$ rpki-client -vvf rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft File: 9970795F3B277481EE73EA3A16E4FA33964C92D3.mft (raw, json) Hash identifier: kPvQFfePYRhBzual6841rGF19Bm0A1xN2wXb22cPbIE= Subject key identifier: E1:7D:07:91:6A:06:93:DB:6C:E9:55:3B:F4:DD:E9:A7:46:5C:C4:BF Authority key identifier: 99:70:79:5F:3B:27:74:81:EE:73:EA:3A:16:E4:FA:33:96:4C:92:D3 Certificate issuer: /CN=9970795F3B277481EE73EA3A16E4FA33964C92D3 Certificate serial: 34A49FF47D4DAE5F72357606691EC7797E317565 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 19:45:57 +0000 Manifest this update: Tue 28 Jul 2026 19:40:57 +0000 Manifest next update: Wed 29 Jul 2026 22:04:57 +0000 Files and hashes: 1: 3130332e3135362e3134372e302f32342d3234203d3e20313338383130.roa (hash: 5C93GzuwPEwzfZCO761jlr9+kP+U+BLor2EmxZBdJ5Q=) 2: 3130332e3135362e3134362e302f32332d3234203d3e20313431303933.roa (hash: 3Da0wSVO79CXcT4/2ct9HlMI+w8ZYFGpqAbvRWk65hU=) 3: 9970795F3B277481EE73EA3A16E4FA33964C92D3.crl (hash: 9xFAxKen4P13HPz5zhUXjs33aoJpla+lGl4+OSmYfwM=) 4: 3130332e3135362e3134362e302f32342d3234203d3e20313431303933.roa (hash: j3C8JrVEuDWGDYTHo2d7ibn1ngIRwCbcuK1vWB38mfI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.crl rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a4:9f:f4:7d:4d:ae:5f:72:35:76:06:69:1e:c7:79:7e:31:75:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970795F3B277481EE73EA3A16E4FA33964C92D3 Validity Not Before: Jul 28 19:40:57 2026 GMT Not After : Jul 29 22:04:57 2026 GMT Subject: CN=E17D07916A0693DB6CE9553BF4DDE9A7465CC4BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:06:76:91:b3:d7:82:27:f2:7a:ee:b0:4d:d5: c8:9b:7e:3b:9b:4f:17:b0:97:9c:09:0e:30:0e:c6: 25:fe:04:39:8e:83:a8:6d:37:13:e8:f6:59:cf:26: 38:6a:a9:52:c7:06:c8:47:7c:2b:fd:1f:ba:f0:9a: a1:a1:55:a0:a5:f8:68:0a:77:02:5c:38:14:57:88: c0:67:df:8f:a7:dc:df:26:b3:65:93:a5:49:62:e3: da:69:91:16:c1:c6:ab:7b:34:36:58:39:dd:37:71: 29:6b:35:fd:23:f1:16:05:e2:94:d4:d0:e8:da:b8: 00:38:53:99:25:05:26:ad:1c:be:ad:fc:9f:e9:04: c1:18:ad:32:a8:41:b0:54:f0:b4:f1:a2:db:0e:0a: 43:81:aa:09:24:6c:e9:02:cc:50:76:49:ae:ab:3d: 2b:5a:f2:14:b8:96:c3:7f:4a:bd:57:a3:da:05:35: 72:f9:83:f3:4b:ea:52:17:75:a6:ad:93:e8:23:de: 59:c7:af:46:35:79:17:85:89:5e:cc:ca:51:89:57: 1a:a6:5e:98:70:b1:2a:fe:3c:90:a1:97:ea:14:5a: 1c:eb:4f:87:ea:64:e3:1f:fe:e9:17:2e:98:e9:3d: ff:d2:5a:9e:01:d2:43:49:96:df:d9:18:15:29:c1: 39:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7D:07:91:6A:06:93:DB:6C:E9:55:3B:F4:DD:E9:A7:46:5C:C4:BF X509v3 Authority Key Identifier: keyid:99:70:79:5F:3B:27:74:81:EE:73:EA:3A:16:E4:FA:33:96:4C:92:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:91:f6:6e:7c:01:8c:2e:31:27:a9:ee:07:3c:7c:ce:ba:83: bf:d1:57:f3:64:b4:c3:81:3e:8f:00:9a:76:7d:ce:15:77:86: bd:95:a5:0f:15:5f:38:6d:5a:23:e2:9c:f7:40:df:fb:90:9a: 99:3e:5e:07:72:f9:4c:9a:92:3c:29:f4:43:83:f6:cc:2a:61: 98:80:49:0d:f6:e0:42:eb:74:fa:13:ce:1b:2e:25:25:95:18: 19:81:6d:41:0f:c0:33:95:9d:6d:76:79:80:1a:f1:96:8f:e6: 68:d1:00:b3:c6:34:59:a2:ee:80:ce:4c:df:bc:59:d5:4c:75: 32:21:2b:1e:70:ed:05:eb:2e:22:e7:fa:4d:66:81:2c:55:7b: 0b:18:1a:22:e7:22:c4:d4:6d:0c:ab:c0:dc:3d:ce:18:4a:c7: 91:17:4e:3b:ff:02:8a:12:9b:85:fb:15:e2:76:03:60:a0:4c: 4a:5e:e8:59:18:66:87:29:9d:c4:51:b9:ce:59:03:7b:7a:fc: a1:7b:be:db:b9:ae:89:4b:77:20:50:c1:0e:7a:db:27:6c:38: 57:c9:01:c6:44:f7:08:b9:3e:f4:7f:d0:27:57:9d:85:dc:ba: 36:5d:b8:be:62:88:d4:b0:52:09:1b:52:dc:56:dd:7f:86:a7: 48:38:e9:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNKSf9H1Nrl9yNXYGaR7HeX4xdWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk3MDc5NUYzQjI3NzQ4MUVFNzNFQTNBMTZFNEZBMzM5 NjRDOTJEMzAeFw0yNjA3MjgxOTQwNTdaFw0yNjA3MjkyMjA0NTdaMDMxMTAvBgNV BAMTKEUxN0QwNzkxNkEwNjkzREI2Q0U5NTUzQkY0RERFOUE3NDY1Q0M0QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQBnaRs9eCJ/J67rBN1cibfjub Txewl5wJDjAOxiX+BDmOg6htNxPo9lnPJjhqqVLHBshHfCv9H7rwmqGhVaCl+GgK dwJcOBRXiMBn34+n3N8ms2WTpUli49ppkRbBxqt7NDZYOd03cSlrNf0j8RYF4pTU 0OjauAA4U5klBSatHL6t/J/pBMEYrTKoQbBU8LTxotsOCkOBqgkkbOkCzFB2Sa6r PSta8hS4lsN/Sr1Xo9oFNXL5g/NL6lIXdaatk+gj3lnHr0Y1eReFiV7MylGJVxqm XphwsSr+PJChl+oUWhzrT4fqZOMf/ukXLpjpPf/SWp4B0kNJlt/ZGBUpwTmVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4X0HkWoGk9ts6VU79N3pp0ZcxL8wHwYDVR0j BBgwFoAUmXB5XzsndIHuc+o6FuT6M5ZMktMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg5OWExNWItZDVhZS00NWVjLTgwMTItYTZjYWFiM2RkODhiLzAvOTk3MDc5NUYz QjI3NzQ4MUVFNzNFQTNBMTZFNEZBMzM5NjRDOTJEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTcwNzk1RjNCMjc3NDgxRUU3M0VBM0ExNkU0RkEzMzk2NEM5 MkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg5OWExNWItZDVhZS00NWVjLTgw MTItYTZjYWFiM2RkODhiLzAvOTk3MDc5NUYzQjI3NzQ4MUVFNzNFQTNBMTZFNEZB MzM5NjRDOTJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaR9m58AYwuMSep7gc8fM66g7/RV/NktMOB Po8AmnZ9zhV3hr2VpQ8VXzhtWiPinPdA3/uQmpk+Xgdy+Uyakjwp9EOD9swqYZiA SQ324ELrdPoTzhsuJSWVGBmBbUEPwDOVnW12eYAa8ZaP5mjRALPGNFmi7oDOTN+8 WdVMdTIhKx5w7QXrLiLn+k1mgSxVewsYGiLnIsTUbQyrwNw9zhhKx5EXTjv/AooS m4X7FeJ2A2CgTEpe6FkYZocpncRRuc5ZA3t6/KF7vtu5rolLdyBQwQ562ydsOFfJ AcZE9wi5PvR/0CdXnYXcujZduL5iiNSwUgkbUtxW3X+Gp0g46fw= -----END CERTIFICATE-----Generated at Wed Jul 29 09:30:29 2026 by rpki-client