$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft File: 9C227785E7A190271A628E29FFB9374BECA61154.mft (raw, json) Hash identifier: rvJtfk6dGgJQyTQT9xQV5ZEhJhcNxRzoSjd0stv+IX8= Subject key identifier: 65:5B:17:48:65:73:FC:2A:29:DC:84:F7:B3:71:A1:24:FC:8C:C8:91 Authority key identifier: 9C:22:77:85:E7:A1:90:27:1A:62:8E:29:FF:B9:37:4B:EC:A6:11:54 Certificate issuer: /CN=9C227785E7A190271A628E29FFB9374BECA61154 Certificate serial: 3D0C268C3C55C48F459CFF6CFE64A68E7BD5E298 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C227785E7A190271A628E29FFB9374BECA61154.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 17:28:01 +0000 Manifest this update: Mon 20 Jul 2026 17:23:01 +0000 Manifest next update: Tue 21 Jul 2026 18:36:01 +0000 Files and hashes: 1: 3130332e3132322e3230332e302f32342d3234203d3e20313338303733.roa (hash: OSktfcUOEhaPa/dtCu8RSESeObR9iQ/cknxFlh9rYYM=) 2: 9C227785E7A190271A628E29FFB9374BECA61154.crl (hash: ThZAHVRuUjwpuWMnkqNbymgjlgjciuIln3Bnb6YrzyE=) 3: 3130332e3132322e3230322e302f32342d3234203d3e20313338303733.roa (hash: bJXWECjiuCYMun/6fgF6wLQ0iGSb4mFhCIoJYAqk5LQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.crl rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C227785E7A190271A628E29FFB9374BECA61154.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:0c:26:8c:3c:55:c4:8f:45:9c:ff:6c:fe:64:a6:8e:7b:d5:e2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C227785E7A190271A628E29FFB9374BECA61154 Validity Not Before: Jul 20 17:23:01 2026 GMT Not After : Jul 21 18:36:01 2026 GMT Subject: CN=655B17486573FC2A29DC84F7B371A124FC8CC891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6a:fc:b0:8a:e3:17:33:57:ee:03:9a:90:99: cf:16:36:a6:b0:10:2b:07:88:59:74:64:4a:ee:da: 01:e0:4d:7a:33:dd:92:2d:3a:90:43:40:4b:45:69: 3a:ef:90:11:6b:3a:12:41:18:7e:f2:e8:0a:ab:e1: 53:08:15:c4:c6:9c:8c:a4:a1:50:31:95:d1:f1:8c: 8b:99:eb:d3:5d:15:76:9e:fc:ed:56:b4:ad:f8:a3: 53:1f:28:f1:9c:38:89:d7:bc:af:87:2c:3c:94:53: 02:fd:e0:0b:2f:1d:50:54:dd:6b:a8:78:b2:6d:d3: e3:b6:ce:87:cd:8c:13:78:d9:58:fc:26:d3:3b:5f: 96:2d:05:5d:f9:19:ce:d4:b6:0c:27:db:ea:d3:bd: 20:df:78:ca:8d:02:88:6e:d5:88:f7:8f:4d:2a:8d: 21:cd:56:6a:47:f9:13:e2:86:a1:e2:10:d5:6f:e9: a8:0e:45:27:1b:94:b1:36:71:fb:d5:96:49:3c:60: ec:27:58:79:ae:32:f1:4e:df:cb:a6:61:af:66:a7: 91:1b:c8:9a:61:70:05:1b:af:82:6d:19:bc:30:f7: 5f:d6:57:b7:a5:08:8e:80:a8:48:58:4b:50:23:d3: 4b:2d:73:e5:2a:e4:f2:a5:c0:63:4e:6b:89:7a:9f: d5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5B:17:48:65:73:FC:2A:29:DC:84:F7:B3:71:A1:24:FC:8C:C8:91 X509v3 Authority Key Identifier: keyid:9C:22:77:85:E7:A1:90:27:1A:62:8E:29:FF:B9:37:4B:EC:A6:11:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C227785E7A190271A628E29FFB9374BECA61154.