$ rpki-client -vvf rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft File: DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft (raw, json) Hash identifier: Ia9O4offhaBlxyFE8bxbnZ9TGBRNf8Wl+J7LFZL6KmA= Subject key identifier: FF:00:1F:2B:B6:DE:F7:DC:1A:CD:7C:F8:0E:5F:BE:C0:A0:EF:94:5A Authority key identifier: DB:4A:C9:A8:08:70:56:C5:6E:38:C2:C0:CC:75:A3:90:3F:37:E2:30 Certificate issuer: /CN=DB4AC9A8087056C56E38C2C0CC75A3903F37E230 Certificate serial: 068EC40A159256099375A918EDF8BE19CAF89119 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:00:54 +0000 Manifest this update: Thu 23 Jul 2026 12:55:54 +0000 Manifest next update: Fri 24 Jul 2026 14:21:54 +0000 Files and hashes: 1: DB4AC9A8087056C56E38C2C0CC75A3903F37E230.crl (hash: HUU986+3YDrOzmBFyrc4xVSyY5MORv48Gf6+5aE910w=) 2: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: 0Zbp66Mkncj5oCXs1yHj0YUhYzKAXAlHlpMsofKBpH8=) 3: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: 4YZ/ZRV4ksOjfTDRZ8oe6dmwipIG0EjZ5ajPjIVeb/w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.crl rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:8e:c4:0a:15:92:56:09:93:75:a9:18:ed:f8:be:19:ca:f8:91:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB4AC9A8087056C56E38C2C0CC75A3903F37E230 Validity Not Before: Jul 23 12:55:54 2026 GMT Not After : Jul 24 14:21:54 2026 GMT Subject: CN=FF001F2BB6DEF7DC1ACD7CF80E5FBEC0A0EF945A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:33:ca:fb:2d:52:17:32:50:a1:3e:47:04:e2: 4f:48:76:ce:b5:73:e2:a1:27:ae:c4:e1:97:77:c9: 13:5c:2a:7d:ba:ee:d7:cb:99:0f:66:58:b1:57:9f: 82:37:fb:88:5b:c1:04:5a:e0:5a:55:fb:0a:b0:9d: ac:3b:33:31:7a:d9:74:71:59:8f:d9:5c:70:3c:75: 34:50:a1:0d:89:ac:b1:8f:ec:d5:f4:a0:de:30:85: 03:91:02:32:4b:da:78:25:c1:1a:37:91:7c:17:0e: 09:71:e6:44:c0:dd:ad:e5:2b:c2:5c:3c:12:3b:6b: 52:94:8a:b7:fe:8b:a1:0b:ca:2b:7a:5b:5e:f7:83: 66:06:ff:0d:6d:46:75:4e:63:6c:cf:68:72:44:a7: 83:68:27:ba:46:2d:40:25:01:05:4e:09:05:48:3d: e5:af:00:13:51:c0:ae:b3:32:79:75:c3:7e:1e:ca: 4d:4f:61:f5:4c:7d:c9:a3:96:37:6b:4a:07:05:90: ce:a6:cf:78:f2:42:ca:5c:6d:08:82:19:f9:db:ba: 0a:6c:cf:2f:b7:26:c2:5e:f0:44:11:a7:08:29:61: 47:3c:6a:96:c8:f8:90:05:75:65:6a:8c:d0:8a:ed: 32:46:7b:7a:b2:8a:1c:fd:e2:e3:4e:4d:56:0a:1e: 5a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:00:1F:2B:B6:DE:F7:DC:1A:CD:7C:F8:0E:5F:BE:C0:A0:EF:94:5A X509v3 Authority Key Identifier: keyid:DB:4A:C9:A8:08:70:56:C5:6E:38:C2:C0:CC:75:A3:90:3F:37:E2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:af:8c:52:a5:86:31:f6:3f:a2:85:26:27:81:0d:25:43:76: