$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft File: 9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft (raw, json) Hash identifier: Ac3Tsl3nSbV3LQ+3Sgx9Vu0FmTOo01g8zUdrfbGnY24= Subject key identifier: 59:C3:10:46:C7:2B:71:3D:8C:F9:5C:29:9D:3C:1F:FC:54:43:43:BC Authority key identifier: 9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13 Certificate issuer: /CN=9A347241E9DA18B0BB748E5558F85DFA6AD14F13 Certificate serial: 57CE20CBE38F4745E4D606F99223A68CDA004472 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 18:34:45 +0000 Manifest this update: Tue 28 Jul 2026 18:29:45 +0000 Manifest next update: Wed 29 Jul 2026 19:10:45 +0000 Files and hashes: 1: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: PjTS4Hn+0nQcRzsQo6Ms0LRYKKTZlFXIqpYw+ixRnkk=) 2: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: vdwdHoa0dxzBT4qxWDgRcyQiniSgsgBOI6Tm2dJ4lDY=) 3: 9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl (hash: rpYPu7gkLFzotpNuuW3+a2gpjjYzqWVvDAzKc9lc7jo=) 4: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: wInMUXHOP8RJI5eoz/+Dc4x331OyQaS/P4AI/7E+Chw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:10:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ce:20:cb:e3:8f:47:45:e4:d6:06:f9:92:23:a6:8c:da:00:44:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A347241E9DA18B0BB748E5558F85DFA6AD14F13 Validity Not Before: Jul 28 18:29:45 2026 GMT Not After : Jul 29 19:10:45 2026 GMT Subject: CN=59C31046C72B713D8CF95C299D3C1FFC544343BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e5:46:e8:9a:b5:db:60:d7:74:b7:c9:f3:45: c1:08:15:53:76:0f:02:80:00:f7:45:5b:17:78:dc: ed:2e:44:97:72:80:6a:e7:ff:7e:06:72:a1:79:a7: 83:ae:19:83:4c:47:52:a1:02:72:5b:7d:9a:b1:ee: 00:70:20:80:d6:98:00:33:3f:08:34:31:4d:f4:c7: 33:8f:3a:7a:4a:72:c4:ec:48:92:96:46:84:ae:ef: e3:59:82:cb:e2:1e:e2:96:b4:5b:41:ad:52:e0:1b: 97:9c:c0:78:48:ae:8c:30:43:32:4c:92:b8:b7:1b: 9e:e2:20:46:52:e1:d1:99:b1:79:19:f9:8d:43:2f: 16:38:6d:3b:18:d8:29:d8:61:3f:08:da:2e:5f:8b: 03:2a:ba:00:75:a0:9f:68:23:72:16:2e:00:45:cb: d6:68:a5:8c:7c:90:07:2f:7a:a4:6e:b7:a9:80:ca: f9:3f:7f:c5:8b:8e:fe:9e:84:40:72:f1:41:41:70: 8d:25:2b:8e:d6:a8:57:26:f5:e2:8b:29:f3:19:de: a1:23:d7:2d:51:06:29:97:78:a4:36:35:58:0c:4d: 55:8d:75:d1:aa:13:30:c4:4b:46:bf:5e:4e:d4:5b: 9b:ef:0a:99:2c:42:9d:10:e7:34:0e:f3:8c:df:a6: 40:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C3:10:46:C7:2B:71:3D:8C:F9:5C:29:9D:3C:1F:FC:54:43:43:BC X509v3 Authority Key Identifier: