$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft File: 9FA20A14AF60219662C9668DE75D25F0C8B84220.mft (raw, json) Hash identifier: 5/A4P1dRzOO2UGJ9SFC5kbi/kqZgkU4vEoPSS66y/OU= Subject key identifier: D9:12:B4:7C:5D:FF:A9:CE:47:DD:12:E8:9F:F8:4F:E5:9F:71:E0:DD Authority key identifier: 9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20 Certificate issuer: /CN=9FA20A14AF60219662C9668DE75D25F0C8B84220 Certificate serial: 63199C921E99B04B139BF6A0C97AB5B3D4054B16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft Manifest number: 92 Signing time: Wed 19 Aug 2026 07:20:16 +0000 Manifest this update: Wed 19 Aug 2026 07:15:16 +0000 Manifest next update: Thu 20 Aug 2026 09:36:16 +0000 Files and hashes: 1: 9FA20A14AF60219662C9668DE75D25F0C8B84220.crl (hash: fBmm/ITdtgp4aZvsIUPUa1/CCWWqeIVH0BS09mSWDw4=) 2: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: YS2T4alON/4lMEWof38ueY05KIoXFInJbn/EVbWzFdU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 09:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:19:9c:92:1e:99:b0:4b:13:9b:f6:a0:c9:7a:b5:b3:d4:05:4b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FA20A14AF60219662C9668DE75D25F0C8B84220 Validity Not Before: Aug 19 07:15:16 2026 GMT Not After : Aug 20 09:36:16 2026 GMT Subject: CN=D912B47C5DFFA9CE47DD12E89FF84FE59F71E0DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1d:53:74:55:5a:33:b6:28:ac:12:7c:1a:e1: 57:05:e1:34:5e:4e:8e:4c:5c:da:cf:32:08:c9:7c: b9:9e:b7:85:30:24:75:d4:94:b0:2a:3a:f5:d4:ff: 0c:e1:f4:68:00:64:71:50:60:25:73:92:39:4e:07: 8b:7a:59:ac:d0:fb:0a:3e:37:3e:80:6a:9d:7c:e6: 91:17:01:96:df:52:92:79:3d:9d:95:30:9a:e4:99: 3d:a8:15:65:10:5b:b4:fa:fa:d1:b8:41:65:74:4b: 42:d4:18:cc:c7:93:c6:14:c6:10:0b:c9:99:37:2f: 53:05:35:42:94:0f:a6:5e:36:ce:32:35:67:2b:17: d3:1b:70:bb:bd:91:3e:38:8f:1d:8c:31:6a:6c:35: 3a:ed:c4:20:e5:79:4b:d1:e8:3b:f0:0c:a8:47:11: 15:47:37:a4:8c:7a:79:2d:71:15:89:04:c1:96:f8: 0a:e5:37:f9:3a:b7:cf:bd:2b:04:49:60:13:5b:14: ff:bc:2c:a5:b7:bb:78:46:66:44:7a:4e:cd:21:f6: 23:3b:ea:9a:a0:89:5f:1a:7c:d5:25:28:fe:91:97: 48:2c:5c:94:46:c7:31:91:3e:57:65:b5:06:3f:3e: f5:8d:fe:7d:55:35:09:d9:7a:0f:05:15:af:4a:b7: b3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:12:B4:7C:5D:FF:A9:CE:47:DD:12:E8:9F:F8:4F:E5:9F:71:E0:DD X509v3 Authority Key Identifier: keyid:9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ce:ad:b1:f3:63:f1:33:f8:79:d4:00:e8:3d:87:45:80:07: aa:43:50:37:3a:7a:25:a7:58:62:26:ba:48:07:9f:95:fb:b5: bf:bc:49:15:7e:6f:37:79:04:6f:96:4a:d7:03:44:fa:0b:8d: 4d:b3:06:0c:5e:43:09:53:ee:6b:e2:29:7b:ee:81:f2:8a:2a: 51:9c:5b:97:99:52:8c:f7:d5:9e:ef:1b:4a:c5:35:1a:3b:2e: 76:22:e5:8c:d3:81:f8:74:b4:fd:7d:0d:96:a5:18:61:31:10: 68:0e:8c:8d:50:e4:d1:17:b4:6a:11:d5:fd:a6:f0:e2:3a:4a: 82:48:83:db:1a:a7:32:7d:19:ed:7f:82:3f:1e:1a:53:83:82: 2b:5d:0a:04:59:ef:ed:d4:5c:38:3a:cb:41:2d:8c:2a:02:62: cd:45:76:32:df:92:27:a8:d5:9b:f0:b2:32:70:ef:0a:23:2f: 70:7a:ec:8b:94:61:2d:7d:ed:a8:0e:55:ed:85:2d:d2:df:33: 3c:09:df:b6:84:1b:aa:55:78:d1:ef:9a:4e:93:e5:e7:66:89: 4d:14:74:38:5c:67:8c:a1:53:1a:33:d0:73:7a:8d:4b:41:fb: fa:e1:25:8e:6e:a2:38:17:5c:fc:fa:f5:4b:a6:ac:3c:d8:11: 2c:5f:d6:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYxmckh6ZsEsTm/agyXq1s9QFSxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBMjBBMTRBRjYwMjE5NjYyQzk2NjhERTc1RDI1RjBD OEI4NDIyMDAeFw0yNjA4MTkwNzE1MTZaFw0yNjA4MjAwOTM2MTZaMDMxMTAvBgNV BAMTKEQ5MTJCNDdDNURGRkE5Q0U0N0REMTJFODlGRjg0RkU1OUY3MUUwREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfHVN0VVoztiisEnwa4VcF4TRe To5MXNrPMgjJfLmet4UwJHXUlLAqOvXU/wzh9GgAZHFQYCVzkjlOB4t6WazQ+wo+ Nz6Aap185pEXAZbfUpJ5PZ2VMJrkmT2oFWUQW7T6+tG4QWV0S0LUGMzHk8YUxhAL yZk3L1MFNUKUD6ZeNs4yNWcrF9MbcLu9kT44jx2MMWpsNTrtxCDleUvR6DvwDKhH ERVHN6SMenktcRWJBMGW+ArlN/k6t8+9KwRJYBNbFP+8LKW3u3hGZkR6Ts0h9iM7 6pqgiV8afNUlKP6Rl0gsXJRGxzGRPldltQY/PvWN/n1VNQnZeg8FFa9Kt7OXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2RK0fF3/qc5H3RLon/hP5Z9x4N0wHwYDVR0j BBgwFoAUn6IKFK9gIZZiyWaN510l8Mi4QiAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzVlNTQ2OGMtMGFjNy00NGE5LTg4MjEtMjgyNTdjNWE4NjA3LzAvOUZBMjBBMTRB RjYwMjE5NjYyQzk2NjhERTc1RDI1RjBDOEI4NDIyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkEyMEExNEFGNjAyMTk2NjJDOTY2OERFNzVEMjVGMEM4Qjg0 MjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvOUZBMjBBMTRBRjYwMjE5NjYyQzk2NjhERTc1RDI1 RjBDOEI4NDIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/OrbHzY/Ez+HnUAOg9h0WAB6pDUDc6eiWn WGImukgHn5X7tb+8SRV+bzd5BG+WStcDRPoLjU2zBgxeQwlT7mviKXvugfKKKlGc W5eZUoz31Z7vG0rFNRo7LnYi5YzTgfh0tP19DZalGGExEGgOjI1Q5NEXtGoR1f2m 8OI6SoJIg9sapzJ9Ge1/gj8eGlODgitdCgRZ7+3UXDg6y0EtjCoCYs1FdjLfkieo 1ZvwsjJw7wojL3B67IuUYS197agOVe2FLdLfMzwJ37aEG6pVeNHvmk6T5edmiU0U dDhcZ4yhUxoz0HN6jUtB+/rhJY5uojgXXPz69UumrDzYESxf1h8= -----END CERTIFICATE-----Generated at Wed Aug 19 16:02:38 2026 by rpki-client