$ rpki-client -vvf rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft File: D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft (raw, json) Hash identifier: F+m9lkMgIbDojHY2RgP3gCQ8Z5vEpOUWZAp60vdTJTY= Subject key identifier: 2A:D5:98:A0:C3:70:7D:A8:69:87:3A:C8:94:BE:56:DD:7E:FB:BE:F9 Authority key identifier: D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B Certificate issuer: /CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Certificate serial: 76A35126FC88D458B4B4F1D582650FB9552BFEEF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:00:18 +0000 Manifest this update: Fri 24 Jul 2026 00:55:18 +0000 Manifest next update: Sat 25 Jul 2026 04:50:18 +0000 Files and hashes: 1: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: XbL3x6HL60HenYCDQv+H+1fWOEpLqL6GUYrIDXhN5Ec=) 2: 3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa (hash: fmfwcql8BPTZXrBSOzyjpVBCvfAqL/VgrqcNagVB8MY=) 3: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: pbfRu1u/17aE+5jbLOXSjK5kSHLY3NJFYSy/GgweGtc=) 4: D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl (hash: Uj1M+7QNP6ryihP+Brrm0vWkwytI9G9xO1u474r8oRY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:a3:51:26:fc:88:d4:58:b4:b4:f1:d5:82:65:0f:b9:55:2b:fe:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Validity Not Before: Jul 24 00:55:18 2026 GMT Not After : Jul 25 04:50:18 2026 GMT Subject: CN=2AD598A0C3707DA869873AC894BE56DD7EFBBEF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:06:f4:32:d2:27:5e:ac:3a:2b:b9:7b:9b:c4: d0:ec:28:7a:7c:36:bb:0b:20:e9:22:b9:91:89:f8: fb:e3:02:8d:68:ce:64:91:b7:98:fe:16:07:18:5f: bf:9b:55:c5:97:18:96:4f:7b:ef:e9:da:33:ac:ac: b2:dd:44:2f:c9:78:5a:e5:8a:64:04:76:31:cd:a9: 5d:9b:1b:d4:3f:60:56:b1:b7:a0:df:67:da:0c:f8: c5:4a:ab:76:10:0f:fb:3d:cb:51:20:06:6a:cc:0e: a4:ee:0d:ef:36:6f:50:81:3f:13:8f:b0:e0:c8:7f: 68:f6:20:bc:9a:0d:09:c5:26:41:38:d0:eb:e4:19: fc:17:b0:73:93:07:4f:31:6a:9a:cc:ac:a5:84:62: 76:98:9d:b7:9f:4c:b8:66:d8:05:0a:3a:1d:a4:79: be:5d:7d:df:91:9d:37:d1:29:02:4b:17:47:d8:00: ee:dc:9a:f5:08:85:84:fb:ea:46:df:f1:9a:ec:94: 5c:f8:b5:dc:8d:19:40:a7:fc:c1:e2:59:95:26:b8: 79:28:db:b6:1e:80:6d:32:c1:a8:2c:10:16:11:2c: f5:b5:a3:0d:df:d8:51:2c:14:ef:23:13:23:67:85: 6a:91:f4:49:a4:c3:fd:f3:76:8c:e3:80:5e:a4:5c: 79:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D5:98:A0:C3:70:7D:A8:69:87:3A:C8:94:BE:56:DD:7E:FB:BE:F9 X509v3 Authority Key Identifier: keyid:D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c7:67:93:3e:c6:e1:53:9f:5d:bd:dd:5a:b6:2e:51:c3:12: