$ rpki-client -vvf rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.mft File: D6344C556CB88A244AE43DD23D620550C754F24F.mft (raw, json) Hash identifier: JZTgLxy1RL59pMb9E9v29htJ5rDFBKU/YlECy+EnbbI= Subject key identifier: A3:46:3E:6D:FC:38:AC:13:77:B4:B8:06:13:97:01:62:5E:9C:2B:58 Authority key identifier: D6:34:4C:55:6C:B8:8A:24:4A:E4:3D:D2:3D:62:05:50:C7:54:F2:4F Certificate issuer: /CN=D6344C556CB88A244AE43DD23D620550C754F24F Certificate serial: 3C122E970636E521A93512687EE8D41F1F49D59C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D6344C556CB88A244AE43DD23D620550C754F24F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 12:55:26 +0000 Manifest this update: Fri 24 Jul 2026 12:50:26 +0000 Manifest next update: Sat 25 Jul 2026 16:00:26 +0000 Files and hashes: 1: 3135372e32302e39342e302f32342d3234203d3e20313532343039.roa (hash: ks4tQxKb/HT7mZZsol2xTOY4z3gIixS1lQAzEE6O77U=) 2: D6344C556CB88A244AE43DD23D620550C754F24F.crl (hash: rci/lhBaJ7vHdd9Ao/CwrqnJ8WeYgnNsDiDNipoO4EU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.crl rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D6344C556CB88A244AE43DD23D620550C754F24F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 09:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:12:2e:97:06:36:e5:21:a9:35:12:68:7e:e8:d4:1f:1f:49:d5:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6344C556CB88A244AE43DD23D620550C754F24F Validity Not Before: Jul 24 12:50:26 2026 GMT Not After : Jul 25 16:00:26 2026 GMT Subject: CN=A3463E6DFC38AC1377B4B806139701625E9C2B58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:96:99:1a:16:9b:3e:fb:03:f7:18:e8:c0:f1: e4:17:8a:6d:29:57:77:24:35:91:00:e9:4b:ae:07: 06:32:ca:25:ea:91:13:de:3e:fc:7a:4a:36:bb:59: 62:ab:78:2f:65:81:e8:0e:9c:87:df:ca:a5:9d:e6: bb:1a:c6:ac:1d:3c:73:8f:30:45:35:e9:72:20:50: 03:f2:8d:0d:fe:f5:fd:25:1d:7c:0c:54:bd:52:85: 04:39:37:ba:a8:3b:82:d3:d4:e5:e5:cc:d4:37:ad: b9:77:db:57:fc:db:5f:51:04:0b:82:4f:74:da:56: cf:e6:cb:9e:79:98:34:e5:2f:30:84:d9:29:13:75: 05:8b:4e:38:2d:3d:4b:aa:5c:a1:d1:34:a2:a5:df: ca:d6:ef:d5:51:b3:50:72:10:df:76:80:ca:1f:cf: 72:ea:84:87:87:e7:21:1e:9d:a8:18:17:05:c2:10: 3f:8a:c2:62:47:c3:d7:eb:96:f2:81:95:34:19:96: f0:94:b4:4d:bd:be:74:27:1e:a5:fb:63:23:05:78: 86:21:4e:5b:f0:1d:82:55:bc:c0:2e:23:c0:0f:46: 20:d3:ca:99:85:0e:87:e5:64:9c:d2:13:8f:ff:48: 01:d6:19:9d:67:48:9d:db:2d:ff:f0:81:1b:70:c0: 3c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:46:3E:6D:FC:38:AC:13:77:B4:B8:06:13:97:01:62:5E:9C:2B:58 X509v3 Authority Key Identifier: keyid:D6:34:4C:55:6C:B8:8A:24:4A:E4:3D:D2:3D:62:05:50:C7:54:F2:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D6344C556CB88A244AE43DD23D620550C754F24F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:b3:a7:f3:da:d8:d2:4f:b3:30:c3:dd:8e:85:2d:39:cb:ca: 30:72:aa:72:31:ab:e2:16:87:61:b0:cc:21:29:97:be:a4:c7: 2c:aa:62:e5:2f:12:b0:70:6a:cc:bc:27:a2:1b:a5:43:9c:5b: 6b:ec:24:e1:75:2e:02:96:31:ac:46:5f:f0:2c:1d:8b:3f:5c: d2:3b:c1:de:76:fe:29:92:17:e1:85:28:bf:ed:b3:b3:fe:fa: dd:4f:21:2e:f3:23:35:49:ad:de:aa:95:80:f9:6a:04:54:61: 89:ac:f6:95:a2:c6:de:74:0c:94:0d:4f:a9:c7:7c:b9:d8:6b: d3:e0:c7:90:73:a9:5c:15:0a:ec:fb:fb:38:65:a8:a8:a6:30: 47:4f:d2:94:04:ba:21:13:7b:b1:17:74:52:e1:d5:22:37:ea: 36:1e:12:18:28:28:ad:ac:0e:1c:a8:f3:9e:3f:4e:f2:47:0c: ec:2d:21:fb:6e:b1:21:3c:a7:44:72:d2:15:6d:e1:8f:2f:47: da:47:9e:db:56:a1:70:9b:3d:5b:4e:88:fa:f6:ea:ad:f7:f2: 09:87:f4:8a:d0:9c:c8:96:49:e6:56:ea:b2:d5:87:b7:d2:95: 40:de:8f:4d:ec:2e:55:5d:e2:45:d6:3a:48:de:18:96:43:e6: 52:ac:b7:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPBIulwY25SGpNRJofujUHx9J1ZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYzNDRDNTU2Q0I4OEEyNDRBRTQzREQyM0Q2MjA1NTBD NzU0RjI0RjAeFw0yNjA3MjQxMjUwMjZaFw0yNjA3MjUxNjAwMjZaMDMxMTAvBgNV BAMTKEEzNDYzRTZERkMzOEFDMTM3N0I0QjgwNjEzOTcwMTYyNUU5QzJCNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJlpkaFps++wP3GOjA8eQXim0p V3ckNZEA6UuuBwYyyiXqkRPePvx6Sja7WWKreC9lgegOnIffyqWd5rsaxqwdPHOP MEU16XIgUAPyjQ3+9f0lHXwMVL1ShQQ5N7qoO4LT1OXlzNQ3rbl321f8219RBAuC T3TaVs/my555mDTlLzCE2SkTdQWLTjgtPUuqXKHRNKKl38rW79VRs1ByEN92gMof z3LqhIeH5yEenagYFwXCED+KwmJHw9frlvKBlTQZlvCUtE29vnQnHqX7YyMFeIYh TlvwHYJVvMAuI8APRiDTypmFDoflZJzSE4//SAHWGZ1nSJ3bLf/wgRtwwDzZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo0Y+bfw4rBN3tLgGE5cBYl6cK1gwHwYDVR0j BBgwFoAU1jRMVWy4iiRK5D3SPWIFUMdU8k8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTcyZDE3NTItNDg1My00Yzc0LWI1NzQtOTk0ZDNiMTI0MDkwLzAvRDYzNDRDNTU2 Q0I4OEEyNDRBRTQzREQyM0Q2MjA1NTBDNzU0RjI0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENjM0NEM1NTZDQjg4QTI0NEFFNDNERDIzRDYyMDU1MEM3NTRG MjRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTcyZDE3NTItNDg1My00Yzc0LWI1 NzQtOTk0ZDNiMTI0MDkwLzAvRDYzNDRDNTU2Q0I4OEEyNDRBRTQzREQyM0Q2MjA1 NTBDNzU0RjI0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKzp/Pa2NJPszDD3Y6FLTnLyjByqnIxq+IW h2GwzCEpl76kxyyqYuUvErBwasy8J6IbpUOcW2vsJOF1LgKWMaxGX/AsHYs/XNI7 wd52/imSF+GFKL/ts7P++t1PIS7zIzVJrd6qlYD5agRUYYms9pWixt50DJQNT6nH fLnYa9Pgx5BzqVwVCuz7+zhlqKimMEdP0pQEuiETe7EXdFLh1SI36jYeEhgoKK2s Dhyo854/TvJHDOwtIftusSE8p0Ry0hVt4Y8vR9pHnttWoXCbPVtOiPr26q338gmH 9IrQnMiWSeZW6rLVh7fSlUDej03sLlVd4kXWOkjeGJZD5lKst04= -----END CERTIFICATE-----Generated at Fri Jul 24 16:03:33 2026 by rpki-client