$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft File: 9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft (raw, json) Hash identifier: 2o2bBB0x+ump/xma9UOvtG2CUXOHTZbUOLoV3o/7Gy8= Subject key identifier: 71:7D:13:36:01:3B:70:78:D4:FA:20:52:63:C0:DC:3E:3D:E6:44:21 Authority key identifier: 9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13 Certificate issuer: /CN=9A347241E9DA18B0BB748E5558F85DFA6AD14F13 Certificate serial: 3FA9690748C98D4D160662154E5487D3E1355A1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 11:01:03 +0000 Manifest this update: Sun 02 Aug 2026 10:56:03 +0000 Manifest next update: Mon 03 Aug 2026 13:03:03 +0000 Files and hashes: 1: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: wInMUXHOP8RJI5eoz/+Dc4x331OyQaS/P4AI/7E+Chw=) 2: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: PjTS4Hn+0nQcRzsQo6Ms0LRYKKTZlFXIqpYw+ixRnkk=) 3: 9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl (hash: P5aShLJlADH3cA2RwetFHMX3gdpn8xGpWDjIJiWjv18=) 4: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: vdwdHoa0dxzBT4qxWDgRcyQiniSgsgBOI6Tm2dJ4lDY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a9:69:07:48:c9:8d:4d:16:06:62:15:4e:54:87:d3:e1:35:5a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A347241E9DA18B0BB748E5558F85DFA6AD14F13 Validity Not Before: Aug 2 10:56:03 2026 GMT Not After : Aug 3 13:03:03 2026 GMT Subject: CN=717D1336013B7078D4FA205263C0DC3E3DE64421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:66:5a:22:58:b9:c2:4d:8b:b4:91:6e:a8: c1:e9:4d:7f:fc:1a:dd:9f:96:18:b1:2d:39:fd:8a: 6e:50:82:f1:ee:a1:d1:34:48:fb:da:76:b3:96:40: 63:76:9f:f3:f2:8e:6a:58:92:bb:7f:53:c8:ed:e7: 94:79:1e:35:c1:0a:04:b7:0a:ec:94:f8:45:23:37: 98:f7:3c:59:87:93:7a:cc:ee:85:e6:a6:17:b8:49: c4:9c:93:dd:e5:c5:eb:ee:c3:28:94:f4:3d:6d:19: b2:23:ec:b6:8d:4d:b6:b8:8d:54:d8:0e:e0:df:89: c8:55:c4:55:94:79:2f:0c:1e:be:55:12:45:2a:12: 3f:79:b9:6e:d0:f9:49:53:cc:7e:cd:b2:e6:a2:7a: 0b:aa:e5:a9:2d:dd:77:2a:5b:df:41:15:93:07:d1: 4b:53:a4:f8:11:19:26:5d:b9:32:5d:f9:96:6e:aa: 81:84:bc:00:ec:db:6e:6c:6b:5d:63:0a:38:6d:09: 8d:bb:de:7a:96:ff:53:d7:c7:f3:29:f2:8b:4e:3a: 62:9d:83:76:3b:07:3c:52:b1:22:00:c4:7b:6b:51: 46:42:88:d4:cc:ac:a5:32:a0:92:45:2a:47:99:e6: 8e:3b:f5:3e:b1:81:66:27:07:fe:da:78:4f:6e:7e: 05:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7D:13:36:01:3B:70:78:D4:FA:20:52:63:C0:DC:3E:3D:E6:44:21 X509v3 Authority Key Identifier: keyid:9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:91:42:08:c2:85:f6:47:40:30:c7:50:20:36:85:f2:a8:75: cb:cc:98:50:12:5d:4b:f6:cf:a3:96:24:8b:e3:c7:ec:cd:dc: cc:48:cc:0b:e3:f8:54:c1:6f:f9:a5:16:ac:48:17:dd:c6:82: a0:44:50:14:0b:9c:6c:c9:eb:9b:b8:cd:a3:09:aa:5d:75:29: 58:09:2d:66:24:78:5c:01:7d:18:72:1f:16:5c:99:75:2f:e9: dc:6b:f1:f7:31:ae:90:ed:fc:87:dc:1d:be:19:0c:d2:ee:e9: 95:b9:63:14:85:ef:c7:44:e6:1f:38:d2:37:7f:86:c5:2b:5d: 1e:af:61:9d:46:9c:74:69:5f:cb:26:f0:df:da:5f:0e:29:ae: b0:ec:5d:c8:b9:eb:67:7a:65:9e:b0:c2:9b:e6:32:ad:19:59: 08:ce:58:db:bc:aa:0a:41:2e:e3:1e:5b:62:1f:91:e0:97:6a: 3d:e9:ca:ad:c7:ce:50:e6:e6:5c:3a:66:bd:09:34:95:1a:48: 86:24:dc:3a:b9:20:16:93:9d:ca:31:73:1a:97:ee:93:31:69: af:24:84:59:d2:39:e0:f2:b2:99:8d:c3:f0:4a:cf:b6:65:1a: f2:fe:02:91:63:cd:20:e4:a0:3e:b4:0f:70:c3:2a:8a:8e:9f: c3:94:90:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP6lpB0jJjU0WBmIVTlSH0+E1WhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEzNDcyNDFFOURBMThCMEJCNzQ4RTU1NThGODVERkE2 QUQxNEYxMzAeFw0yNjA4MDIxMDU2MDNaFw0yNjA4MDMxMzAzMDNaMDMxMTAvBgNV BAMTKDcxN0QxMzM2MDEzQjcwNzhENEZBMjA1MjYzQzBEQzNFM0RFNjQ0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyB2ZaIli5wk2LtJFuqMHpTX/8 Gt2flhixLTn9im5QgvHuodE0SPvadrOWQGN2n/PyjmpYkrt/U8jt55R5HjXBCgS3 CuyU+EUjN5j3PFmHk3rM7oXmphe4ScSck93lxevuwyiU9D1tGbIj7LaNTba4jVTY DuDfichVxFWUeS8MHr5VEkUqEj95uW7Q+UlTzH7Nsuaieguq5akt3XcqW99BFZMH 0UtTpPgRGSZduTJd+ZZuqoGEvADs225sa11jCjhtCY273nqW/1PXx/Mp8otOOmKd g3Y7BzxSsSIAxHtrUUZCiNTMrKUyoJJFKkeZ5o479T6xgWYnB/7aeE9ufgVjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcX0TNgE7cHjU+iBSY8DcPj3mRCEwHwYDVR0j BBgwFoAUmjRyQenaGLC7dI5VWPhd+mrRTxMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NkZDU3NzQtMzBkZC00YTAwLWIxYTktOWIxMjgyNjkzMGMyLzAvOUEzNDcyNDFF OURBMThCMEJCNzQ4RTU1NThGODVERkE2QUQxNEYxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTM0NzI0MUU5REExOEIwQkI3NDhFNTU1OEY4NURGQTZBRDE0 RjEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NkZDU3NzQtMzBkZC00YTAwLWIx YTktOWIxMjgyNjkzMGMyLzAvOUEzNDcyNDFFOURBMThCMEJCNzQ4RTU1NThGODVE RkE2QUQxNEYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCRQgjChfZHQDDHUCA2hfKodcvMmFASXUv2 z6OWJIvjx+zN3MxIzAvj+FTBb/mlFqxIF93GgqBEUBQLnGzJ65u4zaMJql11KVgJ LWYkeFwBfRhyHxZcmXUv6dxr8fcxrpDt/IfcHb4ZDNLu6ZW5YxSF78dE5h840jd/ hsUrXR6vYZ1GnHRpX8sm8N/aXw4prrDsXci562d6ZZ6wwpvmMq0ZWQjOWNu8qgpB LuMeW2IfkeCXaj3pyq3HzlDm5lw6Zr0JNJUaSIYk3Dq5IBaTncoxcxqX7pMxaa8k hFnSOeDyspmNw/BKz7ZlGvL+ApFjzSDkoD60D3DDKoqOn8OUkJQ= -----END CERTIFICATE-----Generated at Mon Aug 3 01:47:14 2026 by rpki-client