$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft File: A65A7370A28DA71B1C11B89E09D51753C498246D.mft (raw, json) Hash identifier: J7iZoKQswZPfmIWJGNYw+IJ/qVBvXoexqfT+3bjvGhk= Subject key identifier: DF:9A:BA:8C:F7:6E:56:7F:66:20:EC:A6:DA:23:20:A6:82:09:0D:51 Authority key identifier: A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D Certificate issuer: /CN=A65A7370A28DA71B1C11B89E09D51753C498246D Certificate serial: 7B78AB5AD4327C9A5BE4DE9D6F5516E8020985AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 00:14:24 +0000 Manifest this update: Fri 24 Jul 2026 00:09:24 +0000 Manifest next update: Sat 25 Jul 2026 02:32:24 +0000 Files and hashes: 1: 3135312e3135382e37342e302f32332d3233203d3e20313331343534.roa (hash: kTQiZ7hK+M7BbCy/GwseyxlIaws4BXvafRAJzzRJxhc=) 2: 3135312e3135382e37352e302f32342d3234203d3e20313331343534.roa (hash: Ho6tdl1he9FR1/62MiqnACr306KYnR/YSxoabj/m7M4=) 3: 3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa (hash: yLjPOFhKt4noRbzRL2MIGaluRq2L7M9f6uyh5pKU9Ec=) 4: A65A7370A28DA71B1C11B89E09D51753C498246D.crl (hash: PXafRXaUsV/lVsmajkjL5DKbaZu9MT9b0McZcr7I3dM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:78:ab:5a:d4:32:7c:9a:5b:e4:de:9d:6f:55:16:e8:02:09:85:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65A7370A28DA71B1C11B89E09D51753C498246D Validity Not Before: Jul 24 00:09:24 2026 GMT Not After : Jul 25 02:32:24 2026 GMT Subject: CN=DF9ABA8CF76E567F6620ECA6DA2320A682090D51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5f:a6:51:93:a0:97:46:12:39:c8:ef:5a:e7: 57:5c:95:bf:3f:cf:6e:a3:70:a4:51:3e:35:4d:e1: 5d:2a:aa:46:7d:5b:78:74:b7:eb:fd:53:f9:4e:55: 48:0a:1a:7b:ef:32:18:60:da:a9:04:ba:32:76:c1: 24:56:16:0d:70:cc:5b:e6:f5:c8:ff:8c:be:cb:c7: c1:33:33:04:32:f8:f2:ff:1f:1f:7b:2a:32:c4:56: b6:00:10:70:39:08:a4:2a:22:89:c6:8d:f4:a3:1a: b3:97:a7:04:8e:31:60:06:3f:86:86:12:f8:51:6b: 75:6b:58:87:35:29:c0:7b:fc:20:7e:d5:21:01:ae: ac:30:42:d1:c8:d4:0f:5f:ff:d4:98:57:e8:9b:c4: 7a:8a:c6:bf:81:b7:fd:20:de:73:85:c9:5d:09:3b: c7:a4:7d:a9:62:57:1a:78:64:7e:39:2d:98:4c:fa: fe:a7:d1:de:94:22:c5:0c:1d:1d:8b:30:57:62:6e: bd:a3:00:1d:d6:1d:b8:fe:53:09:0e:8f:34:5f:56: 4f:61:ca:f6:62:96:a0:16:37:cb:56:64:8c:94:3f: 19:d7:95:03:1a:eb:bd:29:e4:83:71:8b:8a:1f:6b: 58:27:1f:09:50:73:65:2d:d2:b2:8a:7e:a2:e6:b6: a7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9A:BA:8C:F7:6E:56:7F:66:20:EC:A6:DA:23:20:A6:82:09:0D:51 X509v3 Authority Key Identifier: keyid:A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:a7:ef:28:83:0f:13:2d:54:52:27:db:80:f6:32:ee:33:f3: 