$ rpki-client -vvf rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft File: 1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft (raw, json) Hash identifier: dbQUNR0sYkpnaMorNNdxLMJXHPX2us1XEbuO9Iv+/c4= Subject key identifier: 20:A5:F1:03:39:E9:AE:E3:BE:16:42:6D:58:9C:9F:85:8C:7D:20:03 Authority key identifier: 1D:91:17:06:C9:A5:E8:A4:99:3B:1A:D5:19:49:8D:E9:F6:09:FD:97 Certificate issuer: /CN=1D911706C9A5E8A4993B1AD519498DE9F609FD97 Certificate serial: 476333A16B3B2B614DAA03B01002EBE40BE1BAB2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 16:57:40 +0000 Manifest this update: Tue 28 Jul 2026 16:52:40 +0000 Manifest next update: Wed 29 Jul 2026 18:43:40 +0000 Files and hashes: 1: 1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl (hash: qFi+SoAuZR5LHH6k8ukpS8vuxBdkO0Hoo6YrZIT6Q5M=) 2: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: F4rX5kdBMIK+q1JAnOl0J4l31YWcV9qdCJ59RuEth5I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:63:33:a1:6b:3b:2b:61:4d:aa:03:b0:10:02:eb:e4:0b:e1:ba:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D911706C9A5E8A4993B1AD519498DE9F609FD97 Validity Not Before: Jul 28 16:52:40 2026 GMT Not After : Jul 29 18:43:40 2026 GMT Subject: CN=20A5F10339E9AEE3BE16426D589C9F858C7D2003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:68:80:c4:84:6a:7a:2d:da:e6:ac:82:35:84: f2:7d:04:74:8d:19:78:92:c6:7a:c9:f2:ab:c4:88: 40:ec:40:8d:ad:3a:7a:7a:9b:96:26:ad:fd:9e:e2: a6:e2:e0:47:75:d8:03:70:02:be:9a:1c:d5:9a:24: 9b:f5:78:d3:96:04:93:46:2b:8c:bf:19:16:7a:2a: ac:c2:cc:f7:3a:a6:15:34:f1:fa:fe:3c:16:6c:36: fb:51:f7:06:69:40:06:e0:50:47:5c:f2:90:5a:f9: 7b:ed:d8:af:fd:ca:a9:77:7a:07:e2:34:51:1f:59: 89:3c:ec:f4:2e:e5:de:55:a4:f9:e1:98:e1:40:b5: 3f:0d:8e:9f:35:8c:53:f9:b2:db:e8:72:85:0a:38: 7c:cf:e2:d0:cb:3f:35:b8:53:08:d1:6d:b1:e1:c9: 4f:6a:cc:e4:cb:2f:6a:47:c1:09:9e:71:ef:72:93: c0:5a:35:f8:c6:e8:1f:3c:6b:ac:39:ed:6d:65:f0: 5f:e9:58:22:ed:cc:ac:41:bb:e7:38:eb:d1:29:84: 72:6a:61:78:2a:84:d0:a8:ea:28:23:02:67:00:f7: f8:c2:35:28:74:d9:0e:29:5b:7c:ab:fd:a6:70:9f: 48:89:6d:81:7c:4e:3b:26:7f:d5:c9:81:6e:e7:78: 90:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A5:F1:03:39:E9:AE:E3:BE:16:42:6D:58:9C:9F:85:8C:7D:20:03 X509v3 Authority Key Identifier: keyid:1D:91:17:06:C9:A5:E8:A4:99:3B:1A:D5:19:49:8D:E9:F6:09:FD:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:80:06:ce:de:60:85:19:8b:f4:5f:56:4a:86:1c:7f:63:bb: d2:e4:b1:5c:fc:ec:93:3e:84:e4:67:70:be:8d:ee:b9:92:e5: 0e:84:1c:4e:1b:12:8b:d2:6a:e8:48:2c:a9:98:92:39:cc:89: 9b:1e:7d:2a:40:cc:f9:21:b3:4b:b4:99:18:23:75:28:ac:72: 5d:0e:07:72:56:aa:2c:f6:c3:1c:39:71:02:d6:9c:c5:48:ad: 59:b6:08:02:3d:bb:f2:65:4f:5a:d1:d1:a6:d7:83:ed:9b:4b: b9:01:ed:6f:69:02:2d:9f:28:11:ad:1b:f0:a5:21:2b:7e:bb: 94:35:30:2e:e1:7a:12:e2:b4:bc:8a:3f:b6:84:51:f4:17:bf: 41:08:60:49:9f:ea:5d:ae:79:6f:7d:9f:40:94:08:c1:63:76: de:6f:2d:0a:58:25:32:26:93:04:8e:5c:91:2a:1d:13:c0:af: a8:4a:d9:61:21:31:c8:96:96:7e:32:81:46:25:45:fa:7b:e1: fd:8b:76:1a:42:f8:88:d8:4b:ea:e5:e9:3f:49:0d:31:6e:b5: 9b:8a:13:90:04:db:cb:c2:db:bb:a8:db:71:dc:b1:1b:7f:19: f8:3c:31:26:d6:06:38:05:2b:f1:74:1f:4f:2b:56:a0:12:a4: 79:51:74:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR2MzoWs7K2FNqgOwEALr5AvhurIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ5MTE3MDZDOUE1RThBNDk5M0IxQUQ1MTk0OThERTlG NjA5RkQ5NzAeFw0yNjA3MjgxNjUyNDBaFw0yNjA3MjkxODQzNDBaMDMxMTAvBgNV BAMTKDIwQTVGMTAzMzlFOUFFRTNCRTE2NDI2RDU4OUM5Rjg1OEM3RDIwMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpaIDEhGp6LdrmrII1hPJ9BHSN GXiSxnrJ8qvEiEDsQI2tOnp6m5Ymrf2e4qbi4Ed12ANwAr6aHNWaJJv1eNOWBJNG K4y/GRZ6KqzCzPc6phU08fr+PBZsNvtR9wZpQAbgUEdc8pBa+Xvt2K/9yql3egfi NFEfWYk87PQu5d5VpPnhmOFAtT8Njp81jFP5stvocoUKOHzP4tDLPzW4UwjRbbHh yU9qzOTLL2pHwQmece9yk8BaNfjG6B88a6w57W1l8F/pWCLtzKxBu+c469EphHJq YXgqhNCo6igjAmcA9/jCNSh02Q4pW3yr/aZwn0iJbYF8Tjsmf9XJgW7neJB3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIKXxAznpruO+FkJtWJyfhYx9IAMwHwYDVR0j BBgwFoAUHZEXBsml6KSZOxrVGUmN6fYJ/ZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTMyOTc5M2UtOGYxOC00MTE2LTkyNjgtYTEzM2RhZjExY2VmLzAvMUQ5MTE3MDZD OUE1RThBNDk5M0IxQUQ1MTk0OThERTlGNjA5RkQ5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRDkxMTcwNkM5QTVFOEE0OTkzQjFBRDUxOTQ5OERFOUY2MDlG RDk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky NjgtYTEzM2RhZjExY2VmLzAvMUQ5MTE3MDZDOUE1RThBNDk5M0IxQUQ1MTk0OThE RTlGNjA5RkQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyABs7eYIUZi/RfVkqGHH9ju9LksVz87JM+ hORncL6N7rmS5Q6EHE4bEovSauhILKmYkjnMiZsefSpAzPkhs0u0mRgjdSiscl0O B3JWqiz2wxw5cQLWnMVIrVm2CAI9u/JlT1rR0abXg+2bS7kB7W9pAi2fKBGtG/Cl ISt+u5Q1MC7hehLitLyKP7aEUfQXv0EIYEmf6l2ueW99n0CUCMFjdt5vLQpYJTIm kwSOXJEqHRPAr6hK2WEhMciWln4ygUYlRfp74f2LdhpC+IjYS+rl6T9JDTFutZuK E5AE28vC27uo23HcsRt/Gfg8MSbWBjgFK/F0H08rVqASpHlRdMw= -----END CERTIFICATE-----Generated at Tue Jul 28 20:44:02 2026 by rpki-client