$ rpki-client -vvf rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft File: 9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft (raw, json) Hash identifier: t25IRTya0uQ9Yt+HqCsjjxpPOCbF1aDwmihrn2LAMoE= Subject key identifier: 11:DB:E3:6B:B4:78:9D:10:F8:DE:71:D9:44:49:98:A3:1A:52:3A:C0 Authority key identifier: 9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C Certificate issuer: /CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Certificate serial: 1EC20DA59BB22E602FCC5CF761094F6D506F7405 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft Manifest number: 77 Signing time: Wed 29 Jul 2026 04:21:22 +0000 Manifest this update: Wed 29 Jul 2026 04:16:22 +0000 Manifest next update: Thu 30 Jul 2026 06:51:22 +0000 Files and hashes: 1: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (hash: FVzH7nhWf9HlKEhd9diqlsZY20NWlRxKMpXnnJ7+h6Y=) 2: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (hash: 0uTllQF8wo+NL3Ts0DUiJLkGlZst9OmTPcws3XPvVM8=) 3: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (hash: byBg5cGc6s1YP8fDSR7s5sO6wrvfj9UFsOHI5fDaKjw=) 4: 3230322e35372e32312e302f32342d3234203d3e20313431363733.roa (hash: 2uayKWV7qVJbZpJZiiGrPFO3R21PwEyriXpTW2MB4pQ=) 5: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (hash: o+t6IXXZJ4nVKh7Fjs01qIsZ6gI4rdJ87aU7Y1okiOU=) 6: 9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl (hash: 7Ykk/TREPeFjZltVYGgFBeK0rZXjYCa3vK3qCb5sW2c=) 7: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (hash: C5EXjolwl07zRhpLr0tmhZ7KpZpGgWZO494eyJEQSqk=) 8: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (hash: tedUTTSe47lCMR7mgNFb3hX/nrYcz1gvH0zDmHz42Os=) 9: 3230322e35372e32342e302f32332d3233203d3e20313430343639.roa (hash: d1pFnM2SYbSdXqGP4WVzR+cUntyYSCzP9FKk6VY+PFE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c2:0d:a5:9b:b2:2e:60:2f:cc:5c:f7:61:09:4f:6d:50:6f:74:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Validity Not Before: Jul 29 04:16:22 2026 GMT Not After : Jul 30 06:51:22 2026 GMT Subject: CN=11DBE36BB4789D10F8DE71D9444998A31A523AC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:0e:3a:76:8d:b3:0e:d6:10:92:d5:67:89: 38:47:df:b7:c4:ee:47:f0:2c:71:93:2f:8e:92:17: b5:58:24:8a:df:b1:96:9e:e1:25:94:e5:e1:ac:19: 7d:44:b6:d2:45:15:d0:44:d3:b9:a8:05:eb:b3:3f: 95:6d:1b:cc:d4:65:73:76:2a:e2:ec:11:ed:b3:0a: 58:df:49:6c:3d:f6:aa:ef:d6:06:13:db:cb:80:98: a0:0f:f4:2e:90:bd:ed:b0:62:84:34:5a:51:c1:96: cc:33:a1:47:a8:64:6e:fd:70:f0:b1:48:9d:0a:23: ab:1b:3a:fd:13:c6:ff:cc:6e:77:4b:7b:a7:52:21: 9b:5f:15:ec:7b:ff:6d:22:52:cb:5c:a3:4c:f2:fc: be:7e:9a:90:fa:87:53:15:ec:4c:4c:4a:2e:92:c9: 3f:ad:05:8c:d8:e5:41:48:4f:05:31:6c:f4:02:e5: 35:5a:7f:33:b4:b7:f1:3d:23:26:21:d5:d3:63:8b: 7c:ae:0a:10:5d:9c:e4:4b:a7:12:7c:96:d2:fa:c3: 17:f2:db:16:c9:96:df:d7:d3:4d:10:46:e4:20:90: 57:da:4e:85:86:7c:df:8b:80:32:30:68:86:4d:15: 