$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft File: D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft (raw, json) Hash identifier: T700iO/hKW4tKmAfk1Jk4Yq51nCHefX39jwcQrjKS0E= Subject key identifier: 79:B1:95:D1:32:2D:74:AB:52:5C:4E:EB:FD:EE:75:7A:D1:47:05:23 Authority key identifier: D0:CF:CA:6A:1F:D2:34:38:03:3F:81:7E:FD:3B:2A:18:0D:32:C0:C3 Certificate issuer: /CN=D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3 Certificate serial: 06575885C78E9FA22BCD6AFED8AD1E4A76119817 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 09:16:09 +0000 Manifest this update: Thu 23 Jul 2026 09:11:09 +0000 Manifest next update: Fri 24 Jul 2026 12:29:09 +0000 Files and hashes: 1: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: W9kmi6fSD3hfpz6c4ipA4kZ2ayaTmTarwmo8qVkL32c=) 2: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: APyKoi1ZG2HKYN+LmPQKEKUBYkJq8d16Zc9c2T01Unc=) 3: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: pd6OjyzAAcK8uT6naV7NfTNnsjqGHMwbU9/DgsoTtzo=) 4: D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl (hash: Rw556PnGblljLwrggQLcYsajTzv/7DbHDVN8lo/u1fU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:57:58:85:c7:8e:9f:a2:2b:cd:6a:fe:d8:ad:1e:4a:76:11:98:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3 Validity Not Before: Jul 23 09:11:09 2026 GMT Not After : Jul 24 12:29:09 2026 GMT Subject: CN=79B195D1322D74AB525C4EEBFDEE757AD1470523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6b:07:4f:15:21:db:ca:5f:9d:fe:5c:3e:e2: 14:a4:45:d9:f6:02:11:51:32:76:f5:04:47:12:af: 01:99:b1:3b:bb:91:6e:0a:13:fe:13:70:a2:a5:b9: 4e:9d:a0:93:4c:99:d3:f2:f9:fb:8d:62:78:6a:8f: 13:c7:bb:e6:72:89:64:81:22:d4:1b:87:91:e3:15: 9a:77:3e:e0:bb:72:1e:38:da:22:74:a2:b0:9a:3b: 09:3d:8d:f4:35:f6:a6:6a:55:4a:f9:a9:9c:be:f7: f1:6b:15:22:bb:27:fd:6b:28:b1:bd:18:08:39:6a: db:11:16:cf:25:a4:25:0a:c9:3c:8e:a3:92:e0:95: d6:bb:c8:6e:73:b3:66:63:f6:b5:4f:0a:ba:c4:7b: 1b:ef:bc:29:00:9e:22:36:7c:7d:4a:d7:38:ac:cb: 6f:37:58:82:ab:87:8b:b1:ef:8a:5a:f4:51:58:4e: 02:c0:c8:03:bd:96:fe:17:78:30:ae:85:a3:66:e3: 1b:0e:f7:68:1e:b5:46:b5:92:4a:f8:b9:e5:61:e4: af:9e:e3:83:d8:3a:d7:c6:27:2e:d8:96:7e:07:d9: f8:bf:9d:98:26:c4:4a:7d:eb:94:e7:0a:31:41:93: 59:d7:57:64:ae:b1:ff:8e:8d:d4:f9:5d:f4:62:69: da:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B1:95:D1:32:2D:74:AB:52:5C:4E:EB:FD:EE:75:7A:D1:47:05:23 X509v3 Authority Key Identifier: keyid:D0:CF:CA:6A:1F:D2:34:38:03:3F:81:7E:FD:3B:2A:18:0D:32:C0:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a3:a9:bb:04:91:35:4c:8d:5e:bc:7a:23:4b:15:fe:ff:6e: