$ rpki-client -vvf rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft File: D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft (raw, json) Hash identifier: mBf851SBitKzq11eOrLjalnfsftsvx8mWZMPGkZLHVc= Subject key identifier: 35:C4:CC:4E:F3:FD:B9:E1:B7:F8:4D:50:B0:14:27:A6:89:4E:11:A7 Authority key identifier: D3:EC:32:7D:56:69:BC:0B:0F:B2:A4:24:56:17:E4:4E:36:DC:44:73 Certificate issuer: /CN=D3EC327D5669BC0B0FB2A4245617E44E36DC4473 Certificate serial: 2B919D9F1925C5309BBE9C25535FE22179FEBC3F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:10:59 +0000 Manifest this update: Thu 23 Jul 2026 17:05:59 +0000 Manifest next update: Fri 24 Jul 2026 19:21:59 +0000 Files and hashes: 1: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: 7YRFkgWqBTb6xXfqMpSxUz7NK51JToKbqOBLvR25NTc=) 2: D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl (hash: CtQRCmw8L72oTpn450YKc4T9qHbn4y3Yj/2n/KHfCTU=) 3: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: EtsVHdeAuCEUKToYyc1AboiXRpshf+Ge4ld5y69utbM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:91:9d:9f:19:25:c5:30:9b:be:9c:25:53:5f:e2:21:79:fe:bc:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3EC327D5669BC0B0FB2A4245617E44E36DC4473 Validity Not Before: Jul 23 17:05:59 2026 GMT Not After : Jul 24 19:21:59 2026 GMT Subject: CN=35C4CC4EF3FDB9E1B7F84D50B01427A6894E11A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:af:fb:cc:d9:58:d6:bd:c4:c9:cb:3b:44: b5:e3:21:d7:17:df:22:dd:17:71:c6:40:e2:5a:f7: 3e:de:ac:80:cb:72:f5:6d:4b:71:60:b0:02:6a:ec: 20:bd:07:2d:2b:7b:9f:2a:c0:d2:34:5a:8e:a8:f1: ad:11:4c:1d:ce:34:1c:5d:d8:f7:4f:8e:1a:dd:06: ce:85:73:6e:e0:7a:db:a5:20:48:d2:34:ca:66:f8: 28:cb:f7:df:4a:cf:a0:d1:e3:a8:e4:bb:cf:ce:ec: f5:68:8f:21:ff:1d:ab:52:79:8d:ff:02:66:89:6d: 27:d4:db:40:ca:73:1d:39:f1:b2:49:d7:eb:c2:a7: 98:4a:b5:6f:52:2a:15:00:47:55:8e:5a:ff:06:1c: 27:fb:d3:67:d6:45:eb:78:ff:1f:63:7f:ea:7c:45: 60:cf:37:10:e1:87:b7:b9:36:69:37:dd:26:38:84: 6f:46:2f:8a:cb:ac:49:38:53:df:51:c9:2d:d7:51: 1e:67:4f:5b:f0:8d:e0:7a:7b:5b:05:f0:89:da:dd: 5d:e3:93:61:4f:25:e2:fb:56:cb:ad:db:af:0e:87: 97:9d:e7:31:dd:cf:34:a6:a9:48:ce:3d:0c:26:9b: 1e:01:8f:f7:b0:64:ae:d6:29:24:f4:9b:c3:89:a1: 6f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C4:CC:4E:F3:FD:B9:E1:B7:F8:4D:50:B0:14:27:A6:89:4E:11:A7 X509v3 Authority Key Identifier: keyid:D3:EC:32:7D:56:69:BC:0B:0F:B2:A4:24:56:17:E4:4E:36:DC:44:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:a5:2b:cc:52:2b:c5:c9:40:42:8b:b6:84:b2:bd:48:c7:24: 