$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft File: C9C56B3341FC31139F57F78A815CF9851E91375E.mft (raw, json) Hash identifier: Ml99GFPekp6MlTnO8n/jliW3Xl05tRMCo3jkru16XFg= Subject key identifier: B3:F1:DA:7B:6D:B7:62:1C:58:06:07:85:51:72:0E:B7:00:E1:D0:A5 Authority key identifier: C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E Certificate issuer: /CN=C9C56B3341FC31139F57F78A815CF9851E91375E Certificate serial: 1B093AAF26AC96DA6DF404F281D3A9C5F6BF9F75 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft Manifest number: 69 Signing time: Mon 20 Jul 2026 11:10:11 +0000 Manifest this update: Mon 20 Jul 2026 11:05:11 +0000 Manifest next update: Tue 21 Jul 2026 15:04:11 +0000 Files and hashes: 1: C9C56B3341FC31139F57F78A815CF9851E91375E.crl (hash: U9vlz/QJCtYho3qGcmq4VrK604+zbWMNWD5Ed/98/PU=) 2: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: YDyhEGDnWg4aoTzQ4Kj70ioCxeiG+fWs6BKdMJUBP40=) 3: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: UvvLQHaYsHEf6H/EOqibK//gY5katYyU5vu1/kohXeI=) 4: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: ++K50lF9/3pIjVc4GT4lTLKYd8Uj+kdHUPhBXnfZ3JA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:09:3a:af:26:ac:96:da:6d:f4:04:f2:81:d3:a9:c5:f6:bf:9f:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9C56B3341FC31139F57F78A815CF9851E91375E Validity Not Before: Jul 20 11:05:11 2026 GMT Not After : Jul 21 15:04:11 2026 GMT Subject: CN=B3F1DA7B6DB7621C5806078551720EB700E1D0A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ac:05:00:96:cc:b3:c2:da:bc:79:77:09:00: f9:94:04:70:b3:f1:04:42:a3:97:6a:16:40:d6:45: 69:98:1a:74:b1:6f:99:b1:76:c2:90:23:c0:30:47: 88:ee:2b:61:4c:bd:60:5d:0d:45:b4:82:ef:6f:7a: 50:48:0c:54:d0:75:e0:6d:69:41:18:ea:a7:f0:64: 7c:85:b7:68:d2:33:1c:32:1e:4e:0d:4c:a3:57:88: f8:24:8a:7e:fe:16:28:2f:a0:94:05:9e:f1:85:8d: 4c:48:91:5a:5c:7f:bf:43:6a:87:6c:f4:d7:39:ad: 55:c5:d3:90:9d:89:37:48:7b:38:b5:57:3b:f0:25: 65:12:a6:d9:a4:3e:ba:42:74:3a:31:8d:35:1d:72: 52:07:8e:03:d3:66:c3:b8:3d:eb:d3:bc:d1:52:6c: d3:6b:7e:4d:ab:b4:97:45:09:ba:0d:a0:55:f3:04: ef:d1:46:f2:82:4e:aa:2d:84:f3:8c:55:68:96:a7: 46:8c:50:2e:f7:55:f1:ec:d3:2f:aa:65:c3:99:70: 34:25:fe:a7:95:ee:fc:de:67:96:8a:73:65:96:e1: 22:fc:d5:21:f2:3d:72:13:cb:7f:d8:b1:e2:1c:a1: c7:89:06:a1:08:f1:13:50:14:e4:ae:d4:5d:54:51: 4a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F1:DA:7B:6D:B7:62:1C:58:06:07:85:51:72:0E:B7:00:E1:D0:A5 X509v3 Authority Key Identifier: keyid:C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:2b:e0:be:6f:b6:0d:b9:f7:47:36:60:4e:93:da:30:79:5b: 49:3a:96:67:d8:b1:da:0d:4b:f7:3f:b1:10:3b:c4:de:f5:a2: fe:ed:de:cd:cc:91:3e:9f:bb:ae:31:28:14:ab:b1:07:a4:a5: 4c:ef:af:7f:e3:97:9f:47:9d:6a:43:92:89:37:13:c8:d6:da: 93:e6:22:4a:e7:76:7c:24:bc:34:9f:7c:89:7b:a1:ed:ee:d7: f9:df:5e:31:cc:eb:ad:98:79:36:49:ff:6c:83:16:97:ed:19: 29:c7:8c:6a:d9:64:ca:4b:0e:98:22:ba:9b:84:df:0e:a5:74: 73:1a:91:3c:15:12:e6:49:83:04:f3:c1:5a:56:03:b9:30:3e: 6b:0c:a6:5d:16:7e:d2:5a:80:50:f8:51:4a:7e:ec:e1:15:10: ec:b6:68:ea:41:f0:45:53:ad:1f:66:7d:6b:91:f0:38:d5:72: 5e:4e:ee:91:de:1b:80:fc:45:69:da:ae:eb:86:0a:4a:3f:13: 7a:cc:2e:83:66:4f:ba:b8:a7:bd:57:71:9d:68:bd:71:e1:a8: 37:7a:01:5a:b2:80:03:2c:37:64:a0:b9:37:b8:c3:ab:7a:c0: 56:59:fd:4a:91:64:88:53:fe:47:92:00:e8:87:17:8a:98:21: f5:b6:4a:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGwk6ryasltpt9ATygdOpxfa/n3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlDNTZCMzM0MUZDMzExMzlGNTdGNzhBODE1Q0Y5ODUx RTkxMzc1RTAeFw0yNjA3MjAxMTA1MTFaFw0yNjA3MjExNTA0MTFaMDMxMTAvBgNV BAMTKEIzRjFEQTdCNkRCNzYyMUM1ODA2MDc4NTUxNzIwRUI3MDBFMUQwQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsrAUAlsyzwtq8eXcJAPmUBHCz 8QRCo5dqFkDWRWmYGnSxb5mxdsKQI8AwR4juK2FMvWBdDUW0gu9velBIDFTQdeBt aUEY6qfwZHyFt2jSMxwyHk4NTKNXiPgkin7+FigvoJQFnvGFjUxIkVpcf79Daods 9Nc5rVXF05CdiTdIezi1VzvwJWUSptmkPrpCdDoxjTUdclIHjgPTZsO4PevTvNFS bNNrfk2rtJdFCboNoFXzBO/RRvKCTqothPOMVWiWp0aMUC73VfHs0y+qZcOZcDQl /qeV7vzeZ5aKc2WW4SL81SHyPXITy3/YseIcoceJBqEI8RNQFOSu1F1UUUpJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs/Hae223YhxYBgeFUXIOtwDh0KUwHwYDVR0j BBgwFoAUycVrM0H8MROfV/eKgVz5hR6RN14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI4YTdmYTUtZmRhMy00YTNlLTkyZjctZmFiZmVkMDVhOTVjLzAvQzlDNTZCMzM0 MUZDMzExMzlGNTdGNzhBODE1Q0Y5ODUxRTkxMzc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUM1NkIzMzQxRkMzMTEzOUY1N0Y3OEE4MTVDRjk4NTFFOTEz NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvQzlDNTZCMzM0MUZDMzExMzlGNTdGNzhBODE1Q0Y5 ODUxRTkxMzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMr4L5vtg2590c2YE6T2jB5W0k6lmfYsdoN S/c/sRA7xN71ov7t3s3MkT6fu64xKBSrsQekpUzvr3/jl59HnWpDkok3E8jW2pPm IkrndnwkvDSffIl7oe3u1/nfXjHM662YeTZJ/2yDFpftGSnHjGrZZMpLDpgiupuE 3w6ldHMakTwVEuZJgwTzwVpWA7kwPmsMpl0WftJagFD4UUp+7OEVEOy2aOpB8EVT rR9mfWuR8DjVcl5O7pHeG4D8RWnaruuGCko/E3rMLoNmT7q4p71XcZ1ovXHhqDd6 AVqygAMsN2SguTe4w6t6wFZZ/UqRZIhT/keSAOiHF4qYIfW2SjE= -----END CERTIFICATE-----Generated at Tue Jul 21 06:55:36 2026 by rpki-client