$ rpki-client -vvf rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft File: D341D8EA81805778BAF0FC25804627AB205A595B.mft (raw, json) Hash identifier: Y/CWh+OSGBkjH530X0uCQKd4hfJ13bKC2ehoF83y36w= Subject key identifier: F8:31:D9:6B:C2:33:AF:AE:57:13:A7:17:8E:6D:A5:10:B4:B2:93:1D Authority key identifier: D3:41:D8:EA:81:80:57:78:BA:F0:FC:25:80:46:27:AB:20:5A:59:5B Certificate issuer: /CN=D341D8EA81805778BAF0FC25804627AB205A595B Certificate serial: 3130FA909F604610CA29E0BEE81FBC664D553159 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 08:09:48 +0000 Manifest this update: Thu 23 Jul 2026 08:04:48 +0000 Manifest next update: Fri 24 Jul 2026 08:54:48 +0000 Files and hashes: 1: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: xc3Q1ltrywVJe3y21qqPN5TWdfqkKkKR0OL3qOrG5oc=) 2: D341D8EA81805778BAF0FC25804627AB205A595B.crl (hash: ka0Y3Wx1ZdzNCARYBvF3cQ1Ijhpe23ZWmGs8qPcJNe8=) 3: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: 9bLzC5cJz/hB1T6TsZaVOeXIoTd9norVTABcvOz2X24=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.crl rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 08:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:30:fa:90:9f:60:46:10:ca:29:e0:be:e8:1f:bc:66:4d:55:31:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D341D8EA81805778BAF0FC25804627AB205A595B Validity Not Before: Jul 23 08:04:48 2026 GMT Not After : Jul 24 08:54:48 2026 GMT Subject: CN=F831D96BC233AFAE5713A7178E6DA510B4B2931D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:44:a8:9d:eb:e9:18:44:52:80:30:fe:80:75: cf:c7:f2:c4:b7:fe:28:dd:e4:ac:7f:64:b3:26:cd: b1:6d:27:e8:af:63:50:18:20:c2:ed:a0:af:b4:aa: f7:cc:16:b1:2c:ef:95:16:34:2d:4b:79:df:ba:04: 57:4f:05:8a:6c:cb:69:1d:cb:93:22:96:61:76:1a: a3:1e:49:dc:b9:12:03:35:87:e0:ce:38:66:9a:ee: a6:1f:39:e8:b0:b7:e0:81:27:ad:32:ce:67:61:f0: 9c:9c:10:08:a8:98:41:e3:09:96:08:43:7d:be:46: 5e:3a:75:f6:68:64:00:13:ce:86:a4:45:08:01:70: 1c:cb:58:2f:4e:a9:9e:f3:5d:46:85:4c:d8:b2:1b: da:9e:f9:bc:31:a3:33:e1:6d:af:b9:4c:c8:01:4c: 06:c0:21:16:00:b7:a4:90:f9:3e:6a:c0:e0:fc:24: 84:8a:c7:1d:41:ed:35:d9:41:5b:70:34:73:8e:b7: 61:d0:ef:6a:35:52:e3:09:f9:da:40:43:80:63:e4: 52:ca:61:21:70:5d:f7:1f:b1:dd:bb:6e:f1:7b:04: c1:33:9b:d7:e4:82:64:f6:f9:14:09:92:7e:b2:cf: da:2f:4b:bb:f3:82:af:37:3d:4d:79:3c:52:17:7b: 18:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:31:D9:6B:C2:33:AF:AE:57:13:A7:17:8E:6D:A5:10:B4:B2:93:1D X509v3 Authority Key Identifier: keyid:D3:41:D8:EA:81:80:57:78:BA:F0:FC:25:80:46:27:AB:20:5A:59:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b8:c9:8e:c0:a2:00:cc:49:94:d9:62:0f:5d:9e:d0:b7:db: 