$ rpki-client -vvf rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft File: D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft (raw, json) Hash identifier: nPFR8iOvXZASKYy+QuEgDXudJ7RkQoJXRV8+FcfVraQ= Subject key identifier: 79:D0:8F:4B:A9:61:6F:CB:EF:E6:1D:C9:DF:5A:90:93:4B:D9:E2:46 Authority key identifier: D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81 Certificate issuer: /CN=D900F1990F324E8BFF8E6AB4F6AF00662EF4A181 Certificate serial: 4B48BB2B5068ACBD2BDE7D137D64934905ABA84E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 04:04:25 +0000 Manifest this update: Fri 24 Jul 2026 03:59:25 +0000 Manifest next update: Sat 25 Jul 2026 06:29:25 +0000 Files and hashes: 1: 3130332e37302e39322e302f32332d3234203d3e20313338303634.roa (hash: nTkoyc0s6mnt2tkKBJEFQNLgWGbaxLyUZAhyR5bx0jE=) 2: D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl (hash: JvGqrCrjBP1hCqMzsI27CKep7d2O2XwEjGEnRfFYoYo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:48:bb:2b:50:68:ac:bd:2b:de:7d:13:7d:64:93:49:05:ab:a8:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D900F1990F324E8BFF8E6AB4F6AF00662EF4A181 Validity Not Before: Jul 24 03:59:25 2026 GMT Not After : Jul 25 06:29:25 2026 GMT Subject: CN=79D08F4BA9616FCBEFE61DC9DF5A90934BD9E246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:e9:15:5f:35:58:3a:ee:0c:2b:c4:0b:92: a7:81:71:98:47:8d:5a:20:0a:dd:67:83:c1:e8:27: 74:85:49:4c:18:47:3d:f4:3c:56:56:a4:ea:d3:26: 0a:b5:39:c2:60:17:f0:39:77:3a:be:35:90:74:3c: f9:2b:5a:a0:2c:3f:30:f4:8e:27:3b:8c:7d:91:bd: 61:cd:7c:fa:b8:24:08:09:ad:36:a7:02:fd:02:1b: 11:c6:8f:33:4a:eb:05:f0:b9:7b:9c:29:2b:a0:76: fa:9f:ed:93:35:1b:4b:d9:57:88:60:ca:14:4e:44: 6e:49:44:23:03:26:38:81:fb:f6:55:35:e4:29:8a: 85:33:63:9f:98:12:1a:f9:89:ea:ae:df:a5:a4:7d: fc:e3:5d:0e:37:bf:91:f1:52:34:b0:8c:5d:a5:4f: 76:4f:c2:e6:1b:7b:f0:7c:d7:0a:97:ad:39:37:5f: 9f:41:01:89:a8:4e:0e:e2:5e:2e:cd:96:83:14:27: b7:71:2a:d1:35:94:bf:17:b6:c1:3b:01:84:28:a7: dc:22:06:7c:15:f3:0b:0a:ad:db:6f:c1:34:5a:4b: 0b:13:f7:67:71:fb:be:03:ac:9d:18:48:85:d4:67: 70:67:21:cd:9f:76:a8:d2:1d:66:4a:86:99:84:1f: 7a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D0:8F:4B:A9:61:6F:CB:EF:E6:1D:C9:DF:5A:90:93:4B:D9:E2:46 X509v3 Authority Key Identifier: keyid:D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:af:20:72:57:3e:e2:09:e4:63:ae:58:91:be:d1:ed:19:da: f8:bb:55:cb:ef:06:21:36:15:65:7f:65:08:e8:d7:41:91:08: 