$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft File: 9FA20A14AF60219662C9668DE75D25F0C8B84220.mft (raw, json) Hash identifier: j2auhBjvWtjcQxbvjpHCJIu2GQ7QDMJ7QHSk3o0pcpI= Subject key identifier: 37:F9:47:6D:43:D0:3F:EB:90:64:FB:37:94:3D:3A:DF:34:D0:7E:9A Authority key identifier: 9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20 Certificate issuer: /CN=9FA20A14AF60219662C9668DE75D25F0C8B84220 Certificate serial: 72BAE0079BB05F53A89577F91C1EA78A4AAA84EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 20:01:18 +0000 Manifest this update: Tue 28 Jul 2026 19:56:18 +0000 Manifest next update: Wed 29 Jul 2026 23:57:18 +0000 Files and hashes: 1: 9FA20A14AF60219662C9668DE75D25F0C8B84220.crl (hash: pNxf2+ZLS3blmQh1xNVIG+ejMI+RSBXWZ9XpEXr68aw=) 2: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: YS2T4alON/4lMEWof38ueY05KIoXFInJbn/EVbWzFdU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ba:e0:07:9b:b0:5f:53:a8:95:77:f9:1c:1e:a7:8a:4a:aa:84:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FA20A14AF60219662C9668DE75D25F0C8B84220 Validity Not Before: Jul 28 19:56:18 2026 GMT Not After : Jul 29 23:57:18 2026 GMT Subject: CN=37F9476D43D03FEB9064FB37943D3ADF34D07E9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:ab:b4:fd:74:c5:03:d5:9f:8c:c8:05:86: d9:cd:4b:36:93:57:72:b3:66:46:70:92:45:89:c5: 99:73:ea:7f:98:59:b3:eb:29:1c:7f:34:c3:f0:f6: cd:2d:ed:2b:45:1a:74:f6:3c:c4:a0:1b:10:1b:16: db:42:b5:84:b7:cf:48:f8:b5:40:da:b1:88:35:a7: a1:49:19:c1:95:f0:46:1d:b0:1f:b3:ec:dc:bf:ce: b8:e4:6f:04:a0:b9:f1:f1:ba:8e:2a:43:50:4c:e6: 33:fb:15:23:e0:8f:04:ba:73:ed:ed:ff:bb:38:60: 11:04:09:61:02:7e:7f:7a:eb:02:8e:4c:a9:75:ba: 8b:da:0a:99:38:f8:e2:c2:cc:94:5b:fa:a2:e6:42: 43:cb:80:ec:a4:ed:49:e7:f8:17:4c:33:38:ee:ef: 53:b9:02:94:bc:b1:8c:3f:ea:4f:f5:db:5e:bc:36: 7d:14:22:7b:e2:02:34:96:43:4b:d1:ec:4c:b5:af: 8e:66:b7:d5:ad:dd:d3:3f:7b:32:b7:dc:65:c4:00: 3c:c0:66:ad:4d:55:e2:74:b6:40:68:6c:e0:28:68: f4:b1:53:26:1b:59:d5:03:74:dd:a9:9a:e8:4a:21: 08:c0:f8:e6:4c:f9:11:cf:8f:1c:87:b2:42:33:0b: 78:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F9:47:6D:43:D0:3F:EB:90:64:FB:37:94:3D:3A:DF:34:D0:7E:9A X509v3 Authority Key Identifier: keyid:9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:c3:a6:e1:30:ac:8c:75:81:c9:1e:7a:da:9e:d0:b1:01:bb: 12:9d:d9:89:66:19:b8:41:fe:c5:d0:1f:fe:61:54:fe:1d:b6: