$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft File: 996D7371455A834C9B196DACD041DB7C6E779021.mft (raw, json) Hash identifier: GxJZVX6TQqpb/VLLK71GP11I5Uvoy6AV7znZ9Xp+J9Y= Subject key identifier: 28:86:88:F5:E2:7A:42:A5:10:F0:79:24:9B:25:AD:A9:40:A3:5F:28 Authority key identifier: 99:6D:73:71:45:5A:83:4C:9B:19:6D:AC:D0:41:DB:7C:6E:77:90:21 Certificate issuer: /CN=996D7371455A834C9B196DACD041DB7C6E779021 Certificate serial: 3BDD7D5A7F56A062BE71FDF94AE29E4FFAD5607E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 15:44:10 +0000 Manifest this update: Thu 23 Jul 2026 15:39:10 +0000 Manifest next update: Fri 24 Jul 2026 18:56:10 +0000 Files and hashes: 1: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (hash: CbnjGUXd5+J6hJMKbj+3ua0RtVbeM/SLewiagXzRFOs=) 2: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (hash: y81kh0KeqX5r1jHre6tsGWtKJonbTr6cZ5My00O1C1k=) 3: 996D7371455A834C9B196DACD041DB7C6E779021.crl (hash: v3cQGXiLl5UeTK+umjJR+YegcX5dEageoZQVpP0QUGg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.crl rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:dd:7d:5a:7f:56:a0:62:be:71:fd:f9:4a:e2:9e:4f:fa:d5:60:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=996D7371455A834C9B196DACD041DB7C6E779021 Validity Not Before: Jul 23 15:39:10 2026 GMT Not After : Jul 24 18:56:10 2026 GMT Subject: CN=288688F5E27A42A510F079249B25ADA940A35F28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:c4:61:ff:3a:96:ec:72:46:ab:b3:e0:ca: ae:07:c8:48:1b:4e:c1:99:b8:0e:2e:bb:cb:45:ca: 94:e7:43:18:f7:53:20:e0:0d:67:47:dc:72:ae:7d: c0:f0:fa:71:bb:89:69:24:15:12:bc:eb:9c:ae:88: 8d:ec:71:f3:91:98:57:7c:66:a3:b1:cf:e9:d0:4c: 83:02:d9:4f:d4:8f:0e:49:09:7b:62:83:86:d8:9a: 97:ef:21:61:97:1c:76:76:e8:f8:5a:2c:3e:19:be: 82:1c:df:d7:d3:4c:8c:a5:6d:70:a9:90:d0:fb:f9: b4:fd:2d:2c:8e:1e:9b:c3:31:e5:f2:93:aa:38:df: c2:3b:1f:41:7e:8c:55:a7:b6:52:99:42:fd:87:e5: 57:ab:70:9b:6d:5c:a4:e3:66:70:4d:7b:5b:ea:d1: f0:ca:ff:25:ce:4e:86:7c:99:37:88:09:c7:45:0a: 7a:eb:46:87:c2:be:e1:18:e3:d1:f7:e1:f5:bf:13: 0c:fb:34:d6:1a:c3:ee:42:4f:9d:5d:86:9d:99:de: 08:ea:3b:14:b7:e7:26:96:db:df:a1:00:97:17:3b: 9e:0c:c8:60:53:54:74:25:ea:40:49:1e:ea:2b:bc: 13:f3:56:c2:88:a3:1f:3a:ec:82:11:18:c0:03:5b: 00:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:86:88:F5:E2:7A:42:A5:10:F0:79:24:9B:25:AD:A9:40:A3:5F:28 X509v3 Authority Key Identifier: keyid:99:6D:73:71:45:5A:83:4C:9B:19:6D:AC:D0:41:DB:7C:6E:77:90:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:c5:1e:d8:af:0b:0e:9e:5d:86:95:d8:95:6d:8e:ff:da:e2: 