$ rpki-client -vvf rpki-rsync.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.mft File: 9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.mft (raw, json) Hash identifier: sXtLdbmrQ4hIHjYIp+CK+EBdfnIapL7+QzQJeG6WUUg= Subject key identifier: 97:67:BC:BD:B5:EC:FD:BC:4E:83:97:C7:F9:3F:16:7A:9A:FF:0C:8C Authority key identifier: 9F:30:C5:AE:BE:90:85:2C:1E:17:EB:C3:A3:3A:F7:4E:01:97:D1:81 Certificate issuer: /CN=9F30C5AEBE90852C1E17EBC3A33AF74E0197D181 Certificate serial: 6C1DE67A96892C244F1E6A9052CBD953A6467924 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 11:57:14 +0000 Manifest this update: Sun 02 Aug 2026 11:52:14 +0000 Manifest next update: Mon 03 Aug 2026 14:51:14 +0000 Files and hashes: 1: 3130332e36362e38362e302f32342d3234203d3e20313431313037.roa (hash: Z9sJU9Bq2tA48C6TWKXh5WIRjPN4rgYyPhziWn0DpPQ=) 2: 9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.crl (hash: kz8I4/1Pt4I33uCCnhbQ6sAO/bzEBOhQgrRc2KiL70c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.crl rsync://rpki-rsync.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:1d:e6:7a:96:89:2c:24:4f:1e:6a:90:52:cb:d9:53:a6:46:79:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F30C5AEBE90852C1E17EBC3A33AF74E0197D181 Validity Not Before: Aug 2 11:52:14 2026 GMT Not After : Aug 3 14:51:14 2026 GMT Subject: CN=9767BCBDB5ECFDBC4E8397C7F93F167A9AFF0C8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:76:ea:fb:d7:62:71:a8:5b:b5:00:0a:29: 37:26:f4:b2:93:63:05:d1:1c:bf:2b:97:2e:f9:83: 15:09:7e:65:0d:e4:a2:8f:cc:e3:29:10:e1:ef:c1: 59:1b:89:e8:03:b8:c3:0d:d8:41:61:54:a5:c8:12: b7:3e:88:cc:89:5b:d5:cc:a2:18:a3:ae:49:17:4e: 76:f2:27:98:42:da:d2:55:b8:74:19:96:79:d2:f7: 9c:ce:e8:a8:8a:8e:6f:41:5b:0b:15:9a:24:88:b7: 93:4c:6d:7d:5d:9f:ee:f9:b0:5c:30:d5:b4:13:aa: 1d:9a:7a:9b:f9:0f:03:23:56:d3:f0:88:f9:c6:32: 83:5f:05:f1:83:f1:a2:d1:db:20:1a:b7:3b:65:2f: ff:5d:2f:d6:65:12:f8:08:c6:ca:d4:af:89:30:80: 96:8e:29:18:8e:f0:da:52:26:51:98:64:ee:b4:f7: e3:0f:91:b4:f4:1e:21:60:1d:a1:94:b6:94:20:a9: fc:2c:b3:df:e0:b0:28:45:e6:b1:ad:01:63:c5:00: 98:9c:9c:46:82:45:55:e7:1d:4c:b7:ec:dd:74:08: a3:11:25:e4:04:7b:9d:c5:d7:cb:61:2a:ec:0c:19: db:f1:c1:a1:46:1d:50:a0:dc:23:76:ee:57:ae:51: 6e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:67:BC:BD:B5:EC:FD:BC:4E:83:97:C7:F9:3F:16:7A:9A:FF:0C:8C X509v3 Authority Key Identifier: keyid:9F:30:C5:AE:BE:90:85:2C:1E:17:EB:C3:A3:3A:F7:4E:01:97:D1:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:71:6e:7d:be:8a:6f:20:a1:eb:2e:19:6c:d8:6c:38:06:3f: f9:62:58:97:d6:04:ce:43:19:da:92:42:d7:7d:36:02:36:70: d3:58:0b:d3:ec:02:c1:ac:19:b9:34:38:5f:95:3d:93:fa:c8: 36:52:5e:fa:16:dd:b6:10:a4:3e:a0:c9:ea:2f:7d:0a:7a:b3: 73:c4:e2:be:a4:a2:91:5b:05:fd:76:7b:40:f9:36:b4:a5:fd: d6:40:08:bb:33:0b:e0:3e:17:a8:69:59:fd:43:6f:03:ed:1e: 81:5e:0a:81:ac:10:81:ef:53:64:e7:f9:3c:55:54:97:25:b6: 03:d3:e7:af:3b:5a:da:10:da:2f:46:ef:99:3c:3f:09:f7:55: ff:1e:66:23:2d:67:dd:b1:ac:d7:36:7a:ae:34:30:4a:ae:5e: d2:0c:b8:13:b4:4a:79:63:3f:cf:50:89:1f:52:b6:1f:89:2f: 89:ec:6a:82:d0:9a:e4:7d:21:fc:4c:72:1e:fc:de:fa:31:5b: 01:00:a3:53:14:3c:63:81:d1:f7:1b:89:94:90:60:0a:b2:95: 80:1f:c7:22:45:24:de:2d:39:11:43:68:76:5c:62:e4:1b:98: a6:4d:3d:b2:cc:3d:0c:fd:3f:dd:4b:93:2e:0c:47:a8:60:28: 38:0d:5a:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbB3mepaJLCRPHmqQUsvZU6ZGeSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYzMEM1QUVCRTkwODUyQzFFMTdFQkMzQTMzQUY3NEUw MTk3RDE4MTAeFw0yNjA4MDIxMTUyMTRaFw0yNjA4MDMxNDUxMTRaMDMxMTAvBgNV BAMTKDk3NjdCQ0JEQjVFQ0ZEQkM0RTgzOTdDN0Y5M0YxNjdBOUFGRjBDOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Y3bq+9dicahbtQAKKTcm9LKT YwXRHL8rly75gxUJfmUN5KKPzOMpEOHvwVkbiegDuMMN2EFhVKXIErc+iMyJW9XM ohijrkkXTnbyJ5hC2tJVuHQZlnnS95zO6KiKjm9BWwsVmiSIt5NMbX1dn+75sFww 1bQTqh2aepv5DwMjVtPwiPnGMoNfBfGD8aLR2yAatztlL/9dL9ZlEvgIxsrUr4kw gJaOKRiO8NpSJlGYZO609+MPkbT0HiFgHaGUtpQgqfwss9/gsChF5rGtAWPFAJic nEaCRVXnHUy37N10CKMRJeQEe53F18thKuwMGdvxwaFGHVCg3CN27leuUW4LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl2e8vbXs/bxOg5fH+T8Wepr/DIwwHwYDVR0j BBgwFoAUnzDFrr6QhSweF+vDozr3TgGX0YEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGZjYzJkNDQtOTQxOC00MDEzLTk3MjMtYTk3OGY4YmQ4YjZiLzAvOUYzMEM1QUVC RTkwODUyQzFFMTdFQkMzQTMzQUY3NEUwMTk3RDE4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjMwQzVBRUJFOTA4NTJDMUUxN0VCQzNBMzNBRjc0RTAxOTdE MTgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGZjYzJkNDQtOTQxOC00MDEzLTk3 MjMtYTk3OGY4YmQ4YjZiLzAvOUYzMEM1QUVCRTkwODUyQzFFMTdFQkMzQTMzQUY3 NEUwMTk3RDE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALdxbn2+im8goesuGWzYbDgGP/liWJfWBM5D GdqSQtd9NgI2cNNYC9PsAsGsGbk0OF+VPZP6yDZSXvoW3bYQpD6gyeovfQp6s3PE 4r6kopFbBf12e0D5NrSl/dZACLszC+A+F6hpWf1DbwPtHoFeCoGsEIHvU2Tn+TxV VJcltgPT5687WtoQ2i9G75k8Pwn3Vf8eZiMtZ92xrNc2eq40MEquXtIMuBO0Snlj P89QiR9Sth+JL4nsaoLQmuR9IfxMch783voxWwEAo1MUPGOB0fcbiZSQYAqylYAf xyJFJN4tORFDaHZcYuQbmKZNPbLMPQz9P91Lky4MR6hgKDgNWpw= -----END CERTIFICATE-----Generated at Sun Aug 2 15:50:37 2026 by rpki-client