$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft File: 9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft (raw, json) Hash identifier: CKrMTTv30EqWBesDwEqv4ICcLVCBM3qfjfFxKbIrlLk= Subject key identifier: 97:9B:78:83:DD:AB:CF:31:16:8A:BD:11:A9:CA:9B:6E:5A:9E:1E:ED Authority key identifier: 9D:68:AC:E3:A8:F4:CD:6B:9B:D7:AB:C6:95:E6:A2:16:24:B1:C5:6C Certificate issuer: /CN=9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C Certificate serial: 6A5104A7D6CFCE91EDFBEC4ECE86C9F67CBD8580 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 18:19:13 +0000 Manifest this update: Mon 20 Jul 2026 18:14:13 +0000 Manifest next update: Tue 21 Jul 2026 19:08:13 +0000 Files and hashes: 1: 9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.crl (hash: srcD3aP0glO/N3G8AcT5/iJMbfUSjm5Ol85SYmVUM68=) 2: 3130332e3136302e3133362e302f32342d3234203d3e20313431353838.roa (hash: xiHN/v3vXzzSYuBqvcK2Zxp9gL/Vai3nTROredoBVU8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.crl rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:51:04:a7:d6:cf:ce:91:ed:fb:ec:4e:ce:86:c9:f6:7c:bd:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C Validity Not Before: Jul 20 18:14:13 2026 GMT Not After : Jul 21 19:08:13 2026 GMT Subject: CN=979B7883DDABCF31168ABD11A9CA9B6E5A9E1EED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fe:6e:9a:a9:ce:68:ea:6d:fc:e5:e2:b3:2a: 3a:54:d7:fc:58:42:a1:0a:25:c1:30:99:f8:d1:76: 75:ed:2e:c6:dc:24:03:82:d0:e9:c5:a1:bf:3e:71: e9:15:c4:b0:df:c8:e1:de:99:d2:3a:f8:4b:d1:05: 16:35:a6:40:0f:1e:f7:1a:d2:63:27:26:f4:59:09: 8f:69:1e:5a:25:74:1b:2e:72:0f:f2:85:39:44:89: 12:e0:12:f7:8a:04:02:11:59:98:12:6a:6d:ae:9a: 85:34:91:46:98:04:a2:38:c4:e7:b4:52:1a:3d:9c: 54:e8:59:1c:06:dd:26:f6:ac:c9:b2:23:82:0e:d0: 54:6b:4f:e4:f4:e0:34:07:f3:50:0d:4e:04:ad:cb: f0:06:cc:fc:4d:fe:07:2f:93:9e:6c:65:47:3d:d6: c4:d0:a6:83:5f:c0:61:52:3d:9a:81:b3:02:32:ad: 92:f8:1b:0f:d2:22:1e:fa:20:0c:5a:60:b7:d9:6c: cb:fb:28:69:2f:16:53:37:c1:ad:5d:ff:42:89:2a: 70:65:4a:be:4d:76:f2:8c:71:6c:f3:a1:cb:0b:76: 92:c9:54:51:a4:d8:92:95:54:20:41:d1:78:d8:99: 96:a5:8b:01:8d:eb:9e:41:c4:0d:ef:f4:0c:66:c9: 5c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9B:78:83:DD:AB:CF:31:16:8A:BD:11:A9:CA:9B:6E:5A:9E:1E:ED X509v3 Authority Key Identifier: keyid:9D:68:AC:E3:A8:F4:CD:6B:9B:D7:AB:C6:95:E6:A2:16:24:B1:C5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:0a:d7:f4:ee:83:f5:9d:e8:7c:cf:d2:a7:d8:f2:3a:47:f5: 