keyid:9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:9a:0f:99:b0:f2:7c:a6:02:33:f2:a3:ee:04:c6:92:07:f8: 4e:40:a6:e5:01:d8:38:10:d4:d4:e5:1d:2c:c6:38:45:34:b3: c4:ea:d3:2e:57:a2:5f:3a:76:01:82:fc:45:a5:7a:5b:8a:f2: da:3d:40:06:44:2b:bc:46:b7:de:e7:7b:61:40:50:f6:11:00: 41:ef:c9:59:49:fd:a3:c3:fb:73:69:fc:a3:e3:1f:bc:2b:a0: 63:f3:8a:80:aa:05:22:b3:d4:50:de:62:d7:b6:7e:a3:af:6c: d4:9e:67:03:1d:6f:8d:42:08:9c:4a:34:63:05:67:2f:a2:03: 38:f1:b0:bf:cc:3c:5b:25:36:e0:6d:c1:ca:68:4c:ad:32:62: f5:88:0b:a8:ec:1e:2c:5e:ad:ad:c7:b1:fb:ce:81:e1:01:7b: a3:d3:f8:50:5c:bf:22:51:e3:db:64:81:3b:3e:48:00:ea:5d: b4:8f:6a:41:7e:18:8d:2a:25:09:65:d6:dc:30:54:6b:58:f5: 5d:10:ae:5e:fd:3f:fb:fc:bb:e6:5a:64:c7:ce:ee:74:b3:a7: eb:5b:4b:bb:55:cb:24:1b:b9:ef:bf:0c:2b:2e:46:5c:8c:4f: 88:45:77:42:aa:90:fe:24:87:8f:ad:01:bd:91:46:a2:f4:7a: f5:b3:ff:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV84gy+OPR0Xk1gb5kiOmjNoARHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEzNDcyNDFFOURBMThCMEJCNzQ4RTU1NThGODVERkE2 QUQxNEYxMzAeFw0yNjA3MjgxODI5NDVaFw0yNjA3MjkxOTEwNDVaMDMxMTAvBgNV BAMTKDU5QzMxMDQ2QzcyQjcxM0Q4Q0Y5NUMyOTlEM0MxRkZDNTQ0MzQzQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC95UbomrXbYNd0t8nzRcEIFVN2 DwKAAPdFWxd43O0uRJdygGrn/34GcqF5p4OuGYNMR1KhAnJbfZqx7gBwIIDWmAAz Pwg0MU30xzOPOnpKcsTsSJKWRoSu7+NZgsviHuKWtFtBrVLgG5ecwHhIrowwQzJM kri3G57iIEZS4dGZsXkZ+Y1DLxY4bTsY2CnYYT8I2i5fiwMqugB1oJ9oI3IWLgBF y9ZopYx8kAcveqRut6mAyvk/f8WLjv6ehEBy8UFBcI0lK47WqFcm9eKLKfMZ3qEj 1y1RBimXeKQ2NVgMTVWNddGqEzDES0a/Xk7UW5vvCpksQp0Q5zQO84zfpkBtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWcMQRscrcT2M+VwpnTwf/FRDQ7wwHwYDVR0j BBgwFoAUmjRyQenaGLC7dI5VWPhd+mrRTxMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NkZDU3NzQtMzBkZC00YTAwLWIxYTktOWIxMjgyNjkzMGMyLzAvOUEzNDcyNDFF OURBMThCMEJCNzQ4RTU1NThGODVERkE2QUQxNEYxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QTM0NzI0MUU5REExOEIwQkI3NDhFNTU1OEY4NURGQTZBRDE0 RjEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NkZDU3NzQtMzBkZC00YTAwLWIx YTktOWIxMjgyNjkzMGMyLzAvOUEzNDcyNDFFOURBMThCMEJCNzQ4RTU1NThGODVE RkE2QUQxNEYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmaD5mw8nymAjPyo+4ExpIH+E5ApuUB2DgQ 1NTlHSzGOEU0s8Tq0y5Xol86dgGC/EWleluK8to9QAZEK7xGt97ne2FAUPYRAEHv yVlJ/aPD+3Np/KPjH7wroGPzioCqBSKz1FDeYte2fqOvbNSeZwMdb41CCJxKNGMF Zy+iAzjxsL/MPFslNuBtwcpoTK0yYvWIC6jsHixera3HsfvOgeEBe6PT+FBcvyJR 49tkgTs+SADqXbSPakF+GI0qJQll1twwVGtY9V0Qrl79P/v8u+ZaZMfO7nSzp+tb S7tVyyQbue+/DCsuRlyMT4hFd0KqkP4kh4+tAb2RRqL0evWz/zk= -----END CERTIFICATE-----Generated at Wed Jul 29 02:33:04 2026 by rpki-client