$ rpki-client -vvf rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft File: 9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft (raw, json) Hash identifier: ZHE2lW7CUFAUK7nfl0eLXxTIAjDAkY3rQepG9EskhPE= Subject key identifier: 22:0A:D6:1D:34:D5:61:FA:E4:B7:9A:7C:7C:0B:59:16:4C:06:92:D5 Authority key identifier: 9B:F4:E3:BF:C9:0E:2E:55:6F:B0:33:A6:F6:1D:F5:52:E1:31:51:4B Certificate issuer: /CN=9BF4E3BFC90E2E556FB033A6F61DF552E131514B Certificate serial: 1E004385808A0CD7581DAD4AF3A41CFD5F3CFBF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 17:28:20 +0000 Manifest this update: Tue 28 Jul 2026 17:23:20 +0000 Manifest next update: Wed 29 Jul 2026 18:30:20 +0000 Files and hashes: 1: 3130332e3132312e3130322e302f32332d3234203d3e20313335343738.roa (hash: HYL8rmsnXXXs/BoqrngiGYdSN3TKjR8GgZKUfGOUHuE=) 2: 9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl (hash: Sq7IxZEp2Gh9tVbugVl+1ZWNE7Z6ekpPv9AnPT5+soc=) 3: 3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa (hash: c0+q/NVTLzO/hS8+W37na92ADaS9y92HcCmUqDS60d0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:00:43:85:80:8a:0c:d7:58:1d:ad:4a:f3:a4:1c:fd:5f:3c:fb:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF4E3BFC90E2E556FB033A6F61DF552E131514B Validity Not Before: Jul 28 17:23:20 2026 GMT Not After : Jul 29 18:30:20 2026 GMT Subject: CN=220AD61D34D561FAE4B79A7C7C0B59164C0692D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:19:e4:41:be:58:00:70:ea:36:9a:e8:1f:3b: 18:3d:9d:8e:fd:5d:32:11:f2:43:38:07:12:48:71: 42:ac:8b:11:5a:41:3a:ef:ed:ff:df:2c:76:64:23: 4d:8b:bb:a2:da:3e:ec:43:7d:87:b5:bc:d9:00:73: 5e:6c:cc:e3:4f:4c:75:05:2f:84:ef:1b:c8:79:c8: 8d:cb:cc:05:06:3f:9c:05:ac:84:b5:f6:81:96:e6: 7e:6a:34:03:72:61:2a:89:1b:da:a6:62:eb:ef:fa: d5:56:9f:ea:87:da:86:d4:5b:62:e5:aa:e2:d4:01: d4:56:19:e5:e5:ef:2a:fe:d4:24:5f:96:c5:ce:f7: 4b:14:6c:4a:ea:7c:3f:4c:f5:a7:4f:e1:9d:27:18: 78:54:f4:4a:56:d6:9f:3d:a6:cb:59:4b:f6:f1:a3: 18:13:04:6f:78:76:36:99:c7:60:cf:bd:66:cc:e1: 44:2c:a7:45:50:af:90:49:5f:7d:76:a4:a1:35:be: a3:8d:80:f7:e5:ea:4c:3f:d8:03:72:84:10:26:13: 74:17:4b:8b:ea:e4:90:cd:16:b9:00:3e:a0:73:2a: 6c:13:50:ab:95:82:fa:6e:60:d5:af:96:48:8e:cc: 30:53:0d:61:f4:2d:a5:05:85:74:2c:b8:9f:8a:96: ad:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0A:D6:1D:34:D5:61:FA:E4:B7:9A:7C:7C:0B:59:16:4C:06:92:D5 X509v3 Authority Key Identifier: keyid:9B:F4:E3:BF:C9:0E:2E:55:6F:B0:33:A6:F6:1D:F5:52:E1:31:51:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/9BF4E3BFC90E2E556FB033A6F61DF552E131514B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b2:9b:94:a8:9c:a9:a1:e8:da:0f:3c:51:88:18:ce:6a:c6: