$ rpki-client -vvf rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft File: 9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft (raw, json) Hash identifier: X5RQGsE0rjf1JeGV7U6y5MyENpfXnE2sQ4b3CzB1IpQ= Subject key identifier: 79:5A:B7:7F:D0:76:A3:D9:F8:03:6A:EA:39:79:4B:5F:F2:76:D0:AC Authority key identifier: 9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F Certificate issuer: /CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F Certificate serial: 529C1546702F5FF001CE440869DB863316E4B6AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft Manifest number: 74 Signing time: Mon 27 Jul 2026 10:00:20 +0000 Manifest this update: Mon 27 Jul 2026 09:55:20 +0000 Manifest next update: Tue 28 Jul 2026 13:29:20 +0000 Files and hashes: 1: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: q/9H11WTYoKvscn357helrrghEhYAd3OjlCKI1SD+L4=) 2: 9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl (hash: QraSk5tDr9P8/f59g1+B33Tt/2hc2kHfIyGumii8bsc=) 3: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: iowBD0aCpON/4cxOj5FQqoJWjlXtvZSA6Ncm7S12+nI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:9c:15:46:70:2f:5f:f0:01:ce:44:08:69:db:86:33:16:e4:b6:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F Validity Not Before: Jul 27 09:55:20 2026 GMT Not After : Jul 28 13:29:20 2026 GMT Subject: CN=795AB77FD076A3D9F8036AEA39794B5FF276D0AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:77:9f:6b:5a:d9:ed:d9:be:b7:ae:fa:8c:ec: 4e:1e:ec:58:ce:6b:8d:35:4a:c2:38:7a:1f:72:54: 34:07:a2:bc:95:1d:bf:43:3c:ab:f6:68:9b:f6:3a: f0:c3:4b:02:39:02:c6:ae:60:be:9b:34:7b:7c:af: 60:63:d0:db:d8:87:da:b2:2d:2f:c7:ce:cf:d6:76: a9:9e:a2:bd:00:3b:8d:c4:86:24:b8:0c:d7:ca:ef: 6e:61:99:97:9c:4a:f9:69:51:6b:1d:1a:11:c3:5b: 61:02:af:bc:fb:65:0b:bd:83:29:dc:e0:26:d6:30: a6:32:9b:82:95:e1:11:ec:4f:18:48:fe:07:07:36: 05:ba:be:6d:91:90:6e:ef:4d:fd:57:7c:4b:5f:7b: cf:6a:75:ef:cc:17:9e:42:f7:8d:4f:22:38:16:60: 94:8f:c7:c3:43:d0:38:39:6b:f1:3a:e5:91:25:d0: 60:97:0e:c8:28:22:de:f1:97:ef:26:eb:f6:8c:0c: 20:dc:6c:3e:fc:01:83:12:43:fd:ab:06:52:ea:2c: ee:ac:af:49:cd:5e:c2:f8:9a:10:ac:9e:e7:fa:7c: 91:c4:28:09:14:7d:f9:ff:5b:4b:7e:85:4c:7b:73: 70:8a:d1:f3:e6:bc:98:17:2f:7d:fe:d1:dd:6d:6b: 1b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5A:B7:7F:D0:76:A3:D9:F8:03:6A:EA:39:79:4B:5F:F2:76:D0:AC X509v3 Authority Key Identifier: keyid:9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5d:f0:cb:e5:de:6f:77:c2:90:b4:f0:f0:6c:9d:09:9b:e4: 