$ rpki-client -vvf rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.mft File: 328533C99D9FDEAA8F1418F15BD32B96BC206058.mft (raw, json) Hash identifier: 3TA6I3eS/poaD4LgwmJihWCszMv+idHr5MSWE+sGCTg= Subject key identifier: 66:C6:8B:13:78:A8:96:D5:36:D1:49:18:AC:E0:94:B1:56:2E:4C:0E Authority key identifier: 32:85:33:C9:9D:9F:DE:AA:8F:14:18:F1:5B:D3:2B:96:BC:20:60:58 Certificate issuer: /CN=328533C99D9FDEAA8F1418F15BD32B96BC206058 Certificate serial: 41BBE75B9FD93676D7E5C668E018D29C8D38360E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/328533C99D9FDEAA8F1418F15BD32B96BC206058.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 12:19:40 +0000 Manifest this update: Fri 24 Jul 2026 12:14:40 +0000 Manifest next update: Sat 25 Jul 2026 13:35:40 +0000 Files and hashes: 1: 328533C99D9FDEAA8F1418F15BD32B96BC206058.crl (hash: 4JJ5N4t8yCi6cEQ9jOfl3GSN7DpYffi8fvgbq4uvwmA=) 2: 3130332e3231392e362e302f32342d3234203d3e203338313537.roa (hash: WdtifxvKK3KsxSLiwEXLWrNPcTtmbGv7tQrCl/tBPS8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.crl rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/328533C99D9FDEAA8F1418F15BD32B96BC206058.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:bb:e7:5b:9f:d9:36:76:d7:e5:c6:68:e0:18:d2:9c:8d:38:36:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=328533C99D9FDEAA8F1418F15BD32B96BC206058 Validity Not Before: Jul 24 12:14:40 2026 GMT Not After : Jul 25 13:35:40 2026 GMT Subject: CN=66C68B1378A896D536D14918ACE094B1562E4C0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:06:a1:77:09:0c:f0:8e:05:2e:6f:63:c1:eb: 00:d2:7b:81:7f:07:5b:e2:24:5b:f0:ee:ba:5d:5c: be:66:7d:45:c1:91:ba:42:a2:3e:c7:f0:9b:40:ba: a4:07:ef:3f:36:6c:d9:48:b0:e8:34:54:10:1b:11: cb:3a:ea:c5:84:16:cc:a2:81:72:a1:e7:98:3d:ef: 7b:09:04:09:a3:0e:39:fb:55:d2:32:6d:95:d5:ae: bf:99:0d:1e:7d:a6:2f:2c:0b:fa:1c:b1:8c:b2:2e: a4:b1:21:9d:a0:2a:64:9a:bd:64:77:7a:19:44:f2: ae:c6:48:80:6c:9e:12:fb:63:a7:dd:0c:57:41:70: 01:25:41:ea:9c:f5:6b:44:2b:de:4e:c1:5b:f3:c6: ee:40:40:ba:f4:0c:d5:a5:fb:d7:e0:73:e7:6f:dc: 91:8a:d1:04:3e:58:f4:4a:3b:e7:78:a0:ff:d6:60: b8:a9:15:51:d7:92:d3:95:66:b1:b6:40:d5:75:8b: 29:f4:d2:7d:ab:b2:d8:a7:30:7a:46:96:e5:4d:41: f0:0f:b7:88:a9:cc:ec:3c:35:13:c5:d2:57:e6:00: 8e:36:0c:6c:02:bd:cd:71:69:5f:87:6f:33:72:e6: 92:44:7c:62:68:df:f4:6a:fa:02:93:03:ab:03:f0: 42:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C6:8B:13:78:A8:96:D5:36:D1:49:18:AC:E0:94:B1:56:2E:4C:0E X509v3 Authority Key Identifier: keyid:32:85:33:C9:9D:9F:DE:AA:8F:14:18:F1:5B:D3:2B:96:BC:20:60:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/328533C99D9FDEAA8F1418F15BD32B96BC206058.