$ rpki-client -vvf rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft File: DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft (raw, json) Hash identifier: FvaQPh6oSGDJVXsjmUKta8zPKmAKSs30rtJTVQQHJ+g= Subject key identifier: 98:25:7F:F4:C8:76:FE:4F:6C:DC:EA:DF:77:FE:D3:CA:34:18:3A:9E Authority key identifier: DE:17:2F:4C:F0:CE:42:30:A5:10:6C:D6:AC:0C:25:A6:3A:72:C4:A5 Certificate issuer: /CN=DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5 Certificate serial: 70D9B3791D85D0193CDD077046A45AF9F18274FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:26:31 +0000 Manifest this update: Thu 23 Jul 2026 13:21:31 +0000 Manifest next update: Fri 24 Jul 2026 16:08:31 +0000 Files and hashes: 1: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: FP5pxHLBZtIDduyXGtgh7O/QJiYCmUVEXRSY7J06kQM=) 2: DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl (hash: vFzvNurf3eFyTXs8qj5kJfBGibm5Wy12818VmlRpgi8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d9:b3:79:1d:85:d0:19:3c:dd:07:70:46:a4:5a:f9:f1:82:74:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5 Validity Not Before: Jul 23 13:21:31 2026 GMT Not After : Jul 24 16:08:31 2026 GMT Subject: CN=98257FF4C876FE4F6CDCEADF77FED3CA34183A9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6c:b1:20:3e:fc:a5:02:dc:f5:7a:cf:03:4b: fa:99:1d:8c:1d:0e:36:1a:bc:7a:2a:b0:c6:21:94: 9f:4a:89:05:7c:49:c3:f8:a2:d8:8b:2d:77:1d:a3: 44:c6:1a:be:a3:bc:c9:11:9f:e1:e3:61:c9:50:01: 07:2e:5f:86:7b:d3:1b:2c:0d:9c:9a:ec:45:e5:f9: 7f:99:52:4f:7a:e3:41:b3:5e:d8:51:01:61:7b:22: ae:46:c6:6d:75:fd:19:e3:c2:44:1e:cb:8f:3d:00: 0f:eb:ef:3c:90:a5:42:26:3a:0e:27:ad:32:62:78: 79:3c:47:a6:09:18:8a:87:39:cd:4e:52:e4:00:82: d0:85:e7:75:c0:c8:a1:3b:20:f5:3f:ac:00:4a:8f: ee:8a:6b:8b:96:45:f4:46:6a:10:91:29:50:cb:2a: 41:3f:88:65:4d:75:39:3e:f3:97:9c:55:89:6e:c9: 26:81:b5:6e:49:84:f2:5d:81:27:f3:ab:a6:9c:c8: a2:22:91:5a:ca:63:27:49:7c:e6:30:ba:ae:dd:c3: 02:52:cf:c2:4b:9c:3b:25:45:95:12:a5:f4:03:b4: 91:10:92:d3:5a:f5:71:30:a5:ad:20:d8:77:80:a3: ed:2b:02:c9:98:a4:86:f1:cc:16:c1:46:80:c3:c4: ac:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:25:7F:F4:C8:76:FE:4F:6C:DC:EA:DF:77:FE:D3:CA:34:18:3A:9E X509v3 Authority Key Identifier: keyid:DE:17:2F:4C:F0:CE:42:30:A5:10:6C:D6:AC:0C:25:A6:3A:72:C4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:bb:cd:a6:8c:c6:9f:36:f0:93:fa:2b:ac:9d:90:7f:d2:59: 