$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft File: B9281144646657214FE1ADE5A3228E100E340E53.mft (raw, json) Hash identifier: 8yuJXDHasvprgY5BE9KijEKBGHGg3PPDft4A0tPLIs8= Subject key identifier: 0B:78:81:B3:F7:73:50:0E:7A:18:CF:6D:63:2C:85:2E:68:AC:23:55 Authority key identifier: B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 Certificate issuer: /CN=B9281144646657214FE1ADE5A3228E100E340E53 Certificate serial: 7C775D5434E5FEFEB7F0BDFC111F5278D178BC15 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 16:06:29 +0000 Manifest this update: Tue 28 Jul 2026 16:01:29 +0000 Manifest next update: Wed 29 Jul 2026 20:03:29 +0000 Files and hashes: 1: B9281144646657214FE1ADE5A3228E100E340E53.crl (hash: fIwyG7gjelL3xRBGdXvDt7piGLkSdkj0knChSJ0LDVE=) 2: 3130332e3138302e302e302f32342d3234203d3e2039333431.roa (hash: Ve4ocQOUOq8AQ9gpm5lYh6lO9aEe09tZrNXe/azearo=) 3: 3130332e3138302e302e302f32332d3233203d3e2039333431.roa (hash: GkX4NBYIJf8jri1lDVBbCRWCXCtYyohsWxcf1tLEKh4=) 4: 3130332e3138302e312e302f32342d3234203d3e2039333431.roa (hash: Tgez0mY6SPOTnuCIKB3HlrvFNAAadTv4QI32lWtN/DI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:77:5d:54:34:e5:fe:fe:b7:f0:bd:fc:11:1f:52:78:d1:78:bc:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9281144646657214FE1ADE5A3228E100E340E53 Validity Not Before: Jul 28 16:01:29 2026 GMT Not After : Jul 29 20:03:29 2026 GMT Subject: CN=0B7881B3F773500E7A18CF6D632C852E68AC2355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b3:81:84:4d:18:77:5e:95:05:b3:46:de:3e: ba:8d:24:fc:63:7c:3b:e8:85:b9:04:99:70:f0:d8: dc:1f:ec:6c:0a:1e:66:f8:58:c8:5b:43:13:a9:62: 98:a8:d1:c1:df:7c:5b:c6:d1:9e:b4:97:8a:b7:3a: c8:f0:53:cc:b5:49:8c:ed:8b:84:f2:cb:f4:57:b7: ad:ec:c1:6c:78:50:5e:93:b6:17:5f:be:26:74:02: 03:d3:db:e5:71:a1:20:e3:c9:ba:3c:a9:d8:e5:38: 04:00:57:9a:4b:c3:cf:a8:fb:b1:4a:51:c1:5b:49: 65:1c:4c:3e:9c:6a:dc:e1:68:e2:f1:11:ef:d4:9b: bc:1d:de:b0:9a:cb:c2:14:3d:9b:36:77:f0:0c:6e: 90:a1:ab:52:da:74:09:59:1a:3d:67:91:e1:bc:71: 58:a0:da:97:20:28:54:91:b9:97:89:dd:a5:91:04: 89:9e:16:0e:fb:3d:36:96:a9:a1:19:55:15:a1:8e: 11:79:26:d5:3b:f7:eb:43:45:c1:67:24:4b:44:4c: bf:94:9e:a2:f1:1b:f6:1b:7b:63:21:c4:9b:46:7c: 06:40:13:d3:e0:66:a7:29:9c:3d:60:0d:d7:84:c5: bc:3a:7f:7e:d0:34:f7:b0:e1:90:ec:96:c3:ab:73: 92:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:78:81:B3:F7:73:50:0E:7A:18:CF:6D:63:2C:85:2E:68:AC:23:55 X509v3 Authority Key Identifier: keyid:B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d3:cf:70:a5:d2:92:4e:19:f9:ae:63:25:42:fa:46:3c:52: b3:44:9c:9c:92:22:2e:f5:dd:0b:3e:5f:c6:b4:69:4f:c2:a3: 8f:ec:a8:e9:b5:d3:b9:28:27:53:60:43:6e:e4:85:ab:44:12: 01:a0:c4:9a:5a:11:9e:a6:50:a9:30:9e:04:f9:ec:7f:76:c9: 9b:45:99:3f:b0:54:44:b2:50:e9:5e:c2:31:75:e9:f8:2e:f9: 7b:e4:ca:3b:be:de:d7:b0:60:f7:de:f9:e3:15:5b:6a:ae:31: d3:27:89:ce:36:e9:51:93:65:09:00:8a:48:d0:de:9d:be:ce: c3:18:60:9c:d5:e2:07:bc:15:cd:14:08:1c:2a:6c:7a:d6:b8: 19:f9:89:51:57:9b:62:84:8f:bd:8a:22:86:40:a6:0b:a6:1b: d2:72:2c:b1:b1:b1:15:8e:0c:08:36:45:e1:a8:ba:3c:52:cc: af:49:bb:de:fd:7f:df:f1:68:3d:62:8d:51:6b:ba:25:f7:59: f3:df:44:ca:30:0f:1e:15:cb:5f:27:92:a2:b1:84:1c:cf:a9: 23:c0:ea:f7:b2:06:0a:48:4f:b9:48:ad:c7:3f:ec:03:77:eb: ef:0d:43:ed:aa:c9:51:ee:19:5d:45:17:f2:d3:29:61:32:65: 48:d1:6a:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfHddVDTl/v638L38ER9SeNF4vBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAw RTM0MEU1MzAeFw0yNjA3MjgxNjAxMjlaFw0yNjA3MjkyMDAzMjlaMDMxMTAvBgNV BAMTKDBCNzg4MUIzRjc3MzUwMEU3QTE4Q0Y2RDYzMkM4NTJFNjhBQzIzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOs4GETRh3XpUFs0bePrqNJPxj fDvohbkEmXDw2Nwf7GwKHmb4WMhbQxOpYpio0cHffFvG0Z60l4q3OsjwU8y1SYzt i4Tyy/RXt63swWx4UF6TthdfviZ0AgPT2+VxoSDjybo8qdjlOAQAV5pLw8+o+7FK UcFbSWUcTD6catzhaOLxEe/Um7wd3rCay8IUPZs2d/AMbpChq1LadAlZGj1nkeG8 cVig2pcgKFSRuZeJ3aWRBImeFg77PTaWqaEZVRWhjhF5JtU79+tDRcFnJEtETL+U nqLxG/Ybe2MhxJtGfAZAE9PgZqcpnD1gDdeExbw6f37QNPew4ZDslsOrc5JlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC3iBs/dzUA56GM9tYyyFLmisI1UwHwYDVR0j BBgwFoAUuSgRRGRmVyFP4a3loyKOEA40DlMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E4YTlhODEtMGE1Mi00YTUwLWI3ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2 NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAwRTM0MEU1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTI4MTE0NDY0NjY1NzIxNEZFMUFERTVBMzIyOEUxMDBFMzQw RTUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E4YTlhODEtMGE1Mi00YTUwLWI3 ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhF MTAwRTM0MEU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjTz3Cl0pJOGfmuYyVC+kY8UrNEnJySIi71 3Qs+X8a0aU/Co4/sqOm107koJ1NgQ27khatEEgGgxJpaEZ6mUKkwngT57H92yZtF mT+wVESyUOlewjF16fgu+Xvkyju+3tewYPfe+eMVW2quMdMnic426VGTZQkAikjQ 3p2+zsMYYJzV4ge8Fc0UCBwqbHrWuBn5iVFXm2KEj72KIoZApgumG9JyLLGxsRWO DAg2ReGoujxSzK9Ju979f9/xaD1ijVFruiX3WfPfRMowDx4Vy18nkqKxhBzPqSPA 6veyBgpIT7lIrcc/7AN36+8NQ+2qyVHuGV1FF/LTKWEyZUjRajo= -----END CERTIFICATE-----Generated at Wed Jul 29 08:46:43 2026 by rpki-client