$ rpki-client -vvf rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft File: 6B995520DD42E2AA6306A898618C472D1D5E4417.mft (raw, json) Hash identifier: Do7uistELkM4AEPx0/z/KutR2GFMH9FQ7e/03ZjLJKA= Subject key identifier: 7A:C1:9C:98:84:50:D3:0B:36:34:36:B1:7C:A7:E4:38:4F:7B:43:9C Authority key identifier: 6B:99:55:20:DD:42:E2:AA:63:06:A8:98:61:8C:47:2D:1D:5E:44:17 Certificate issuer: /CN=6B995520DD42E2AA6306A898618C472D1D5E4417 Certificate serial: 4D809F5D06860CA22DFD91D6386F2AFDE625DE24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B995520DD42E2AA6306A898618C472D1D5E4417.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:43:52 +0000 Manifest this update: Fri 24 Jul 2026 03:38:52 +0000 Manifest next update: Sat 25 Jul 2026 04:17:52 +0000 Files and hashes: 1: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: EocJEXTX0mSSr7fMVzkhuxkZ+TwRT9I+6KSMP/66yxQ=) 2: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: RIdJ/cXYXoiLhfv+EGFjwti65Zd3wn1vdkd4IsQmrxo=) 3: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: XXmEikeW7+xMma0RK8ROxLTllOgfRUh6Qpdpx7HKJyc=) 4: 6B995520DD42E2AA6306A898618C472D1D5E4417.crl (hash: W1fp5HUchROTu0WMmDYOUktJOIa5w4AALuyRKY7B8Fg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.crl rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B995520DD42E2AA6306A898618C472D1D5E4417.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:80:9f:5d:06:86:0c:a2:2d:fd:91:d6:38:6f:2a:fd:e6:25:de:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B995520DD42E2AA6306A898618C472D1D5E4417 Validity Not Before: Jul 24 03:38:52 2026 GMT Not After : Jul 25 04:17:52 2026 GMT Subject: CN=7AC19C988450D30B363436B17CA7E4384F7B439C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b2:b5:3e:99:8a:5f:d3:99:83:c8:9e:45:f0: 69:bb:fd:30:ca:ca:0a:8b:2b:d5:d5:ff:e7:7e:d1: 3e:54:dc:19:7d:fc:d9:bf:f4:63:ed:a9:ae:48:8e: 56:40:77:c5:ae:60:62:c8:10:9e:09:c3:49:7d:34: 94:50:8e:9c:47:58:31:f8:ad:7f:22:e9:1d:a4:3f: 4d:83:5c:5b:0b:b3:12:23:2d:98:d4:de:f6:77:cb: df:b2:02:93:0d:3c:4d:58:56:e3:5c:20:c5:cc:a1: dd:3f:93:c9:fd:0b:63:9f:cc:8a:e0:d8:ec:42:51: 6a:5f:5e:84:23:05:6a:39:ed:48:8b:2c:4a:60:51: 6d:b4:47:dd:2a:12:ff:53:71:c1:64:26:84:3e:30: 4a:8d:90:a4:7d:83:3a:af:ae:60:5c:f4:66:b0:b1: ce:22:5d:3a:74:4e:1e:be:68:47:11:9d:a3:e0:a8: ae:98:4d:a2:61:31:c6:b9:2d:dc:57:4e:44:87:f0: f5:3f:34:70:2d:98:1d:49:da:cf:6d:b4:2d:14:2c: 0d:6e:64:7f:65:10:31:40:3c:af:95:aa:9a:93:ad: f6:fd:14:1d:5e:9b:81:6e:0a:9c:24:f3:f7:eb:7c: b4:7e:d4:c3:bf:50:6e:5a:2e:29:1f:1f:8c:52:e5: 0a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C1:9C:98:84:50:D3:0B:36:34:36:B1:7C:A7:E4:38:4F:7B:43:9C X509v3 Authority Key Identifier: keyid:6B:99:55:20:DD:42:E2:AA:63:06:A8:98:61:8C:47:2D:1D:5E:44:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B995520DD42E2AA6306A898618C472D1D5E4417.