$ rpki-client -vvf rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft File: 9B2D9946FF043D1081C26FD38F0817310077BFC7.mft (raw, json) Hash identifier: TGU1vcIn17bHozEk0RuLTpjL0Ji8ZfFU5aNiz8+Vmuk= Subject key identifier: CF:74:DB:36:F3:37:11:C3:39:34:62:94:0D:A0:A8:1C:EA:5C:57:64 Authority key identifier: 9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7 Certificate issuer: /CN=9B2D9946FF043D1081C26FD38F0817310077BFC7 Certificate serial: 6A2A84B6966EC0264F7257E2E1DCBE36E7B352A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 08:27:57 +0000 Manifest this update: Sun 02 Aug 2026 08:22:57 +0000 Manifest next update: Mon 03 Aug 2026 10:45:57 +0000 Files and hashes: 1: 3136302e32322e39322e302f32342d3234203d3e20313532383335.roa (hash: oePR/73r7MSIzHQUks2lMsK7CVUF0CNaDFGyG/xqYVQ=) 2: 9B2D9946FF043D1081C26FD38F0817310077BFC7.crl (hash: u46CLwEJ0mIVNy5/Uk93xExO+3DnGgolJVLSOvMI3ko=) 3: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (hash: nWvsjEg3FhCbHhiH6HxunuDCxB9lgrvkKOpoSSa7E9Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.crl rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:2a:84:b6:96:6e:c0:26:4f:72:57:e2:e1:dc:be:36:e7:b3:52:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2D9946FF043D1081C26FD38F0817310077BFC7 Validity Not Before: Aug 2 08:22:57 2026 GMT Not After : Aug 3 10:45:57 2026 GMT Subject: CN=CF74DB36F33711C3393462940DA0A81CEA5C5764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fd:bf:06:e0:37:1a:81:e9:84:63:d8:ab:18: e4:df:a8:99:c8:78:db:3a:17:60:1a:ad:a9:a3:8d: bb:84:1c:c6:e4:48:36:2e:33:46:38:e9:b0:ad:62: 0f:c3:ca:c5:5f:32:42:a3:56:75:8c:86:eb:42:f0: 09:d6:44:57:e0:b5:02:91:b2:ea:96:92:d3:e1:cc: 8a:82:66:3e:4d:7d:a5:5f:ac:ef:f2:f6:6b:48:b8: a5:be:6b:f4:02:b2:56:06:5f:b4:f3:e0:a2:bb:36: dc:8c:d0:f6:ca:d7:bd:72:0a:63:6d:6c:74:31:99: 3f:82:92:5c:26:31:5b:65:72:48:fe:db:37:4b:cd: 72:23:f3:f8:78:72:87:4a:89:7f:3d:a7:9d:f6:35: 3e:de:8e:a4:0e:3b:95:42:0c:a0:c0:ec:59:00:42: 2b:9e:6e:a2:5b:41:0b:91:aa:6b:bf:0a:58:ce:51: 23:80:d5:5b:f0:e4:d1:f2:15:05:9c:fd:16:31:77: 6e:b9:66:ed:cf:cb:75:86:ec:33:3a:9d:ac:ed:ff: a6:42:40:76:60:25:34:2c:c2:2b:9e:a0:96:c9:3f: fa:b4:75:c1:40:4c:04:36:69:1e:01:8e:d7:28:ed: 11:ce:f1:e9:21:ae:f1:be:ac:7c:c4:a8:ab:21:fb: 71:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:74:DB:36:F3:37:11:C3:39:34:62:94:0D:A0:A8:1C:EA:5C:57:64 X509v3 Authority Key Identifier: keyid:9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d9:9c:d5:d2:69:c5:23:7f:15:8b:ff:ba:a3:71:0d:b1:1f: 