$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.mft File: 09235F29310425E354121090269C1EB6089EB0B2.mft (raw, json) Hash identifier: 9MVYx5O0URSEdynIEa112IH9ERfLbw29+/zXESH2gjE= Subject key identifier: E6:97:6A:2A:D9:02:EB:D2:F2:16:F2:D7:27:AB:B5:6A:7C:73:52:7F Authority key identifier: 09:23:5F:29:31:04:25:E3:54:12:10:90:26:9C:1E:B6:08:9E:B0:B2 Certificate issuer: /CN=09235F29310425E354121090269C1EB6089EB0B2 Certificate serial: 67183F2B3BDB1F5EC9A4358DABAF8DE2DFDCA73E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09235F29310425E354121090269C1EB6089EB0B2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.mft Manifest number: 6A Signing time: Sun 19 Jul 2026 06:14:57 +0000 Manifest this update: Sun 19 Jul 2026 06:09:57 +0000 Manifest next update: Mon 20 Jul 2026 08:10:57 +0000 Files and hashes: 1: 09235F29310425E354121090269C1EB6089EB0B2.crl (hash: lePTsuoDQ55AryC2CKQt03RW3HH0323NABGiafSy3z4=) 2: 3130332e3139302e312e302f32342d3234203d3e20313439383930.roa (hash: i3i9YlBMluNIH3LVCAsoGfBIszmnZLknI4mpG8oNRww=) 3: 3130332e3139302e302e302f32342d3234203d3e20313439383930.roa (hash: 2INetKIyYbbWVRJzq04gwfCzimGA1viA/2dx8yz7FAA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.crl rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09235F29310425E354121090269C1EB6089EB0B2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 08:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:18:3f:2b:3b:db:1f:5e:c9:a4:35:8d:ab:af:8d:e2:df:dc:a7:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09235F29310425E354121090269C1EB6089EB0B2 Validity Not Before: Jul 19 06:09:57 2026 GMT Not After : Jul 20 08:10:57 2026 GMT Subject: CN=E6976A2AD902EBD2F216F2D727ABB56A7C73527F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a3:f1:81:b4:a9:5a:f6:e5:69:3f:d9:8f:26: 1c:49:76:7a:83:74:98:78:55:af:86:c7:61:4a:9f: f8:c9:5b:d5:55:70:39:0c:0d:e6:e1:9f:01:c2:82: 27:1d:9c:82:47:33:a8:2e:3f:40:4a:ce:31:73:cc: 27:b1:c1:b1:9b:41:ef:31:0e:7c:0f:fb:81:54:6b: 42:98:b7:f9:0f:7a:df:69:87:7d:cf:6f:f2:b5:d3: 25:67:03:07:05:23:15:7c:ca:92:a1:29:f0:bd:9e: f2:e1:b5:c4:34:32:bf:21:ff:08:de:fd:a0:d9:79: eb:32:d4:5b:49:ff:15:d0:36:95:b7:e4:8c:8e:38: 21:b1:b8:1b:bb:11:8d:c8:3a:3f:c4:ad:fd:5a:c3: 5d:0e:61:09:88:ca:c5:a2:1f:56:1b:e7:13:5e:e0: c2:ed:87:a2:f3:ed:f5:0b:6b:22:6d:25:60:3d:f0: f9:8b:eb:9e:ad:6a:8b:1a:66:a6:e5:41:3b:c0:9e: 64:c4:4e:a2:85:c2:3a:d5:8e:7b:9b:86:81:e2:91: 58:71:70:aa:b5:ea:3c:0a:b2:de:32:9d:c2:a9:ff: af:08:e8:83:ee:60:a5:e7:25:09:de:79:31:9b:8d: bc:28:60:f5:81:d0:4d:a6:e9:57:3f:1e:22:c3:06: 1f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:97:6A:2A:D9:02:EB:D2:F2:16:F2:D7:27:AB:B5:6A:7C:73:52:7F X509v3 Authority Key Identifier: keyid:09:23:5F:29:31:04:25:E3:54:12:10:90:26:9C:1E:B6:08:9E:B0:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09235F29310425E354121090269C1EB6089EB0B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:45:bc:3a:79:c2:65:12:b6:61:d2:2e:fb:a1:ed:b0:3a:2a: 1f:da:3f:53:bd:0f:67:ee:af:24:cc:fc:29:4e:75:73:ee:c7: 2f:fa:26:b0:48:30:b5:87:23:e8:12:2b:e0:64:73:a6:fc:3d: af:6e:5c:74:33:ab:ab:b1:57:a3:9c:a4:8d:e1:c4:53:b2:20: 47:8c:b9:6d:46:1b:21:99:9c:da:52:8d:0f:53:60:47:2c:94: b6:46:1a:5b:da:a7:24:65:95:cc:6d:ff:0c:65:33:9a:cb:f2: e7:56:34:58:3b:97:bf:1c:b5:ef:25:82:74:70:94:c4:bd:b8: be:31:ba:94:89:06:f9:49:42:b8:dc:c2:fd:15:83:09:ef:79: de:bf:f1:2b:21:2c:21:5c:df:1b:ae:ee:c2:f2:19:8c:0d:51: 13:7b:c0:88:01:df:f0:d1:55:fd:b3:89:7e:4f:34:c1:61:ac: ae:c1:51:4f:ef:fe:34:4d:74:66:d0:e1:77:fb:0c:e5:88:fb: 0b:6a:45:db:62:b9:da:66:a9:ac:42:3c:88:fa:1a:e6:67:fb: 87:a4:54:46:a0:5a:84:ac:97:bd:3e:25:1b:fd:bf:6a:cb:1c: 3c:6a:16:aa:fd:8c:56:a1:76:05:ed:72:8b:57:98:62:4e:12: 9d:32:6a:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZxg/KzvbH17JpDWNq6+N4t/cpz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkyMzVGMjkzMTA0MjVFMzU0MTIxMDkwMjY5QzFFQjYw ODlFQjBCMjAeFw0yNjA3MTkwNjA5NTdaFw0yNjA3MjAwODEwNTdaMDMxMTAvBgNV BAMTKEU2OTc2QTJBRDkwMkVCRDJGMjE2RjJENzI3QUJCNTZBN0M3MzUyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgo/GBtKla9uVpP9mPJhxJdnqD dJh4Va+Gx2FKn/jJW9VVcDkMDebhnwHCgicdnIJHM6guP0BKzjFzzCexwbGbQe8x DnwP+4FUa0KYt/kPet9ph33Pb/K10yVnAwcFIxV8ypKhKfC9nvLhtcQ0Mr8h/wje /aDZeesy1FtJ/xXQNpW35IyOOCGxuBu7EY3IOj/Erf1aw10OYQmIysWiH1Yb5xNe 4MLth6Lz7fULayJtJWA98PmL656taosaZqblQTvAnmTETqKFwjrVjnubhoHikVhx cKq16jwKst4yncKp/68I6IPuYKXnJQneeTGbjbwoYPWB0E2m6Vc/HiLDBh/3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5pdqKtkC69LyFvLXJ6u1anxzUn8wHwYDVR0j BBgwFoAUCSNfKTEEJeNUEhCQJpwetgiesLIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZkYWQ4Y2ItYTUzNy00YzUwLWFmNmEtYWFiYTVmMWU3NjQ0LzAvMDkyMzVGMjkz MTA0MjVFMzU0MTIxMDkwMjY5QzFFQjYwODlFQjBCMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTIzNUYyOTMxMDQyNUUzNTQxMjEwOTAyNjlDMUVCNjA4OUVC MEIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZkYWQ4Y2ItYTUzNy00YzUwLWFm NmEtYWFiYTVmMWU3NjQ0LzAvMDkyMzVGMjkzMTA0MjVFMzU0MTIxMDkwMjY5QzFF QjYwODlFQjBCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5FvDp5wmUStmHSLvuh7bA6Kh/aP1O9D2fu ryTM/ClOdXPuxy/6JrBIMLWHI+gSK+Bkc6b8Pa9uXHQzq6uxV6OcpI3hxFOyIEeM uW1GGyGZnNpSjQ9TYEcslLZGGlvapyRllcxt/wxlM5rL8udWNFg7l78cte8lgnRw lMS9uL4xupSJBvlJQrjcwv0Vgwnved6/8SshLCFc3xuu7sLyGYwNURN7wIgB3/DR Vf2ziX5PNMFhrK7BUU/v/jRNdGbQ4Xf7DOWI+wtqRdtiudpmqaxCPIj6GuZn+4ek VEagWoSsl70+JRv9v2rLHDxqFqr9jFahdgXtcotXmGJOEp0yanI= -----END CERTIFICATE-----Generated at Sun Jul 19 23:58:44 2026 by rpki-client