fe:43:0b:fd:82:8d:af:02:e1:82:c7:2b:0a:5d:c6:5c:73:25: 81:64:c9:fa:e7:4d:2e:47:f0:b6:a2:86:cd:ff:06:7a:0a:f5: 6f:b3:74:a4:7b:a1:d6:7b:fd:97:18:49:fe:e6:91:03:dd:6a: 99:e2:75:9b:86:f4:6a:2e:6f:a8:0b:75:c1:2a:99:3c:cc:67: 2a:24:ef:ec:f0:0d:97:54:6d:88:be:84:2d:94:8c:d2:62:47: d0:00:6c:e7:d5:ff:1e:7f:8d:c7:36:99:4f:65:cf:f6:e6:0e: a1:ea:04:d6:d2:db:7b:40:52:64:24:7e:80:03:e5:f4:d1:82: d1:66:72:e0:85:f0:73:0d:0e:77:21:4d:69:90:8e:d1:87:12: 46:2e:20:1a:93:8f:97:b2:6f:73:ac:4f:8b:f6:1b:fe:d2:21: f9:f5:29:8e:fb:05:6d:02:58:b1:3d:d3:b8:d7:ba:4e:3f:46: 93:a3:59:ee:49:b8:f6:9a:2e:72:e1:00:09:14:60:3d:b8:46: fa:f1:31:56:26:98:ef:5e:92:63:fe:05:0a:77:96:eb:1a:ba: 80:43:49:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcrrgB5uwX1OolXf5HB6nikqqhOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBMjBBMTRBRjYwMjE5NjYyQzk2NjhERTc1RDI1RjBD OEI4NDIyMDAeFw0yNjA3MjgxOTU2MThaFw0yNjA3MjkyMzU3MThaMDMxMTAvBgNV BAMTKDM3Rjk0NzZENDNEMDNGRUI5MDY0RkIzNzk0M0QzQURGMzREMDdFOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBKKu0/XTFA9WfjMgFhtnNSzaT V3KzZkZwkkWJxZlz6n+YWbPrKRx/NMPw9s0t7StFGnT2PMSgGxAbFttCtYS3z0j4 tUDasYg1p6FJGcGV8EYdsB+z7Ny/zrjkbwSgufHxuo4qQ1BM5jP7FSPgjwS6c+3t /7s4YBEECWECfn966wKOTKl1uovaCpk4+OLCzJRb+qLmQkPLgOyk7Unn+BdMMzju 71O5ApS8sYw/6k/12168Nn0UInviAjSWQ0vR7Ey1r45mt9Wt3dM/ezK33GXEADzA Zq1NVeJ0tkBobOAoaPSxUyYbWdUDdN2pmuhKIQjA+OZM+RHPjxyHskIzC3izAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN/lHbUPQP+uQZPs3lD063zTQfpowHwYDVR0j BBgwFoAUn6IKFK9gIZZiyWaN510l8Mi4QiAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzVlNTQ2OGMtMGFjNy00NGE5LTg4MjEtMjgyNTdjNWE4NjA3LzAvOUZBMjBBMTRB RjYwMjE5NjYyQzk2NjhERTc1RDI1RjBDOEI4NDIyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkEyMEExNEFGNjAyMTk2NjJDOTY2OERFNzVEMjVGMEM4Qjg0 MjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvOUZBMjBBMTRBRjYwMjE5NjYyQzk2NjhERTc1RDI1 RjBDOEI4NDIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfDpuEwrIx1gckeetqe0LEBuxKd2YlmGbhB /sXQH/5hVP4dtv5DC/2Cja8C4YLHKwpdxlxzJYFkyfrnTS5H8Laihs3/BnoK9W+z dKR7odZ7/ZcYSf7mkQPdapnidZuG9Goub6gLdcEqmTzMZyok7+zwDZdUbYi+hC2U jNJiR9AAbOfV/x5/jcc2mU9lz/bmDqHqBNbS23tAUmQkfoAD5fTRgtFmcuCF8HMN DnchTWmQjtGHEkYuIBqTj5eyb3OsT4v2G/7SIfn1KY77BW0CWLE907jXuk4/RpOj We5JuPaaLnLhAAkUYD24RvrxMVYmmO9ekmP+BQp3lusauoBDSSg= -----END CERTIFICATE-----Generated at Wed Jul 29 09:16:18 2026 by rpki-client