$ rpki-client -vvf rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft File: 09F1FCE71540608DD361D20037B585CA6313B714.mft (raw, json) Hash identifier: iQWkz/t9eR/rhEMhhp0BPj0lcsbanOz7rA6+S8WVP+c= Subject key identifier: 68:B8:8D:41:80:74:D1:66:DF:D8:B0:9C:6A:BC:5B:65:3F:D1:AD:33 Authority key identifier: 09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14 Certificate issuer: /CN=09F1FCE71540608DD361D20037B585CA6313B714 Certificate serial: 11609EFCF715BFB1D7B722C562487770C6048A5A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 19:15:11 +0000 Manifest this update: Mon 20 Jul 2026 19:10:11 +0000 Manifest next update: Tue 21 Jul 2026 21:27:11 +0000 Files and hashes: 1: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (hash: Tdrs/9MxQFRJ04JmOuNBrPQeJZxfkO1jdYAYtxuEviE=) 2: 323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (hash: lNRKhcmiZUAq3a5jFdaJmEqXMHj1lj+pscOEkjDxix0=) 3: 09F1FCE71540608DD361D20037B585CA6313B714.crl (hash: q9nFcgK6+724Tnt4oLTZ3rKW7ZiVsZDJ3DuX/ecl4QM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 21:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:60:9e:fc:f7:15:bf:b1:d7:b7:22:c5:62:48:77:70:c6:04:8a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F1FCE71540608DD361D20037B585CA6313B714 Validity Not Before: Jul 20 19:10:11 2026 GMT Not After : Jul 21 21:27:11 2026 GMT Subject: CN=68B88D418074D166DFD8B09C6ABC5B653FD1AD33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8d:ef:0a:cd:ed:e0:11:d4:3b:c4:b9:ff:6c: 6b:54:ff:12:62:4a:c6:ea:4b:42:50:04:83:5a:e0: 2f:ec:a0:7c:4a:ed:65:da:13:26:c1:9b:57:1d:4f: 1f:64:0f:c1:51:ea:d8:14:cd:3c:fa:28:04:99:b5: 55:63:0d:f4:64:ac:a4:05:b6:1d:fd:b6:99:42:08: 0c:d8:cd:c0:28:ca:b1:01:89:e1:00:47:3b:e3:f3: 87:0f:fd:43:50:f7:e6:9b:e2:25:6f:60:0a:f2:7c: 03:d7:49:b3:c1:1b:ad:09:30:ce:2e:bb:44:db:1f: fd:ae:52:40:8e:4e:07:47:e9:45:6d:63:8f:c7:a1: 2e:5f:4c:dc:40:1f:a3:53:24:75:d5:de:bd:80:91: 7d:0f:cc:a8:c1:e6:97:8a:cf:aa:19:1c:2e:3c:21: 95:43:a5:15:57:ea:75:ad:59:62:87:a8:51:5c:a0: 1e:41:94:ba:47:72:d9:b4:10:90:b7:b0:5c:06:ef: f5:69:ac:8c:b5:3f:ca:d1:d4:fb:8a:ec:90:a4:ee: 0d:ee:a1:8d:4c:93:fa:49:11:d2:83:51:d0:40:02: b5:36:47:18:72:f5:67:f3:ec:86:f8:5b:23:66:5d: 6c:2d:73:16:0d:05:5f:d3:2d:b1:be:04:2d:65:e6: 83:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B8:8D:41:80:74:D1:66:DF:D8:B0:9C:6A:BC:5B:65:3F:D1:AD:33 X509v3 Authority Key Identifier: keyid:09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:91:9f:5e:ed:31:33:01:98:de:d0:fe:ce:10:ad:9b:56:25: 