c6:02:3a:0d:24:df:63:61:6a:c1:6c:49:24:2d:5e:11:4e:b7: bc:65:9c:43:e5:a0:e9:c1:ce:40:b2:22:9e:89:d6:c1:90:56: 3f:5e:24:09:ea:f8:a1:27:c2:e9:e8:05:ab:c9:da:98:e2:d2: 44:4d:96:9b:bb:2c:b0:3d:b2:38:ae:26:fa:f7:02:e1:8a:b8: 03:17:a5:d9:fc:fe:5f:3a:02:87:16:01:65:60:ea:55:76:4d: 8f:c5:5b:e6:88:11:81:92:58:f0:f1:dc:03:81:63:b6:f0:6a: 6f:d9:68:e5:cc:57:cd:fb:8a:42:80:9a:0d:fa:be:18:43:f0: 6f:93:cc:16:0c:62:ca:76:bd:ba:62:a9:97:b6:ac:10:15:1f: 3c:74:de:9f:fd:c5:48:62:0f:0c:ca:70:1e:28:29:b7:05:2b: fc:a2:38:f7:d3:11:a2:7a:a2:02:0b:72:8d:27:b9:eb:aa:b2: be:5b:68:a2:2b:76:20:37:90:51:6d:f5:e0:46:46:18:e7:10: 5c:e3:ee:9f:28:fb:77:ec:4d:12:db:cc:04:2d:74:91:da:e7: 3a:0a:a1:dc:ac:64:fb:22:6d:b6:23:0d:39:ea:59:a3:01:87: 31:6a:7b:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHgBDhYCKDNdYHa1K86Qc/V88+/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGNEUzQkZDOTBFMkU1NTZGQjAzM0E2RjYxREY1NTJF MTMxNTE0QjAeFw0yNjA3MjgxNzIzMjBaFw0yNjA3MjkxODMwMjBaMDMxMTAvBgNV BAMTKDIyMEFENjFEMzRENTYxRkFFNEI3OUE3QzdDMEI1OTE2NEMwNjkyRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfGeRBvlgAcOo2mugfOxg9nY79 XTIR8kM4BxJIcUKsixFaQTrv7f/fLHZkI02Lu6LaPuxDfYe1vNkAc15szONPTHUF L4TvG8h5yI3LzAUGP5wFrIS19oGW5n5qNANyYSqJG9qmYuvv+tVWn+qH2obUW2Ll quLUAdRWGeXl7yr+1CRflsXO90sUbErqfD9M9adP4Z0nGHhU9EpW1p89pstZS/bx oxgTBG94djaZx2DPvWbM4UQsp0VQr5BJX312pKE1vqONgPfl6kw/2ANyhBAmE3QX S4vq5JDNFrkAPqBzKmwTUKuVgvpuYNWvlkiOzDBTDWH0LaUFhXQsuJ+Klq3ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIgrWHTTVYfrkt5p8fAtZFkwGktUwHwYDVR0j BBgwFoAUm/Tjv8kOLlVvsDOm9h31UuExUUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTExMzI0OTctNTk2My00N2FhLTlkZTEtNmM4NDk2YTM2ZWI2LzAvOUJGNEUzQkZD OTBFMkU1NTZGQjAzM0E2RjYxREY1NTJFMTMxNTE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkY0RTNCRkM5MEUyRTU1NkZCMDMzQTZGNjFERjU1MkUxMzE1 MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTExMzI0OTctNTk2My00N2FhLTlk ZTEtNmM4NDk2YTM2ZWI2LzAvOUJGNEUzQkZDOTBFMkU1NTZGQjAzM0E2RjYxREY1 NTJFMTMxNTE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKym5SonKmh6NoPPFGIGM5qxsYCOg0k32Nh asFsSSQtXhFOt7xlnEPloOnBzkCyIp6J1sGQVj9eJAnq+KEnwunoBavJ2pji0kRN lpu7LLA9sjiuJvr3AuGKuAMXpdn8/l86AocWAWVg6lV2TY/FW+aIEYGSWPDx3AOB Y7bwam/ZaOXMV837ikKAmg36vhhD8G+TzBYMYsp2vbpiqZe2rBAVHzx03p/9xUhi DwzKcB4oKbcFK/yiOPfTEaJ6ogILco0nueuqsr5baKIrdiA3kFFt9eBGRhjnEFzj 7p8o+3fsTRLbzAQtdJHa5zoKodysZPsibbYjDTnqWaMBhzFqe8Y= -----END CERTIFICATE-----Generated at Tue Jul 28 20:54:14 2026 by rpki-client