3f:34:5f:0f:4b:40:d4:05:44:16:23:41:10:6f:3e:11:68:e3: 3d:d0:60:b1:c2:cf:1d:d0:e2:aa:9d:c8:6b:38:05:71:48:42: 25:2a:ed:c1:e4:c2:99:31:53:28:d2:3a:0e:5f:5b:45:19:18: ac:36:fc:89:a4:a0:89:71:38:e5:d8:22:61:9f:e8:b5:bd:aa: 3f:1e:2b:35:69:a2:7b:54:db:64:c5:1f:2d:08:48:e0:72:3d: 2c:55:89:07:78:80:5f:90:59:96:1a:38:a1:3b:a6:fb:b8:4a: c8:24:8e:8c:22:68:4d:09:83:b0:df:7e:0a:12:34:be:46:b0: 5a:c3:1e:fa:24:be:c1:c4:a3:dc:f8:a7:1f:fc:5d:a2:2e:6c: 7c:3e:06:ab:17:5c:16:45:d9:0f:79:75:a6:3d:bd:62:9f:f6: e9:02:4f:b1:b7:99:6e:a2:fb:98:6c:8c:73:00:92:12:4f:84: c4:24:26:67:f4:b4:c2:ed:eb:d2:d0:1f:c0:4f:53:e2:c7:01: 37:56:b4:c7:95:83:50:8f:6c:9b:a9:56:c4:dd:a0:a7:82:8d: f6:c8:ff:56:66:10:1d:d0:cf:29:ce:fb:1d:97:ec:e1:d3:5a: 7c:5b:c3:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMTD6kJ9gRhDKKeC+6B+8Zk1VMVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0MUQ4RUE4MTgwNTc3OEJBRjBGQzI1ODA0NjI3QUIy MDVBNTk1QjAeFw0yNjA3MjMwODA0NDhaFw0yNjA3MjQwODU0NDhaMDMxMTAvBgNV BAMTKEY4MzFEOTZCQzIzM0FGQUU1NzEzQTcxNzhFNkRBNTEwQjRCMjkzMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxRKid6+kYRFKAMP6Adc/H8sS3 /ijd5Kx/ZLMmzbFtJ+ivY1AYIMLtoK+0qvfMFrEs75UWNC1Led+6BFdPBYpsy2kd y5MilmF2GqMeSdy5EgM1h+DOOGaa7qYfOeiwt+CBJ60yzmdh8JycEAiomEHjCZYI Q32+Rl46dfZoZAATzoakRQgBcBzLWC9OqZ7zXUaFTNiyG9qe+bwxozPhba+5TMgB TAbAIRYAt6SQ+T5qwOD8JISKxx1B7TXZQVtwNHOOt2HQ72o1UuMJ+dpAQ4Bj5FLK YSFwXfcfsd27bvF7BMEzm9fkgmT2+RQJkn6yz9ovS7vzgq83PU15PFIXexi9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+DHZa8Izr65XE6cXjm2lELSykx0wHwYDVR0j BBgwFoAU00HY6oGAV3i68PwlgEYnqyBaWVswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDlhOWU4MzUtZjNhMS00YzM2LWI0N2QtNmYyZjcxZWI4YWE0LzAvRDM0MUQ4RUE4 MTgwNTc3OEJBRjBGQzI1ODA0NjI3QUIyMDVBNTk1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzQxRDhFQTgxODA1Nzc4QkFGMEZDMjU4MDQ2MjdBQjIwNUE1 OTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDlhOWU4MzUtZjNhMS00YzM2LWI0 N2QtNmYyZjcxZWI4YWE0LzAvRDM0MUQ4RUE4MTgwNTc3OEJBRjBGQzI1ODA0NjI3 QUIyMDVBNTk1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJa4yY7AogDMSZTZYg9dntC32z80Xw9LQNQF RBYjQRBvPhFo4z3QYLHCzx3Q4qqdyGs4BXFIQiUq7cHkwpkxUyjSOg5fW0UZGKw2 /ImkoIlxOOXYImGf6LW9qj8eKzVpontU22TFHy0ISOByPSxViQd4gF+QWZYaOKE7 pvu4SsgkjowiaE0Jg7DffgoSNL5GsFrDHvokvsHEo9z4px/8XaIubHw+BqsXXBZF 2Q95daY9vWKf9ukCT7G3mW6i+5hsjHMAkhJPhMQkJmf0tMLt69LQH8BPU+LHATdW tMeVg1CPbJupVsTdoKeCjfbI/1ZmEB3QzynO+x2X7OHTWnxbw/Q= -----END CERTIFICATE-----Generated at Fri Jul 24 02:50:25 2026 by rpki-client