$ rpki-client -vvf rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft File: 9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft (raw, json) Hash identifier: 1d4Qo0kerI1y1lVM+uCwCejJC0fltpAIAHxi+4wuLb4= Subject key identifier: D2:7F:0E:6F:AE:D3:8D:0D:CC:2F:D9:3B:C2:9A:E1:35:6F:18:6E:BC Authority key identifier: 9D:8E:FC:0D:64:AA:98:41:BE:1E:38:43:21:BB:2C:12:15:3F:F1:D9 Certificate issuer: /CN=9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9 Certificate serial: 244663A0237B1C9ADEC6085211F7BC31018D3520 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 17:07:48 +0000 Manifest this update: Tue 28 Jul 2026 17:02:48 +0000 Manifest next update: Wed 29 Jul 2026 18:03:48 +0000 Files and hashes: 1: 3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa (hash: 1YCliMmBjyp95uqeBYgoOHcVWy+xU/Vfr+PcnyYk678=) 2: 9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl (hash: k7BQ2OQzoMcO8DMQk2ZKMQTdPyi/UCDT0Oe1WLWg6tM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:46:63:a0:23:7b:1c:9a:de:c6:08:52:11:f7:bc:31:01:8d:35:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9 Validity Not Before: Jul 28 17:02:48 2026 GMT Not After : Jul 29 18:03:48 2026 GMT Subject: CN=D27F0E6FAED38D0DCC2FD93BC29AE1356F186EBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e3:c1:68:f7:a0:63:f2:e4:a9:e9:c8:7c:3d: 9a:1d:51:b7:65:0b:3c:32:13:08:ec:85:41:fe:92: f1:74:9c:a7:35:20:7e:2b:57:f9:75:fa:d9:70:9b: c8:b6:04:72:7d:c7:1a:8c:ff:74:14:c4:80:30:33: f2:b3:33:09:99:35:3d:98:8b:7e:1c:8f:0c:0e:b3: 97:90:b9:4c:c3:86:9f:3c:73:2f:7b:6a:b9:aa:d7: 21:5f:0f:25:7f:4c:3a:8d:f2:2d:d6:bb:7d:0d:8a: c5:db:da:e6:4b:1b:ad:41:34:fd:b4:77:f6:c9:f8: 0f:b3:76:8f:91:00:63:83:e6:4b:77:5c:01:87:0b: 98:fb:d9:4f:a6:13:76:e6:bb:d1:f4:73:f8:3b:c7: 9b:f9:eb:32:a4:1d:b6:f7:25:bf:3e:7b:47:27:bf: 52:de:ab:db:e0:95:25:ac:34:e3:34:4f:1a:9c:25: 8f:ad:f3:7d:35:68:48:61:99:f8:46:98:a2:35:a9: ac:d8:c6:48:e0:43:ff:4e:0b:26:5e:55:9a:66:25: f7:3f:d3:c5:2b:f4:da:fe:e3:1a:96:18:ec:e0:5a: 1c:4d:71:d1:7f:40:44:3f:13:35:0c:09:8d:e5:02: 67:8b:a6:b2:1a:eb:67:7d:32:13:fb:4d:2d:1b:bb: 3a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7F:0E:6F:AE:D3:8D:0D:CC:2F:D9:3B:C2:9A:E1:35:6F:18:6E:BC X509v3 Authority Key Identifier: keyid:9D:8E:FC:0D:64:AA:98:41:BE:1E:38:43:21:BB:2C:12:15:3F:F1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:20:83:39:a8:34:df:3e:8d:98:07:67:53:0d:f1:a6:8c:9b: c9:6e:48:3d:d4:4f:85:7c:7e:21:d1:8c:90:88:4f:92:73:e4: 