$ rpki-client -vvf rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft File: 9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft (raw, json) Hash identifier: lra2H+yKx4lh9QaLDeNVoZsW1CXXozXvsONv2Sen6f4= Subject key identifier: 3E:34:7B:B6:55:52:9F:AD:1F:5B:E9:3B:E5:5A:97:28:A0:EF:EF:D8 Authority key identifier: 9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C Certificate issuer: /CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Certificate serial: 61CA17B087D06C2C6A0E1453D6624CCDD66C6619 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft Manifest number: 61 Signing time: Sun 12 Jul 2026 20:34:39 +0000 Manifest this update: Sun 12 Jul 2026 20:29:39 +0000 Manifest next update: Mon 13 Jul 2026 21:21:39 +0000 Files and hashes: 1: 3230322e35372e32312e302f32342d3234203d3e20313431363733.roa (hash: 2uayKWV7qVJbZpJZiiGrPFO3R21PwEyriXpTW2MB4pQ=) 2: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (hash: C5EXjolwl07zRhpLr0tmhZ7KpZpGgWZO494eyJEQSqk=) 3: 9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl (hash: 82yOIc3hexZyKGM2nu8zQ+uLkuytJu1TQmWMfj/bBbc=) 4: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (hash: FVzH7nhWf9HlKEhd9diqlsZY20NWlRxKMpXnnJ7+h6Y=) 5: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (hash: 0uTllQF8wo+NL3Ts0DUiJLkGlZst9OmTPcws3XPvVM8=) 6: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (hash: o+t6IXXZJ4nVKh7Fjs01qIsZ6gI4rdJ87aU7Y1okiOU=) 7: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (hash: byBg5cGc6s1YP8fDSR7s5sO6wrvfj9UFsOHI5fDaKjw=) 8: 3230322e35372e32342e302f32332d3233203d3e20313430343639.roa (hash: d1pFnM2SYbSdXqGP4WVzR+cUntyYSCzP9FKk6VY+PFE=) 9: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (hash: tedUTTSe47lCMR7mgNFb3hX/nrYcz1gvH0zDmHz42Os=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 21:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ca:17:b0:87:d0:6c:2c:6a:0e:14:53:d6:62:4c:cd:d6:6c:66:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Validity Not Before: Jul 12 20:29:39 2026 GMT Not After : Jul 13 21:21:39 2026 GMT Subject: CN=3E347BB655529FAD1F5BE93BE55A9728A0EFEFD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:84:03:6b:69:eb:a4:36:5b:07:1a:80:d9:1a: 7e:15:f6:ba:82:a0:70:57:50:56:3d:c4:3c:80:17: 2a:64:01:00:f8:af:5a:39:32:3c:e5:a8:32:93:d1: 38:77:d8:b9:be:e4:9d:ad:a0:9f:d5:37:26:fa:80: b9:e1:b5:e6:45:17:c5:c2:6d:6c:7a:8b:e1:9a:42: 85:97:4f:fb:2b:67:0a:a2:77:bb:f5:88:77:5a:2e: 39:2f:58:43:d2:b8:15:77:66:c0:6b:ae:da:45:bd: 63:35:44:30:86:93:0f:e7:0a:39:f9:4f:6a:3e:01: 64:8f:d0:67:7f:fe:ad:12:9d:42:40:83:fd:c0:ab: 06:dd:68:bc:8e:d7:6a:6a:a5:d1:b3:a5:1e:e8:67: c8:f0:3d:bd:3e:f1:36:e7:12:0f:40:8b:ba:c4:62: 60:cc:c4:37:bd:5a:16:00:73:d8:0d:e8:29:cd:9d: 49:ca:3c:c5:e9:6b:78:ab:ac:0c:40:f3:85:05:56: 93:9f:d3:17:50:8c:20:09:ee:7a:78:72:15:69:f9: 2c:51:b0:0c:1e:41:e8:af:21:fd:49:2c:91:ec:fd: 