$ rpki-client -vvf rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft File: 9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft (raw, json) Hash identifier: SrvKX3OtYQiIPl4SxmLZPHV23GL7cQnl5iEiCZwDHCw= Subject key identifier: BE:FC:3B:60:E3:18:BE:93:17:B5:98:A7:EF:2D:D4:C6:B8:75:63:76 Authority key identifier: 9F:FB:79:1C:09:C2:A2:BF:53:CF:54:17:4A:8C:A1:AD:67:7B:35:64 Certificate issuer: /CN=9FFB791C09C2A2BF53CF54174A8CA1AD677B3564 Certificate serial: 5EA78856E159597072A6E0CAE409E8948C303EAD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 21:53:41 +0000 Manifest this update: Tue 28 Jul 2026 21:48:41 +0000 Manifest next update: Wed 29 Jul 2026 22:59:41 +0000 Files and hashes: 1: 3136302e32352e3234392e302f32342d3234203d3e20313336303939.roa (hash: U0YPo5BGNsV6sfhS2oiy7oPSHdSgcRKevuF2NKX91Xo=) 2: 9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl (hash: igT704T61rOMOOE6ZPA5ZJjQq78ryp7VFk/jsP64wsk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a7:88:56:e1:59:59:70:72:a6:e0:ca:e4:09:e8:94:8c:30:3e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFB791C09C2A2BF53CF54174A8CA1AD677B3564 Validity Not Before: Jul 28 21:48:41 2026 GMT Not After : Jul 29 22:59:41 2026 GMT Subject: CN=BEFC3B60E318BE9317B598A7EF2DD4C6B8756376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b6:8a:90:c4:2a:af:16:67:63:c5:48:46:63: 57:71:9d:46:89:0d:be:e7:5e:53:a9:59:c4:f0:bc: 06:ee:50:ba:28:20:57:94:5d:14:4e:c8:9b:07:fd: 82:2e:dd:c4:e6:33:c2:84:81:e4:71:7d:bd:52:7f: de:5c:af:f8:06:c1:53:2b:71:52:f7:8e:66:a1:d0: d3:49:a8:af:c6:4f:49:75:4e:44:49:f7:2c:03:ee: 26:2d:b2:f7:f4:be:94:e9:de:28:ec:0b:a9:de:61: cd:6c:32:a0:05:5a:b3:8e:75:20:1b:38:d2:28:6f: 76:82:bc:55:81:36:42:fa:35:6e:77:72:bd:1a:b9: d1:25:f7:ef:f4:cf:14:e1:f0:21:88:73:96:db:59: de:a2:9b:de:d2:c0:95:7d:35:99:6f:7f:3a:ae:7c: 15:79:a7:10:3e:e1:96:32:67:e0:25:18:fc:1a:51: e0:f4:01:73:f0:42:ad:69:fd:d2:42:ed:5e:91:9e: 9f:af:b8:83:83:4d:35:11:71:10:4a:6a:57:5f:01: d0:f6:1a:69:be:ce:1a:8b:46:11:88:e0:32:d9:76: 80:fe:a6:66:47:a4:ee:2d:10:30:21:ab:80:ec:23: 50:c9:83:8f:12:8c:77:7b:d8:10:7d:5d:16:ac:a6: 1f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FC:3B:60:E3:18:BE:93:17:B5:98:A7:EF:2D:D4:C6:B8:75:63:76 X509v3 Authority Key Identifier: keyid:9F:FB:79:1C:09:C2:A2:BF:53:CF:54:17:4A:8C:A1:AD:67:7B:35:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d8:79:cf:d6:40:4c:17:ad:21:cf:9c:6c:b8:39:08:bb:9a: 