$ rpki-client -vvf rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft File: C09B0826A8950269AAA9592F3B0B65A3232333C5.mft (raw, json) Hash identifier: /KkpGwWjmRd4NWG240STCFy9xv8hUjK1xLsQTpsbGyM= Subject key identifier: 09:A6:37:D7:72:73:D2:05:FD:24:A5:F5:A1:C5:84:D9:7B:D2:02:78 Authority key identifier: C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 Certificate issuer: /CN=C09B0826A8950269AAA9592F3B0B65A3232333C5 Certificate serial: 5DC141CAA1B01E2C31CFD921B6A810B56515A14A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft Manifest number: 7D Signing time: Sun 02 Aug 2026 13:03:28 +0000 Manifest this update: Sun 02 Aug 2026 12:58:28 +0000 Manifest next update: Mon 03 Aug 2026 16:02:28 +0000 Files and hashes: 1: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: u7ID+/zmEfkiBk9A2DOk1aoUvKs6xhyBLUvlSwziv+4=) 2: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: /OlYgkp/JUv7mWTKG1jRIEEEMwF4cVrVtCICjMapFuQ=) 3: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: qD0/6TXIm8wKpNkYb5k3M2VEq1Hkh2ZvC2u1LPq71Ck=) 4: C09B0826A8950269AAA9592F3B0B65A3232333C5.crl (hash: l0qJmXFhQWlsXZcLNv2KpXFZAHNDMu5kvrPxSsq9PsU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 16:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c1:41:ca:a1:b0:1e:2c:31:cf:d9:21:b6:a8:10:b5:65:15:a1:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C09B0826A8950269AAA9592F3B0B65A3232333C5 Validity Not Before: Aug 2 12:58:28 2026 GMT Not After : Aug 3 16:02:28 2026 GMT Subject: CN=09A637D77273D205FD24A5F5A1C584D97BD20278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:39:63:d9:98:29:7c:fd:9f:c0:8e:21:42:d8: aa:18:21:56:a1:58:a6:f8:5d:50:ca:a8:d4:65:bd: 8a:ae:54:7b:e0:79:4e:c3:29:8a:51:89:20:77:c1: ea:bd:49:7e:3d:44:ca:8c:e2:bc:2f:49:66:2a:7f: 0e:5e:b0:6b:d3:0e:8b:7e:3b:b2:4c:b7:e6:64:ec: 6d:97:79:4c:28:dd:ba:d8:33:db:32:44:6c:b0:0d: 6f:eb:c7:87:1e:f6:8a:0e:e1:90:3b:06:51:fb:e8: 78:39:3e:8c:3c:9a:f2:e0:d3:6c:eb:6e:57:62:94: 15:e3:ca:e1:d4:a3:51:3b:07:cb:9b:ba:e4:24:70: 2f:63:22:00:a1:08:53:03:b3:4b:56:8c:06:dd:f3: b9:10:dc:a9:b6:06:55:1e:ea:36:90:ba:50:1c:b3: 2f:60:31:75:50:6d:21:03:e4:07:db:97:1d:1c:5b: d6:b3:6e:35:6e:23:c4:c3:1d:73:d7:c9:e3:7e:4e: 89:1c:48:42:97:c8:c2:47:c0:90:4f:c6:29:aa:28: 23:e2:b2:cd:bc:7f:1b:58:e4:30:63:16:d3:0c:29: 79:03:d4:57:fb:83:d7:6d:82:07:f4:5e:67:5d:90: d6:53:46:4e:0b:df:b8:5c:0b:78:3e:c0:12:4e:e8: 34:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A6:37:D7:72:73:D2:05:FD:24:A5:F5:A1:C5:84:D9:7B:D2:02:78 X509v3 Authority Key Identifier: keyid:C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a3:fc:08:5e:92:97:ec:d2:06:9b:a2:5b:50:53:45:4c:7c: 7f:30:f8:84:80:49:10:1c:1a:61:8f:ae:e8:85:c8:1d:21:4d: aa:05:53:a9:30:56:07:b2:b2:e3:4a:07:d5:40:ea:9c:11:96: f9:d8:bd:85:b8:9c:32:bb:c6:8e:55:3b:38:ea:3c:b5:10:6f: 79:a4:0f:23:b2:25:df:f4:cc:d2:77:97:0d:cb:61:a4:f4:9a: d4:d5:34:f8:96:1a:52:ad:90:d8:39:e1:06:11:a2:a6:f2:34: c0:aa:60:41:50:44:b1:b7:bc:46:b5:c2:df:2f:72:0e:64:f1: 50:f2:23:6d:e4:f3:d0:bf:65:aa:e8:b7:19:d5:20:3b:ad:27: 23:e5:53:96:99:d3:94:cd:37:7e:fd:ef:a3:6f:c9:70:03:f4: 13:60:8f:37:91:3b:d6:4b:ce:74:ea:3e:f2:7b:99:a4:8f:0e: f0:63:87:94:21:84:7c:dd:75:37:72:92:75:c2:fa:28:77:ff: 06:cf:fa:3f:9f:78:ef:f4:21:08:36:01:dc:48:1d:91:98:96: 88:a7:b9:cc:f1:c6:87:24:97:2d:e9:bc:58:82:76:02:d0:f6: 5b:f3:13:1a:04:1c:54:64:c8:a8:bf:ac:9a:0c:9a:fe:ac:fe: a5:e9:97:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXcFByqGwHiwxz9khtqgQtWUVoUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA5QjA4MjZBODk1MDI2OUFBQTk1OTJGM0IwQjY1QTMy MzIzMzNDNTAeFw0yNjA4MDIxMjU4MjhaFw0yNjA4MDMxNjAyMjhaMDMxMTAvBgNV BAMTKDA5QTYzN0Q3NzI3M0QyMDVGRDI0QTVGNUExQzU4NEQ5N0JEMjAyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdOWPZmCl8/Z/AjiFC2KoYIVah WKb4XVDKqNRlvYquVHvgeU7DKYpRiSB3weq9SX49RMqM4rwvSWYqfw5esGvTDot+ O7JMt+Zk7G2XeUwo3brYM9syRGywDW/rx4ce9ooO4ZA7BlH76Hg5Pow8mvLg02zr bldilBXjyuHUo1E7B8ubuuQkcC9jIgChCFMDs0tWjAbd87kQ3Km2BlUe6jaQulAc sy9gMXVQbSED5Afblx0cW9azbjVuI8TDHXPXyeN+TokcSEKXyMJHwJBPximqKCPi ss28fxtY5DBjFtMMKXkD1Ff7g9dtggf0XmddkNZTRk4L37hcC3g+wBJO6DRDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCaY313Jz0gX9JKX1ocWE2XvSAngwHwYDVR0j BBgwFoAUwJsIJqiVAmmqqVkvOwtloyMjM8UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjhkYzA4NDktODNmYi00Y2M4LThjMjEtYmU2Y2E3YTJlZDgzLzAvQzA5QjA4MjZB ODk1MDI2OUFBQTk1OTJGM0IwQjY1QTMyMzIzMzNDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMDlCMDgyNkE4OTUwMjY5QUFBOTU5MkYzQjBCNjVBMzIzMjMz M0M1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvQzA5QjA4MjZBODk1MDI2OUFBQTk1OTJGM0IwQjY1 QTMyMzIzMzNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyj/Ahekpfs0gaboltQU0VMfH8w+ISASRAc GmGPruiFyB0hTaoFU6kwVgeysuNKB9VA6pwRlvnYvYW4nDK7xo5VOzjqPLUQb3mk DyOyJd/0zNJ3lw3LYaT0mtTVNPiWGlKtkNg54QYRoqbyNMCqYEFQRLG3vEa1wt8v cg5k8VDyI23k89C/ZarotxnVIDutJyPlU5aZ05TNN37976NvyXAD9BNgjzeRO9ZL znTqPvJ7maSPDvBjh5QhhHzddTdyknXC+ih3/wbP+j+feO/0IQg2AdxIHZGYloin uczxxockly3pvFiCdgLQ9lvzExoEHFRkyKi/rJoMmv6s/qXplzs= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:55 2026 by rpki-client