$ rpki-client -vvf rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft File: D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft (raw, json) Hash identifier: Ok13QGaO+NuBcbE6CXLUtODvUNZHv4mA7CfzdQ3ELkA= Subject key identifier: 9A:4E:04:13:89:C1:F7:B4:8F:E7:84:0C:AE:0C:96:30:C9:6F:9B:96 Authority key identifier: D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB Certificate issuer: /CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Certificate serial: 64B955F29300B9C2FF630FEC2F05052965249DFA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft Manifest number: 5F Signing time: Sun 12 Jul 2026 22:21:51 +0000 Manifest this update: Sun 12 Jul 2026 22:16:51 +0000 Manifest next update: Tue 14 Jul 2026 01:11:51 +0000 Files and hashes: 1: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: /Ank/NdhTyFolT1yr2gOxvp0mx0tj8KaBVOQP4gcAxk=) 2: D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl (hash: mCfr2w1+5SL5wOOWkK5RidRyqzuQo8i74ZJgiPjU6fs=) 3: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: byftjSeCvMFNmeFpkuYeG9YZa2VCV2p6nFeWhRr4XHM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 01:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:b9:55:f2:93:00:b9:c2:ff:63:0f:ec:2f:05:05:29:65:24:9d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Validity Not Before: Jul 12 22:16:51 2026 GMT Not After : Jul 14 01:11:51 2026 GMT Subject: CN=9A4E041389C1F7B48FE7840CAE0C9630C96F9B96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:55:ac:f4:fe:8b:f3:52:d3:99:e2:98:cb:fa: ad:3b:a8:7e:77:76:51:eb:b9:3b:9e:27:e2:4b:b5: 14:ef:59:4b:42:ff:e2:da:0b:21:0b:b6:dc:49:81: 4a:bf:b6:84:fd:7f:31:a8:c2:df:9e:05:8c:87:f3: f9:81:3f:fe:a6:37:b0:bd:b3:a7:78:a6:60:00:32: 8d:0a:2c:ee:44:ec:b7:60:2f:ce:84:6e:45:3e:67: 5b:8a:96:6f:27:e7:74:9b:39:79:48:c7:44:45:5f: 82:13:9b:28:37:89:34:93:5d:f3:f6:54:6b:c1:37: e2:ba:d5:f5:de:43:28:26:4f:07:7c:0c:2e:76:36: e1:a9:07:a9:a3:4c:d0:98:d6:6a:83:ff:01:19:3f: 6c:62:01:85:3f:4c:03:1f:c9:48:b6:1c:3d:7e:51: e3:1d:c0:63:04:4f:c5:f8:fa:44:d9:14:33:ab:9e: f8:80:55:d1:e6:53:6f:d0:53:81:55:88:56:88:4d: ae:db:c8:bd:ba:f2:68:f8:a9:94:8f:26:be:bb:05: 90:e6:c5:7a:75:14:a5:c7:8c:8a:b2:f2:a1:74:02: 08:33:e9:40:72:05:05:85:7b:62:0d:63:a5:6a:36: ea:85:1e:f5:af:21:a0:63:3d:82:78:63:ae:ca:8b: 8a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4E:04:13:89:C1:F7:B4:8F:E7:84:0C:AE:0C:96:30:C9:6F:9B:96 X509v3 Authority Key Identifier: keyid:D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:7f:0a:31:c6:e2:d9:b5:1e:1b:33:75:ca:fd:51:8c:8a:d3: 0d:26:08:5d:6d:ee:a9:47:48:e4:32:8e:91:55:53:de:ab:68: d1:90:9f:1d:3e:35:48:09:38:92:5e:f3:ff:34:76:da:af:49: 3d:2f:b9:13:5c:d4:f8:d1:b9:2a:d0:a1:ce:d9:20:9b:d7:0b: 5f:6a:aa:76:16:68:92:d4:2e:0f:3f:44:d6:bf:51:5c:db:bf: 7e:82:e6:12:90:fa:c5:54:69:8c:b5:03:4b:91:06:16:d5:93: 87:7b:cb:72:12:c6:df:60:91:a6:4c:60:26:7e:de:79:4d:47: 36:1f:98:ef:32:11:b9:4f:da:74:14:ad:82:5e:51:81:d7:de: 1f:c1:14:d3:b9:56:dc:f6:19:3a:9c:02:07:23:82:0e:7b:98: bf:6a:a1:14:27:f6:a9:ab:0f:e3:34:e3:63:8d:81:64:cd:35: ec:48:5f:69:0e:80:35:ea:2b:23:d4:74:00:75:ff:ac:ed:25: 7b:cb:76:8c:a0:05:12:78:95:4b:1d:01:e6:2b:23:8f:5f:79: 37:39:4b:eb:41:84:f6:89:5d:41:16:83:cd:bb:a9:45:03:c2: 02:97:5e:d7:d3:49:e9:dd:7b:50:f9:88:de:79:16:ba:25:53: ea:a8:ae:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZLlV8pMAucL/Yw/sLwUFKWUknfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFFRkIy MzE4NEZFQjAeFw0yNjA3MTIyMjE2NTFaFw0yNjA3MTQwMTExNTFaMDMxMTAvBgNV BAMTKDlBNEUwNDEzODlDMUY3QjQ4RkU3ODQwQ0FFMEM5NjMwQzk2RjlCOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPVaz0/ovzUtOZ4pjL+q07qH53 dlHruTueJ+JLtRTvWUtC/+LaCyELttxJgUq/toT9fzGowt+eBYyH8/mBP/6mN7C9 s6d4pmAAMo0KLO5E7LdgL86EbkU+Z1uKlm8n53SbOXlIx0RFX4ITmyg3iTSTXfP2 VGvBN+K61fXeQygmTwd8DC52NuGpB6mjTNCY1mqD/wEZP2xiAYU/TAMfyUi2HD1+ UeMdwGMET8X4+kTZFDOrnviAVdHmU2/QU4FViFaITa7byL268mj4qZSPJr67BZDm xXp1FKXHjIqy8qF0Aggz6UByBQWFe2INY6VqNuqFHvWvIaBjPYJ4Y67Ki4rdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmk4EE4nB97SP54QMrgyWMMlvm5YwHwYDVR0j BBgwFoAU036esvmOKc3xOGUzJmau+yMYT+swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJlNWZmODEtYjA4Mi00MzM0LWFkMjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJG OThFMjlDREYxMzg2NTMzMjY2NkFFRkIyMzE4NEZFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EMzdFOUVCMkY5OEUyOUNERjEzODY1MzMyNjY2QUVGQjIzMTg0 RkVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFF RkIyMzE4NEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGV/CjHG4tm1Hhszdcr9UYyK0w0mCF1t7qlH SOQyjpFVU96raNGQnx0+NUgJOJJe8/80dtqvST0vuRNc1PjRuSrQoc7ZIJvXC19q qnYWaJLULg8/RNa/UVzbv36C5hKQ+sVUaYy1A0uRBhbVk4d7y3ISxt9gkaZMYCZ+ 3nlNRzYfmO8yEblP2nQUrYJeUYHX3h/BFNO5Vtz2GTqcAgcjgg57mL9qoRQn9qmr D+M042ONgWTNNexIX2kOgDXqKyPUdAB1/6ztJXvLdoygBRJ4lUsdAeYrI49feTc5 S+tBhPaJXUEWg827qUUDwgKXXtfTSende1D5iN55FrolU+qormE= -----END CERTIFICATE-----Generated at Mon Jul 13 09:44:32 2026 by rpki-client