62:11:dc:67:c0:ae:12:f1:03:d3:97:cb:58:fb:36:ec:67:72: d8:cf:1b:89:e4:43:94:fa:7b:39:c5:07:6f:a7:aa:4e:40:25: c1:1b:ec:8d:09:d2:ea:d2:ac:6f:ae:d1:a8:02:cb:52:88:3b: a5:5e:3b:c3:46:60:52:cc:0a:35:ee:ed:5e:6e:38:e0:3e:ba: 33:59:25:f5:fa:e3:a4:10:5f:cb:69:8d:41:58:d9:99:eb:6f: 1e:f0:25:38:9a:65:24:8d:d4:95:b4:80:50:21:a8:35:30:ee: 43:16:ad:3c:3e:a5:5a:46:5c:b8:0b:7f:81:a2:0c:7e:f7:e0: 4d:9a:b7:98:d6:0e:8f:5f:09:ea:8d:fe:d3:36:f7:fc:25:25: 9e:d9:0e:1d:bc:0f:be:32:f2:c7:21:dd:04:b2:60:51:b1:f8: 86:6d:f5:ca:5b:7f:d0:da:7f:2a:49:10:48:65:3d:d7:a5:2a: 4a:c4:5c:e1:8d:cd:bd:44:a8:3d:75:25:35:6c:27:d6:71:f3: b9:02:2d:2b:16:00:ca:16:0a:66:26:04:30:8e:b8:f7:4e:48: 36:0b:68:98:2f:b2:d9:38:09:96:d3:c0:90:5c:ab:d6:5f:e0: 2b:d1:9e:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK5GdnxklxTCbvpwlU1/iIXn+vD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNFQzMyN0Q1NjY5QkMwQjBGQjJBNDI0NTYxN0U0NEUz NkRDNDQ3MzAeFw0yNjA3MjMxNzA1NTlaFw0yNjA3MjQxOTIxNTlaMDMxMTAvBgNV BAMTKDM1QzRDQzRFRjNGREI5RTFCN0Y4NEQ1MEIwMTQyN0E2ODk0RTExQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtq/7zNlY1r3Eycs7RLXjIdcX 3yLdF3HGQOJa9z7erIDLcvVtS3FgsAJq7CC9By0re58qwNI0Wo6o8a0RTB3ONBxd 2PdPjhrdBs6Fc27getulIEjSNMpm+CjL999Kz6DR46jku8/O7PVojyH/HatSeY3/ AmaJbSfU20DKcx058bJJ1+vCp5hKtW9SKhUAR1WOWv8GHCf702fWRet4/x9jf+p8 RWDPNxDhh7e5Nmk33SY4hG9GL4rLrEk4U99RyS3XUR5nT1vwjeB6e1sF8Ina3V3j k2FPJeL7Vsut268Oh5ed5zHdzzSmqUjOPQwmmx4Bj/ewZK7WKST0m8OJoW8jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNcTMTvP9ueG3+E1QsBQnpolOEacwHwYDVR0j BBgwFoAU0+wyfVZpvAsPsqQkVhfkTjbcRHMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTIzMDczOTAtNmVmMy00NDc2LWE2YWEtZDBjNTc4M2UxZjM3LzAvRDNFQzMyN0Q1 NjY5QkMwQjBGQjJBNDI0NTYxN0U0NEUzNkRDNDQ3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0VDMzI3RDU2NjlCQzBCMEZCMkE0MjQ1NjE3RTQ0RTM2REM0 NDczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvRDNFQzMyN0Q1NjY5QkMwQjBGQjJBNDI0NTYxN0U0 NEUzNkRDNDQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANelK8xSK8XJQEKLtoSyvUjHJGIR3GfArhLx A9OXy1j7NuxnctjPG4nkQ5T6eznFB2+nqk5AJcEb7I0J0urSrG+u0agCy1KIO6Ve O8NGYFLMCjXu7V5uOOA+ujNZJfX646QQX8tpjUFY2Znrbx7wJTiaZSSN1JW0gFAh qDUw7kMWrTw+pVpGXLgLf4GiDH734E2at5jWDo9fCeqN/tM29/wlJZ7ZDh28D74y 8sch3QSyYFGx+IZt9cpbf9DafypJEEhlPdelKkrEXOGNzb1EqD11JTVsJ9Zx87kC LSsWAMoWCmYmBDCOuPdOSDYLaJgvstk4CZbTwJBcq9Zf4CvRnmg= -----END CERTIFICATE-----Generated at Fri Jul 24 12:41:36 2026 by rpki-client