26:03:86:ab:74:5d:83:0c:5c:19:a3:ad:4a:5d:fd:db:11:6d: 18:8f:46:65:cc:e4:71:da:d5:6e:41:b8:a0:32:62:1b:60:2e: db:d2:02:94:2a:59:94:fc:a4:c6:8a:b2:63:d0:05:58:76:4d: 7d:1c:bb:f3:dc:50:fd:57:71:d0:f7:3e:79:1c:12:2c:8a:08: 24:26:2c:91:a7:51:6b:95:68:f8:a8:78:ce:80:f9:b6:b9:89: ca:2b:d6:1f:14:93:87:08:83:b6:52:55:b4:14:99:af:2f:80: 5e:60:dc:e2:c4:e6:e3:df:c7:f2:8f:ad:3a:d8:8b:86:f3:1d: 89:cd:5c:87:ae:16:e2:f2:cf:99:d8:f9:cf:e0:ea:ce:f7:e8: da:52:79:04:47:71:f8:23:c9:c2:c8:9d:e3:99:ca:7f:e0:9e: 00:18:23:1a:83:79:b8:ca:3f:3f:cc:b9:b7:ed:b4:ee:62:2a: 4a:97:ae:97:63:a6:e1:b2:9d:42:30:09:7d:42:f3:3f:bc:3a: aa:5b:cd:be:28:16:24:48:55:63:a9:67:29:b3:62:73:82:42: 35:1a:d3:10:e8:cd:42:8d:ac:a7:1e:b2:80:9d:64:33:9e:0c: 16:be:d3:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXqeIVuFZWXBypuDK5AnolIwwPq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQjc5MUMwOUMyQTJCRjUzQ0Y1NDE3NEE4Q0ExQUQ2 NzdCMzU2NDAeFw0yNjA3MjgyMTQ4NDFaFw0yNjA3MjkyMjU5NDFaMDMxMTAvBgNV BAMTKEJFRkMzQjYwRTMxOEJFOTMxN0I1OThBN0VGMkRENEM2Qjg3NTYzNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+toqQxCqvFmdjxUhGY1dxnUaJ Db7nXlOpWcTwvAbuULooIFeUXRROyJsH/YIu3cTmM8KEgeRxfb1Sf95cr/gGwVMr cVL3jmah0NNJqK/GT0l1TkRJ9ywD7iYtsvf0vpTp3ijsC6neYc1sMqAFWrOOdSAb ONIob3aCvFWBNkL6NW53cr0audEl9+/0zxTh8CGIc5bbWd6im97SwJV9NZlvfzqu fBV5pxA+4ZYyZ+AlGPwaUeD0AXPwQq1p/dJC7V6Rnp+vuIODTTURcRBKaldfAdD2 Gmm+zhqLRhGI4DLZdoD+pmZHpO4tEDAhq4DsI1DJg48SjHd72BB9XRasph9/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvvw7YOMYvpMXtZin7y3Uxrh1Y3YwHwYDVR0j BBgwFoAUn/t5HAnCor9Tz1QXSoyhrWd7NWQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDE0MDU1NDUtYzM1ZC00ZGUxLTk2MTgtNDRiNWY0MTdhMzAzLzAvOUZGQjc5MUMw OUMyQTJCRjUzQ0Y1NDE3NEE4Q0ExQUQ2NzdCMzU2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85RkZCNzkxQzA5QzJBMkJGNTNDRjU0MTc0QThDQTFBRDY3N0Iz NTY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzAvOUZGQjc5MUMwOUMyQTJCRjUzQ0Y1NDE3NEE4Q0Ex QUQ2NzdCMzU2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/Yec/WQEwXrSHPnGy4OQi7miYDhqt0XYMM XBmjrUpd/dsRbRiPRmXM5HHa1W5BuKAyYhtgLtvSApQqWZT8pMaKsmPQBVh2TX0c u/PcUP1XcdD3PnkcEiyKCCQmLJGnUWuVaPioeM6A+ba5icor1h8Uk4cIg7ZSVbQU ma8vgF5g3OLE5uPfx/KPrTrYi4bzHYnNXIeuFuLyz5nY+c/g6s736NpSeQRHcfgj ycLIneOZyn/gngAYIxqDebjKPz/MubfttO5iKkqXrpdjpuGynUIwCX1C8z+8Oqpb zb4oFiRIVWOpZymzYnOCQjUa0xDozUKNrKcesoCdZDOeDBa+01k= -----END CERTIFICATE-----Generated at Wed Jul 29 03:33:05 2026 by rpki-client