$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft File: 647AC2310971579801DD46D3B271B994E9E436B8.mft (raw, json) Hash identifier: b+HFwFFT9mkaXETOugBdXxePS4qY56n53Woka3uyTNA= Subject key identifier: 75:61:43:75:1A:26:62:B4:41:8B:77:25:84:D3:DC:9B:E9:47:E9:3C Authority key identifier: 64:7A:C2:31:09:71:57:98:01:DD:46:D3:B2:71:B9:94:E9:E4:36:B8 Certificate issuer: /CN=647AC2310971579801DD46D3B271B994E9E436B8 Certificate serial: 5C7BA73FF65317310F8811DAD676CB5ACAC57E9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:48:00 +0000 Manifest this update: Thu 23 Jul 2026 18:43:00 +0000 Manifest next update: Fri 24 Jul 2026 22:42:00 +0000 Files and hashes: 1: 3133382e3235322e3133392e302f32342d3234203d3e20313534333837.roa (hash: yku2OKFmq6fXhF7DFYEYGMGLBbIVUHGQwGNi4OKZMJU=) 2: 647AC2310971579801DD46D3B271B994E9E436B8.crl (hash: 8nTkBaJKpvMLyjyjvqeYL4uPYk1R4xioj+KCWW1tUog=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.crl rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:7b:a7:3f:f6:53:17:31:0f:88:11:da:d6:76:cb:5a:ca:c5:7e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647AC2310971579801DD46D3B271B994E9E436B8 Validity Not Before: Jul 23 18:43:00 2026 GMT Not After : Jul 24 22:42:00 2026 GMT Subject: CN=756143751A2662B4418B772584D3DC9BE947E93C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ff:00:cd:41:93:09:b0:48:46:f8:1e:b2:eb: 64:de:23:4b:e0:3b:1b:ab:f5:b3:2f:b1:ec:75:7a: 5a:49:af:d7:e5:ba:9d:f4:f4:5b:65:76:f3:ad:ab: 2e:bb:3d:c2:0c:ab:78:b3:e5:58:27:0e:ec:9b:a4: cc:a2:d1:e1:68:f4:65:99:fa:01:28:17:d4:74:01: 4b:0c:ee:5e:9f:58:48:71:09:fa:0f:86:14:43:42: dc:8d:ad:39:73:d1:2c:df:f3:1b:91:71:72:c9:f2: 4d:10:ff:ee:24:0b:6c:aa:9b:91:d5:8e:45:81:09: bf:f2:c4:98:22:55:a6:78:9a:4b:93:17:f9:a3:a8: 68:96:21:9d:6f:63:5c:ce:eb:1b:a4:b7:16:1c:b9: 8a:26:a3:ff:4d:c1:80:21:70:f2:66:b9:03:d0:5b: 8c:6c:45:b1:cf:0f:f6:fc:67:4a:2a:72:af:ad:61: 1f:03:59:97:8d:1e:af:82:0a:0b:77:7f:89:2d:0a: e4:26:86:70:cc:94:96:21:bd:d8:ff:07:2b:1f:82: 4b:f2:17:7e:f7:9d:e6:5a:8a:1c:b0:01:43:5a:38: 04:e6:16:63:79:6e:23:f1:a9:1d:b8:48:0a:58:de: f3:c8:89:d8:4a:ba:a1:45:26:4e:7c:a5:3d:ee:6c: a1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:61:43:75:1A:26:62:B4:41:8B:77:25:84:D3:DC:9B:E9:47:E9:3C X509v3 Authority Key Identifier: keyid:64:7A:C2:31:09:71:57:98:01:DD:46:D3:B2:71:B9:94:E9:E4:36:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:a6:81:75:95:a4:a2:41:fe:f4:57:fb:73:0f:c3:69:af:4f: a9:4a:90:21:f4:57:8f:2a:4a:c1:09:a5:51:ee:87:0c:06:42: a7:a6:bc:30:0e:54:fb:41:e9:89:a5:1b:8a:b2:6b:e8:97:bd: 3d:3f:3e:76:4a:55:14:a9:16:0c:3a:6a:cf:d9:91:be:2b:86: b9:52:93:3b:86:64:99:5d:5a:40:4c:20:ed:2b:e9:16:3c:6c: e7:35:6a:c0:48:0e:a5:e7:d7:2e:4d:10:0d:bc:77:78:72:a8: 67:49:ce:3d:34:7b:84:05:1a:65:45:62:88:ee:91:ce:c6:62: bd:d0:7e:64:47:5f:6e:cb:dc:b5:ca:cb:32:de:47:07:04:49: dc:e0:ba:27:06:5f:81:85:f8:13:4f:ef:9a:03:35:cf:50:24: 71:fa:ae:42:19:4e:eb:d3:7b:fa:88:9a:6f:c5:08:4b:71:97: e5:f1:f0:e3:94:ab:53:da:de:28:f0:53:01:88:6e:f2:c1:b3: 19:3b:31:13:21:e3:a6:12:2d:0d:40:34:13:3a:8e:0e:d4:31: dc:0a:68:bc:fc:7e:7a:9c:aa:86:6f:16:51:20:bd:02:17:5c: 16:bc:61:b6:62:55:ef:9e:2c:67:95:91:17:f5:6b:e6:40:26: 5d:c3:4e:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXHunP/ZTFzEPiBHa1nbLWsrFfp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ3QUMyMzEwOTcxNTc5ODAxREQ0NkQzQjI3MUI5OTRF OUU0MzZCODAeFw0yNjA3MjMxODQzMDBaFw0yNjA3MjQyMjQyMDBaMDMxMTAvBgNV BAMTKDc1NjE0Mzc1MUEyNjYyQjQ0MThCNzcyNTg0RDNEQzlCRTk0N0U5M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb/wDNQZMJsEhG+B6y62TeI0vg Oxur9bMvsex1elpJr9flup309FtldvOtqy67PcIMq3iz5VgnDuybpMyi0eFo9GWZ +gEoF9R0AUsM7l6fWEhxCfoPhhRDQtyNrTlz0Szf8xuRcXLJ8k0Q/+4kC2yqm5HV jkWBCb/yxJgiVaZ4mkuTF/mjqGiWIZ1vY1zO6xuktxYcuYomo/9NwYAhcPJmuQPQ W4xsRbHPD/b8Z0oqcq+tYR8DWZeNHq+CCgt3f4ktCuQmhnDMlJYhvdj/Bysfgkvy F373neZaihywAUNaOATmFmN5biPxqR24SApY3vPIidhKuqFFJk58pT3ubKE9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdWFDdRomYrRBi3clhNPcm+lH6TwwHwYDVR0j BBgwFoAUZHrCMQlxV5gB3UbTsnG5lOnkNrgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ3OGI1MGItNDQ5Yy00NTRiLTg1MGQtZjIwODAzNzg5YjU4LzAvNjQ3QUMyMzEw OTcxNTc5ODAxREQ0NkQzQjI3MUI5OTRFOUU0MzZCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82NDdBQzIzMTA5NzE1Nzk4MDFERDQ2RDNCMjcxQjk5NEU5RTQz NkI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1 MGQtZjIwODAzNzg5YjU4LzAvNjQ3QUMyMzEwOTcxNTc5ODAxREQ0NkQzQjI3MUI5 OTRFOUU0MzZCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmmgXWVpKJB/vRX+3MPw2mvT6lKkCH0V48q SsEJpVHuhwwGQqemvDAOVPtB6YmlG4qya+iXvT0/PnZKVRSpFgw6as/Zkb4rhrlS kzuGZJldWkBMIO0r6RY8bOc1asBIDqXn1y5NEA28d3hyqGdJzj00e4QFGmVFYoju kc7GYr3QfmRHX27L3LXKyzLeRwcESdzguicGX4GF+BNP75oDNc9QJHH6rkIZTuvT e/qImm/FCEtxl+Xx8OOUq1Pa3ijwUwGIbvLBsxk7MRMh46YSLQ1ANBM6jg7UMdwK aLz8fnqcqoZvFlEgvQIXXBa8YbZiVe+eLGeVkRf1a+ZAJl3DTm8= -----END CERTIFICATE-----Generated at Fri Jul 24 15:22:35 2026 by rpki-client