$ rpki-client -vvf rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft File: 9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft (raw, json) Hash identifier: nmCbqANu2I+uEkmgEpDaUn/2AVExea4cvnl7VGwwF+g= Subject key identifier: C1:87:AF:F8:CD:AF:1F:D5:FD:56:74:28:12:49:20:D2:C6:70:28:13 Authority key identifier: 9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C Certificate issuer: /CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Certificate serial: 6194C9D9BA36558836A7C18F017A14AF8FDFCF59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft Manifest number: 62 Signing time: Mon 13 Jul 2026 13:25:11 +0000 Manifest this update: Mon 13 Jul 2026 13:20:11 +0000 Manifest next update: Tue 14 Jul 2026 15:23:11 +0000 Files and hashes: 1: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (hash: FVzH7nhWf9HlKEhd9diqlsZY20NWlRxKMpXnnJ7+h6Y=) 2: 9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl (hash: hacsEFtKqsUXdpMTMj/wWNRfAY0uNiCw4JU2Ftg+j+U=) 3: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (hash: o+t6IXXZJ4nVKh7Fjs01qIsZ6gI4rdJ87aU7Y1okiOU=) 4: 3230322e35372e32342e302f32332d3233203d3e20313430343639.roa (hash: d1pFnM2SYbSdXqGP4WVzR+cUntyYSCzP9FKk6VY+PFE=) 5: 3230322e35372e32312e302f32342d3234203d3e20313431363733.roa (hash: 2uayKWV7qVJbZpJZiiGrPFO3R21PwEyriXpTW2MB4pQ=) 6: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (hash: C5EXjolwl07zRhpLr0tmhZ7KpZpGgWZO494eyJEQSqk=) 7: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (hash: 0uTllQF8wo+NL3Ts0DUiJLkGlZst9OmTPcws3XPvVM8=) 8: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (hash: tedUTTSe47lCMR7mgNFb3hX/nrYcz1gvH0zDmHz42Os=) 9: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (hash: byBg5cGc6s1YP8fDSR7s5sO6wrvfj9UFsOHI5fDaKjw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 05:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:94:c9:d9:ba:36:55:88:36:a7:c1:8f:01:7a:14:af:8f:df:cf:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Validity Not Before: Jul 13 13:20:11 2026 GMT Not After : Jul 14 15:23:11 2026 GMT Subject: CN=C187AFF8CDAF1FD5FD567428124920D2C6702813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:f5:51:be:6d:d6:5c:d7:25:a2:99:d2:36: 7c:be:38:88:e6:d5:f6:d9:66:bc:8f:68:20:26:5a: 0a:3a:30:09:7e:ae:f6:06:19:9e:5f:fb:7d:8a:ac: d4:f5:84:f3:c1:f2:62:02:55:71:18:15:04:39:14: 37:55:5b:b3:5e:17:71:a8:11:79:63:29:2a:03:47: 6d:52:2e:f4:c3:be:61:be:c3:6b:77:44:dd:c0:2b: 31:9a:51:21:8d:af:90:e1:f1:f5:ce:51:92:5a:59: d5:fb:d5:10:eb:20:16:c7:1a:e2:a3:12:62:07:68: 2f:f2:b6:57:e8:9c:53:63:16:9c:cf:0e:45:45:9a: 8f:c9:db:ab:8a:e6:43:cb:e8:a5:d3:44:7d:70:3f: 2b:6a:00:93:13:48:c8:a8:a9:ee:f5:cf:34:26:a9: ff:e9:f7:3c:5e:6b:7e:ec:8f:73:a2:7d:64:9a:a4: 25:6c:15:14:41:f4:75:df:6a:c6:d3:ff:12:95:eb: 87:47:95:b4:43:54:0d:c6:2a:d9:c9:cc:83:89:65: 02:06:c2:2f:23:81:1e:84:5c:bf:c4:fc:78:bd:9b: 