b1:9b:d8:a2:a8:86:18:dd:de:4a:87:12:08:6f:1c:1b:14:07: 3b:ba:6a:45:4f:6f:43:5c:f6:45:bf:b2:5b:87:85:76:b1:26: a2:e0:5a:46:6b:95:6c:9e:ea:33:e3:16:f8:a1:46:f4:19:b3: 38:40:d3:c1:7c:6d:50:77:04:c6:67:a2:e4:13:e1:74:13:7b: ac:1e:a6:8e:0c:f4:a1:b3:e2:f2:75:4c:1d:12:95:da:10:96: 81:b1:22:7b:dd:2c:47:d5:5a:19:ae:1d:ba:d4:89:0f:f7:f3: e8:ce:af:c2:d0:b6:af:51:fa:af:24:39:a8:63:40:24:85:1f: 6e:47:23:88:17:0a:d2:2a:f8:0c:ed:3e:0a:02:15:3d:fa:81: 3e:7c:a0:6c:78:ce:a7:a5:ce:55:9b:d0:09:c6:b1:cd:ea:43: f9:34:49:45:e9:78:b4:71:f7:2a:1c:7a:98:26:00:f4:3d:84: c8:fb:83:07:89:d6:e4:97:2f:d5:58:a7:df:81:bc:07:37:bf: 49:58:08:81:0c:56:ca:2a:aa:08:77:2b:77:59:d8:78:f9:66: 85:96:0b:64:bb:c0:5e:d1:9d:d8:ca:f0:64:52:b1:12:75:7e: 77:4b:70:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdqNRJvyI1Fi0tPHVgmUPuVUr/u8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdCM0QyOUExQzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4 NTIzRTE0QjAeFw0yNjA3MjQwMDU1MThaFw0yNjA3MjUwNDUwMThaMDMxMTAvBgNV BAMTKDJBRDU5OEEwQzM3MDdEQTg2OTg3M0FDODk0QkU1NkREN0VGQkJFRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0BvQy0iderDoruXubxNDsKHp8 NrsLIOkiuZGJ+PvjAo1ozmSRt5j+FgcYX7+bVcWXGJZPe+/p2jOsrLLdRC/JeFrl imQEdjHNqV2bG9Q/YFaxt6DfZ9oM+MVKq3YQD/s9y1EgBmrMDqTuDe82b1CBPxOP sODIf2j2ILyaDQnFJkE40OvkGfwXsHOTB08xaprMrKWEYnaYnbefTLhm2AUKOh2k eb5dfd+RnTfRKQJLF0fYAO7cmvUIhYT76kbf8ZrslFz4tdyNGUCn/MHiWZUmuHko 27YegG0ywagsEBYRLPW1ow3f2FEsFO8jEyNnhWqR9Emkw/3zdozjgF6kXHnHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKtWYoMNwfahphzrIlL5W3X77vvkwHwYDVR0j BBgwFoAU17PSmhxY8qdk73HZDus0oIUj4UswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjRiYTY3NzgtYjE2ZC00YmE4LTk4NGYtMzRlNDE5ZmM5YzQ5LzAvRDdCM0QyOUEx QzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4NTIzRTE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EN0IzRDI5QTFDNThGMkE3NjRFRjcxRDkwRUVCMzRBMDg1MjNF MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvRDdCM0QyOUExQzU4RjJBNzY0RUY3MUQ5MEVFQjM0 QTA4NTIzRTE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLHZ5M+xuFTn1293Vq2LlHDErGb2KKohhjd 3kqHEghvHBsUBzu6akVPb0Nc9kW/sluHhXaxJqLgWkZrlWye6jPjFvihRvQZszhA 08F8bVB3BMZnouQT4XQTe6wepo4M9KGz4vJ1TB0SldoQloGxInvdLEfVWhmuHbrU iQ/38+jOr8LQtq9R+q8kOahjQCSFH25HI4gXCtIq+AztPgoCFT36gT58oGx4zqel zlWb0AnGsc3qQ/k0SUXpeLRx9yocepgmAPQ9hMj7gweJ1uSXL9VYp9+BvAc3v0lY CIEMVsoqqgh3K3dZ2Hj5ZoWWC2S7wF7RndjK8GRSsRJ1fndLcEQ= -----END CERTIFICATE-----Generated at Fri Jul 24 03:51:53 2026 by rpki-client