$ rpki-client -vvf rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft File: 9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft (raw, json) Hash identifier: IklhVDZfJgDM0dlBiprCihSwd4ByCPlz7T9Ew9g1VJU= Subject key identifier: 20:EE:33:57:14:9F:33:C5:40:4B:A7:05:5A:40:75:F7:0B:BD:B8:90 Authority key identifier: 9C:47:04:20:4D:F8:9C:A1:B4:1C:1A:06:44:39:95:B3:CC:E3:86:CB Certificate issuer: /CN=9C4704204DF89CA1B41C1A06443995B3CCE386CB Certificate serial: 79210A5FF1522C0A832827B3AA070B1762278E14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 20:36:36 +0000 Manifest this update: Tue 21 Jul 2026 20:31:36 +0000 Manifest next update: Wed 22 Jul 2026 21:19:36 +0000 Files and hashes: 1: AS23693.roa (hash: MYMD6pbt4sKz7OvRtkhiGBT2mMS6OgawmPYOhNxznnw=) 2: 9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl (hash: D3bqtblv1NceUoiSdlWyf0ZQYHUarX6YVQE8Er5tJhk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:21:0a:5f:f1:52:2c:0a:83:28:27:b3:aa:07:0b:17:62:27:8e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C4704204DF89CA1B41C1A06443995B3CCE386CB Validity Not Before: Jul 21 20:31:36 2026 GMT Not After : Jul 22 21:19:36 2026 GMT Subject: CN=20EE3357149F33C5404BA7055A4075F70BBDB890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5d:68:81:d8:f4:c9:42:00:fb:1c:3b:48:60: 02:ef:78:33:c0:3b:8c:23:db:ab:11:16:f5:7c:16: 84:99:c7:00:44:7f:a7:f3:bd:3a:64:d5:25:8c:6c: 36:d7:63:a2:07:62:a8:ec:69:9a:9b:a9:78:9a:14: 7b:02:57:ff:7a:ee:67:48:34:58:38:2e:b4:c0:08: c0:4b:0f:98:54:43:9a:60:27:6a:b5:7a:f3:eb:4e: d8:49:45:88:16:6d:00:6d:b2:85:96:18:a9:1f:77: a2:be:9d:60:b1:e6:56:f4:71:82:03:17:8b:be:0e: eb:90:e7:58:79:7f:6c:68:1c:2b:62:2c:d4:c4:2d: 66:50:8e:ab:71:b1:cc:f7:ef:20:ce:de:72:0a:38: 51:09:58:88:19:1a:34:4f:b7:65:b6:ab:aa:c9:c5: f1:64:eb:8b:79:24:af:43:ad:47:51:75:b2:50:a3: 64:ef:ed:7e:71:e8:1e:a6:11:f5:47:7e:c2:ac:a7: 88:4f:1b:b3:0c:ff:f3:5b:26:e5:5f:a5:17:00:68: 23:90:96:ce:87:eb:43:61:e8:de:e2:33:b1:72:b4: 8f:3d:a5:cb:45:1f:e8:17:53:b3:e2:8e:cc:8e:df: 70:91:20:95:ca:69:dd:da:eb:fe:39:e9:84:f7:7a: c6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EE:33:57:14:9F:33:C5:40:4B:A7:05:5A:40:75:F7:0B:BD:B8:90 X509v3 Authority Key Identifier: keyid:9C:47:04:20:4D:F8:9C:A1:B4:1C:1A:06:44:39:95:B3:CC:E3:86:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:fe:fb:7a:a6:1f:b6:ea:2c:c8:da:b5:39:98:80:1f:9f:b0: 