$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft File: D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft (raw, json) Hash identifier: 9EQLjGIoeLKY+CtVEy0t1W0eftLK86GkEyjkEx9JtYM= Subject key identifier: 0A:83:B9:44:E8:54:82:F4:A8:89:E7:26:71:03:3E:66:68:79:85:C7 Authority key identifier: D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15 Certificate issuer: /CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15 Certificate serial: 29C72CD420FF53C7B1046521A7B540B0C7CF81F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:51:58 +0000 Manifest this update: Thu 23 Jul 2026 17:46:58 +0000 Manifest next update: Fri 24 Jul 2026 20:03:58 +0000 Files and hashes: 1: 3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa (hash: /dy1vpCusUxjx9tOrWaCKRl2KSXA8yenkPc1J3oKgv0=) 2: D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl (hash: zSgfKjuFT7J+3wrpe6FV6Nsm3yZe9sJbJ9Fi3+FhStA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:03:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c7:2c:d4:20:ff:53:c7:b1:04:65:21:a7:b5:40:b0:c7:cf:81:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15 Validity Not Before: Jul 23 17:46:58 2026 GMT Not After : Jul 24 20:03:58 2026 GMT Subject: CN=0A83B944E85482F4A889E72671033E66687985C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1b:fa:58:78:36:88:41:0a:f3:f2:e2:89:cf: 18:6b:a7:14:5d:c5:0c:e0:1b:c6:22:99:eb:e1:6b: aa:0d:13:c4:42:06:05:ff:92:d0:a1:20:91:53:96: 0b:b3:89:1b:b9:9c:8c:ee:68:ce:09:a4:8b:d4:66: 00:c5:43:3e:7a:3f:2c:d5:cd:47:50:78:2a:78:d2: 58:35:aa:a3:58:97:97:a8:d4:9f:ec:75:31:79:40: a4:09:d4:9a:20:8d:2b:0f:7b:9d:89:b1:f5:d3:13: 6c:8b:8f:eb:b6:05:61:08:75:d4:58:65:89:01:99: fb:67:87:42:d6:3e:71:00:f7:49:69:d7:ad:1b:ef: 66:09:ec:50:9f:39:89:4a:e0:26:55:fe:0c:ef:8f: 4f:a1:ba:dc:77:c9:d1:c4:ee:b7:a7:2c:ef:1d:be: 2d:11:f8:5e:0b:23:f8:59:36:ea:02:a1:10:d0:1e: 73:40:d7:2a:ff:86:e3:95:62:fa:e4:6a:41:7b:ef: d0:ae:5b:a0:81:31:0c:72:1b:5d:e8:a4:ac:53:be: e0:ff:cb:c3:ee:8f:e2:fa:8e:48:74:d0:5e:7f:72: 53:95:2f:12:2f:da:1b:f6:67:33:c1:9e:dc:d2:f6: 9b:c7:b2:b4:f9:a1:ab:25:f0:b9:36:e8:9a:05:df: 3b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:83:B9:44:E8:54:82:F4:A8:89:E7:26:71:03:3E:66:68:79:85:C7 X509v3 Authority Key Identifier: keyid:D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:e9:fd:34:c0:6c:9d:d2:01:03:ac:78:4e:fa:bc:82:e9:c4: 8c:c1:bb:2c:cf:9e:70:e3:67:1a:c1:13:0a:1e:97:82:07:c2: 70:e5:17:03:16:22:cf:3f:cd:7c:fb:00:4c:a8:24:70:c4:ea: 3f:cf:24:cb:f7:09:f5:6c:45:dc:81:18:55:3e:6a:ac:c5:6d: 26:86:21:42:c6:15:19:0d:5d:5f:1b:ed:6a:35:d2:aa:55:61: 57:d3:81:97:c7:80:95:d2:48:64:8b:ea:0e:ab:70:51:03:c9: 72:55:48:1e:f4:27:82:2c:d8:64:1b:63:ab:a2:6a:ef:82:3b: f2:ed:18:01:1c:82:55:56:ac:57:ec:71:62:de:16:ec:ea:d5: d6:e4:3b:69:02:a6:be:a9:e8:69:2e:3c:67:16:be:cf:24:8d: 77:15:bd:37:ed:68:ff:09:08:24:59:3b:6f:97:06:c0:e6:a0: c4:c8:52:62:11:4e:f2:4d:d9:c9:2c:98:b2:d7:5c:31:85:68: 9a:77:15:9c:ed:6f:b3:99:5f:53:6b:70:62:45:73:10:21:bb: bd:f8:15:0d:11:62:18:0e:b7:b0:d5:46:9d:17:0d:ea:d8:a4: e7:9c:59:9d:2c:9d:b1:e7:9e:e1:b9:ab:30:c9:c3:6c:db:a5: f7:ca:51:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKccs1CD/U8exBGUhp7VAsMfPgfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjUwRDIyMTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2 QzdGN0UxNTAeFw0yNjA3MjMxNzQ2NThaFw0yNjA3MjQyMDAzNThaMDMxMTAvBgNV BAMTKDBBODNCOTQ0RTg1NDgyRjRBODg5RTcyNjcxMDMzRTY2Njg3OTg1QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcG/pYeDaIQQrz8uKJzxhrpxRd xQzgG8Yimevha6oNE8RCBgX/ktChIJFTlguziRu5nIzuaM4JpIvUZgDFQz56PyzV zUdQeCp40lg1qqNYl5eo1J/sdTF5QKQJ1JogjSsPe52JsfXTE2yLj+u2BWEIddRY ZYkBmftnh0LWPnEA90lp160b72YJ7FCfOYlK4CZV/gzvj0+hutx3ydHE7renLO8d vi0R+F4LI/hZNuoCoRDQHnNA1yr/huOVYvrkakF779CuW6CBMQxyG13opKxTvuD/ y8Puj+L6jkh00F5/clOVLxIv2hv2ZzPBntzS9pvHsrT5oasl8Lk26JoF3zsvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCoO5ROhUgvSoiecmcQM+Zmh5hccwHwYDVR0j BBgwFoAU0P9Q0iFxVJ2P+pqrPoH4dmx/fhUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmUwNWFiNjYtNjZhZi00MGE0LTg5YTUtODA2OTQwMjgzOWE5LzAvRDBGRjUwRDIy MTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2QzdGN0UxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEZGNTBEMjIxNzE1NDlEOEZGQTlBQUIzRTgxRjg3NjZDN0Y3 RTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmUwNWFiNjYtNjZhZi00MGE0LTg5 YTUtODA2OTQwMjgzOWE5LzAvRDBGRjUwRDIyMTcxNTQ5RDhGRkE5QUFCM0U4MUY4 NzY2QzdGN0UxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPp/TTAbJ3SAQOseE76vILpxIzBuyzPnnDj ZxrBEwoel4IHwnDlFwMWIs8/zXz7AEyoJHDE6j/PJMv3CfVsRdyBGFU+aqzFbSaG IULGFRkNXV8b7Wo10qpVYVfTgZfHgJXSSGSL6g6rcFEDyXJVSB70J4Is2GQbY6ui au+CO/LtGAEcglVWrFfscWLeFuzq1dbkO2kCpr6p6GkuPGcWvs8kjXcVvTftaP8J CCRZO2+XBsDmoMTIUmIRTvJN2cksmLLXXDGFaJp3FZztb7OZX1NrcGJFcxAhu734 FQ0RYhgOt7DVRp0XDerYpOecWZ0snbHnnuG5qzDJw2zbpffKUSY= -----END CERTIFICATE-----Generated at Fri Jul 24 05:18:00 2026 by rpki-client