ff:4c:26:9d:1e:4a:1b:e0:18:a0:dc:d8:fb:00:ad:d6:f1:3d: bd:b4:95:33:c0:f0:92:51:f4:8f:9e:53:49:e7:bf:a3:fb:6f: 9d:aa:b6:e4:2a:fb:a1:96:23:77:e7:62:dd:4c:7b:05:27:4c: ed:fe:6b:b6:4f:0d:39:61:61:a1:1f:ae:d4:fe:a0:b5:88:8e: 56:f3:93:b9:61:0c:a6:df:c1:7b:5b:77:06:61:2a:0e:01:f6: f7:ab:96:0b:33:bd:1f:7b:be:b9:49:f0:8c:f5:6b:ec:68:9f: 34:8f:74:ab:d8:42:16:69:e2:e5:bc:5d:b5:a1:7f:7d:33:9a: 02:39:b5:93:79:63:35:61:d9:3f:9a:ef:d3:5f:7a:83:bd:4e: 60:f9:9e:ef:ac:dc:04:bf:18:03:1e:b8:ed:ac:1e:70:6d:89: aa:6f:b0:dc:28:88:a6:9b:16:9d:c6:ff:ce:07:30:44:17:44: d5:9f:06:78:cb:ab:f0:d7:7e:06:33:a7:54:10:fa:67:d8:61: 2c:d6:f6:29:d3:a1:ca:4b:83:ff:42:f1:34:23:7b:bb:6e:88: d7:12:0a:5d:c9:d7:78:27:1a:48:00:f9:ff:dd:50:40:4d:77: a2:fd:a7:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBo7EChWSVgmTdakY7fi+Gcr4kRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI0QUM5QTgwODcwNTZDNTZFMzhDMkMwQ0M3NUEzOTAz RjM3RTIzMDAeFw0yNjA3MjMxMjU1NTRaFw0yNjA3MjQxNDIxNTRaMDMxMTAvBgNV BAMTKEZGMDAxRjJCQjZERUY3REMxQUNEN0NGODBFNUZCRUMwQTBFRjk0NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbM8r7LVIXMlChPkcE4k9Ids61 c+KhJ67E4Zd3yRNcKn267tfLmQ9mWLFXn4I3+4hbwQRa4FpV+wqwnaw7MzF62XRx WY/ZXHA8dTRQoQ2JrLGP7NX0oN4whQORAjJL2nglwRo3kXwXDglx5kTA3a3lK8Jc PBI7a1KUirf+i6ELyit6W173g2YG/w1tRnVOY2zPaHJEp4NoJ7pGLUAlAQVOCQVI PeWvABNRwK6zMnl1w34eyk1PYfVMfcmjljdrSgcFkM6mz3jyQspcbQiCGfnbugps zy+3JsJe8EQRpwgpYUc8apbI+JAFdWVqjNCK7TJGe3qyihz94uNOTVYKHlozAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/wAfK7be99wazXz4Dl++wKDvlFowHwYDVR0j BBgwFoAU20rJqAhwVsVuOMLAzHWjkD834jAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZkM2ZjMjQtNzVhMi00N2Y2LTkyOGUtNGU5ODAyYjk3MDg1LzAvREI0QUM5QTgw ODcwNTZDNTZFMzhDMkMwQ0M3NUEzOTAzRjM3RTIzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjRBQzlBODA4NzA1NkM1NkUzOEMyQzBDQzc1QTM5MDNGMzdF MjMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZkM2ZjMjQtNzVhMi00N2Y2LTky OGUtNGU5ODAyYjk3MDg1LzAvREI0QUM5QTgwODcwNTZDNTZFMzhDMkMwQ0M3NUEz OTAzRjM3RTIzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqvjFKlhjH2P6KFJieBDSVDdv9MJp0eShvg GKDc2PsArdbxPb20lTPA8JJR9I+eU0nnv6P7b52qtuQq+6GWI3fnYt1MewUnTO3+ a7ZPDTlhYaEfrtT+oLWIjlbzk7lhDKbfwXtbdwZhKg4B9verlgszvR97vrlJ8Iz1 a+xonzSPdKvYQhZp4uW8XbWhf30zmgI5tZN5YzVh2T+a79NfeoO9TmD5nu+s3AS/ GAMeuO2sHnBtiapvsNwoiKabFp3G/84HMEQXRNWfBnjLq/DXfgYzp1QQ+mfYYSzW 9inTocpLg/9C8TQje7tuiNcSCl3J13gnGkgA+f/dUEBNd6L9p4Q= -----END CERTIFICATE-----Generated at Fri Jul 24 06:21:06 2026 by rpki-client