6a:dd:8a:70:93:97:8e:5d:b8:f6:45:38:f4:1e:bc:83:b8:20: d4:df:ce:dc:6e:54:7f:0f:e3:58:2e:c6:55:ed:6d:87:c7:9d: 3e:8d:40:95:e8:f8:46:e8:63:ac:26:2d:f0:0f:95:48:93:7a: f6:06:fb:cc:af:04:9d:5f:bf:20:d9:58:7e:74:7e:38:f8:66: 43:8c:bc:1b:14:7d:bc:9b:bb:bb:c0:0e:74:70:55:80:e9:80: 12:ef:fe:ff:15:02:a1:c6:fa:f0:29:62:62:ca:d2:6f:73:b0: b8:f3:d4:a0:f5:40:5b:3c:b5:f6:f5:60:30:96:bd:50:90:b2: 91:df:07:c5:dd:1b:a9:04:e3:a2:25:b6:8a:8f:f7:16:c6:82: f0:d2:94:66:3d:b0:c5:5b:4b:6c:73:76:c6:2f:d0:fc:6a:c7: f7:45:57:b3:99:5f:ee:b5:b1:01:b0:3b:26:35:70:a9:54:53: 92:b2:e2:d6:ab:65:f2:ef:44:71:a2:db:66:9a:48:5d:6a:cd: bf:86:98:e9:ce:cf:f5:f3:72:3c:71:26:7a:d3:f4:61:9a:e8: 21:54:94:03:ce:b4:54:f0:1a:1f:cf:3c:79:ce:88:7c:57:bb: 07:87:57:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcNmzeR2F0Bk83QdwRqRa+fGCdPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxNzJGNENGMENFNDIzMEE1MTA2Q0Q2QUMwQzI1QTYz QTcyQzRBNTAeFw0yNjA3MjMxMzIxMzFaFw0yNjA3MjQxNjA4MzFaMDMxMTAvBgNV BAMTKDk4MjU3RkY0Qzg3NkZFNEY2Q0RDRUFERjc3RkVEM0NBMzQxODNBOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYbLEgPvylAtz1es8DS/qZHYwd DjYavHoqsMYhlJ9KiQV8ScP4otiLLXcdo0TGGr6jvMkRn+HjYclQAQcuX4Z70xss DZya7EXl+X+ZUk9640GzXthRAWF7Iq5Gxm11/RnjwkQey489AA/r7zyQpUImOg4n rTJieHk8R6YJGIqHOc1OUuQAgtCF53XAyKE7IPU/rABKj+6Ka4uWRfRGahCRKVDL KkE/iGVNdTk+85ecVYluySaBtW5JhPJdgSfzq6acyKIikVrKYydJfOYwuq7dwwJS z8JLnDslRZUSpfQDtJEQktNa9XEwpa0g2HeAo+0rAsmYpIbxzBbBRoDDxKx7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmCV/9Mh2/k9s3Orfd/7TyjQYOp4wHwYDVR0j BBgwFoAU3hcvTPDOQjClEGzWrAwlpjpyxKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQyYzFmMzItODFhYy00MTE4LWJlMmYtNTc0Y2E1YjU0MWVhLzAvREUxNzJGNENG MENFNDIzMEE1MTA2Q0Q2QUMwQzI1QTYzQTcyQzRBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTE3MkY0Q0YwQ0U0MjMwQTUxMDZDRDZBQzBDMjVBNjNBNzJD NEE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvREUxNzJGNENGMENFNDIzMEE1MTA2Q0Q2QUMwQzI1 QTYzQTcyQzRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFm7zaaMxp828JP6K6ydkH/SWWrdinCTl45d uPZFOPQevIO4INTfztxuVH8P41guxlXtbYfHnT6NQJXo+EboY6wmLfAPlUiTevYG +8yvBJ1fvyDZWH50fjj4ZkOMvBsUfbybu7vADnRwVYDpgBLv/v8VAqHG+vApYmLK 0m9zsLjz1KD1QFs8tfb1YDCWvVCQspHfB8XdG6kE46IltoqP9xbGgvDSlGY9sMVb S2xzdsYv0Pxqx/dFV7OZX+61sQGwOyY1cKlUU5Ky4tarZfLvRHGi22aaSF1qzb+G mOnOz/XzcjxxJnrT9GGa6CFUlAPOtFTwGh/PPHnOiHxXuweHV/4= -----END CERTIFICATE-----Generated at Fri Jul 24 05:18:19 2026 by rpki-client