22:ed:84:41:f5:56:3c:bb:ff:2e:68:02:d5:e5:ae:78:5c:de: 74:c9:d2:52:7d:26:19:ee:6f:89:84:18:94:cf:40:b0:6d:c6: de:fd:f1:d5:5f:25:48:ac:b0:4e:e8:86:19:30:6f:2b:df:70: 5a:2f:8b:15:e7:53:35:90:49:81:6b:90:f5:83:cc:e7:f3:ef: 8c:da:76:56:e2:43:26:36:a8:85:e4:c1:94:be:f4:ef:96:7d: 90:66:b8:dd:8f:d1:78:a3:cd:32:62:dc:d3:cc:ab:41:84:c2: ae:9f:1a:4d:6c:dc:8a:1f:fa:be:e7:ba:97:2f:0e:83:9b:49: 91:bd:06:16:e6:bc:06:fb:f6:2d:ae:f6:da:57:23:13:16:0f: ea:73:ee:2e:2a:8d:a6:8d:41:83:f0:b8:db:66:15:e6:56:66: 8a:bd:74:1c:37:e2:be:ec:04:b6:34:56:d0:9d:2a:8f:41:87: 3f:1b:6a:4d:7c:46:72:b0:d9:a3:6b:c0:16:0d:cb:17:ef:87: 04:c7:fe:31:95:c1:f4:05:14:8a:77:7a:04:a1:c4:bc:19:1d: 9d:a4:7b:91:2b:a7:a0:48:8f:0c:f0:31:40:45:11:e8:7e:a8: 92:89:58:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaiqEtpZuwCZPclfi4dy+NuezUqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyRDk5NDZGRjA0M0QxMDgxQzI2RkQzOEYwODE3MzEw MDc3QkZDNzAeFw0yNjA4MDIwODIyNTdaFw0yNjA4MDMxMDQ1NTdaMDMxMTAvBgNV BAMTKENGNzREQjM2RjMzNzExQzMzOTM0NjI5NDBEQTBBODFDRUE1QzU3NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn/b8G4DcagemEY9irGOTfqJnI eNs6F2AaramjjbuEHMbkSDYuM0Y46bCtYg/DysVfMkKjVnWMhutC8AnWRFfgtQKR suqWktPhzIqCZj5NfaVfrO/y9mtIuKW+a/QCslYGX7Tz4KK7NtyM0PbK171yCmNt bHQxmT+CklwmMVtlckj+2zdLzXIj8/h4codKiX89p532NT7ejqQOO5VCDKDA7FkA QiuebqJbQQuRqmu/CljOUSOA1Vvw5NHyFQWc/RYxd265Zu3Py3WG7DM6nazt/6ZC QHZgJTQswiueoJbJP/q0dcFATAQ2aR4Bjtco7RHO8ekhrvG+rHzEqKsh+3EfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz3TbNvM3EcM5NGKUDaCoHOpcV2QwHwYDVR0j BBgwFoAUmy2ZRv8EPRCBwm/TjwgXMQB3v8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJkMjliMzItM2EyOS00YTE0LWJjOWItYzc2YTAwN2NhMDMyLzAvOUIyRDk5NDZG RjA0M0QxMDgxQzI2RkQzOEYwODE3MzEwMDc3QkZDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85QjJEOTk0NkZGMDQzRDEwODFDMjZGRDM4RjA4MTczMTAwNzdC RkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJkMjliMzItM2EyOS00YTE0LWJj OWItYzc2YTAwN2NhMDMyLzAvOUIyRDk5NDZGRjA0M0QxMDgxQzI2RkQzOEYwODE3 MzEwMDc3QkZDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDZnNXSacUjfxWL/7qjcQ2xHyLthEH1Vjy7 /y5oAtXlrnhc3nTJ0lJ9Jhnub4mEGJTPQLBtxt798dVfJUissE7ohhkwbyvfcFov ixXnUzWQSYFrkPWDzOfz74zadlbiQyY2qIXkwZS+9O+WfZBmuN2P0XijzTJi3NPM q0GEwq6fGk1s3Iof+r7nupcvDoObSZG9BhbmvAb79i2u9tpXIxMWD+pz7i4qjaaN QYPwuNtmFeZWZoq9dBw34r7sBLY0VtCdKo9Bhz8bak18RnKw2aNrwBYNyxfvhwTH /jGVwfQFFIp3egShxLwZHZ2ke5Erp6BIjwzwMUBFEeh+qJKJWNQ= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:46 2026 by rpki-client