36:be:25:42:c4:d2:82:47:84:78:d1:69:ea:92:2c:12:ec:9f: f6:67:ed:73:a5:10:e7:64:b1:6d:3c:32:39:92:8f:09:6c:e8: 0a:04:ad:5e:41:26:51:81:68:3f:03:f1:db:51:23:16:a3:41: 57:22:7d:7e:c6:69:bb:7c:93:22:e8:04:88:f9:4f:81:5e:8d: da:0c:e1:cd:a2:91:87:45:4d:75:76:b2:70:3e:bd:a5:9f:f4: 8a:c5:39:df:08:f8:70:ef:ed:09:93:07:b4:d3:fc:b2:5f:19: 6f:13:b5:7e:12:e5:8c:15:a0:52:c4:06:33:80:f0:be:63:fc: 88:ab:47:52:d0:35:0a:30:ef:eb:4c:ec:e5:b7:6e:11:d4:23: 1b:22:0b:78:68:2d:45:be:11:76:2f:06:f4:08:c5:e1:bf:81: c9:a4:1b:dc:6c:cb:9e:8c:65:26:94:d4:8c:b0:52:7e:5f:f3: 74:08:70:61:df:c1:f4:0e:d6:e1:14:1b:50:52:65:f8:ba:9d: 8d:eb:c0:b4:73:f7:a9:6f:3b:24:16:5f:23:b4:99:fa:6c:71: 5c:ca:ce:7d:74:e5:72:f8:c5:53:91:3e:9a:f2:df:02:60:ac: e3:33:0f:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeSEKX/FSLAqDKCezqgcLF2InjhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM0NzA0MjA0REY4OUNBMUI0MUMxQTA2NDQzOTk1QjND Q0UzODZDQjAeFw0yNjA3MjEyMDMxMzZaFw0yNjA3MjIyMTE5MzZaMDMxMTAvBgNV BAMTKDIwRUUzMzU3MTQ5RjMzQzU0MDRCQTcwNTVBNDA3NUY3MEJCREI4OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhXWiB2PTJQgD7HDtIYALveDPA O4wj26sRFvV8FoSZxwBEf6fzvTpk1SWMbDbXY6IHYqjsaZqbqXiaFHsCV/967mdI NFg4LrTACMBLD5hUQ5pgJ2q1evPrTthJRYgWbQBtsoWWGKkfd6K+nWCx5lb0cYID F4u+DuuQ51h5f2xoHCtiLNTELWZQjqtxscz37yDO3nIKOFEJWIgZGjRPt2W2q6rJ xfFk64t5JK9DrUdRdbJQo2Tv7X5x6B6mEfVHfsKsp4hPG7MM//NbJuVfpRcAaCOQ ls6H60Nh6N7iM7FytI89pctFH+gXU7PijsyO33CRIJXKad3a6/456YT3esafAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIO4zVxSfM8VAS6cFWkB19wu9uJAwHwYDVR0j BBgwFoAUnEcEIE34nKG0HBoGRDmVs8zjhsswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzMyOGYyNGUtZGM3Zi00NTYyLWE1MWQtZTJlMzhjMzY3N2QxLzAvOUM0NzA0MjA0 REY4OUNBMUI0MUMxQTA2NDQzOTk1QjNDQ0UzODZDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QzQ3MDQyMDRERjg5Q0ExQjQxQzFBMDY0NDM5OTVCM0NDRTM4 NkNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvOUM0NzA0MjA0REY4OUNBMUI0MUMxQTA2NDQzOTk1 QjNDQ0UzODZDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAL++3qmH7bqLMjatTmYgB+fsDa+JULE0oJH hHjRaeqSLBLsn/Zn7XOlEOdksW08MjmSjwls6AoErV5BJlGBaD8D8dtRIxajQVci fX7Gabt8kyLoBIj5T4FejdoM4c2ikYdFTXV2snA+vaWf9IrFOd8I+HDv7QmTB7TT /LJfGW8TtX4S5YwVoFLEBjOA8L5j/IirR1LQNQow7+tM7OW3bhHUIxsiC3hoLUW+ EXYvBvQIxeG/gcmkG9xsy56MZSaU1IywUn5f83QIcGHfwfQO1uEUG1BSZfi6nY3r wLRz96lvOyQWXyO0mfpscVzKzn105XL4xVORPpry3wJgrOMzD6Q= -----END CERTIFICATE-----Generated at Wed Jul 22 03:05:19 2026 by rpki-client