$ rpki-client -vvf rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft File: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft (raw, json) Hash identifier: oKJmGfYmCYOmHsj+kc7QF+lDxLO9QzMHRMh+thCZx+c= Subject key identifier: 2F:03:63:58:58:D2:0B:DC:40:AE:7D:12:AA:1D:0D:B8:3C:6C:5B:8D Authority key identifier: B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A Certificate issuer: /CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A Certificate serial: 5D841BC58FE4C6C64FE5FDF10F4D48789A315E9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 17:23:14 +0000 Manifest this update: Tue 28 Jul 2026 17:18:14 +0000 Manifest next update: Wed 29 Jul 2026 19:46:14 +0000 Files and hashes: 1: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl (hash: yLJNdN/B+k3ZMlJ9+kUu8CyGGt2vK/TYcbJrl5TKFYk=) 2: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: fDnmzf65jBSv74PMDMyNjaHpX/nCsTXRpP2C1qWxmnk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:84:1b:c5:8f:e4:c6:c6:4f:e5:fd:f1:0f:4d:48:78:9a:31:5e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A Validity Not Before: Jul 28 17:18:14 2026 GMT Not After : Jul 29 19:46:14 2026 GMT Subject: CN=2F03635858D20BDC40AE7D12AA1D0DB83C6C5B8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:61:14:1c:52:eb:f5:b3:6c:ce:19:85:51:77: 3a:82:3b:a8:96:e1:6e:49:34:60:d2:88:e5:f7:c7: c3:49:37:f4:41:6c:31:eb:e4:7b:73:d3:b1:de:71: 9b:12:36:ec:b2:aa:6f:d0:35:37:77:84:48:4d:ee: b1:99:d0:81:25:dc:6a:3c:c9:12:69:88:26:6d:60: ed:7f:69:cc:2a:68:f9:27:0f:27:b5:a7:61:ec:b5: 5b:69:e9:45:01:5f:99:fa:bd:6a:54:1b:43:b6:63: 8d:89:1f:1c:f6:ae:af:25:21:75:2b:3a:03:a2:38: 4a:3f:53:39:9e:f8:09:02:a6:46:45:17:f7:f3:f1: 6b:0b:09:40:51:d6:8e:2e:c1:ae:45:a4:9a:d2:e4: 9d:8c:3f:05:86:43:5c:0c:79:61:f4:8d:12:80:37: 8e:7a:d7:8a:3c:e4:98:2b:cc:48:db:76:e1:a1:1e: da:e9:d3:4b:79:05:70:01:aa:cc:35:5d:a0:4e:d7: f7:43:35:8f:bf:da:2d:fa:28:64:7b:df:6d:92:6b: a2:35:46:3c:c5:54:b8:4e:11:3c:26:10:9a:2e:ef: d0:4b:5b:43:7d:71:27:82:1e:8b:44:da:57:53:9f: e7:40:90:7e:db:2b:a7:86:03:48:33:ff:af:6e:a0: 0f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:03:63:58:58:D2:0B:DC:40:AE:7D:12:AA:1D:0D:B8:3C:6C:5B:8D X509v3 Authority Key Identifier: keyid:B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:1c:0d:89:5e:47:d7:46:f9:27:6c:94:57:f2:36:2e:33:9a: 45:06:30:ca:04:1b:c6:60:a6:36:ea:16:02:43:62:ae:fd:5a: 67:d6:e5:b9:6a:87:fc:81:3b:92:45:d8:17:fb:b0:00:71:67: 02:cd:b8:fe:97:de:1a:f0:eb:6d:c8:64:5c:23:31:7b:93:f8: 7f:ba:d9:7d:5e:d6:df:7c:5b:35:89:cb:a2:2a:88:4d:3d:a6: a0:32:5b:18:fd:34:a4:81:e9:dd:b4:4e:c1:cf:e5:3f:2b:c1: 21:bc:09:80:df:7c:a2:ff:3b:b8:a4:c6:68:77:45:1c:dc:3c: 8e:82:ec:e4:e0:cb:7b:d4:e2:fd:f3:2f:41:80:12:ed:08:ba: ed:fd:ac:40:fc:20:cf:de:a1:8a:61:86:07:46:b3:55:1c:ed: ad:a2:f2:75:c9:37:56:1a:a1:e0:a4:44:0d:c7:c4:a2:ef:f6: e6:74:a0:42:88:5c:ca:1d:d6:60:86:65:5e:cc:86:7d:57:50: 62:e0:b2:d0:7f:9c:a3:0f:6c:df:4a:fd:d3:bb:f8:f4:6f:6d: b8:99:cc:ab:9d:9a:46:15:25:d2:82:83:15:9e:d4:9d:10:70: f6:c4:07:33:18:2b:8a:33:67:4b:3c:19:76:58:b7:b7:f5:32: 10:9c:ee:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXYQbxY/kxsZP5f3xD01IeJoxXp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCOEE2MUQ4RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3NkFD NUZBRDI5QTAeFw0yNjA3MjgxNzE4MTRaFw0yNjA3MjkxOTQ2MTRaMDMxMTAvBgNV BAMTKDJGMDM2MzU4NThEMjBCREM0MEFFN0QxMkFBMUQwREI4M0M2QzVCOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRYRQcUuv1s2zOGYVRdzqCO6iW 4W5JNGDSiOX3x8NJN/RBbDHr5Htz07HecZsSNuyyqm/QNTd3hEhN7rGZ0IEl3Go8 yRJpiCZtYO1/acwqaPknDye1p2HstVtp6UUBX5n6vWpUG0O2Y42JHxz2rq8lIXUr OgOiOEo/Uzme+AkCpkZFF/fz8WsLCUBR1o4uwa5FpJrS5J2MPwWGQ1wMeWH0jRKA N45614o85JgrzEjbduGhHtrp00t5BXABqsw1XaBO1/dDNY+/2i36KGR7322Sa6I1 RjzFVLhOETwmEJou79BLW0N9cSeCHotE2ldTn+dAkH7bK6eGA0gz/69uoA/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULwNjWFjSC9xArn0Sqh0NuDxsW40wHwYDVR0j BBgwFoAUubimHY6lUgzyjo5cJFAXasX60powDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE0MTc2MDgtMTZiOC00NDk3LTgxZTMtOTQ3ZDc4ZGJjZjExLzAvQjlCOEE2MUQ4 RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3NkFDNUZBRDI5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9COUI4QTYxRDhFQTU1MjBDRjI4RThFNUMyNDUwMTc2QUM1RkFE MjlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvQjlCOEE2MUQ4RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3 NkFDNUZBRDI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMcDYleR9dG+SdslFfyNi4zmkUGMMoEG8Zg pjbqFgJDYq79WmfW5blqh/yBO5JF2Bf7sABxZwLNuP6X3hrw623IZFwjMXuT+H+6 2X1e1t98WzWJy6IqiE09pqAyWxj9NKSB6d20TsHP5T8rwSG8CYDffKL/O7ikxmh3 RRzcPI6C7OTgy3vU4v3zL0GAEu0Iuu39rED8IM/eoYphhgdGs1Uc7a2i8nXJN1Ya oeCkRA3HxKLv9uZ0oEKIXMod1mCGZV7Mhn1XUGLgstB/nKMPbN9K/dO7+PRvbbiZ zKudmkYVJdKCgxWe1J0QcPbEBzMYK4ozZ0s8GXZYt7f1MhCc7vE= -----END CERTIFICATE-----Generated at Tue Jul 28 20:40:55 2026 by rpki-client