$ rpki-client -vvf rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft File: B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft (raw, json) Hash identifier: yojNaTgzc8DL6MEUY542fFfJVyCBQuGcDoDlJ5rK7sw= Subject key identifier: C7:6D:41:16:B3:41:F3:95:C5:89:11:2C:07:24:CA:FB:E4:B1:E5:61 Authority key identifier: B8:35:A8:74:63:84:74:9B:F3:B9:A7:BA:EC:30:A1:EB:F1:33:71:6A Certificate issuer: /CN=B835A8746384749BF3B9A7BAEC30A1EBF133716A Certificate serial: 30DB1E575CF16FCBE7574F56E92DB64F5BF7BB6E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 12:35:27 +0000 Manifest this update: Thu 23 Jul 2026 12:30:27 +0000 Manifest next update: Fri 24 Jul 2026 13:28:27 +0000 Files and hashes: 1: 3130332e3136372e3137302e302f32342d3234203d3e20313431393833.roa (hash: F/oy8su27rCM1WBmuMCn8wfDlNFF1ZO6cFWNdzyAW6M=) 2: B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl (hash: XzsJA5QftxMxTHf5KFeteB17+CscdE2WOeHTgayqp90=) 3: 3130332e3136372e3137302e302f32332d3233203d3e20313431393833.roa (hash: ahISTiCVoc+28My7h8uDRC0QvRMDpO2sYZ/b3hjHSLM=) 4: 323430373a396363303a3a2f33322d3332203d3e20313431393833.roa (hash: K9ZXJ5o5f3vYvyXmfnPwnT8NeUbIoGsEKpT0pUSErho=) 5: 3130332e3136372e3137312e302f32342d3234203d3e20313431393833.roa (hash: 437bd6cfCi4QfkyxcuG38VNcn0yO3ZKj6CESWVC/jyw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:28:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:db:1e:57:5c:f1:6f:cb:e7:57:4f:56:e9:2d:b6:4f:5b:f7:bb:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B835A8746384749BF3B9A7BAEC30A1EBF133716A Validity Not Before: Jul 23 12:30:27 2026 GMT Not After : Jul 24 13:28:27 2026 GMT Subject: CN=C76D4116B341F395C589112C0724CAFBE4B1E561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:39:30:38:68:92:39:56:1b:91:bf:91:8d:7d: 53:63:c4:51:0b:89:cd:ba:71:de:35:94:fe:4c:3f: c2:68:ec:aa:4f:24:2e:60:89:f9:28:4e:9c:c9:12: 20:91:51:9b:45:be:5e:5b:ef:ba:70:1d:bf:be:b5: 3d:3d:f2:6d:b8:85:b4:91:6e:65:eb:ba:55:37:94: e0:23:1a:aa:3b:95:42:2a:be:8c:db:7b:6d:f3:00: cb:c9:e8:d8:41:47:c8:2c:34:02:be:5a:15:f5:78: a0:35:ce:40:cc:a7:76:29:44:f1:3c:5a:18:1d:7d: b3:42:41:ab:31:3b:31:0c:41:33:c0:e9:33:86:1d: a8:29:20:87:45:af:4a:33:92:c1:41:57:08:29:37: b9:91:2e:73:94:b7:bd:82:9c:82:9e:4c:3b:78:cc: bd:0f:20:8e:d4:3e:94:2d:00:98:f0:f9:c5:40:fd: de:d8:90:49:b3:bf:aa:75:7b:a9:28:a7:37:87:7d: e4:de:cf:bb:c9:3b:db:89:b1:c2:e6:a2:8e:6f:58: 7c:41:8b:08:79:26:25:48:74:38:a0:f6:cc:82:79: bf:3b:62:60:0a:f3:3e:96:64:fc:c5:08:e9:e7:e0: 75:bd:93:c1:8b:76:20:38:5b:fa:9c:13:ea:b6:b9: cf:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6D:41:16:B3:41:F3:95:C5:89:11:2C:07:24:CA:FB:E4:B1:E5:61 X509v3 Authority