$ rpki-client -vvf rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft File: D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft (raw, json) Hash identifier: mbJjXRe1eyXhzK/NkFqVRMq7zAxJy8oj34fuq1Khl+0= Subject key identifier: F5:24:DF:3E:5C:76:13:D5:A2:87:2D:40:19:8D:7D:65:28:2C:02:52 Authority key identifier: D8:BF:75:90:C4:0D:E7:31:6F:52:A1:DE:E7:CE:7B:ED:A4:30:82:C3 Certificate issuer: /CN=D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3 Certificate serial: 47C6DA5FC3BD0EF9D8C0AAE283E0AC80D608F0DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:36:11 +0000 Manifest this update: Fri 24 Jul 2026 01:31:11 +0000 Manifest next update: Sat 25 Jul 2026 05:10:11 +0000 Files and hashes: 1: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: JFxGecPe7UA2eaCg+ZKJcplW/KcDw+sS4WqX6uOvlVg=) 2: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: eXGHZrGd4sU2DLSEdy3de330+Fw4LKj8QHf1Kk8jl8M=) 3: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: JFK4m68zG0lJAd7+KDHHharwdbO7qzWlnuoWt7ljQFI=) 4: D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl (hash: cNS1JPDbnR5cFhVyxYiFqBGhVQUK27T4IQ/dnHRFGNo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c6:da:5f:c3:bd:0e:f9:d8:c0:aa:e2:83:e0:ac:80:d6:08:f0:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3 Validity Not Before: Jul 24 01:31:11 2026 GMT Not After : Jul 25 05:10:11 2026 GMT Subject: CN=F524DF3E5C7613D5A2872D40198D7D65282C0252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9a:47:1e:ef:e2:00:a8:37:18:bf:bf:7f:3f: a0:80:3e:94:32:48:a8:6f:7d:41:46:b8:c5:3f:d6: 78:c3:58:82:e0:d2:29:b0:f2:ee:bb:0a:4d:12:6c: 1b:b5:23:22:5a:44:5c:40:35:a8:72:3e:bc:e9:0e: bb:dd:a9:09:5f:40:6b:7b:cd:91:55:84:1c:bc:30: d1:bc:f7:bb:60:c8:db:7a:99:79:62:d7:93:81:98: 72:7a:86:7b:d6:9d:ea:ad:8a:a5:81:29:87:d9:2b: a0:21:6c:a3:14:e4:f6:21:79:ca:b8:a6:dc:1e:8e: 7f:6e:cf:f3:02:86:4f:b5:73:28:19:4b:6b:0b:58: f9:44:6f:28:4e:3f:c9:89:b7:3e:c8:0a:61:1b:fc: 4d:1d:b1:17:bf:79:25:72:04:ad:70:15:bb:a9:67: 88:29:63:fd:61:07:fd:f7:82:30:d3:0f:c8:5d:f5: 8b:50:27:5a:89:64:ff:04:04:44:19:e9:90:c2:b1: ca:54:5e:ef:2c:e3:a1:51:c6:f0:58:da:0a:1d:22: 15:9c:13:3e:1b:ab:86:ba:ed:00:54:42:0d:53:6b: 85:72:df:96:f8:8c:4a:0a:c2:44:ea:aa:71:f9:1c: ec:41:c3:d7:a9:7c:7a:04:b7:fb:24:a2:c1:90:be: 94:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:24:DF:3E:5C:76:13:D5:A2:87:2D:40:19:8D:7D:65:28:2C:02:52 X509v3 Authority Key Identifier: keyid:D8:BF:75:90:C4:0D:E7:31:6F:52:A1:DE:E7:CE:7B:ED:A4:30:82:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:5c:16:05:3b:4d:eb:af:c7:a0:61:54:6a:84:f7:c6:be:3e: ca:d4:f5:1e:99:25:08:92:79:3c:e3:30:eb:a1:0f:2d:f5:6b: 20:bb:ac:83:6e:14:b4:a3:e4:e4:7c:fe:bb:52:35:3c:0b:15: e7:f4:42:cd:d6:32:9f:9a:58:42:06:53:3b:e1:d6:32:58:b7: 5d:c5:de:fb:e2:a0:bd:8f:61:de:f1:fb:60:99:64:03:08:09: 78:85:9c:2d:9f:26:cc:b2:6a:64:32:04:29:52:9a:95:0c:26: e5:fe:01:a0:35:f7:f2:fa:0d:31:11:42:ec:be:4c:ba:09:77: e3:20:ae:e4:da:d3:16:2e:74:48:10:24:d1:11:2c:9a:52:2c: b1:22:76:18:01:45:1e:39:8b:88:00:39:d6:67:ca:84:73:cf: d2:21:01:de:3e:e7:bf:60:41:db:c0:cf:d1:f7:cd:60:72:10: cf:d2:4f:7e:c0:53:f2:59:66:4d:7b:3e:ad:b3:a1:ff:75:65: 60:c6:81:7f:ce:bb:1b:b6:ca:f0:5c:62:2d:f7:ee:f0:4b:e7: 58:1d:f9:f1:a4:ea:44:f9:fb:b4:e1:25:6d:20:54:b4:71:d9: 4f:ca:a0:90:66:fa:e2:58:21:d9:a8:ca:99:34:a8:b1:6c:5d: a0:43:63:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR8baX8O9DvnYwKrig+CsgNYI8NowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCRjc1OTBDNDBERTczMTZGNTJBMURFRTdDRTdCRURB NDMwODJDMzAeFw0yNjA3MjQwMTMxMTFaFw0yNjA3MjUwNTEwMTFaMDMxMTAvBgNV BAMTKEY1MjRERjNFNUM3NjEzRDVBMjg3MkQ0MDE5OEQ3RDY1MjgyQzAyNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJmkce7+IAqDcYv79/P6CAPpQy SKhvfUFGuMU/1njDWILg0imw8u67Ck0SbBu1IyJaRFxANahyPrzpDrvdqQlfQGt7 zZFVhBy8MNG897tgyNt6mXli15OBmHJ6hnvWneqtiqWBKYfZK6AhbKMU5PYhecq4 ptwejn9uz/MChk+1cygZS2sLWPlEbyhOP8mJtz7ICmEb/E0dsRe/eSVyBK1wFbup Z4gpY/1hB/33gjDTD8hd9YtQJ1qJZP8EBEQZ6ZDCscpUXu8s46FRxvBY2godIhWc Ez4bq4a67QBUQg1Ta4Vy35b4jEoKwkTqqnH5HOxBw9epfHoEt/skosGQvpSdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9STfPlx2E9Wihy1AGY19ZSgsAlIwHwYDVR0j BBgwFoAU2L91kMQN5zFvUqHe58577aQwgsMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAzOTYzODgtMmQ2Yi00NzZlLTk2M2QtMWNjMzgxMzc0YjFjLzAvRDhCRjc1OTBD NDBERTczMTZGNTJBMURFRTdDRTdCRURBNDMwODJDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EOEJGNzU5MEM0MERFNzMxNkY1MkExREVFN0NFN0JFREE0MzA4 MkMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvRDhCRjc1OTBDNDBERTczMTZGNTJBMURFRTdDRTdC RURBNDMwODJDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtcFgU7Teuvx6BhVGqE98a+PsrU9R6ZJQiS eTzjMOuhDy31ayC7rINuFLSj5OR8/rtSNTwLFef0Qs3WMp+aWEIGUzvh1jJYt13F 3vvioL2PYd7x+2CZZAMICXiFnC2fJsyyamQyBClSmpUMJuX+AaA19/L6DTERQuy+ TLoJd+MgruTa0xYudEgQJNERLJpSLLEidhgBRR45i4gAOdZnyoRzz9IhAd4+579g QdvAz9H3zWByEM/ST37AU/JZZk17Pq2zof91ZWDGgX/Ouxu2yvBcYi337vBL51gd +fGk6kT5+7ThJW0gVLRx2U/KoJBm+uJYIdmoypk0qLFsXaBDY60= -----END CERTIFICATE-----Generated at Fri Jul 24 03:14:13 2026 by rpki-client