73:33:81:e8:f6:d6:c8:e7:0e:bc:39:7e:02:31:fe:6f:53:be: 55:8e:d4:c4:73:09:25:72:55:3b:7e:44:18:f8:9f:41:2f:ea: 57:ed:45:44:8b:6e:89:40:cd:44:c2:0b:4c:eb:0e:9d:21:ae: c9:93:15:76:db:1d:c4:04:c7:59:a4:ab:30:ff:d5:ad:61:e5: 72:e4:6e:ad:11:4c:c1:f0:98:d1:1e:d5:2b:8c:59:47:a2:fc: 20:0f:ee:98:a5:2a:81:2d:43:08:3e:74:d9:67:d1:54:20:74: 8c:43:bc:08:7f:a2:ab:30:b5:10:69:cf:0a:a4:ea:e0:ca:10: 35:9f:d2:0c:7f:91:53:39:72:ea:5c:35:15:94:89:4e:33:cf: 21:ed:95:63:e3:77:9f:e2:17:b0:00:d3:7b:f2:7c:51:3c:d2: a8:f2:b1:c8:85:7d:fd:04:1b:41:1e:9d:41:77:db:6b:73:4b: 4c:3f:43:55:54:12:b2:c4:f6:a9:88:93:b7:90:06:71:e7:d9: 4a:f1:a7:d4:21:5c:eb:f9:8d:88:66:3b:c9:f6:c0:06:cb:a8: aa:e8:18:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJEZjoCN7HJrexghSEfe8MQGNNSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ4RUZDMEQ2NEFBOTg0MUJFMUUzODQzMjFCQjJDMTIx NTNGRjFEOTAeFw0yNjA3MjgxNzAyNDhaFw0yNjA3MjkxODAzNDhaMDMxMTAvBgNV BAMTKEQyN0YwRTZGQUVEMzhEMERDQzJGRDkzQkMyOUFFMTM1NkYxODZFQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa48Fo96Bj8uSp6ch8PZodUbdl CzwyEwjshUH+kvF0nKc1IH4rV/l1+tlwm8i2BHJ9xxqM/3QUxIAwM/KzMwmZNT2Y i34cjwwOs5eQuUzDhp88cy97armq1yFfDyV/TDqN8i3Wu30NisXb2uZLG61BNP20 d/bJ+A+zdo+RAGOD5kt3XAGHC5j72U+mE3bmu9H0c/g7x5v56zKkHbb3Jb8+e0cn v1Leq9vglSWsNOM0TxqcJY+t8301aEhhmfhGmKI1qazYxkjgQ/9OCyZeVZpmJfc/ 08Ur9Nr+4xqWGOzgWhxNcdF/QEQ/EzUMCY3lAmeLprIa62d9MhP7TS0buzqzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0n8Ob67TjQ3ML9k7wprhNW8YbrwwHwYDVR0j BBgwFoAUnY78DWSqmEG+HjhDIbssEhU/8dkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDFkNTFkNDEtYjZjYy00MjBhLWI1YTgtNjdjOGJkNmIwMmFmLzAvOUQ4RUZDMEQ2 NEFBOTg0MUJFMUUzODQzMjFCQjJDMTIxNTNGRjFEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RDhFRkMwRDY0QUE5ODQxQkUxRTM4NDMyMUJCMkMxMjE1M0ZG MUQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDFkNTFkNDEtYjZjYy00MjBhLWI1 YTgtNjdjOGJkNmIwMmFmLzAvOUQ4RUZDMEQ2NEFBOTg0MUJFMUUzODQzMjFCQjJD MTIxNTNGRjFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQggzmoNN8+jZgHZ1MN8aaMm8luSD3UT4V8 fiHRjJCIT5Jz5HMzgej21sjnDrw5fgIx/m9TvlWO1MRzCSVyVTt+RBj4n0Ev6lft RUSLbolAzUTCC0zrDp0hrsmTFXbbHcQEx1mkqzD/1a1h5XLkbq0RTMHwmNEe1SuM WUei/CAP7pilKoEtQwg+dNln0VQgdIxDvAh/oqswtRBpzwqk6uDKEDWf0gx/kVM5 cupcNRWUiU4zzyHtlWPjd5/iF7AA03vyfFE80qjysciFff0EG0EenUF322tzS0w/ Q1VUErLE9qmIk7eQBnHn2Urxp9QhXOv5jYhmO8n2wAbLqKroGPQ= -----END CERTIFICATE-----Generated at Wed Jul 29 01:03:54 2026 by rpki-client