86:7f:05:ec:55:6b:38:59:0f:43:98:54:f4:ff:41: f0:93:90:c9:49:e3:94:ac:a1:13:53:e0:cc:5a:76: 8a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:34:7B:B6:55:52:9F:AD:1F:5B:E9:3B:E5:5A:97:28:A0:EF:EF:D8 X509v3 Authority Key Identifier: keyid:9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:b4:c0:d9:c0:70:c6:02:51:9a:32:6a:02:c7:d6:b3:83:d4: 98:5a:0e:92:f2:70:17:7c:83:ef:14:ff:89:ba:6f:1f:50:25: aa:19:8c:bc:3f:6c:5f:6c:2d:c6:bf:04:d9:0a:8b:bd:63:6a: 2c:4c:7d:9a:80:10:0f:18:40:09:2a:07:d9:af:d8:f4:59:0b: ba:9b:49:60:33:a6:1e:35:75:31:4c:43:f2:17:64:65:6f:88: f8:30:24:28:96:d7:f6:eb:f6:15:ed:70:a8:4d:8d:37:a1:4f: 00:de:de:89:44:84:19:f7:39:a9:92:57:2a:4f:ce:c8:b9:c9: 30:87:75:b4:cb:dd:d7:ed:a7:b7:49:c3:6f:cd:a1:3d:5a:8d: 6a:65:bf:57:b5:67:8c:ce:20:c9:8f:c6:f2:3e:87:50:83:11: 90:91:ab:49:e4:68:a4:fb:03:e4:7f:04:db:63:b3:48:7a:f7: 43:04:a7:b7:ec:75:90:e4:72:71:d8:ce:71:26:9e:9a:19:82: 14:0a:7a:5a:42:b1:bc:0f:d9:fb:f7:10:d8:51:15:55:2f:96: 51:ab:f3:3a:4b:59:48:46:cf:1c:bd:a3:bf:af:fd:ec:d6:2d: 1e:46:6b:28:28:d3:2a:b2:58:71:bc:8c:80:20:66:b5:6d:47: ea:56:5d:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYcoXsIfQbCxqDhRT1mJMzdZsZhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURCOEM0NzIzRTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1 QzgyQ0Q5QzAeFw0yNjA3MTIyMDI5MzlaFw0yNjA3MTMyMTIxMzlaMDMxMTAvBgNV BAMTKDNFMzQ3QkI2NTU1MjlGQUQxRjVCRTkzQkU1NUE5NzI4QTBFRkVGRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVhANraeukNlsHGoDZGn4V9rqC oHBXUFY9xDyAFypkAQD4r1o5MjzlqDKT0Th32Lm+5J2toJ/VNyb6gLnhteZFF8XC bWx6i+GaQoWXT/srZwqid7v1iHdaLjkvWEPSuBV3ZsBrrtpFvWM1RDCGkw/nCjn5 T2o+AWSP0Gd//q0SnUJAg/3AqwbdaLyO12pqpdGzpR7oZ8jwPb0+8TbnEg9Ai7rE YmDMxDe9WhYAc9gN6CnNnUnKPMXpa3irrAxA84UFVpOf0xdQjCAJ7np4chVp+SxR sAweQeivIf1JLJHs/YZ/BexVazhZD0OYVPT/QfCTkMlJ45SsoRNT4Mxadoo1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPjR7tlVSn60fW+k75VqXKKDv79gwHwYDVR0j BBgwFoAUnbjEcj47/dATinkWqLsSxFyCzZwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGQzZjA5NWItNzEzMC00MTIyLWFmMjUtN2QyZTdhMTFiMWIxLzAvOURCOEM0NzIz RTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1QzgyQ0Q5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REI4QzQ3MjNFM0JGREQwMTM4QTc5MTZBOEJCMTJDNDVDODJD RDlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGQzZjA5NWItNzEzMC00MTIyLWFm MjUtN2QyZTdhMTFiMWIxLzAvOURCOEM0NzIzRTNCRkREMDEzOEE3OTE2QThCQjEy QzQ1QzgyQ0Q5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACS0wNnAcMYCUZoyagLH1rOD1JhaDpLycBd8 g+8U/4m6bx9QJaoZjLw/bF9sLca/BNkKi71jaixMfZqAEA8YQAkqB9mv2PRZC7qb SWAzph41dTFMQ/IXZGVviPgwJCiW1/br9hXtcKhNjTehTwDe3olEhBn3OamSVypP zsi5yTCHdbTL3dftp7dJw2/NoT1ajWplv1e1Z4zOIMmPxvI+h1CDEZCRq0nkaKT7 A+R/BNtjs0h690MEp7fsdZDkcnHYznEmnpoZghQKelpCsbwP2fv3ENhRFVUvllGr 8zpLWUhGzxy9o7+v/ezWLR5Gaygo0yqyWHG8jIAgZrVtR+pWXSw= -----END CERTIFICATE-----Generated at Mon Jul 13 13:51:29 2026 by rpki-client