89:22:29:22:b7:22:da:a8:21:8c:20:2a:bb:29:ca:4f:ab:e5: 67:08:d9:75:8c:b8:a3:63:4d:b6:d2:ee:2a:ef:df:e7:70:51: e5:81:80:d9:39:da:47:7b:b1:78:7f:0e:4b:36:a8:bb:c4:06: 23:b1:06:14:30:3b:09:82:7e:d1:89:4c:66:4f:61:34:6f:cc: 5e:a0:b0:83:0b:d4:bd:cd:a5:5c:44:99:f7:f5:2f:4c:13:00: 2e:d7:85:10:16:ca:02:37:0b:d2:b0:2d:b1:ec:05:bf:37:f9: 00:f7:c0:62:9a:5a:c7:9b:a7:a5:44:97:8b:37:7e:28:e7:6b: 55:ca:03:de:18:6c:07:85:26:51:ae:0c:f4:56:fe:97:3c:b4: 46:9c:cf:ce:bc:13:cb:2f:77:04:a7:6d:5f:6c:a4:f4:98:9d: 3f:7c:fd:76:e3:70:74:2c:64:67:b2:03:2c:43:10:83:0d:14: 52:ee:d7:ad:4b:90:1d:b3:5d:08:13:4b:0a:dc:cb:b5:27:7c: 0f:11:f4:e1:54:3e:e9:83:db:22:6d:3c:f3:60:1f:5b:05:1a: aa:a1:9b:87:b3:55:35:83:06:b4:0a:d1:b1:a0:37:db:c7:ca: 1c:ac:a4:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEWCe/PcVv7HXtyLFYkh3cMYEilowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMUZDRTcxNTQwNjA4REQzNjFEMjAwMzdCNTg1Q0E2 MzEzQjcxNDAeFw0yNjA3MjAxOTEwMTFaFw0yNjA3MjEyMTI3MTFaMDMxMTAvBgNV BAMTKDY4Qjg4RDQxODA3NEQxNjZERkQ4QjA5QzZBQkM1QjY1M0ZEMUFEMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUje8Kze3gEdQ7xLn/bGtU/xJi SsbqS0JQBINa4C/soHxK7WXaEybBm1cdTx9kD8FR6tgUzTz6KASZtVVjDfRkrKQF th39tplCCAzYzcAoyrEBieEARzvj84cP/UNQ9+ab4iVvYAryfAPXSbPBG60JMM4u u0TbH/2uUkCOTgdH6UVtY4/HoS5fTNxAH6NTJHXV3r2AkX0PzKjB5peKz6oZHC48 IZVDpRVX6nWtWWKHqFFcoB5BlLpHctm0EJC3sFwG7/VprIy1P8rR1PuK7JCk7g3u oY1Mk/pJEdKDUdBAArU2Rxhy9Wfz7Ib4WyNmXWwtcxYNBV/TLbG+BC1l5oMLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaLiNQYB00Wbf2LCcarxbZT/RrTMwHwYDVR0j BBgwFoAUCfH85xVAYI3TYdIAN7WFymMTtxQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU1YWE5M2QtNzg3Yi00YTE3LTg3ZDAtN2VmNDFiMGYyZGVmLzAvMDlGMUZDRTcx NTQwNjA4REQzNjFEMjAwMzdCNTg1Q0E2MzEzQjcxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOUYxRkNFNzE1NDA2MDhERDM2MUQyMDAzN0I1ODVDQTYzMTNC NzE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU1YWE5M2QtNzg3Yi00YTE3LTg3 ZDAtN2VmNDFiMGYyZGVmLzAvMDlGMUZDRTcxNTQwNjA4REQzNjFEMjAwMzdCNTg1 Q0E2MzEzQjcxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+Rn17tMTMBmN7Q/s4QrZtWJYkiKSK3Itqo IYwgKrspyk+r5WcI2XWMuKNjTbbS7irv3+dwUeWBgNk52kd7sXh/Dks2qLvEBiOx BhQwOwmCftGJTGZPYTRvzF6gsIML1L3NpVxEmff1L0wTAC7XhRAWygI3C9KwLbHs Bb83+QD3wGKaWsebp6VEl4s3fijna1XKA94YbAeFJlGuDPRW/pc8tEacz868E8sv dwSnbV9spPSYnT98/XbjcHQsZGeyAyxDEIMNFFLu161LkB2zXQgTSwrcy7UnfA8R 9OFUPumD2yJtPPNgH1sFGqqhm4ezVTWDBrQK0bGgN9vHyhyspKA= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:24 2026 by rpki-client