6e:fc:eb:30:a7:29:ea:5d:09:42:d0:cf:19:ed:e8:9e:1b:bc: f1:96:e8:ba:64:dd:e8:15:1f:01:60:cd:34:82:48:02:7b:fa: 42:1f:13:ac:9e:84:89:e2:ff:0f:ed:90:97:e5:c3:d2:3c:0e: 65:fe:ff:67:b0:db:ab:21:86:78:15:f0:c1:76:14:d9:f3:f1: f8:dc:54:37:46:74:6e:2e:f2:1b:71:93:6d:4e:5a:8b:4e:3d: 04:5f:d4:95:08:e5:83:ea:69:9f:6f:3d:2d:91:68:1e:91:8b: a1:61:83:14:8a:88:1a:4a:46:c2:cf:8f:12:23:22:bc:c0:f4: 7e:20:1b:3f:c5:71:fb:9b:3c:6d:5d:e4:9d:f0:56:20:d6:6c: 7c:c3:8b:d6:a9:de:c3:2b:fc:fb:a8:77:ca:20:11:68:1f:7b: 00:19:e3:e8:34:dd:52:3e:2f:48:e4:4a:3e:cc:54:4b:9f:b6: b7:00:a8:59:8c:69:88:2c:32:e6:21:c9:fb:30:6c:49:7b:fb: e8:1d:2a:7f:9d:53:ea:5c:ea:23:2a:7d:af:99:2f:ec:5c:d2: de:0e:35:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS0i7K1BorL0r3n0TfWSTSQWrqE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkwMEYxOTkwRjMyNEU4QkZGOEU2QUI0RjZBRjAwNjYy RUY0QTE4MTAeFw0yNjA3MjQwMzU5MjVaFw0yNjA3MjUwNjI5MjVaMDMxMTAvBgNV BAMTKDc5RDA4RjRCQTk2MTZGQ0JFRkU2MURDOURGNUE5MDkzNEJEOUUyNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs9ukVXzVYOu4MK8QLkqeBcZhH jVogCt1ng8HoJ3SFSUwYRz30PFZWpOrTJgq1OcJgF/A5dzq+NZB0PPkrWqAsPzD0 jic7jH2RvWHNfPq4JAgJrTanAv0CGxHGjzNK6wXwuXucKSugdvqf7ZM1G0vZV4hg yhRORG5JRCMDJjiB+/ZVNeQpioUzY5+YEhr5iequ36WkffzjXQ43v5HxUjSwjF2l T3ZPwuYbe/B81wqXrTk3X59BAYmoTg7iXi7NloMUJ7dxKtE1lL8XtsE7AYQop9wi BnwV8wsKrdtvwTRaSwsT92dx+74DrJ0YSIXUZ3BnIc2fdqjSHWZKhpmEH3rXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUedCPS6lhb8vv5h3J31qQk0vZ4kYwHwYDVR0j BBgwFoAU2QDxmQ8yTov/jmq09q8AZi70oYEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU4OWY2NDMtMzdiYy00ZmZiLTk1MjktNDAxZTRiNmVmNjc1LzAvRDkwMEYxOTkw RjMyNEU4QkZGOEU2QUI0RjZBRjAwNjYyRUY0QTE4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOTAwRjE5OTBGMzI0RThCRkY4RTZBQjRGNkFGMDA2NjJFRjRB MTgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU4OWY2NDMtMzdiYy00ZmZiLTk1 MjktNDAxZTRiNmVmNjc1LzAvRDkwMEYxOTkwRjMyNEU4QkZGOEU2QUI0RjZBRjAw NjYyRUY0QTE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKvIHJXPuIJ5GOuWJG+0e0Z2vi7VcvvBiE2 FWV/ZQjo10GRCG786zCnKepdCULQzxnt6J4bvPGW6Lpk3egVHwFgzTSCSAJ7+kIf E6yehIni/w/tkJflw9I8DmX+/2ew26shhngV8MF2FNnz8fjcVDdGdG4u8htxk21O WotOPQRf1JUI5YPqaZ9vPS2RaB6Ri6FhgxSKiBpKRsLPjxIjIrzA9H4gGz/Fcfub PG1d5J3wViDWbHzDi9ap3sMr/Puod8ogEWgfewAZ4+g03VI+L0jkSj7MVEuftrcA qFmMaYgsMuYhyfswbEl7++gdKn+dU+pc6iMqfa+ZL+xc0t4ONbs= -----END CERTIFICATE-----Generated at Fri Jul 24 08:01:31 2026 by rpki-client