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:60:07:71:ca:e3:65:d7:67:de:4a:13:54:f5:59:ac:e1:08: e7:40:d3:84:d8:db:d0:ec:4e:79:15:4a:4d:c5:ff:d1:46:3f: a4:ae:9c:3d:f7:54:a6:39:d8:29:cd:f2:44:40:f1:2a:bc:cb: 5b:21:02:f3:c1:a9:d1:68:01:0e:03:91:15:25:aa:6d:ab:12: 66:c9:9e:d4:e0:94:89:52:ed:96:44:8b:34:af:95:0c:df:e3: 9f:aa:a3:ec:5d:1e:d5:6b:78:e0:20:49:39:b2:58:04:22:0c: ef:25:4c:e2:6e:57:67:d0:d2:3f:32:66:8c:e8:8d:43:50:35: 67:09:12:c5:8a:17:95:ed:72:51:0f:f0:eb:a7:04:f7:f4:f7: 31:c2:10:98:fc:ce:c2:78:49:32:9c:37:9a:01:2d:e2:c6:dd: 49:1a:72:34:d3:99:43:99:ae:52:04:ca:63:7c:a3:f0:4a:12: 0e:27:ae:73:e5:1c:98:f0:23:b8:d0:73:fb:ee:5b:d2:e9:55: e1:7b:63:b2:9c:75:37:53:8d:9c:91:fe:b9:fb:3c:d8:7f:91: b0:c9:8a:8e:36:5d:02:23:5c:5a:9c:13:da:ef:90:b6:a3:a3: 9e:23:38:f9:b6:68:98:55:00:1b:cc:39:0e:dc:70:04:24:bf: a5:d0:b8:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQbvnW5/ZNnbX5cZo4BjSnI04Ng4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI4NTMzQzk5RDlGREVBQThGMTQxOEYxNUJEMzJCOTZC QzIwNjA1ODAeFw0yNjA3MjQxMjE0NDBaFw0yNjA3MjUxMzM1NDBaMDMxMTAvBgNV BAMTKDY2QzY4QjEzNzhBODk2RDUzNkQxNDkxOEFDRTA5NEIxNTYyRTRDMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhBqF3CQzwjgUub2PB6wDSe4F/ B1viJFvw7rpdXL5mfUXBkbpCoj7H8JtAuqQH7z82bNlIsOg0VBAbEcs66sWEFsyi gXKh55g973sJBAmjDjn7VdIybZXVrr+ZDR59pi8sC/ocsYyyLqSxIZ2gKmSavWR3 ehlE8q7GSIBsnhL7Y6fdDFdBcAElQeqc9WtEK95OwVvzxu5AQLr0DNWl+9fgc+dv 3JGK0QQ+WPRKO+d4oP/WYLipFVHXktOVZrG2QNV1iyn00n2rstinMHpGluVNQfAP t4ipzOw8NRPF0lfmAI42DGwCvc1xaV+HbzNy5pJEfGJo3/Rq+gKTA6sD8ELtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZsaLE3ioltU20UkYrOCUsVYuTA4wHwYDVR0j BBgwFoAUMoUzyZ2f3qqPFBjxW9MrlrwgYFgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAyMWVlNzYtYTlmZi00YmZhLTgyMjMtOTQ2ZWVjY2NmMDM2LzAvMzI4NTMzQzk5 RDlGREVBQThGMTQxOEYxNUJEMzJCOTZCQzIwNjA1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMjg1MzNDOTlEOUZERUFBOEYxNDE4RjE1QkQzMkI5NkJDMjA2 MDU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAyMWVlNzYtYTlmZi00YmZhLTgy MjMtOTQ2ZWVjY2NmMDM2LzAvMzI4NTMzQzk5RDlGREVBQThGMTQxOEYxNUJEMzJC OTZCQzIwNjA1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFgB3HK42XXZ95KE1T1WazhCOdA04TY29Ds TnkVSk3F/9FGP6SunD33VKY52CnN8kRA8Sq8y1shAvPBqdFoAQ4DkRUlqm2rEmbJ ntTglIlS7ZZEizSvlQzf45+qo+xdHtVreOAgSTmyWAQiDO8lTOJuV2fQ0j8yZozo jUNQNWcJEsWKF5XtclEP8OunBPf09zHCEJj8zsJ4STKcN5oBLeLG3UkacjTTmUOZ rlIEymN8o/BKEg4nrnPlHJjwI7jQc/vuW9LpVeF7Y7KcdTdTjZyR/rn7PNh/kbDJ io42XQIjXFqcE9rvkLajo54jOPm2aJhVABvMOQ7ccAQkv6XQuOg= -----END CERTIFICATE-----Generated at Fri Jul 24 14:23:25 2026 by rpki-client