e2:19:1b:7d:df:6d:16:bc:77:26:fa:ac:bf:2e:a4:fb:24:b7: 6c:85:43:52:c6:2b:2d:53:f0:c4:15:dc:8d:50:ee:27:8e:f8: 49:cc:f3:60:a4:dd:b4:1d:6e:c2:41:3b:83:39:21:14:ad:3f: cb:19:98:43:77:52:1d:e5:23:98:8c:4f:54:94:a7:97:d0:21: c4:92:9c:b1:f6:f8:3a:11:bb:b0:ae:95:e8:39:9c:10:c2:50: 10:75:46:e5:2e:58:59:97:bd:28:a3:8c:30:f7:5d:5d:65:2f: 4b:22:6b:a0:e0:83:99:fd:70:b4:8c:83:c0:a1:76:b4:41:b3: 9c:11:df:92:da:2b:c7:e3:f1:96:e1:3b:83:38:a6:aa:0d:06: 2a:20:9e:a6:cf:5f:d8:0d:6b:e1:e9:c2:a0:14:31:2a:7f:8c: 30:4f:09:80:bc:34:c7:9d:0a:79:ca:b4:1b:57:d9:e4:00:6e: f5:cf:3b:d7:86:d4:10:bf:f2:09:d6:14:e0:28:e8:a2:3f:65: a6:6e:86:2d:7f:5b:3a:d3:77:ba:7b:8b:57:b6:e4:f9:cb:3d: 47:99:5d:e8:38:7d:ff:40:92:08:94:c4:9d:1d:f0:35:47:e5: 7a:0b:a2:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBldYhceOn6IrzWr+2K0eSnYRmBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDRkNBNkExRkQyMzQzODAzM0Y4MTdFRkQzQjJBMTgw RDMyQzBDMzAeFw0yNjA3MjMwOTExMDlaFw0yNjA3MjQxMjI5MDlaMDMxMTAvBgNV BAMTKDc5QjE5NUQxMzIyRDc0QUI1MjVDNEVFQkZERUU3NTdBRDE0NzA1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuawdPFSHbyl+d/lw+4hSkRdn2 AhFRMnb1BEcSrwGZsTu7kW4KE/4TcKKluU6doJNMmdPy+fuNYnhqjxPHu+ZyiWSB ItQbh5HjFZp3PuC7ch442iJ0orCaOwk9jfQ19qZqVUr5qZy+9/FrFSK7J/1rKLG9 GAg5atsRFs8lpCUKyTyOo5Lglda7yG5zs2Zj9rVPCrrEexvvvCkAniI2fH1K1zis y283WIKrh4ux74pa9FFYTgLAyAO9lv4XeDCuhaNm4xsO92getUa1kkr4ueVh5K+e 44PYOtfGJy7Yln4H2fi/nZgmxEp965TnCjFBk1nXV2Susf+OjdT5XfRiadpVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUebGV0TItdKtSXE7r/e51etFHBSMwHwYDVR0j BBgwFoAU0M/Kah/SNDgDP4F+/TsqGA0ywMMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE0YTIxYjktZjkxMi00MWYzLWI2MmMtMTIxNzU4MWM5NDhhLzAvRDBDRkNBNkEx RkQyMzQzODAzM0Y4MTdFRkQzQjJBMTgwRDMyQzBDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMENGQ0E2QTFGRDIzNDM4MDMzRjgxN0VGRDNCMkExODBEMzJD MEMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvRDBDRkNBNkExRkQyMzQzODAzM0Y4MTdFRkQzQjJB MTgwRDMyQzBDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACyjqbsEkTVMjV68eiNLFf7/buIZG33fbRa8 dyb6rL8upPskt2yFQ1LGKy1T8MQV3I1Q7ieO+EnM82Ck3bQdbsJBO4M5IRStP8sZ mEN3Uh3lI5iMT1SUp5fQIcSSnLH2+DoRu7Culeg5nBDCUBB1RuUuWFmXvSijjDD3 XV1lL0sia6Dgg5n9cLSMg8ChdrRBs5wR35LaK8fj8ZbhO4M4pqoNBiognqbPX9gN a+HpwqAUMSp/jDBPCYC8NMedCnnKtBtX2eQAbvXPO9eG1BC/8gnWFOAo6KI/ZaZu hi1/WzrTd7p7i1e25PnLPUeZXeg4ff9AkgiUxJ0d8DVH5XoLot0= -----END CERTIFICATE-----Generated at Fri Jul 24 02:02:38 2026 by rpki-client