$ rpki-client -vvf rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft File: E3D6C125B35E67510271310D928E4578404A3A46.mft (raw, json) Hash identifier: qD1EQ5cgT0AT97OMIPsZ3PnlJ8nJ2R2tcnYH18Y+Prg= Subject key identifier: 0D:00:86:04:B6:8F:5F:00:9E:22:B9:EB:02:0F:2F:1F:E1:D8:B0:55 Authority key identifier: E3:D6:C1:25:B3:5E:67:51:02:71:31:0D:92:8E:45:78:40:4A:3A:46 Certificate issuer: /CN=E3D6C125B35E67510271310D928E4578404A3A46 Certificate serial: 451FB6EA4E6387FB398A177C08EA16EEACFCBBD5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 21:26:16 +0000 Manifest this update: Thu 23 Jul 2026 21:21:16 +0000 Manifest next update: Fri 24 Jul 2026 21:56:16 +0000 Files and hashes: 1: 3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa (hash: T5uRj9PC/T10VKks3wi10c2uBNec4FkHRnP0vvfYiOk=) 2: 3130332e3137362e3139382e302f32342d3234203d3e20313437313334.roa (hash: 8qQMC3EFOK3yCgkVj+C7FEr6qF+CfYoBtbfTyKhcjE4=) 3: E3D6C125B35E67510271310D928E4578404A3A46.crl (hash: EESKHD+lJPUjsjQDSXpupW9ghFgNh3ZmIZjV+emOS9s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.crl rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:1f:b6:ea:4e:63:87:fb:39:8a:17:7c:08:ea:16:ee:ac:fc:bb:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3D6C125B35E67510271310D928E4578404A3A46 Validity Not Before: Jul 23 21:21:16 2026 GMT Not After : Jul 24 21:56:16 2026 GMT Subject: CN=0D008604B68F5F009E22B9EB020F2F1FE1D8B055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:43:28:49:27:c2:eb:08:07:58:94:6f:01:cf: d4:fb:9f:db:57:17:2c:f0:ac:c0:60:30:f0:35:60: af:ea:99:24:99:00:a3:bd:4f:67:3c:bf:fa:d2:ac: c5:7b:8f:08:cb:92:b7:fd:2f:72:e3:9a:45:84:44: 66:2f:00:d5:cb:3a:3e:02:09:6a:f9:3c:ff:8e:dc: 75:68:33:b7:7e:f9:13:53:03:08:9a:4b:56:85:7f: 89:b1:38:ad:79:73:fa:58:0c:01:00:ac:7c:d2:6d: 65:16:3d:78:e6:40:90:a1:90:4d:ae:41:79:da:f1: 5b:11:3d:f5:12:4a:58:cb:b2:39:62:a4:1a:11:61: a9:8d:20:74:3e:f2:3d:ba:1b:ed:29:b6:e7:43:33: 35:ce:ac:a3:c0:35:d0:10:c6:7a:77:09:7f:8f:75: 99:1a:bf:68:07:08:6a:86:4a:81:79:fe:a7:97:7e: 64:ba:2d:81:f3:8b:03:e6:ad:8d:83:30:81:25:78: e4:be:df:06:96:ee:90:73:4f:91:b3:f9:87:49:22: 35:bb:e6:74:2c:11:5f:00:0a:e6:e6:47:bb:86:f5: 74:d9:70:9e:da:f6:5d:12:68:e7:1b:46:3e:bc:0f: 04:ab:92:4e:77:ea:c5:4a:98:ec:8f:a3:b5:2e:ac: 32:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:00:86:04:B6:8F:5F:00:9E:22:B9:EB:02:0F:2F:1F:E1:D8:B0:55 X509v3 Authority Key Identifier: keyid:E3:D6:C1:25:B3:5E:67:51:02:71:31:0D:92:8E:45:78:40:4A:3A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:2b:1c:2f:82:c9:19:16:89:bd:ec:34:1c:94:c3:8a:eb:3f: 