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e0:ce:a2:07:c0:c4:c9:96:b0:35:70:58:3d:38:ea:17:34: 12:41:e3:29:f2:5b:d7:62:ea:43:ab:d5:95:99:9f:90:2d:49: 07:13:fd:39:21:b1:2b:08:b4:07:91:75:9b:6e:2b:4a:34:e4: 46:a9:e1:09:c4:c2:67:8f:9e:fe:4d:05:ca:32:9e:21:6c:e4: df:04:f5:2a:ca:2b:22:e0:a7:1d:cf:0f:ec:28:0e:bd:da:f8: 23:ae:25:88:8d:f0:65:df:49:ff:11:c8:b0:5f:36:87:fa:ff: b6:07:99:56:a9:c0:5f:bf:08:34:e6:c7:e7:19:00:42:13:3d: b1:65:d6:ed:e5:fa:e1:19:7a:e3:a4:86:9b:7f:27:de:65:51: fa:9d:34:c8:5a:cb:34:d6:cf:61:35:41:67:ed:01:a0:eb:a3: de:54:0f:eb:37:db:06:c5:52:56:87:df:26:70:5d:c8:79:76: f8:d2:df:8e:d6:10:78:08:94:c7:26:8c:92:50:04:8a:c5:2a: 5f:8a:f1:4b:1d:9c:b9:e2:4b:6a:6d:59:e1:65:37:d6:f3:7b: f1:22:b2:4a:a8:60:85:5b:ee:bf:80:3e:44:e0:d5:e6:65:14: d4:7d:59:d6:07:2b:c4:0a:df:b7:86:fb:b8:f5:6b:20:aa:a4: 8a:ef:95:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPQwmjDxVxI9FnP9s/mSmjnvV4pgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMyMjc3ODVFN0ExOTAyNzFBNjI4RTI5RkZCOTM3NEJF Q0E2MTE1NDAeFw0yNjA3MjAxNzIzMDFaFw0yNjA3MjExODM2MDFaMDMxMTAvBgNV BAMTKDY1NUIxNzQ4NjU3M0ZDMkEyOURDODRGN0IzNzFBMTI0RkM4Q0M4OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUavywiuMXM1fuA5qQmc8WNqaw ECsHiFl0ZEru2gHgTXoz3ZItOpBDQEtFaTrvkBFrOhJBGH7y6Aqr4VMIFcTGnIyk oVAxldHxjIuZ69NdFXae/O1WtK34o1MfKPGcOInXvK+HLDyUUwL94AsvHVBU3Wuo eLJt0+O2zofNjBN42Vj8JtM7X5YtBV35Gc7Utgwn2+rTvSDfeMqNAohu1Yj3j00q jSHNVmpH+RPihqHiENVv6agORScblLE2cfvVlkk8YOwnWHmuMvFO38umYa9mp5Eb yJphcAUbr4JtGbww91/WV7elCI6AqEhYS1Aj00stc+Uq5PKlwGNOa4l6n9UhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZVsXSGVz/Cop3IT3s3GhJPyMyJEwHwYDVR0j BBgwFoAUnCJ3heehkCcaYo4p/7k3S+ymEVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWQ0ZjYzZTQtNmZiMy00YjAzLWIyMTAtYjU2ODZjZDViMzk3LzAvOUMyMjc3ODVF N0ExOTAyNzFBNjI4RTI5RkZCOTM3NEJFQ0E2MTE1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QzIyNzc4NUU3QTE5MDI3MUE2MjhFMjlGRkI5Mzc0QkVDQTYx MTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWQ0ZjYzZTQtNmZiMy00YjAzLWIy MTAtYjU2ODZjZDViMzk3LzAvOUMyMjc3ODVFN0ExOTAyNzFBNjI4RTI5RkZCOTM3 NEJFQ0E2MTE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXgzqIHwMTJlrA1cFg9OOoXNBJB4ynyW9di 6kOr1ZWZn5AtSQcT/TkhsSsItAeRdZtuK0o05Eap4QnEwmePnv5NBcoyniFs5N8E 9SrKKyLgpx3PD+woDr3a+COuJYiN8GXfSf8RyLBfNof6/7YHmVapwF+/CDTmx+cZ AEITPbFl1u3l+uEZeuOkhpt/J95lUfqdNMhayzTWz2E1QWftAaDro95UD+s32wbF UlaH3yZwXch5dvjS347WEHgIlMcmjJJQBIrFKl+K8UsdnLniS2ptWeFlN9bze/Ei skqoYIVb7r+APkTg1eZlFNR9WdYHK8QK37eG+7j1ayCqpIrvlQE= -----END CERTIFICATE-----Generated at Tue Jul 21 06:46:38 2026 by rpki-client