Key Identifier: keyid:B8:35:A8:74:63:84:74:9B:F3:B9:A7:BA:EC:30:A1:EB:F1:33:71:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:47:94:d6:5a:9e:47:69:f3:7f:4c:5c:23:88:06:fb:75:3c: 72:aa:8d:7d:20:41:5e:8e:d9:d4:44:3e:b4:d3:c2:bd:26:08: 69:c8:6f:96:2a:3e:bb:6e:58:75:68:03:78:a8:e7:7d:c8:2c: f2:6c:78:b5:f5:10:19:90:dc:fe:98:dc:ae:9d:1d:35:e5:9f: 84:ea:e5:e2:18:07:5b:12:11:0c:f8:8e:f1:1b:be:4e:83:13: 43:f2:b8:c9:77:88:4d:44:3d:28:45:68:cc:04:9a:20:89:f2: f8:61:eb:6a:86:c5:cc:5e:eb:5f:83:11:5b:9a:4b:f6:48:c6: 15:ac:2b:24:d0:03:f9:ef:13:1d:3f:e5:12:08:78:f1:2b:0c: a4:79:6f:53:d8:f3:60:93:66:65:d3:9d:86:fd:c1:8a:a3:2b: 0d:6f:a7:55:1a:00:19:e4:81:bc:92:07:b9:17:98:0e:97:60: c4:f3:09:fe:8e:14:2d:5b:6c:85:54:77:f0:e4:7e:97:f2:e9: e2:0e:0f:b0:9b:ae:2b:15:07:7d:35:2a:e5:66:1d:30:9b:3c: fa:b4:40:5a:4e:83:c6:66:41:80:6e:7e:c4:13:4b:3f:74:ac: 9d:71:95:e8:9b:6b:2b:7a:46:57:b6:c8:04:6d:fd:7f:92:b6: 12:37:d7:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMNseV1zxb8vnV09W6S22T1v3u24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgzNUE4NzQ2Mzg0NzQ5QkYzQjlBN0JBRUMzMEExRUJG MTMzNzE2QTAeFw0yNjA3MjMxMjMwMjdaFw0yNjA3MjQxMzI4MjdaMDMxMTAvBgNV BAMTKEM3NkQ0MTE2QjM0MUYzOTVDNTg5MTEyQzA3MjRDQUZCRTRCMUU1NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnOTA4aJI5VhuRv5GNfVNjxFEL ic26cd41lP5MP8Jo7KpPJC5gifkoTpzJEiCRUZtFvl5b77pwHb++tT098m24hbSR bmXrulU3lOAjGqo7lUIqvozbe23zAMvJ6NhBR8gsNAK+WhX1eKA1zkDMp3YpRPE8 WhgdfbNCQasxOzEMQTPA6TOGHagpIIdFr0ozksFBVwgpN7mRLnOUt72CnIKeTDt4 zL0PII7UPpQtAJjw+cVA/d7YkEmzv6p1e6kopzeHfeTez7vJO9uJscLmoo5vWHxB iwh5JiVIdDig9syCeb87YmAK8z6WZPzFCOnn4HW9k8GLdiA4W/qcE+q2uc/XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx21BFrNB85XFiREsByTK++Sx5WEwHwYDVR0j BBgwFoAUuDWodGOEdJvzuae67DCh6/EzcWowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDZiZWRmM2EtZDdkMS00OWE2LTkzZWQtYjI3N2YxZjdhNmViLzAvQjgzNUE4NzQ2 Mzg0NzQ5QkYzQjlBN0JBRUMzMEExRUJGMTMzNzE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODM1QTg3NDYzODQ3NDlCRjNCOUE3QkFFQzMwQTFFQkYxMzM3 MTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDZiZWRmM2EtZDdkMS00OWE2LTkz ZWQtYjI3N2YxZjdhNmViLzAvQjgzNUE4NzQ2Mzg0NzQ5QkYzQjlBN0JBRUMzMEEx RUJGMTMzNzE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARHlNZankdp839MXCOIBvt1PHKqjX0gQV6O 2dREPrTTwr0mCGnIb5YqPrtuWHVoA3io533ILPJseLX1EBmQ3P6Y3K6dHTXln4Tq 5eIYB1sSEQz4jvEbvk6DE0PyuMl3iE1EPShFaMwEmiCJ8vhh62qGxcxe61+DEVua S/ZIxhWsKyTQA/nvEx0/5RIIePErDKR5b1PY82CTZmXTnYb9wYqjKw1vp1UaABnk gbySB7kXmA6XYMTzCf6OFC1bbIVUd/Dkfpfy6eIOD7CbrisVB301KuVmHTCbPPq0 QFpOg8ZmQYBufsQTSz90rJ1xleibayt6Rle2yARt/X+SthI31wc= -----END CERTIFICATE-----Generated at Fri Jul 24 03:02:03 2026 by rpki-client