$ rpki-client -vvf rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft File: D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft (raw, json) Hash identifier: +Qdf4uzBbn6lMj3QHECUMWBsPdq3rgWHun54o4WrWUM= Subject key identifier: 72:A4:1E:D3:1F:E8:77:AE:C8:67:B2:90:39:77:7D:D4:5E:AA:36:F6 Authority key identifier: D8:5F:97:EC:28:98:23:A0:FE:C5:9A:16:FE:DF:A0:9F:72:EB:C8:35 Certificate issuer: /CN=D85F97EC289823A0FEC59A16FEDFA09F72EBC835 Certificate serial: 78D64E5E01D734ECAAE598DD9149091EF38D8B8D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:00:55 +0000 Manifest this update: Thu 23 Jul 2026 12:55:55 +0000 Manifest next update: Fri 24 Jul 2026 14:23:55 +0000 Files and hashes: 1: 33362e35302e34372e302f32342d3234203d3e20313338383838.roa (hash: i4qKsTrQYXXhXKXalOlOEUcc525wPy7zaNFMk5Bgx/c=) 2: D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl (hash: XaGYDGQTWZTeVqQR7c5hlmAlJ0BJGab3RHhtK+X0e/E=) 3: 33362e35302e34362e302f32332d3233203d3e20313338383838.roa (hash: /7DADKxkcEneVChkCCyUD/ZC0G20xDnhNSvZJoeZ1RA=) 4: 33362e35302e34362e302f32342d3234203d3e20313338383838.roa (hash: Nvdk0iQE3TVdSwCANLKWH60xsOqyH90GO9904bD5/jk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d6:4e:5e:01:d7:34:ec:aa:e5:98:dd:91:49:09:1e:f3:8d:8b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85F97EC289823A0FEC59A16FEDFA09F72EBC835 Validity Not Before: Jul 23 12:55:55 2026 GMT Not After : Jul 24 14:23:55 2026 GMT Subject: CN=72A41ED31FE877AEC867B29039777DD45EAA36F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:27:62:51:b0:47:db:86:94:3a:ba:5c:18:33: a6:2d:d6:f2:5e:3c:bc:fb:9b:1c:a2:c6:dc:16:bb: e0:73:30:8b:76:60:02:e6:36:fb:1e:a9:99:94:db: 04:ab:54:41:90:02:20:45:23:33:b4:c5:46:2e:45: 9a:ca:3c:d9:a3:f2:c7:fd:51:7d:30:60:c9:d2:fe: 26:11:94:17:01:ea:a1:08:01:3c:26:44:c8:ed:d0: e7:0a:df:96:01:9e:71:dc:0b:5d:60:22:f1:44:88: f8:f4:70:61:09:d4:99:b3:db:eb:c6:07:3f:9a:f2: d0:f3:8e:1d:39:a8:fd:50:9e:6b:09:e7:17:32:99: fa:9a:de:7e:91:37:77:f8:be:ec:f1:49:d8:00:04: d7:12:ba:3f:82:f0:08:7b:b8:fe:12:4a:be:58:7a: 4e:f9:9c:6c:0a:2f:d1:26:fc:ed:3a:1d:29:af:64: c4:e4:73:68:07:78:48:35:49:54:8e:15:d2:dc:f1: a2:ae:8f:7e:7a:7b:46:d8:b6:6d:9c:a4:a1:10:c7: ef:31:5f:1e:c1:27:2d:0e:58:cb:7e:1b:5c:ca:bf: e6:80:6f:81:54:82:a9:ac:4e:33:f3:d6:a2:07:1f: 4a:fe:f7:51:82:60:bc:90:99:a3:aa:a4:29:ac:35: 96:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A4:1E:D3:1F:E8:77:AE:C8:67:B2:90:39:77:7D:D4:5E:AA:36:F6 X509v3 Authority Key Identifier: keyid:D8:5F:97:EC:28:98:23:A0:FE:C5:9A:16:FE:DF:A0:9F:72:EB:C8:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:db:76:cd:84:f6:e9:cd:ea:b1:3f:c1:05:9c:fb:fa:35:f9: c9:73:02:7d:d7:8a:8a:56:82:96:36:7e:2c:c9:03:65:b1:fb: 02:d0:3d:c6:8f:d9:7d:e1:63:42:f3:ce:30:15:62:09:dd:ea: cb:01:a2:a0:73:8c:fd:6b:fd:29:b1:4f:61:ec:7a:5e:6b:6b: f2:61:3d:6e:ad:a9:58:c5:b4:d0:5f:86:65:6f:26:de:57:df: 39:69:e1:f7:45:22:fa:e3:05:26:52:10:dc:3c:97:3b:7b:0b: e5:2c:a1:af:36:71:de:bb:63:5c:99:cd:c0:8f:a5:b4:f6:3b: c3:6e:26:00:db:b4:13:bb:e5:38:92:4b:ef:ec:8f:11:c8:aa: 67:c5:32:2c:5e:60:66:73:e1:b6:26:91:20:13:f4:37:ae:db: 7e:58:87:a8:27:93:f9:0f:51:7f:b9:e7:b5:46:b7:e6:bd:a5: 0d:05:cf:ca:86:47:1e:ba:6f:3f:64:7a:77:5a:11:6f:6b:0a: 4d:dc:9c:f7:d9:8a:02:a5:64:2c:e1:03:8e:85:5c:9b:57:a9: c5:54:f2:72:73:ef:44:de:31:4e:d8:0a:c2:59:6e:85:1a:d3: ae:c0:db:62:80:bc:9b:a7:1e:53:98:92:55:00:a0:23:96:11: 72:b0:0e:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeNZOXgHXNOyq5ZjdkUkJHvONi40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1Rjk3RUMyODk4MjNBMEZFQzU5QTE2RkVERkEwOUY3 MkVCQzgzNTAeFw0yNjA3MjMxMjU1NTVaFw0yNjA3MjQxNDIzNTVaMDMxMTAvBgNV BAMTKDcyQTQxRUQzMUZFODc3QUVDODY3QjI5MDM5Nzc3REQ0NUVBQTM2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJ2JRsEfbhpQ6ulwYM6Yt1vJe PLz7mxyixtwWu+BzMIt2YALmNvseqZmU2wSrVEGQAiBFIzO0xUYuRZrKPNmj8sf9 UX0wYMnS/iYRlBcB6qEIATwmRMjt0OcK35YBnnHcC11gIvFEiPj0cGEJ1Jmz2+vG Bz+a8tDzjh05qP1QnmsJ5xcymfqa3n6RN3f4vuzxSdgABNcSuj+C8Ah7uP4SSr5Y ek75nGwKL9Em/O06HSmvZMTkc2gHeEg1SVSOFdLc8aKuj356e0bYtm2cpKEQx+8x Xx7BJy0OWMt+G1zKv+aAb4FUgqmsTjPz1qIHH0r+91GCYLyQmaOqpCmsNZaDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcqQe0x/od67IZ7KQOXd91F6qNvYwHwYDVR0j BBgwFoAU2F+X7CiYI6D+xZoW/t+gn3LryDUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI2ODQ2MmUtYmZhNS00MzM3LTkxNTMtYzU1NmQ5ZDc3MWZhLzAvRDg1Rjk3RUMy ODk4MjNBMEZFQzU5QTE2RkVERkEwOUY3MkVCQzgzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVGOTdFQzI4OTgyM0EwRkVDNTlBMTZGRURGQTA5RjcyRUJD ODM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDI2ODQ2MmUtYmZhNS00MzM3LTkx NTMtYzU1NmQ5ZDc3MWZhLzAvRDg1Rjk3RUMyODk4MjNBMEZFQzU5QTE2RkVERkEw OUY3MkVCQzgzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3bds2E9unN6rE/wQWc+/o1+clzAn3XiopW gpY2fizJA2Wx+wLQPcaP2X3hY0LzzjAVYgnd6ssBoqBzjP1r/SmxT2Hsel5ra/Jh PW6tqVjFtNBfhmVvJt5X3zlp4fdFIvrjBSZSENw8lzt7C+Usoa82cd67Y1yZzcCP pbT2O8NuJgDbtBO75TiSS+/sjxHIqmfFMixeYGZz4bYmkSAT9Deu235Yh6gnk/kP UX+557VGt+a9pQ0Fz8qGRx66bz9kendaEW9rCk3cnPfZigKlZCzhA46FXJtXqcVU 8nJz70TeMU7YCsJZboUa067A22KAvJunHlOYklUAoCOWEXKwDrI= -----END CERTIFICATE-----Generated at Fri Jul 24 01:22:26 2026 by rpki-client