84:a6:0b:fb:0c:ad:56:38:ee:22:2f:c2:28:31:3c: b6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DB:E3:6B:B4:78:9D:10:F8:DE:71:D9:44:49:98:A3:1A:52:3A:C0 X509v3 Authority Key Identifier: keyid:9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:20:88:27:ef:2a:d2:fa:ad:97:40:2a:02:35:b5:0e:d2:b0: de:36:a9:77:dd:5a:68:f7:fe:2c:f7:87:ca:d8:49:51:ac:29: 24:c2:b0:fd:a9:0d:6c:e5:ed:09:22:76:d6:3e:d5:cf:eb:99: 18:f7:23:f6:59:08:a7:44:f4:b3:bc:6a:09:29:3e:33:fc:91: f6:77:d5:83:e6:3b:f7:91:92:c3:76:32:c2:64:28:c3:f5:41: 7e:09:01:73:70:ca:c3:00:e8:46:a7:b0:24:69:a6:ef:d3:2c: e5:6c:bb:ae:8f:ef:0e:43:f3:4d:7d:f8:7b:a3:16:ce:39:3c: 62:d9:26:08:8b:65:89:34:2e:d6:f2:0b:e9:e0:d2:1d:0d:fe: 64:ab:2f:09:30:54:c6:55:7e:6c:c6:f2:75:47:78:89:d5:dc: d6:7a:79:bf:03:7c:9f:59:b8:a1:35:18:f2:2b:db:45:80:98: 12:43:86:8d:67:80:da:4d:0a:84:c8:c7:3f:9b:ee:86:08:e1: f5:67:66:78:82:6f:97:0a:21:8b:2c:37:f1:27:b4:1e:e9:57: f9:c0:1f:20:8b:21:b6:21:aa:76:4a:45:fc:be:41:a7:3f:80: 53:ec:3d:84:42:1a:c5:76:d3:07:34:21:ac:b8:4c:87:30:fb: a3:95:2a:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHsINpZuyLmAvzFz3YQlPbVBvdAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURCOEM0NzIzRTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1 QzgyQ0Q5QzAeFw0yNjA3MjkwNDE2MjJaFw0yNjA3MzAwNjUxMjJaMDMxMTAvBgNV BAMTKDExREJFMzZCQjQ3ODlEMTBGOERFNzFEOTQ0NDk5OEEzMUE1MjNBQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCCA46do2zDtYQktVniThH37fE 7kfwLHGTL46SF7VYJIrfsZae4SWU5eGsGX1EttJFFdBE07moBeuzP5VtG8zUZXN2 KuLsEe2zCljfSWw99qrv1gYT28uAmKAP9C6Qve2wYoQ0WlHBlswzoUeoZG79cPCx SJ0KI6sbOv0Txv/MbndLe6dSIZtfFex7/20iUstco0zy/L5+mpD6h1MV7ExMSi6S yT+tBYzY5UFITwUxbPQC5TVafzO0t/E9IyYh1dNji3yuChBdnORLpxJ8ltL6wxfy 2xbJlt/X000QRuQgkFfaToWGfN+LgDIwaIZNFYSmC/sMrVY47iIvwigxPLbXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEdvja7R4nRD43nHZREmYoxpSOsAwHwYDVR0j BBgwFoAUnbjEcj47/dATinkWqLsSxFyCzZwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGQzZjA5NWItNzEzMC00MTIyLWFmMjUtN2QyZTdhMTFiMWIxLzAvOURCOEM0NzIz RTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1QzgyQ0Q5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REI4QzQ3MjNFM0JGREQwMTM4QTc5MTZBOEJCMTJDNDVDODJD RDlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGQzZjA5NWItNzEzMC00MTIyLWFm MjUtN2QyZTdhMTFiMWIxLzAvOURCOEM0NzIzRTNCRkREMDEzOEE3OTE2QThCQjEy QzQ1QzgyQ0Q5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0giCfvKtL6rZdAKgI1tQ7SsN42qXfdWmj3 /iz3h8rYSVGsKSTCsP2pDWzl7QkidtY+1c/rmRj3I/ZZCKdE9LO8agkpPjP8kfZ3 1YPmO/eRksN2MsJkKMP1QX4JAXNwysMA6EansCRppu/TLOVsu66P7w5D8019+Huj Fs45PGLZJgiLZYk0LtbyC+ng0h0N/mSrLwkwVMZVfmzG8nVHeInV3NZ6eb8DfJ9Z uKE1GPIr20WAmBJDho1ngNpNCoTIxz+b7oYI4fVnZniCb5cKIYssN/EntB7pV/nA HyCLIbYhqnZKRfy+Qac/gFPsPYRCGsV20wc0Iay4TIcw+6OVKlU= -----END CERTIFICATE-----Generated at Wed Jul 29 12:26:52 2026 by rpki-client