$ rpki-client -vvf rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft File: 9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft (raw, json) Hash identifier: 9brDaEKwygAn//bsgFQn9UcL0MP+0k96hHt+mUcVGnY= Subject key identifier: AC:86:B7:A6:31:C7:6C:6F:FB:40:0E:0D:54:FC:EC:6A:A0:DF:5F:65 Authority key identifier: 9A:2E:70:15:61:0F:91:22:97:C9:C4:B0:FF:DE:85:57:63:38:C9:EA Certificate issuer: /CN=9A2E7015610F912297C9C4B0FFDE85576338C9EA Certificate serial: 645A3F27AF0039FA695584AA2D0C620A6052CA3D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 18:49:58 +0000 Manifest this update: Tue 28 Jul 2026 18:44:58 +0000 Manifest next update: Wed 29 Jul 2026 22:44:58 +0000 Files and hashes: 1: 9A2E7015610F912297C9C4B0FFDE85576338C9EA.crl (hash: c664pUnxuewezRWLX5d7rFHuzkrklGfUk5Gyke6SYEY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.crl rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:5a:3f:27:af:00:39:fa:69:55:84:aa:2d:0c:62:0a:60:52:ca:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A2E7015610F912297C9C4B0FFDE85576338C9EA Validity Not Before: Jul 28 18:44:58 2026 GMT Not After : Jul 29 22:44:58 2026 GMT Subject: CN=AC86B7A631C76C6FFB400E0D54FCEC6AA0DF5F65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f8:c3:94:c9:fb:02:31:52:e6:b2:a9:4d:cc: 2e:6a:20:66:98:47:7a:48:1f:40:88:e4:0f:74:4d: 3d:0f:5e:c7:c7:c1:a0:c3:02:82:dd:1e:06:74:66: ff:18:6c:17:fb:22:1b:77:76:f5:f4:34:f0:1a:06: fd:63:b2:33:14:eb:cb:ac:e6:e6:ec:e2:c9:d3:78: 82:f7:40:55:17:30:f0:e1:2d:f4:54:41:bb:d7:14: ca:12:c2:0e:f4:2a:c3:86:40:d9:e2:40:5a:13:b8: 2a:3c:e0:3b:0a:20:3c:76:0a:68:75:af:79:25:a1: a4:b7:fa:17:7d:be:f0:30:19:30:d4:68:f4:92:86: eb:a8:69:05:f1:66:72:7a:46:a6:de:fa:20:fc:ea: fa:76:9a:9d:ce:7f:2c:55:32:5a:98:b3:2e:73:73: e7:37:65:38:81:f0:e9:fb:35:95:f3:a4:c1:9b:e1: 53:a7:6e:9e:0c:a7:d8:a4:11:1e:84:3b:e8:fc:a4: a5:17:75:6a:e7:4d:5e:55:90:e9:25:fa:44:11:6c: 33:62:c4:b1:5d:38:26:c7:36:ac:ab:db:6c:87:bb: 5f:08:24:3a:2f:07:19:47:09:32:06:71:0b:e6:b5: 48:e7:8c:ab:4c:2d:cb:e3:32:36:ab:6b:27:0f:58: eb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:86:B7:A6:31:C7:6C:6F:FB:40:0E:0D:54:FC:EC:6A:A0:DF:5F:65 X509v3 Authority Key Identifier: keyid:9A:2E:70:15:61:0F:91:22:97:C9:C4:B0:FF:DE:85:57:63:38:C9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:47:a4:f1:91:ed:a6:d0:aa:5c:4e:15:a8:1a:12:11:d4:ec: 9d:4c:b0:4e:86:de:2b:ce:2d:2a:47:19:94:a5:79:28:8c:38: 