$ rpki-client -vvf rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft File: 9F018573ABC40A1244EF018EE95D73D8E54A5247.mft (raw, json) Hash identifier: zf4ihdQVu+TXvMeV7WOoNoKFnFBrQHoqSYFp4xyV+DI= Subject key identifier: E1:10:DF:85:0D:4A:3B:15:4F:A0:4D:26:6B:DA:C1:C2:B0:A9:55:D4 Authority key identifier: 9F:01:85:73:AB:C4:0A:12:44:EF:01:8E:E9:5D:73:D8:E5:4A:52:47 Certificate issuer: /CN=9F018573ABC40A1244EF018EE95D73D8E54A5247 Certificate serial: 5DC1D88937F0FE3BE545AA5C3899E2003B39BEB4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft Manifest number: 77 Signing time: Tue 28 Jul 2026 21:53:39 +0000 Manifest this update: Tue 28 Jul 2026 21:48:39 +0000 Manifest next update: Wed 29 Jul 2026 21:59:39 +0000 Files and hashes: 1: 9F018573ABC40A1244EF018EE95D73D8E54A5247.crl (hash: OAGbucfWxEslqsigKsSmwwIdHtyZA7agny0el3cAZTQ=) 2: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: On7lPgtr4muQ2OAv+z91B4cwc8QzzKQys3kXiufzPRc=) 3: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: 5rI4L+b8xzlRIUsWxeEF2NdCqFStv1SMLdpn9443Ve4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.crl rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c1:d8:89:37:f0:fe:3b:e5:45:aa:5c:38:99:e2:00:3b:39:be:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F018573ABC40A1244EF018EE95D73D8E54A5247 Validity Not Before: Jul 28 21:48:39 2026 GMT Not After : Jul 29 21:59:39 2026 GMT Subject: CN=E110DF850D4A3B154FA04D266BDAC1C2B0A955D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:26:79:af:70:9f:26:fb:38:28:bb:2d:1d:76: 2a:ac:a3:50:6e:f5:a8:d5:72:8e:1d:8b:66:e4:6d: 15:38:8f:aa:22:f7:b8:7b:fd:0f:76:2b:c7:93:8d: 3c:59:62:fd:da:37:3a:dd:37:77:5d:19:e4:cd:fd: 3b:7b:66:fb:b7:2d:3d:97:11:9a:fe:dd:2e:3b:c4: c5:64:a6:24:54:f9:d1:6c:4c:fd:62:e3:96:9a:56: b4:08:ac:8f:d8:fe:fa:37:62:e7:b4:a8:b2:39:c7: 68:07:2d:c8:38:88:8d:30:ca:31:d7:dc:b2:52:c3: f8:ad:1c:06:cd:1c:84:38:47:74:76:73:51:fc:e1: 91:54:69:9d:72:fa:90:61:be:37:7a:5c:43:f7:0b: 03:c5:6d:e7:2d:59:65:fc:0c:bf:9a:8e:26:8a:2d: 2f:17:8f:49:01:42:d7:6d:be:08:81:f7:b4:2d:ac: 70:78:d3:fe:9b:77:90:05:c9:30:35:33:39:f4:bc: 6d:98:13:ee:f6:5f:cc:41:d7:e7:58:3f:24:48:61: b5:5e:62:59:ec:21:a7:aa:d2:e5:ac:d0:40:eb:47: b1:36:74:0e:0b:57:06:23:09:1d:33:8b:58:57:68: 82:7c:7d:0b:13:3d:bb:4c:91:3a:6d:7f:d0:98:be: f8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:10:DF:85:0D:4A:3B:15:4F:A0:4D:26:6B:DA:C1:C2:B0:A9:55:D4 X509v3 Authority Key Identifier: keyid:9F:01:85:73:AB:C4:0A:12:44:EF:01:8E:E9:5D:73:D8:E5:4A:52:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:43:42:89:5a:38:38:c6:53:89:81:07:ac:a6:22:22:37:2d: 94:3d:2b:a1:f6:ce:01:05:18:f4:05:38:9b:01:82:38:6c:44: a5:3c:e2:24:5f:bc:3b:51:f5:5f:fc:c4:5d:af:35:cd:f0:78: d5:20:0a:c7:04:fd:a7:a6:d2:8e:c7:df:f9:df:a8:da:9b:64: c7:23:47:ba:a0:3c:50:21:ea:92:74:4d:46:11:b5:b0:21:ff: e6:1e:be:10:cc:cd:58:78:2a:e1:ed:62:0c:54:57:a4:e6:22: 26:1d:ca:ae:bd:68:49:be:92:ec:30:43:94:e6:63:44:fa:9f: 12:66:c0:99:96:f1:54:c3:ee:e0:76:dd:23:01:65:f7:25:0d: 71:b4:db:80:ec:17:70:55:0b:bf:80:27:4b:a8:9f:eb:1c:5a: e9:3c:1f:de:ac:c0:8b:6d:48:9a:fc:28:a8:a5:0c:14:4c:26: 52:0b:b1:c1:bf:9e:2d:b8:11:db:fd:ee:88:b4:9d:81:cd:44: f4:71:3a:9a:ec:77:28:0a:18:3b:51:74:5b:c8:b2:51:33:2a: 79:59:45:a6:9d:c2:81:18:ba:14:6d:97:2e:60:49:80:0b:7c: e1:e5:d1:2a:fa:df:a7:6b:ac:d4:3a:2a:71:7f:70:89:78:9e: 64:be:e3:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXcHYiTfw/jvlRapcOJniADs5vrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwMTg1NzNBQkM0MEExMjQ0RUYwMThFRTk1RDczRDhF NTRBNTI0NzAeFw0yNjA3MjgyMTQ4MzlaFw0yNjA3MjkyMTU5MzlaMDMxMTAvBgNV BAMTKEUxMTBERjg1MEQ0QTNCMTU0RkEwNEQyNjZCREFDMUMyQjBBOTU1RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJnmvcJ8m+zgouy0ddiqso1Bu 9ajVco4di2bkbRU4j6oi97h7/Q92K8eTjTxZYv3aNzrdN3ddGeTN/Tt7Zvu3LT2X EZr+3S47xMVkpiRU+dFsTP1i45aaVrQIrI/Y/vo3Yue0qLI5x2gHLcg4iI0wyjHX 3LJSw/itHAbNHIQ4R3R2c1H84ZFUaZ1y+pBhvjd6XEP3CwPFbectWWX8DL+ajiaK LS8Xj0kBQtdtvgiB97QtrHB40/6bd5AFyTA1Mzn0vG2YE+72X8xB1+dYPyRIYbVe YlnsIaeq0uWs0EDrR7E2dA4LVwYjCR0zi1hXaIJ8fQsTPbtMkTptf9CYvviZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4RDfhQ1KOxVPoE0ma9rBwrCpVdQwHwYDVR0j BBgwFoAUnwGFc6vEChJE7wGO6V1z2OVKUkcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTNmNzVlOTgtMTRlZi00NDU3LTk0ZjMtZTViNzNhOTIyZmM1LzAvOUYwMTg1NzNB QkM0MEExMjQ0RUYwMThFRTk1RDczRDhFNTRBNTI0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RjAxODU3M0FCQzQwQTEyNDRFRjAxOEVFOTVENzNEOEU1NEE1 MjQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0 ZjMtZTViNzNhOTIyZmM1LzAvOUYwMTg1NzNBQkM0MEExMjQ0RUYwMThFRTk1RDcz RDhFNTRBNTI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpDQolaODjGU4mBB6ymIiI3LZQ9K6H2zgEF GPQFOJsBgjhsRKU84iRfvDtR9V/8xF2vNc3weNUgCscE/aem0o7H3/nfqNqbZMcj R7qgPFAh6pJ0TUYRtbAh/+YevhDMzVh4KuHtYgxUV6TmIiYdyq69aEm+kuwwQ5Tm Y0T6nxJmwJmW8VTD7uB23SMBZfclDXG024DsF3BVC7+AJ0uon+scWuk8H96swItt SJr8KKilDBRMJlILscG/ni24Edv97oi0nYHNRPRxOprsdygKGDtRdFvIslEzKnlZ RaadwoEYuhRtly5gSYALfOHl0Sr636drrNQ6KnF/cIl4nmS+4zg= -----END CERTIFICATE-----Generated at Wed Jul 29 09:38:28 2026 by rpki-client