e: 74:e6:20:51:2e:fa:7f:82:78:78:05:87:f1:48:96:bf:0d:8b: 45:90:63:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUbWdASUkqQ1l8/cKPx/iUEU2420wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYyRkQ1RjAyMjJBMjMxMDE5MzY4MkM5REMyQ0FCNkE3 RjRDRUVGMDAeFw0yNjA3MjAyMTAyMjFaFw0yNjA3MjEyMzA5MjFaMDMxMTAvBgNV BAMTKDM3Q0YxQ0NFNjlGOTUyQTg2NDkyNzM4MTE5MDc3RjQ4N0EzRUI4RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo0mvHQcC622pIPxVB5ovrgQ8z wMTBwpuv8WgI+DcM1RCG47lglwRyXRyifnuCEPVknzSMc72xsovC13mrKVTaVCSG aNU3czMLaHakI2Klq5JUvGLJAknBZzUc63r0F8ofJ5aUtHe3dd0BUk/3RHgx+Bsi 7idy+pNBOfLBW39rWXpTf8khlNpIljLW1rbVs3tnSwYfSCu/tEcHT4Mn8wlgCixt GTtjLG0BZEUzHU1sB6V5m0b+a4C9B+ls0UY5K0X0jenCNwdhHW4mbVrGixomM30q /uLBqAvRBruHAvexG2Jy9Upz9bxheTCgS2xstxU4O/Zcw2JvMY2veFWmU2bDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN88czmn5UqhkknOBGQd/SHo+uPYwHwYDVR0j BBgwFoAUny/V8CIqIxAZNoLJ3Cyran9M7vAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFmNGFiYmUtOGI1ZC00MDJiLTkwNTMtNTBiNzg1Yzc3MzUyLzAvOUYyRkQ1RjAy MjJBMjMxMDE5MzY4MkM5REMyQ0FCNkE3RjRDRUVGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjJGRDVGMDIyMkEyMzEwMTkzNjgyQzlEQzJDQUI2QTdGNENF RUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFmNGFiYmUtOGI1ZC00MDJiLTkw NTMtNTBiNzg1Yzc3MzUyLzAvOUYyRkQ1RjAyMjJBMjMxMDE5MzY4MkM5REMyQ0FC NkE3RjRDRUVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyQT6SVLiwojxvlfpkc9k/dczKEZoqcqQRk N3zz3LUoAxQbGo0dcSG8uWuaN75PyGkZW84s+4p9wPY3M7GCqblf7cGMYKycvkne SMsDh7h3yJqQgeRviDLYKKdNRnEwD+ifjcS9Ywq5qgIrV6/I8UaefCI7cxj5SAhm 9wE0AlgmItBCq+UzXIUcJ0NGoz+3+dFtojH2sMXvvgPTxJgs+ZkVZHKKE3FtURMU yEtWmxqy4a84VMkEaXAwIYiNLoJpMs8nHFCXUmClQ9RTFHW1LjTkbjUj/fxblXYK sbLRqjCihZve0jUtPYR1LnTmIFEu+n+CeHgFh/FIlr8Ni0WQY2k= -----END CERTIFICATE-----Generated at Tue Jul 21 07:01:34 2026 by rpki-client