8b:e9:66:e3:63:5d:a6:fa:d2:4c:47:3f:d5:b9:b7:54:fd:8a: ba:34:db:c6:47:bd:9d:60:7b:0d:17:22:ad:45:00:ae:4d:1b: cb:d3:d6:5a:3b:02:b0:76:d6:d6:f5:55:a3:a1:37:3e:3e:54: 24:0b:1a:64:06:76:c5:09:76:69:95:43:de:14:7a:f6:cc:6c: 9d:dd:da:9d:b3:29:5f:ce:90:33:c3:87:a6:26:01:81:f6:dc: 00:ca:dc:aa:70:8a:6a:7f:f0:ea:d6:f7:f0:38:39:80:cc:d4: a5:9e:94:85:30:c8:89:20:8a:bf:4d:04:5c:eb:89:27:ec:7e: 75:b1:53:2b:6e:f7:00:df:70:fa:dc:8f:88:82:d7:61:a6:44: ce:6f:42:f1:b5:15:76:d3:7d:e9:61:89:89:20:ef:45:0f:85: 8f:7b:1a:55:45:1c:16:2c:81:6e:95:92:9b:c5:c2:c5:b1:95: a5:7d:7a:aa:95:8d:3b:9c:60:f5:6a:41:1a:aa:b6:a7:e0:4f: ba:df:79:62:4c:26:f1:4a:c3:af:b1:c6:ae:b0:72:c3:4e:50: af:a5:2b:77:99:84:59:90:00:13:22:60:21:79:d4:82:b2:96: aa:fb:78:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURR+26k5jh/s5ihd8COoW7qz8u9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNENkMxMjVCMzVFNjc1MTAyNzEzMTBEOTI4RTQ1Nzg0 MDRBM0E0NjAeFw0yNjA3MjMyMTIxMTZaFw0yNjA3MjQyMTU2MTZaMDMxMTAvBgNV BAMTKDBEMDA4NjA0QjY4RjVGMDA5RTIyQjlFQjAyMEYyRjFGRTFEOEIwNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoQyhJJ8LrCAdYlG8Bz9T7n9tX FyzwrMBgMPA1YK/qmSSZAKO9T2c8v/rSrMV7jwjLkrf9L3LjmkWERGYvANXLOj4C CWr5PP+O3HVoM7d++RNTAwiaS1aFf4mxOK15c/pYDAEArHzSbWUWPXjmQJChkE2u QXna8VsRPfUSSljLsjlipBoRYamNIHQ+8j26G+0ptudDMzXOrKPANdAQxnp3CX+P dZkav2gHCGqGSoF5/qeXfmS6LYHziwPmrY2DMIEleOS+3waW7pBzT5Gz+YdJIjW7 5nQsEV8ACubmR7uG9XTZcJ7a9l0SaOcbRj68DwSrkk536sVKmOyPo7UurDLnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDQCGBLaPXwCeIrnrAg8vH+HYsFUwHwYDVR0j BBgwFoAU49bBJbNeZ1ECcTENko5FeEBKOkYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGI5ZTZkYTQtZGM0Ni00NzBmLWIwZTktMTZlNmU1N2Q0NzlhLzAvRTNENkMxMjVC MzVFNjc1MTAyNzEzMTBEOTI4RTQ1Nzg0MDRBM0E0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FM0Q2QzEyNUIzNUU2NzUxMDI3MTMxMEQ5MjhFNDU3ODQwNEEz QTQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGI5ZTZkYTQtZGM0Ni00NzBmLWIw ZTktMTZlNmU1N2Q0NzlhLzAvRTNENkMxMjVCMzVFNjc1MTAyNzEzMTBEOTI4RTQ1 Nzg0MDRBM0E0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcrHC+CyRkWib3sNByUw4rrP4vpZuNjXab6 0kxHP9W5t1T9iro028ZHvZ1gew0XIq1FAK5NG8vT1lo7ArB21tb1VaOhNz4+VCQL GmQGdsUJdmmVQ94UevbMbJ3d2p2zKV/OkDPDh6YmAYH23ADK3Kpwimp/8OrW9/A4 OYDM1KWelIUwyIkgir9NBFzriSfsfnWxUytu9wDfcPrcj4iC12GmRM5vQvG1FXbT felhiYkg70UPhY97GlVFHBYsgW6VkpvFwsWxlaV9eqqVjTucYPVqQRqqtqfgT7rf eWJMJvFKw6+xxq6wcsNOUK+lK3eZhFmQABMiYCF51IKylqr7eBM= -----END CERTIFICATE-----Generated at Fri Jul 24 01:52:19 2026 by rpki-client