80:e2:55:c2:61:a8:47:b5:46:e5:8a:7e:98:3c:f8:ee:e9:f7: 5c:63:ae:16:a5:a6:36:13:18:bd:68:54:61:37:b6:7c:f2:89: 28:26:66:c1:ba:86:5d:38:cf:5f:1b:1f:84:6f:33:8d:a9:30: 96:39:c8:87:bc:09:86:41:43:95:7a:39:97:2a:1a:3f:17:bd: 0d:cb:d0:4d:89:30:47:35:5c:0e:2f:46:f1:58:23:e8:6e:4d: 4e:86:a8:ba:4c:8a:92:22:b1:21:67:f7:a6:11:2e:2c:31:3e: cb:df:8f:fb:ca:ab:c5:27:f9:92:2a:7c:c8:62:64:f4:b3:4c: fe:bc:8d:cb:48:1f:ef:68:6b:41:bf:cd:92:1e:4c:4c:06:48: aa:b4:cb:46:a4:8d:af:f6:76:3f:87:e1:ec:95:34:c7:02:52: 88:a4:8a:1f:4f:a0:d8:fc:6b:77:f7:fc:fe:97:34:77:64:1a: 56:a5:54:b8:23:4d:c6:67:ff:d7:69:75:ff:4f:0b:f2:bf:73: 96:7a:0c:72:5a:da:18:75:f4:91:7f:4b:44:44:42:87:61:f9: 43:ba:0a:f6:b1:3b:3f:8d:d5:29:63:64:34:df:2e:d6:83:37: 79:47:30:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUpwVRnAvX/ABzkQIaduGMxbktqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJDRjI2MUYxRUVCRDBBOTYxNDg3NjFGQTJFOThFOTNG QkFGQjA2RjAeFw0yNjA3MjcwOTU1MjBaFw0yNjA3MjgxMzI5MjBaMDMxMTAvBgNV BAMTKDc5NUFCNzdGRDA3NkEzRDlGODAzNkFFQTM5Nzk0QjVGRjI3NkQwQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCd59rWtnt2b63rvqM7E4e7FjO a401SsI4eh9yVDQHoryVHb9DPKv2aJv2OvDDSwI5AsauYL6bNHt8r2Bj0NvYh9qy LS/Hzs/Wdqmeor0AO43EhiS4DNfK725hmZecSvlpUWsdGhHDW2ECr7z7ZQu9gync 4CbWMKYym4KV4RHsTxhI/gcHNgW6vm2RkG7vTf1XfEtfe89qde/MF55C941PIjgW YJSPx8ND0Dg5a/E65ZEl0GCXDsgoIt7xl+8m6/aMDCDcbD78AYMSQ/2rBlLqLO6s r0nNXsL4mhCsnuf6fJHEKAkUffn/W0t+hUx7c3CK0fPmvJgXL33+0d1taxupAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeVq3f9B2o9n4A2rqOXlLX/J20KwwHwYDVR0j BBgwFoAUm88mHx7r0KlhSHYfoumOk/uvsG8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIzNGVmMWQtNzM0ZC00YzcxLThiYTctZDMxZTE2OGI2MzJjLzAvOUJDRjI2MUYx RUVCRDBBOTYxNDg3NjFGQTJFOThFOTNGQkFGQjA2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkNGMjYxRjFFRUJEMEE5NjE0ODc2MUZBMkU5OEU5M0ZCQUZC MDZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvOUJDRjI2MUYxRUVCRDBBOTYxNDg3NjFGQTJFOThF OTNGQkFGQjA2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtd8Mvl3m93wpC08PBsnQmb5IDiVcJhqEe1 RuWKfpg8+O7p91xjrhalpjYTGL1oVGE3tnzyiSgmZsG6hl04z18bH4RvM42pMJY5 yIe8CYZBQ5V6OZcqGj8XvQ3L0E2JMEc1XA4vRvFYI+huTU6GqLpMipIisSFn96YR LiwxPsvfj/vKq8Un+ZIqfMhiZPSzTP68jctIH+9oa0G/zZIeTEwGSKq0y0akja/2 dj+H4eyVNMcCUoikih9PoNj8a3f3/P6XNHdkGlalVLgjTcZn/9dpdf9PC/K/c5Z6 DHJa2hh19JF/S0REQodh+UO6CvaxOz+N1SljZDTfLtaDN3lHMAc= -----END CERTIFICATE-----Generated at Mon Jul 27 18:59:52 2026 by rpki-client