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:13:8c:ed:66:8f:4f:f8:19:4b:bd:47:2a:d0:31:f4:d2:90: 1f:68:3c:22:76:46:ef:56:86:e6:a3:1c:09:9d:22:51:25:4b: 49:22:14:eb:80:ea:7c:23:6f:18:a7:78:fa:0f:48:72:e8:9c: 32:4e:23:13:4a:d4:13:62:3c:5d:79:c9:64:55:c5:c5:09:57: 81:37:1d:1f:d5:af:4a:e9:51:d5:f3:33:ff:7d:9b:ae:d0:fd: b0:c3:07:94:ea:7f:26:85:b0:47:35:c0:27:62:b7:ef:cd:1b: 1d:a7:f1:bb:fb:67:6d:a3:ec:c8:0b:58:6d:e4:c6:a6:3b:c0: 57:a1:94:c2:30:a2:0b:c0:b5:08:fc:68:a4:6f:7a:29:85:51: 6b:59:d8:5c:61:8a:f8:b6:60:ec:ad:54:45:c4:aa:3d:91:3a: 7c:59:c5:cf:85:16:6d:ce:8b:9c:58:33:b4:c4:3d:30:ff:34: 7e:ee:41:3b:98:9e:d7:f8:87:5f:da:21:4d:1b:65:4c:2d:f4: 61:cd:7f:d9:30:ec:15:b4:47:13:fa:de:67:86:8d:bc:85:2c: 3a:91:92:43:16:c0:68:71:45:da:dc:b2:20:73:84:12:e3:39: de:1f:d2:14:37:5f:8a:8e:d8:92:d3:a5:f9:5e:26:04:a4:14: 7b:e9:30:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTYCfXQaGDKIt/ZHWOG8q/eYl3iQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI5OTU1MjBERDQyRTJBQTYzMDZBODk4NjE4QzQ3MkQx RDVFNDQxNzAeFw0yNjA3MjQwMzM4NTJaFw0yNjA3MjUwNDE3NTJaMDMxMTAvBgNV BAMTKDdBQzE5Qzk4ODQ1MEQzMEIzNjM0MzZCMTdDQTdFNDM4NEY3QjQzOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPsrU+mYpf05mDyJ5F8Gm7/TDK ygqLK9XV/+d+0T5U3Bl9/Nm/9GPtqa5IjlZAd8WuYGLIEJ4Jw0l9NJRQjpxHWDH4 rX8i6R2kP02DXFsLsxIjLZjU3vZ3y9+yApMNPE1YVuNcIMXMod0/k8n9C2OfzIrg 2OxCUWpfXoQjBWo57UiLLEpgUW20R90qEv9TccFkJoQ+MEqNkKR9gzqvrmBc9Gaw sc4iXTp0Th6+aEcRnaPgqK6YTaJhMca5LdxXTkSH8PU/NHAtmB1J2s9ttC0ULA1u ZH9lEDFAPK+VqpqTrfb9FB1em4FuCpwk8/frfLR+1MO/UG5aLikfH4xS5QpRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUesGcmIRQ0ws2NDaxfKfkOE97Q5wwHwYDVR0j BBgwFoAUa5lVIN1C4qpjBqiYYYxHLR1eRBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVkZDRjY2ItNDJlMy00YjcyLTkxOTMtZTkxOGU3YjMwNjdkLzAvNkI5OTU1MjBE RDQyRTJBQTYzMDZBODk4NjE4QzQ3MkQxRDVFNDQxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82Qjk5NTUyMERENDJFMkFBNjMwNkE4OTg2MThDNDcyRDFENUU0 NDE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNkI5OTU1MjBERDQyRTJBQTYzMDZBODk4NjE4QzQ3 MkQxRDVFNDQxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsTjO1mj0/4GUu9RyrQMfTSkB9oPCJ2Ru9W huajHAmdIlElS0kiFOuA6nwjbxinePoPSHLonDJOIxNK1BNiPF15yWRVxcUJV4E3 HR/Vr0rpUdXzM/99m67Q/bDDB5TqfyaFsEc1wCdit+/NGx2n8bv7Z22j7MgLWG3k xqY7wFehlMIwogvAtQj8aKRveimFUWtZ2Fxhivi2YOytVEXEqj2ROnxZxc+FFm3O i5xYM7TEPTD/NH7uQTuYntf4h1/aIU0bZUwt9GHNf9kw7BW0RxP63meGjbyFLDqR kkMWwGhxRdrcsiBzhBLjOd4f0hQ3X4qO2JLTpfleJgSkFHvpMMI= -----END CERTIFICATE-----Generated at Fri Jul 24 12:34:59 2026 by rpki-client