$ rpki-client -vvf rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft File: C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft (raw, json) Hash identifier: e/k4Y+hb+5SmW+icoLM5JFfUBAZ3dinK0HfManvQicg= Subject key identifier: B5:DB:87:5E:08:11:FE:F6:6A:9E:AC:0F:06:29:A0:75:0D:E6:BC:4B Authority key identifier: C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94 Certificate issuer: /CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894 Certificate serial: 5FC56F0094D0B5F91B15AE79861FBD8CCE7F0AA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 17:23:12 +0000 Manifest this update: Tue 28 Jul 2026 17:18:12 +0000 Manifest next update: Wed 29 Jul 2026 21:13:12 +0000 Files and hashes: 1: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: Pfe66TELIpbboDlTlvL4smle14adEmFMF0KS3kt6HYM=) 2: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: ZVZI5MXEYgq+QpFFWNL7lGXYAS9omg0P+vD6tywGpec=) 3: C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl (hash: lrgt01GD0XcIVYLMa3pe0FyPPsDA5plgycygJ1OqwJY=) 4: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: occ5qoM9oAkKmzdKhCiXxb0YYDDzZw7eQPlVtS1+AXA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c5:6f:00:94:d0:b5:f9:1b:15:ae:79:86:1f:bd:8c:ce:7f:0a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894 Validity Not Before: Jul 28 17:18:12 2026 GMT Not After : Jul 29 21:13:12 2026 GMT Subject: CN=B5DB875E0811FEF66A9EAC0F0629A0750DE6BC4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:40:4e:2c:ea:03:78:39:b8:d5:85:41:b0:02: cd:86:5e:1d:78:57:c6:66:6d:ef:e5:58:63:41:6c: 18:9e:53:2f:0e:59:64:41:97:d2:df:2b:91:9a:d0: b1:14:fe:e6:f1:2f:79:04:51:1e:fd:68:64:fd:8f: b1:d0:b3:ed:2a:e5:e4:27:46:41:02:99:47:07:e0: 1b:79:c6:70:7f:5f:b4:f5:0c:ab:d1:d8:cd:90:2b: b4:46:70:43:82:53:71:50:93:6c:7c:75:d7:f5:ad: e2:17:3d:f4:4c:f7:ec:d3:72:ad:81:b4:ac:f5:a3: 18:e4:ba:db:f1:bc:51:e3:5e:e4:7b:52:9a:df:50: e0:45:16:bb:f5:71:bc:52:e7:c1:84:40:df:45:a4: c7:13:96:dd:0a:3d:a9:d5:35:ca:27:02:bd:4a:99: 4a:fc:4c:a2:01:0f:f2:88:a7:0c:18:18:52:33:ab: d2:cf:70:cd:50:2a:b9:27:be:b0:1f:98:27:84:47: dd:f1:98:67:13:e4:02:24:a6:3d:dd:ed:c6:d8:b1: 42:64:13:a4:d7:b4:9e:d4:09:cd:f1:cf:bb:00:f8: 22:fc:f2:33:8f:9e:91:0f:40:30:b9:e5:70:f3:1f: 9f:cf:cb:cd:e9:3e:e1:ad:d2:10:8e:42:77:9a:64: 1f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DB:87:5E:08:11:FE:F6:6A:9E:AC:0F:06:29:A0:75:0D:E6:BC:4B X509v3 Authority Key Identifier: keyid:C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:90:6d:ab:fb:83:f8:b0:06:73:08:28:0f:c4:77:3e:c8:00: c2:bc:f4:bb:15:6b:24:77:e8:97:4c:81:25:b0:7e:97:8e:13: 99:4e:07:03:8f:da:7f:f6:ec:80:cc:86:c2:76:38:cf:bf:1f: 39:8b:3a:15:9f:58:c8:00:ce:a7:f1:d7:2d:90:28:05:5a:a7: a6:00:45:3b:5e:f6:09:af:90:62:91:40:61:2a:fa:25:d2:9d: 56:be:8a:67:3b:87:cc:b9:d9:67:73:71:a3:f7:55:37:3c:82: 7e:f6:86:3c:e2:8b:9e:53:db:4d:37:74:c6:f5:62:ee:43:bb: bb:b0:7a:a2:dd:bf:2d:0e:7c:4d:b8:9b:18:ec:ec:36:ce:57: 6e:e9:7b:f7:3e:97:85:24:2c:14:72:ea:27:07:1e:5c:51:7b: a6:4e:90:e7:52:b3:86:ce:ea:60:8c:62:64:e5:ce:fd:1b:1a: 6c:98:6d:a5:7f:b1:60:38:ec:33:3b:b1:2a:41:19:26:45:ba: eb:e3:8a:5e:fc:99:81:ff:3c:e6:b1:f4:de:40:bc:b7:33:40: 4a:d8:48:da:58:78:96:3b:00:48:72:f5:cc:52:83:8f:d5:cf: 47:8e:66:5b:2c:b3:c8:0c:5d:8e:fc:23:a1:a7:05:9a:9a:a0: eb:41:84:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX8VvAJTQtfkbFa55hh+9jM5/CqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQkRGMEVBMTRERERGMEM1NTFERjE4NjMzMkNCODU5 RUI5RDg5NDAeFw0yNjA3MjgxNzE4MTJaFw0yNjA3MjkyMTEzMTJaMDMxMTAvBgNV BAMTKEI1REI4NzVFMDgxMUZFRjY2QTlFQUMwRjA2MjlBMDc1MERFNkJDNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQE4s6gN4ObjVhUGwAs2GXh14 V8Zmbe/lWGNBbBieUy8OWWRBl9LfK5Ga0LEU/ubxL3kEUR79aGT9j7HQs+0q5eQn RkECmUcH4Bt5xnB/X7T1DKvR2M2QK7RGcEOCU3FQk2x8ddf1reIXPfRM9+zTcq2B tKz1oxjkutvxvFHjXuR7UprfUOBFFrv1cbxS58GEQN9FpMcTlt0KPanVNconAr1K mUr8TKIBD/KIpwwYGFIzq9LPcM1QKrknvrAfmCeER93xmGcT5AIkpj3d7cbYsUJk E6TXtJ7UCc3xz7sA+CL88jOPnpEPQDC55XDzH5/Py83pPuGt0hCOQneaZB/3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtduHXggR/vZqnqwPBimgdQ3mvEswHwYDVR0j BBgwFoAUybvfDqFN3fDFUd8YYzLLhZ652JQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTk1OTAxY2MtMWI4ZS00ZjNmLWEzZDAtMzI2OWYwZTE2YzQxLzAvQzlCQkRGMEVB MTRERERGMEM1NTFERjE4NjMzMkNCODU5RUI5RDg5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUJCREYwRUExNEREREYwQzU1MURGMTg2MzMyQ0I4NTlFQjlE ODk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTk1OTAxY2MtMWI4ZS00ZjNmLWEz ZDAtMzI2OWYwZTE2YzQxLzAvQzlCQkRGMEVBMTRERERGMEM1NTFERjE4NjMzMkNC ODU5RUI5RDg5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWQbav7g/iwBnMIKA/Edz7IAMK89LsVayR3 6JdMgSWwfpeOE5lOBwOP2n/27IDMhsJ2OM+/HzmLOhWfWMgAzqfx1y2QKAVap6YA RTte9gmvkGKRQGEq+iXSnVa+imc7h8y52WdzcaP3VTc8gn72hjzii55T2003dMb1 Yu5Du7uweqLdvy0OfE24mxjs7DbOV27pe/c+l4UkLBRy6icHHlxRe6ZOkOdSs4bO 6mCMYmTlzv0bGmyYbaV/sWA47DM7sSpBGSZFuuvjil78mYH/POax9N5AvLczQErY SNpYeJY7AEhy9cxSg4/Vz0eOZlsss8gMXY78I6GnBZqaoOtBhAk= -----END CERTIFICATE-----Generated at Wed Jul 29 06:37:34 2026 by rpki-client