26:36:f8:d9:72:59:67:55:be:66:c2:b9:80:98:a3:38:c7:df: ab:25:f8:e7:95:72:98:92:e3:f4:f6:eb:f1:7e:9b:4e:3e:e8: 6e:28:ea:ad:a5:dd:35:d9:15:18:d1:32:44:15:b6:b9:5f:2e: f0:93:cf:0c:85:82:34:19:b9:b5:40:4e:16:2f:92:d4:62:b8: 93:e0:aa:eb:6c:50:dc:56:c1:1f:bc:42:5d:75:d8:a3:e6:bc: 1c:f9:68:63:2f:91:87:ea:4a:bc:ba:4d:fa:77:34:a1:b6:34: 54:81:9b:46:b6:56:79:a6:41:e4:df:ee:5d:95:5f:fa:c3:a2: cb:7a:1e:24:7e:e8:e5:01:8f:bd:76:2c:ad:01:71:a7:45:a3: 13:bf:c8:fb:3f:50:2d:54:4b:de:88:6a:7b:71:f5:fd:14:c7: 44:72:69:27:89:b1:f6:02:c9:cf:4b:40:c0:de:34:42:4c:b3: ad:13:b0:53:33:46:ad:68:75:73:6e:05:d6:2a:ab:1a:b6:4e: 38:7d:70:b5:30:66:2c:f5:29:80:37:b1:3f:96:56:b8:7a:15: ed:cd:1a:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZFo/J68AOfppVYSqLQxiCmBSyj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyRTcwMTU2MTBGOTEyMjk3QzlDNEIwRkZERTg1NTc2 MzM4QzlFQTAeFw0yNjA3MjgxODQ0NThaFw0yNjA3MjkyMjQ0NThaMDMxMTAvBgNV BAMTKEFDODZCN0E2MzFDNzZDNkZGQjQwMEUwRDU0RkNFQzZBQTBERjVGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI+MOUyfsCMVLmsqlNzC5qIGaY R3pIH0CI5A90TT0PXsfHwaDDAoLdHgZ0Zv8YbBf7Iht3dvX0NPAaBv1jsjMU68us 5ubs4snTeIL3QFUXMPDhLfRUQbvXFMoSwg70KsOGQNniQFoTuCo84DsKIDx2Cmh1 r3kloaS3+hd9vvAwGTDUaPSShuuoaQXxZnJ6Rqbe+iD86vp2mp3OfyxVMlqYsy5z c+c3ZTiB8On7NZXzpMGb4VOnbp4Mp9ikER6EO+j8pKUXdWrnTV5VkOkl+kQRbDNi xLFdOCbHNqyr22yHu18IJDovBxlHCTIGcQvmtUjnjKtMLcvjMjaraycPWOsRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrIa3pjHHbG/7QA4NVPzsaqDfX2UwHwYDVR0j BBgwFoAUmi5wFWEPkSKXycSw/96FV2M4yeowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTNmYTdkNWMtMzY4ZC00YWYzLWI4ZTctMTc4NjI0NmRkNjJmLzAvOUEyRTcwMTU2 MTBGOTEyMjk3QzlDNEIwRkZERTg1NTc2MzM4QzlFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTJFNzAxNTYxMEY5MTIyOTdDOUM0QjBGRkRFODU1NzYzMzhD OUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTNmYTdkNWMtMzY4ZC00YWYzLWI4 ZTctMTc4NjI0NmRkNjJmLzAvOUEyRTcwMTU2MTBGOTEyMjk3QzlDNEIwRkZERTg1 NTc2MzM4QzlFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9HpPGR7abQqlxOFagaEhHU7J1MsE6G3ivO LSpHGZSleSiMOCY2+NlyWWdVvmbCuYCYozjH36sl+OeVcpiS4/T26/F+m04+6G4o 6q2l3TXZFRjRMkQVtrlfLvCTzwyFgjQZubVAThYvktRiuJPgqutsUNxWwR+8Ql11 2KPmvBz5aGMvkYfqSry6Tfp3NKG2NFSBm0a2VnmmQeTf7l2VX/rDost6HiR+6OUB j712LK0BcadFoxO/yPs/UC1US96Iantx9f0Ux0RyaSeJsfYCyc9LQMDeNEJMs60T sFMzRq1odXNuBdYqqxq2Tjh9cLUwZiz1KYA3sT+WVrh6Fe3NGuM= -----END CERTIFICATE-----Generated at Tue Jul 28 23:40:12 2026 by rpki-client