28:24:72:2c:47:6e:7b:08:b7:14:6e:5b:8a:71:ee:e1:3a:b7: 1e:27:6c:15:87:28:f0:7d:c9:c2:b4:1d:0a:b6:4e:bc:9a:28: 0d:91:48:0f:55:90:fe:13:73:8b:45:8b:37:3d:3c:91:12:47: 11:bd:cb:a7:34:4a:f0:6c:86:cb:65:4d:d3:ba:9d:df:b1:46: 16:7a:37:a7:a0:2a:a7:bf:b7:da:aa:16:94:32:c4:50:db:41: 0c:4d:f3:86:79:b8:33:af:29:18:8c:9a:95:66:07:1d:21:bd: 96:be:78:8d:da:54:ab:b5:8b:64:9f:b0:15:a3:00:ae:25:09: 03:da:6a:ee:16:d2:d5:70:46:56:ba:f3:00:10:1a:f8:99:ce: dc:77:6f:b2:0b:57:07:1a:9f:8b:c0:c1:eb:17:85:4d:8e:5e: a3:09:93:bb:6a:ab:f3:4a:c5:20:f3:fb:a3:85:7d:d9:03:b5: 32:8b:0e:7e:19:fb:76:76:18:68:ad:e2:1d:16:f1:21:42:ab: 7a:96:88:d4:63:70:77:9b:37:bf:04:e3:68:6c:54:6d:fc:ca: 1e:f8:72:84:e2:c6:61:52:83:24:9a:72:33:53:ca:a4:19:1b: e9:41:a1:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUalEEp9bPzpHt++xOzobJ9ny9hYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ2OEFDRTNBOEY0Q0Q2QjlCRDdBQkM2OTVFNkEyMTYy NEIxQzU2QzAeFw0yNjA3MjAxODE0MTNaFw0yNjA3MjExOTA4MTNaMDMxMTAvBgNV BAMTKDk3OUI3ODgzRERBQkNGMzExNjhBQkQxMUE5Q0E5QjZFNUE5RTFFRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/m6aqc5o6m385eKzKjpU1/xY QqEKJcEwmfjRdnXtLsbcJAOC0OnFob8+cekVxLDfyOHemdI6+EvRBRY1pkAPHvca 0mMnJvRZCY9pHloldBsucg/yhTlEiRLgEveKBAIRWZgSam2umoU0kUaYBKI4xOe0 Uho9nFToWRwG3Sb2rMmyI4IO0FRrT+T04DQH81ANTgSty/AGzPxN/gcvk55sZUc9 1sTQpoNfwGFSPZqBswIyrZL4Gw/SIh76IAxaYLfZbMv7KGkvFlM3wa1d/0KJKnBl Sr5NdvKMcWzzocsLdpLJVFGk2JKVVCBB0XjYmZaliwGN655BxA3v9AxmyVzLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl5t4g92rzzEWir0RqcqbblqeHu0wHwYDVR0j BBgwFoAUnWis46j0zWub16vGleaiFiSxxWwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFlZWQwOWMtNjA2OC00MDdhLWIwYTYtNTliN2QwYjg3ODU1LzAvOUQ2OEFDRTNB OEY0Q0Q2QjlCRDdBQkM2OTVFNkEyMTYyNEIxQzU2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDY4QUNFM0E4RjRDRDZCOUJEN0FCQzY5NUU2QTIxNjI0QjFD NTZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFlZWQwOWMtNjA2OC00MDdhLWIw YTYtNTliN2QwYjg3ODU1LzAvOUQ2OEFDRTNBOEY0Q0Q2QjlCRDdBQkM2OTVFNkEy MTYyNEIxQzU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwK1/Tug/Wd6HzP0qfY8jpH9SgkcixHbnsI txRuW4px7uE6tx4nbBWHKPB9ycK0HQq2TryaKA2RSA9VkP4Tc4tFizc9PJESRxG9 y6c0SvBshstlTdO6nd+xRhZ6N6egKqe/t9qqFpQyxFDbQQxN84Z5uDOvKRiMmpVm Bx0hvZa+eI3aVKu1i2SfsBWjAK4lCQPaau4W0tVwRla68wAQGviZztx3b7ILVwca n4vAwesXhU2OXqMJk7tqq/NKxSDz+6OFfdkDtTKLDn4Z+3Z2GGit4h0W8SFCq3qW iNRjcHebN78E42hsVG38yh74coTixmFSgySacjNTyqQZG+lBoRI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:59:09 2026 by rpki-client