05:73:27:c0:e0:c4:ad:95:0a:a8:64:8a:c6:df:80: 80:e5:5d:25:95:b8:ba:bf:0a:ff:67:15:89:99:41: 56:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:87:AF:F8:CD:AF:1F:D5:FD:56:74:28:12:49:20:D2:C6:70:28:13 X509v3 Authority Key Identifier: keyid:9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:db:75:3c:b9:16:ab:cb:c4:7e:52:b8:a2:ae:f4:c8:29:99: 80:f5:7d:b1:43:5a:da:3e:0b:f4:61:af:ad:2d:74:0e:c9:48: ae:76:ed:68:9e:e4:cb:64:44:c2:1b:a5:bd:7a:37:ee:75:d8: 55:d3:c4:a2:79:89:39:89:cb:f1:19:5f:7f:2e:87:e2:ef:e4: 49:9d:9d:a4:4b:1f:06:f9:e8:ff:43:c6:6d:d5:92:3a:e4:56: a1:fd:44:50:fe:0c:01:40:00:12:cc:83:55:c5:1a:d7:ae:a2: dc:a5:a9:46:12:1d:c1:6c:7c:54:bc:36:60:f2:3f:51:5a:0f: 8a:69:74:eb:33:b3:68:d6:64:6d:e5:12:55:88:dd:9e:c9:e6: 51:29:79:5f:f7:a2:62:06:ff:39:80:56:cb:47:bc:41:e7:10: 46:56:47:97:87:de:ff:5d:d1:72:2d:20:7b:ba:be:f8:c8:7d: ad:8d:7b:25:39:fe:5e:46:85:c9:b5:67:f5:ec:58:97:7d:35: 22:1c:81:cb:7d:d4:97:c9:4e:1e:db:61:78:ed:0f:31:4f:02: 30:5a:55:4c:22:16:5d:d2:00:00:67:7f:b9:3d:25:87:17:e1: ac:a2:07:80:21:05:2c:c1:19:a4:17:f5:87:9b:1b:95:91:b9: 1c:2a:4e:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYZTJ2bo2VYg2p8GPAXoUr4/fz1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURCOEM0NzIzRTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1 QzgyQ0Q5QzAeFw0yNjA3MTMxMzIwMTFaFw0yNjA3MTQxNTIzMTFaMDMxMTAvBgNV BAMTKEMxODdBRkY4Q0RBRjFGRDVGRDU2NzQyODEyNDkyMEQyQzY3MDI4MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+6/VRvm3WXNclopnSNny+OIjm 1fbZZryPaCAmWgo6MAl+rvYGGZ5f+32KrNT1hPPB8mICVXEYFQQ5FDdVW7NeF3Go EXljKSoDR21SLvTDvmG+w2t3RN3AKzGaUSGNr5Dh8fXOUZJaWdX71RDrIBbHGuKj EmIHaC/ytlfonFNjFpzPDkVFmo/J26uK5kPL6KXTRH1wPytqAJMTSMioqe71zzQm qf/p9zxea37sj3OifWSapCVsFRRB9HXfasbT/xKV64dHlbRDVA3GKtnJzIOJZQIG wi8jgR6EXL/E/Hi9mwVzJ8DgxK2VCqhkisbfgIDlXSWVuLq/Cv9nFYmZQVaTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwYev+M2vH9X9VnQoEkkg0sZwKBMwHwYDVR0j BBgwFoAUnbjEcj47/dATinkWqLsSxFyCzZwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGQzZjA5NWItNzEzMC00MTIyLWFmMjUtN2QyZTdhMTFiMWIxLzAvOURCOEM0NzIz RTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1QzgyQ0Q5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REI4QzQ3MjNFM0JGREQwMTM4QTc5MTZBOEJCMTJDNDVDODJD RDlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGQzZjA5NWItNzEzMC00MTIyLWFm MjUtN2QyZTdhMTFiMWIxLzAvOURCOEM0NzIzRTNCRkREMDEzOEE3OTE2QThCQjEy QzQ1QzgyQ0Q5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITbdTy5FqvLxH5SuKKu9MgpmYD1fbFDWto+ C/Rhr60tdA7JSK527Wie5MtkRMIbpb16N+512FXTxKJ5iTmJy/EZX38uh+Lv5Emd naRLHwb56P9Dxm3VkjrkVqH9RFD+DAFAABLMg1XFGteuotylqUYSHcFsfFS8NmDy P1FaD4ppdOszs2jWZG3lElWI3Z7J5lEpeV/3omIG/zmAVstHvEHnEEZWR5eH3v9d 0XItIHu6vvjIfa2NeyU5/l5Ghcm1Z/XsWJd9NSIcgct91JfJTh7bYXjtDzFPAjBa VUwiFl3SAABnf7k9JYcX4ayiB4AhBSzBGaQX9YebG5WRuRwqTjA= -----END CERTIFICATE-----Generated at Mon Jul 13 14:46:32 2026 by rpki-client