5c:7c:e1:11:7b:9a:a6:cf:66:c8:7d:e6:c2:63:55:0e:5a:28: 22:60:c2:75:20:19:79:93:d1:a0:4a:b9:46:4d:b8:bf:30:9e: 5a:27:4b:fa:05:c1:de:83:2d:3c:11:18:30:7b:b6:ff:41:10: f0:b0:85:a7:6c:a0:0e:dd:e0:6d:71:5b:78:ad:78:04:ea:19: 71:30:63:42:f2:4c:57:b2:71:0a:68:a9:fd:a7:c2:20:56:63: a7:62:e4:80:a7:b2:fb:35:47:cc:c5:d3:ac:71:6d:0d:93:15: ac:50:29:88:9a:9e:93:92:6e:83:aa:56:06:ef:56:19:36:8d: f5:35:f7:2d:0d:86:5a:d6:5d:60:0c:4a:aa:4d:23:53:3b:6a: 1b:a1:71:05:d2:c2:e0:0c:ef:54:04:64:d4:b9:93:59:12:1d: 1d:12:57:53:99:ad:ed:fe:aa:1b:5e:2b:9b:db:80:2f:78:7a: 97:f9:00:48:18:48:18:4a:f9:cf:80:73:01:ad:3c:5d:b1:f6: 5c:fd:7d:6a:67:bf:fe:d7:fe:c8:86:d6:30:b5:82:5b:cd:29: 7d:19:b1:5c:86:20:09:94:c0:72:9d:7c:ce:43:2e:56:2c:5d: 59:5c:d7:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO919Wn9WoGK+cf35SuKeT/rVYH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk2RDczNzE0NTVBODM0QzlCMTk2REFDRDA0MURCN0M2 RTc3OTAyMTAeFw0yNjA3MjMxNTM5MTBaFw0yNjA3MjQxODU2MTBaMDMxMTAvBgNV BAMTKDI4ODY4OEY1RTI3QTQyQTUxMEYwNzkyNDlCMjVBREE5NDBBMzVGMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChicRh/zqW7HJGq7Pgyq4HyEgb TsGZuA4uu8tFypTnQxj3UyDgDWdH3HKufcDw+nG7iWkkFRK865yuiI3scfORmFd8 ZqOxz+nQTIMC2U/Ujw5JCXtig4bYmpfvIWGXHHZ26PhaLD4ZvoIc39fTTIylbXCp kND7+bT9LSyOHpvDMeXyk6o438I7H0F+jFWntlKZQv2H5VercJttXKTjZnBNe1vq 0fDK/yXOToZ8mTeICcdFCnrrRofCvuEY49H34fW/Ewz7NNYaw+5CT51dhp2Z3gjq OxS35yaW29+hAJcXO54MyGBTVHQl6kBJHuorvBPzVsKIox867IIRGMADWwBLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKIaI9eJ6QqUQ8HkkmyWtqUCjXygwHwYDVR0j BBgwFoAUmW1zcUVag0ybGW2s0EHbfG53kCEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2YzYxNGYtZDBmZi00MWE5LTkyZDAtM2EyMTM1ODE1MzdiLzAvOTk2RDczNzE0 NTVBODM0QzlCMTk2REFDRDA0MURCN0M2RTc3OTAyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTZENzM3MTQ1NUE4MzRDOUIxOTZEQUNEMDQxREI3QzZFNzc5 MDIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2YzYxNGYtZDBmZi00MWE5LTky ZDAtM2EyMTM1ODE1MzdiLzAvOTk2RDczNzE0NTVBODM0QzlCMTk2REFDRDA0MURC N0M2RTc3OTAyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfFHtivCw6eXYaV2JVtjv/a4lx84RF7mqbP Zsh95sJjVQ5aKCJgwnUgGXmT0aBKuUZNuL8wnlonS/oFwd6DLTwRGDB7tv9BEPCw hadsoA7d4G1xW3iteATqGXEwY0LyTFeycQpoqf2nwiBWY6di5ICnsvs1R8zF06xx bQ2TFaxQKYianpOSboOqVgbvVhk2jfU19y0NhlrWXWAMSqpNI1M7ahuhcQXSwuAM 71QEZNS5k1kSHR0SV1OZre3+qhteK5vbgC94epf5AEgYSBhK+c+AcwGtPF2x9lz9 fWpnv/7X/siG1jC1glvNKX0ZsVyGIAmUwHKdfM5DLlYsXVlc1yk= -----END CERTIFICATE-----Generated at Fri Jul 24 12:40:56 2026 by rpki-client