$ rpki-client -vvf rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft File: D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft (raw, json) Hash identifier: cEY4S/yYkKaXbkSylEZw9OIHm0DHE8lGitnRC2I8/vA= Subject key identifier: C7:8F:D5:B9:F9:33:40:2C:D4:1F:24:A5:AA:0E:4D:99:A5:8E:AA:90 Authority key identifier: D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD Certificate issuer: /CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD Certificate serial: 38F5E885A7CCE093A7F0FC704EC98DD36D84438B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 08:20:02 +0000 Manifest this update: Thu 23 Jul 2026 08:15:02 +0000 Manifest next update: Fri 24 Jul 2026 10:52:02 +0000 Files and hashes: 1: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: zZwF560CCW8FIsmpm9G6YMYG8iguu4mvO1b/REjgURE=) 2: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: tvgNMRKF9YhTkUojezBviQo+Tr5X2S/8TAOF/Ehj41w=) 3: D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl (hash: HYAgy1BT4D4He8mUkbpwJsqVEXMv3H2wpYP6OlFFcEQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f5:e8:85:a7:cc:e0:93:a7:f0:fc:70:4e:c9:8d:d3:6d:84:43:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD Validity Not Before: Jul 23 08:15:02 2026 GMT Not After : Jul 24 10:52:02 2026 GMT Subject: CN=C78FD5B9F933402CD41F24A5AA0E4D99A58EAA90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4c:58:ad:b1:d2:a2:29:21:40:ea:d7:f9:da: fe:d4:8b:d5:1f:80:4a:8b:6a:27:b1:c6:e6:e9:dd: 3d:5d:40:d2:4f:1c:ec:cf:b8:3b:19:fa:18:8c:88: f4:d2:f5:ec:84:dc:2e:9a:53:75:da:4d:4d:ab:18: c6:85:29:fc:02:fc:4b:a8:8e:c9:ab:31:2e:82:bd: 92:2d:3b:83:8a:32:86:94:10:d7:6d:a6:fb:b3:81: f7:ce:a0:a4:09:5a:d5:44:95:3c:6b:3b:32:0e:d6: 1c:9c:28:e5:ec:f6:3e:52:4c:48:07:90:ea:f8:1e: 4c:99:a5:3a:f2:51:83:31:40:28:3e:b2:ad:4e:4b: 4f:f8:3d:30:63:23:fb:6d:cd:ca:ca:3d:f1:e8:53: 23:d3:ce:38:dd:8d:60:99:d2:42:a8:a9:ab:b2:be: 72:71:f6:58:53:b1:19:38:fd:b2:77:9b:90:37:ed: 2f:67:7c:05:ff:8e:4f:9e:d7:71:4e:de:37:1b:2b: ee:e9:55:96:66:82:81:c0:a2:8c:d2:15:92:0d:9e: 60:3f:37:f7:0b:1f:7e:19:f4:74:e3:fa:37:96:33: 48:0e:d9:af:9a:85:c7:66:ca:f6:93:52:fa:8a:ef: 49:d1:99:91:60:14:af:45:54:59:d1:32:eb:94:03: 4c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8F:D5:B9:F9:33:40:2C:D4:1F:24:A5:AA:0E:4D:99:A5:8E:AA:90 X509v3 Authority Key Identifier: keyid:D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:4a:5a:82:3a:0a:b2:d9:b9:57:99:e0:75:50:71:f7:86:16: ad:51:ce:82:3e:f4:53:78:a5:de:29:86:b1:87:0d:e3:71:61: ad:e3:f0:ee:51:b4:5f:ea:2f:4d:fb:60:4d:57:01:5b:b5:be: 0a:6c:e1:c7:bc:18:6c:ca:6a:d2:93:be:d3:af:56:8c:c6:0c: 4a:65:b2:3d:3f:be:0b:2b:c9:73:6c:6f:30:e7:29:ec:54:09: 21:35:c9:0f:45:4f:8e:63:4e:c2:1a:06:c9:77:5e:db:5c:10: b2:58:36:8b:2e:26:70:bd:5c:29:11:6b:0d:38:8f:7c:0a:68: 60:0d:03:dc:9a:f7:de:d3:e9:da:0f:6b:eb:e9:e9:29:a8:ab: 49:8a:28:aa:a7:3e:90:d2:bd:66:c1:93:fe:c5:55:13:6b:ca: d9:d9:35:81:68:f9:14:81:95:20:50:b4:cc:96:9b:c7:ad:7f: f2:1f:c5:85:12:a4:9a:50:a3:a9:2d:76:55:d8:e1:bb:7c:ee: 6e:a3:bd:c4:51:1c:f7:c4:84:86:8b:16:28:4a:11:b7:52:f6: a2:f4:fb:00:3a:97:93:a5:7e:b3:e0:d3:d6:a5:b6:3f:cf:0d: e1:e5:85:a4:14:4a:d3:fd:98:d8:0c:da:07:b2:d3:15:a8:fd: b6:e7:e6:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOPXohafM4JOn8PxwTsmN022EQ4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc0Q0Q3Qjg3RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJF ODM1RURERDAeFw0yNjA3MjMwODE1MDJaFw0yNjA3MjQxMDUyMDJaMDMxMTAvBgNV BAMTKEM3OEZENUI5RjkzMzQwMkNENDFGMjRBNUFBMEU0RDk5QTU4RUFBOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgTFitsdKiKSFA6tf52v7Ui9Uf gEqLaiexxubp3T1dQNJPHOzPuDsZ+hiMiPTS9eyE3C6aU3XaTU2rGMaFKfwC/Euo jsmrMS6CvZItO4OKMoaUENdtpvuzgffOoKQJWtVElTxrOzIO1hycKOXs9j5STEgH kOr4HkyZpTryUYMxQCg+sq1OS0/4PTBjI/ttzcrKPfHoUyPTzjjdjWCZ0kKoqauy vnJx9lhTsRk4/bJ3m5A37S9nfAX/jk+e13FO3jcbK+7pVZZmgoHAoozSFZINnmA/ N/cLH34Z9HTj+jeWM0gO2a+ahcdmyvaTUvqK70nRmZFgFK9FVFnRMuuUA0wHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx4/VufkzQCzUHySlqg5NmaWOqpAwHwYDVR0j BBgwFoAU10zXuH10TS0wHD9pd0qZ++g17d0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZTEyNmYtODE5Mi00ZDI4LWIyNWUtZGVhYmRiNzllYjIxLzAvRDc0Q0Q3Qjg3 RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJFODM1RURERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzRDRDdCODdENzQ0RDJEMzAxQzNGNjk3NzRBOTlGQkU4MzVF RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRlZTEyNmYtODE5Mi00ZDI4LWIy NWUtZGVhYmRiNzllYjIxLzAvRDc0Q0Q3Qjg3RDc0NEQyRDMwMUMzRjY5Nzc0QTk5 RkJFODM1RURERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFKWoI6CrLZuVeZ4HVQcfeGFq1RzoI+9FN4 pd4phrGHDeNxYa3j8O5RtF/qL037YE1XAVu1vgps4ce8GGzKatKTvtOvVozGDEpl sj0/vgsryXNsbzDnKexUCSE1yQ9FT45jTsIaBsl3XttcELJYNosuJnC9XCkRaw04 j3wKaGANA9ya997T6doPa+vp6Smoq0mKKKqnPpDSvWbBk/7FVRNrytnZNYFo+RSB lSBQtMyWm8etf/IfxYUSpJpQo6ktdlXY4bt87m6jvcRRHPfEhIaLFihKEbdS9qL0 +wA6l5OlfrPg09altj/PDeHlhaQUStP9mNgM2gey0xWo/bbn5pc= -----END CERTIFICATE-----Generated at Fri Jul 24 02:30:39 2026 by rpki-client