$ rpki-client -vvf rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft File: D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft (raw, json) Hash identifier: QwAwTkiN7e1a1gj4tO7KA6WoRUO4tlMW3DqQBfb9qlY= Subject key identifier: 88:F8:A0:08:59:4B:B9:A2:A4:34:A2:D4:28:42:D9:FE:F3:5A:D8:94 Authority key identifier: D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6 Certificate issuer: /CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6 Certificate serial: 1D12C6F10D78AA27DF0CCB127E6B2869831692A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 05:23:59 +0000 Manifest this update: Sun 02 Aug 2026 05:18:59 +0000 Manifest next update: Mon 03 Aug 2026 09:03:59 +0000 Files and hashes: 1: D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl (hash: E+h6gZ7m761lZNyWA2HBy7g2jfz4gxRqwaVqSthMHTE=) 2: 3136302e32322e3133372e302f32342d3234203d3e20313532383131.roa (hash: UJBNMpcsHaasyvcJ4Sq3J89ZHMIFKcGiQvcCBcd8DHY=) 3: 3136302e32322e3133362e302f32342d3234203d3e20313532383131.roa (hash: mzkKba2j66n6wraFNQYRS+UC4ztp7C2s0dllCrbur4g=) 4: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: e4bsRLScbecV3EUW42ypNee+dC4atMUS4ULfB5R1TMs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:12:c6:f1:0d:78:aa:27:df:0c:cb:12:7e:6b:28:69:83:16:92:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6 Validity Not Before: Aug 2 05:18:59 2026 GMT Not After : Aug 3 09:03:59 2026 GMT Subject: CN=88F8A008594BB9A2A434A2D42842D9FEF35AD894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:37:fb:d6:cd:44:2d:8b:e8:bd:42:e2:d2:4f: 86:c5:08:70:de:e1:45:b1:e1:f6:5c:ea:61:0e:5e: b1:b1:1b:f2:21:29:cf:c2:dd:bd:4e:40:ac:46:9e: af:11:de:bc:c9:e5:2c:40:73:ff:fa:7a:9e:4a:fc: a1:84:24:8e:83:e1:16:3d:20:8a:80:0b:8f:43:ee: f7:8d:6b:33:47:8c:25:b0:81:57:68:7f:40:ad:33: fb:af:60:b3:2f:24:f6:9b:77:85:7b:b5:55:60:bc: 90:ca:e0:b2:75:11:dd:05:a1:90:79:30:93:32:8d: 6d:36:7c:20:92:d5:11:91:4b:59:a0:03:39:9b:e7: 24:8e:07:82:13:d0:9d:af:23:84:10:6d:02:25:69: ff:ec:9e:db:17:0a:1b:de:f9:80:a3:06:75:c2:ad: 23:45:8a:50:43:6c:e6:e8:ea:a1:63:84:59:d3:e1: 4c:8c:7a:9d:4e:83:c7:9f:56:cb:5b:45:a3:8c:0f: dd:72:af:b8:ec:28:ae:c9:a8:34:5a:42:fd:94:69: b3:28:c5:86:ac:75:7b:0e:67:f1:ed:7c:08:a0:11: 67:df:16:1b:db:1a:c4:da:f5:00:ba:39:84:68:ee: 51:25:31:f0:39:9b:3e:64:9a:b0:e7:38:ad:be:74: 49:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F8:A0:08:59:4B:B9:A2:A4:34:A2:D4:28:42:D9:FE:F3:5A:D8:94 X509v3 Authority Key Identifier: keyid:D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:22:7a:22:45:52:51:92:11:d7:33:05:21:2b:2b:01:80:09: 7d:5a:16:91:43:20:25:9b:97:bc:5b:a4:ac:e5:65:aa:97:54: 3c:af:56:f7:14:95:9e:a2:2c:82:74:cf:7b:82:40:1a:6c:62: 15:3c:a4:ab:9a:e5:e6:ed:7b:0b:25:d2:a4:39:98:68:cc:1d: 52:a4:11:23:c4:1f:9a:b4:7d:5b:28:92:ad:48:6a:62:62:0c: 58:85:89:2f:73:f2:3a:fa:8a:5f:ee:f7:77:83:f4:e3:ba:45: 7f:ac:ba:a5:ab:8f:4d:79:5b:a4:07:45:36:cb:cc:c3:bf:fd: da:7a:f5:72:01:09:b0:20:ae:23:42:65:46:46:8e:4f:d8:5f: e5:7e:db:ce:bc:59:67:16:43:96:0d:b2:35:2b:ab:18:ea:19: a7:f2:b6:11:0e:8e:3e:ea:1d:b8:69:51:9a:53:bd:63:63:50: fa:09:5d:9f:8f:34:9d:68:21:56:7d:af:4d:80:fa:2d:47:21: 16:c2:e2:f8:24:80:f3:49:c4:41:ec:70:dc:9a:09:e6:75:0c: 6f:83:2f:6e:d7:d0:61:4c:91:4c:30:a0:75:ee:fb:8f:11:03: b4:66:50:0f:43:44:23:e8:30:15:77:32:9d:58:89:e3:a6:7a: 10:46:cb:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHRLG8Q14qiffDMsSfmsoaYMWkqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDNEI2QkU4NEM5MEJDNDA2QUI2NzFFNUY3NUE4Qzg2 NTYyOTRGNjAeFw0yNjA4MDIwNTE4NTlaFw0yNjA4MDMwOTAzNTlaMDMxMTAvBgNV BAMTKDg4RjhBMDA4NTk0QkI5QTJBNDM0QTJENDI4NDJEOUZFRjM1QUQ4OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVN/vWzUQti+i9QuLST4bFCHDe 4UWx4fZc6mEOXrGxG/IhKc/C3b1OQKxGnq8R3rzJ5SxAc//6ep5K/KGEJI6D4RY9 IIqAC49D7veNazNHjCWwgVdof0CtM/uvYLMvJPabd4V7tVVgvJDK4LJ1Ed0FoZB5 MJMyjW02fCCS1RGRS1mgAzmb5ySOB4IT0J2vI4QQbQIlaf/sntsXChve+YCjBnXC rSNFilBDbObo6qFjhFnT4UyMep1Og8efVstbRaOMD91yr7jsKK7JqDRaQv2UabMo xYasdXsOZ/HtfAigEWffFhvbGsTa9QC6OYRo7lElMfA5mz5kmrDnOK2+dEm9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiPigCFlLuaKkNKLUKELZ/vNa2JQwHwYDVR0j BBgwFoAU2cS2voTJC8QGq2ceX3WoyGVilPYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE5NWI0YjQtYmM4YS00Y2U1LWI1NTAtOWFhN2IzNmVlMWZhLzAvRDlDNEI2QkU4 NEM5MEJDNDA2QUI2NzFFNUY3NUE4Qzg2NTYyOTRGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EOUM0QjZCRTg0QzkwQkM0MDZBQjY3MUU1Rjc1QThDODY1NjI5 NEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvRDlDNEI2QkU4NEM5MEJDNDA2QUI2NzFFNUY3NUE4 Qzg2NTYyOTRGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMieiJFUlGSEdczBSErKwGACX1aFpFDICWb l7xbpKzlZaqXVDyvVvcUlZ6iLIJ0z3uCQBpsYhU8pKua5ebtewsl0qQ5mGjMHVKk ESPEH5q0fVsokq1IamJiDFiFiS9z8jr6il/u93eD9OO6RX+suqWrj015W6QHRTbL zMO//dp69XIBCbAgriNCZUZGjk/YX+V+2868WWcWQ5YNsjUrqxjqGafythEOjj7q HbhpUZpTvWNjUPoJXZ+PNJ1oIVZ9r02A+i1HIRbC4vgkgPNJxEHscNyaCeZ1DG+D L27X0GFMkUwwoHXu+48RA7RmUA9DRCPoMBV3Mp1YieOmehBGy3s= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:32 2026 by rpki-client