$ rpki-client -vvf rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft File: 9C7034B698C7FF4F82CC082FF9330FF137728D54.mft (raw, json) Hash identifier: OT5/tzRpF164NDWfkQyQWfpWbkcCcoDLJBptXgm7GOM= Subject key identifier: 18:91:7F:20:A0:51:06:7A:A3:E7:9F:DF:27:A0:A2:CA:BF:8E:34:AD Authority key identifier: 9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54 Certificate issuer: /CN=9C7034B698C7FF4F82CC082FF9330FF137728D54 Certificate serial: 2C83B092F09271ED51BAB187C982284227AC195E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 16:42:20 +0000 Manifest this update: Tue 28 Jul 2026 16:37:20 +0000 Manifest next update: Wed 29 Jul 2026 17:45:20 +0000 Files and hashes: 1: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: A0PveJD1fWZi8ZLG9jSQDXLx0OXP4OJbe2qchugQ+9k=) 2: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: TOy78GGmZmDA6OtrgiUd51MTS8SFXQdRl3WQeCtShh4=) 3: 9C7034B698C7FF4F82CC082FF9330FF137728D54.crl (hash: LMPgcCovOSMys1ejlqGWwQx/cnl/l9mlAeYqQB7Avvc=) 4: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: uv4Ad3tws8/RhWdgc4kD3cmhisuMAvoQ5Utlm3Sezl0=) 5: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: bxedlCP85y9hLJaoDhEB2yAE5TUTBHMZLlN+XLPSDLU=) 6: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: QME/pBUvHikqT9rtnZPTg9o0f1I9fV6K/fmu0Ood5pA=) 7: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: xnLexvfVVhCVbKeAWwrGqbTG74y7g6OtFXMau20Rt9I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.crl rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:83:b0:92:f0:92:71:ed:51:ba:b1:87:c9:82:28:42:27:ac:19:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C7034B698C7FF4F82CC082FF9330FF137728D54 Validity Not Before: Jul 28 16:37:20 2026 GMT Not After : Jul 29 17:45:20 2026 GMT Subject: CN=18917F20A051067AA3E79FDF27A0A2CABF8E34AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f5:5b:c4:9a:2b:b4:c7:43:6a:c9:02:2d:d9: 0d:b4:6e:93:05:62:7b:1c:be:8e:5c:ce:0f:47:cd: be:65:47:1f:ff:c4:33:0b:d5:d4:b4:c5:41:72:5e: 00:a7:54:3f:5a:2b:2f:7a:3a:cb:c9:03:0a:f3:fe: 09:2d:97:05:32:0c:5b:80:a2:bf:dc:9e:10:0d:ba: 81:f3:cd:4c:a1:7b:8d:b7:55:cd:76:9e:48:c8:b7: 7e:e1:23:f1:00:69:91:18:19:ce:19:86:e6:76:46: d6:b0:74:ab:79:c0:96:23:c0:bb:b8:3e:67:81:77: c0:22:bb:2e:b1:36:b7:d9:6b:e6:00:01:11:f8:0f: f2:12:53:0f:ce:5d:97:41:70:32:ef:73:00:a1:a1: 2a:44:86:48:ba:84:b4:73:93:f1:ae:a2:32:f9:2d: 2c:ae:2b:56:61:cd:9e:2c:89:32:e7:16:b2:f9:5d: 2e:3c:82:e8:1e:3f:3f:f1:81:f5:9f:3d:f2:f0:17: 36:fa:00:81:53:87:58:87:97:b8:cb:fe:98:80:63: 3a:e2:aa:09:66:f1:5e:9d:94:f0:02:39:50:a1:12: 4e:3d:27:cf:cf:8c:1d:8b:32:5b:9c:0a:46:69:24: 99:2f:e8:cf:e9:77:09:54:e9:29:9d:2d:c1:2c:6b: a2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:91:7F:20:A0:51:06:7A:A3:E7:9F:DF:27:A0:A2:CA:BF:8E:34:AD X509v3 Authority Key Identifier: keyid:9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:79:9c:e5:ce:b6:40:b4:15:42:23:21:90:7d:3e:e2:0a:6c: f5:b9:26:58:2f:53:17:a7:19:32:ce:9b:93:01:77:e5:bd:61: c4:f5:7b:df:2d:db:1a:ed:0e:aa:31:84:17:c9:fb:05:bb:af: af:44:cf:c1:9a:3b:96:18:89:f7:fc:a0:a4:50:00:5a:b7:0a: 15:76:ef:5c:99:85:ce:e2:22:26:47:df:d0:f6:89:28:ec:8f: 54:71:6d:aa:3f:5f:e3:70:5b:7e:55:14:cb:a0:d2:29:f0:3d: d8:da:7f:3a:8a:1f:10:cd:00:ed:4f:cf:e4:b2:8b:0c:f2:ae: 60:c3:00:23:a9:8b:3e:83:12:fe:ec:3d:eb:47:33:d0:7c:f2: b2:14:7b:56:ba:26:bb:88:48:36:3d:87:b7:1b:51:00:6c:d3: ac:04:a4:0b:9a:95:e0:3b:43:25:bd:ae:54:9e:a2:67:81:e7: c1:69:0d:f2:d1:7f:42:fc:00:52:16:4d:28:f5:49:33:59:a5: 66:0f:ef:cc:44:18:e8:ef:b6:34:77:96:1f:69:09:27:b5:48: ae:74:19:27:0b:d8:d3:ac:ec:14:35:14:6f:43:6f:30:3e:7e: 45:db:de:0d:c6:7b:05:a0:8c:1e:b0:fd:a2:c3:e8:33:41:b1: c3:29:b4:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULIOwkvCSce1RurGHyYIoQiesGV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM3MDM0QjY5OEM3RkY0RjgyQ0MwODJGRjkzMzBGRjEz NzcyOEQ1NDAeFw0yNjA3MjgxNjM3MjBaFw0yNjA3MjkxNzQ1MjBaMDMxMTAvBgNV BAMTKDE4OTE3RjIwQTA1MTA2N0FBM0U3OUZERjI3QTBBMkNBQkY4RTM0QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl9VvEmiu0x0NqyQIt2Q20bpMF Ynscvo5czg9Hzb5lRx//xDML1dS0xUFyXgCnVD9aKy96OsvJAwrz/gktlwUyDFuA or/cnhANuoHzzUyhe423Vc12nkjIt37hI/EAaZEYGc4ZhuZ2RtawdKt5wJYjwLu4 PmeBd8Aiuy6xNrfZa+YAARH4D/ISUw/OXZdBcDLvcwChoSpEhki6hLRzk/GuojL5 LSyuK1ZhzZ4siTLnFrL5XS48gugePz/xgfWfPfLwFzb6AIFTh1iHl7jL/piAYzri qglm8V6dlPACOVChEk49J8/PjB2LMlucCkZpJJkv6M/pdwlU6SmdLcEsa6IvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGJF/IKBRBnqj55/fJ6Ciyr+ONK0wHwYDVR0j BBgwFoAUnHA0tpjH/0+CzAgv+TMP8TdyjVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDllY2E1MGItNTcyMi00OTE4LTgzMTQtODU5ZDNjMWY1NWEyLzAvOUM3MDM0QjY5 OEM3RkY0RjgyQ0MwODJGRjkzMzBGRjEzNzcyOEQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85QzcwMzRCNjk4QzdGRjRGODJDQzA4MkZGOTMzMEZGMTM3NzI4 RDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDllY2E1MGItNTcyMi00OTE4LTgz MTQtODU5ZDNjMWY1NWEyLzAvOUM3MDM0QjY5OEM3RkY0RjgyQ0MwODJGRjkzMzBG RjEzNzcyOEQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGN5nOXOtkC0FUIjIZB9PuIKbPW5JlgvUxen GTLOm5MBd+W9YcT1e98t2xrtDqoxhBfJ+wW7r69Ez8GaO5YYiff8oKRQAFq3ChV2 71yZhc7iIiZH39D2iSjsj1Rxbao/X+NwW35VFMug0inwPdjafzqKHxDNAO1Pz+Sy iwzyrmDDACOpiz6DEv7sPetHM9B88rIUe1a6JruISDY9h7cbUQBs06wEpAualeA7 QyW9rlSeomeB58FpDfLRf0L8AFIWTSj1STNZpWYP78xEGOjvtjR3lh9pCSe1SK50 GScL2NOs7BQ1FG9DbzA+fkXb3g3GewWgjB6w/aLD6DNBscMptA8= -----END CERTIFICATE-----Generated at Wed Jul 29 09:51:05 2026 by rpki-client