21:c8:1c:71:e5:8b:f5:d0:af:21:04:bc:77:c5:57:6c:16:35: 12:65:a3:8b:1d:03:09:30:f4:b2:9b:f4:81:ee:d6:39:05:16: 51:64:0f:39:d2:1d:3f:47:03:4f:bd:2b:e1:a8:54:7b:09:8c: 63:79:6d:ea:42:43:15:50:b3:5e:14:3f:0c:07:6b:d1:37:af: 07:05:70:9e:df:2b:21:f3:06:4c:fb:50:99:f0:ae:b6:6a:d4: d3:89:61:30:5a:1b:9b:0d:b9:70:67:97:1a:34:54:97:fc:b7: 41:85:cb:d2:95:19:23:a5:be:3f:e6:09:d6:fe:d6:a5:33:cf: 2f:4b:c0:f1:14:0b:e5:c1:1f:77:40:a8:9f:e0:c3:c2:18:5e: de:af:76:64:f9:3f:37:d4:9c:9b:8e:d7:e2:00:3f:15:5e:31: 30:c3:7a:97:55:d5:20:ca:0e:60:bd:91:4c:95:d6:95:2d:30: a5:4f:6a:17:01:d8:5b:5e:3f:5c:aa:f2:c1:c5:67:e1:8e:d7: 67:5d:29:65:29:1a:4d:1b:0c:a3:da:a8:a6:2a:df:cd:40:21: 0c:eb:9b:8f:b8:cf:df:1a:64:ad:1f:aa:37:8e:05:ac:bc:f5: 4e:8b:04:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe3irWtQyfJpb5N6db1UW6AIJha4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3NTND NDk4MjQ2RDAeFw0yNjA3MjQwMDA5MjRaFw0yNjA3MjUwMjMyMjRaMDMxMTAvBgNV BAMTKERGOUFCQThDRjc2RTU2N0Y2NjIwRUNBNkRBMjMyMEE2ODIwOTBENTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyX6ZRk6CXRhI5yO9a51dclb8/ z26jcKRRPjVN4V0qqkZ9W3h0t+v9U/lOVUgKGnvvMhhg2qkEujJ2wSRWFg1wzFvm 9cj/jL7Lx8EzMwQy+PL/Hx97KjLEVrYAEHA5CKQqIonGjfSjGrOXpwSOMWAGP4aG EvhRa3VrWIc1KcB7/CB+1SEBrqwwQtHI1A9f/9SYV+ibxHqKxr+Bt/0g3nOFyV0J O8ekfaliVxp4ZH45LZhM+v6n0d6UIsUMHR2LMFdibr2jAB3WHbj+UwkOjzRfVk9h yvZilqAWN8tWZIyUPxnXlQMa670p5INxi4ofa1gnHwlQc2Ut0rKKfqLmtqcNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU35q6jPduVn9mIOym2iMgpoIJDVEwHwYDVR0j BBgwFoAUplpzcKKNpxscEbieCdUXU8SYJG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmVmMTZmMzEtNjBjZS00N2E3LWFlOGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBB MjhEQTcxQjFDMTFCODlFMDlENTE3NTNDNDk4MjQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy9BNjVBNzM3MEEyOERBNzFCMUMxMUI4OUUwOUQ1MTc1M0M0OTgy NDZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmVmMTZmMzEtNjBjZS00N2E3LWFl OGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3 NTNDNDk4MjQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCn7yiDDxMtVFIn24D2Mu4z8yHIHHHli/XQ ryEEvHfFV2wWNRJlo4sdAwkw9LKb9IHu1jkFFlFkDznSHT9HA0+9K+GoVHsJjGN5 bepCQxVQs14UPwwHa9E3rwcFcJ7fKyHzBkz7UJnwrrZq1NOJYTBaG5sNuXBnlxo0 VJf8t0GFy9KVGSOlvj/mCdb+1qUzzy9LwPEUC+XBH3dAqJ/gw8IYXt6vdmT5PzfU nJuO1+IAPxVeMTDDepdV1SDKDmC9kUyV1pUtMKVPahcB2FteP1yq8sHFZ+GO12dd KWUpGk0bDKPaqKYq381AIQzrm4+4z98aZK0fqjeOBay89U6LBJE= -----END CERTIFICATE-----Generated at Fri Jul 24 11:19:35 2026 by rpki-client