$ rpki-client -vvf rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft File: D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft (raw, json) Hash identifier: AMHPaTySRD87xtbM33gN8rRMcqY/5yq8qO287hPRzKM= Subject key identifier: 1A:3F:1D:FC:81:91:BE:ED:1B:8A:78:B0:DD:77:17:F3:F4:3D:2E:17 Authority key identifier: D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06 Certificate issuer: /CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06 Certificate serial: 08B0336D6D80427BDE1F791C9DCB54B03883CF2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 05:41:49 +0000 Manifest this update: Thu 23 Jul 2026 05:36:49 +0000 Manifest next update: Fri 24 Jul 2026 09:22:49 +0000 Files and hashes: 1: D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl (hash: 04rrKE0BNoaWGsOJsPIUddFYB79rZNoUvaniway9qAU=) 2: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: KRDZJxi0FxgUIEi2fP8SirXZmXhHmW7JJ3jDoLiPW4M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 09:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b0:33:6d:6d:80:42:7b:de:1f:79:1c:9d:cb:54:b0:38:83:cf:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06 Validity Not Before: Jul 23 05:36:49 2026 GMT Not After : Jul 24 09:22:49 2026 GMT Subject: CN=1A3F1DFC8191BEED1B8A78B0DD7717F3F43D2E17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:39:92:5a:e5:17:c4:40:7e:77:9f:04:5c:73: 26:61:4d:23:2f:1d:d5:14:07:b7:e3:1b:9d:44:b7: bb:e4:03:ef:f6:62:1f:96:81:88:c7:b6:3e:68:ff: cd:fd:d7:f2:68:af:4c:1d:22:7e:c4:83:5d:80:2b: 4d:32:52:9c:78:53:5c:0e:3d:cf:ab:eb:bc:01:84: 2e:e0:e3:cb:5d:3f:57:9e:68:03:1f:d4:c1:fc:4b: 7e:ef:5b:5b:a8:48:98:d3:80:d4:8f:f5:15:10:34: 76:e2:d1:23:39:db:35:43:4d:76:74:fe:0e:7b:48: 1b:d5:5a:c1:98:4a:ad:03:57:fc:28:3e:30:4e:4e: 74:34:ae:62:ec:df:2d:e2:c6:22:24:4a:7c:5f:4f: 2c:17:ae:ed:c4:7a:f1:f1:b8:38:27:7d:83:0d:30: a0:48:ff:52:ca:bb:bf:26:5f:a0:39:c8:7b:55:dc: d9:2a:42:63:f6:97:2e:b5:68:c0:0b:98:73:ba:39: 71:9c:a2:39:f5:59:cd:28:49:16:86:ab:d3:8c:0c: 37:76:77:9d:ba:62:83:a0:6e:2f:2e:59:5d:e5:60: ad:21:88:87:4a:8d:7c:38:a4:9e:38:aa:13:9b:91: bc:dc:06:eb:42:b9:3f:7c:60:6f:3f:5d:75:c5:39: 18:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3F:1D:FC:81:91:BE:ED:1B:8A:78:B0:DD:77:17:F3:F4:3D:2E:17 X509v3 Authority Key Identifier: keyid:D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:b4:0a:50:0e:3f:4f:c9:c1:74:b0:61:bd:d7:8f:7a:89:d1: 7b:ae:75:64:65:c0:34:9c:c5:37:71:a4:5c:a2:22:a6:33:54: 4a:56:a2:d8:74:1c:31:55:c7:ee:0e:79:1c:36:93:8e:e4:67: 66:20:62:1e:7e:5d:f7:5a:bb:79:6d:55:59:60:08:94:dc:b3: fc:25:62:8a:cd:eb:c9:2d:bb:c3:20:08:df:ef:10:4f:c9:e2: 74:08:f8:f4:26:9c:69:3a:2a:a2:39:ca:7e:1f:a5:0a:97:f1: 5c:dc:1b:55:ef:ad:88:77:59:9a:89:9e:6e:43:e0:00:12:1a: 52:1b:f7:b4:89:1e:63:9c:ec:be:1b:45:bd:8b:ed:fa:66:d0: 16:7e:01:3c:73:e6:a4:fc:07:e4:dd:04:04:49:6c:c6:b1:7f: 74:2a:63:40:fc:58:1a:8f:23:ce:85:07:e0:6b:02:75:11:bc: 42:ca:fe:e3:52:b0:03:22:85:fd:61:05:a8:a9:05:50:e8:88: e3:f5:47:10:a8:56:d3:c5:d1:e7:3a:67:2b:ac:57:32:20:f1: 4c:6c:fe:57:b5:1b:f7:38:33:15:0d:df:23:47:70:5c:39:2d: b7:cd:50:29:3b:bd:0e:c8:01:bb:bb:93:4b:5f:ad:eb:4e:00: 5d:61:65:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCLAzbW2AQnveH3kcnctUsDiDzy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGOUJFRTZDRjA5MDBCRTYxMEQyREFDQURGM0VFNDcx MzVDMEYwNjAeFw0yNjA3MjMwNTM2NDlaFw0yNjA3MjQwOTIyNDlaMDMxMTAvBgNV BAMTKDFBM0YxREZDODE5MUJFRUQxQjhBNzhCMERENzcxN0YzRjQzRDJFMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbOZJa5RfEQH53nwRccyZhTSMv HdUUB7fjG51Et7vkA+/2Yh+WgYjHtj5o/8391/Jor0wdIn7Eg12AK00yUpx4U1wO Pc+r67wBhC7g48tdP1eeaAMf1MH8S37vW1uoSJjTgNSP9RUQNHbi0SM52zVDTXZ0 /g57SBvVWsGYSq0DV/woPjBOTnQ0rmLs3y3ixiIkSnxfTywXru3EevHxuDgnfYMN MKBI/1LKu78mX6A5yHtV3NkqQmP2ly61aMALmHO6OXGcojn1Wc0oSRaGq9OMDDd2 d526YoOgbi8uWV3lYK0hiIdKjXw4pJ44qhObkbzcButCuT98YG8/XXXFORjPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGj8d/IGRvu0biniw3XcX8/Q9LhcwHwYDVR0j BBgwFoAU0fm+5s8JAL5hDS2srfPuRxNcDwYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzkwMDIwOGItMzJhYy00YTI2LTlkOTItNjA5YWQ3NjE4M2MxLzAvRDFGOUJFRTZD RjA5MDBCRTYxMEQyREFDQURGM0VFNDcxMzVDMEYwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMUY5QkVFNkNGMDkwMEJFNjEwRDJEQUNBREYzRUU0NzEzNUMw RjA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzkwMDIwOGItMzJhYy00YTI2LTlk OTItNjA5YWQ3NjE4M2MxLzAvRDFGOUJFRTZDRjA5MDBCRTYxMEQyREFDQURGM0VF NDcxMzVDMEYwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACa0ClAOP0/JwXSwYb3Xj3qJ0XuudWRlwDSc xTdxpFyiIqYzVEpWoth0HDFVx+4OeRw2k47kZ2YgYh5+Xfdau3ltVVlgCJTcs/wl YorN68ktu8MgCN/vEE/J4nQI+PQmnGk6KqI5yn4fpQqX8VzcG1XvrYh3WZqJnm5D 4AASGlIb97SJHmOc7L4bRb2L7fpm0BZ+ATxz5qT8B+TdBARJbMaxf3QqY0D8WBqP I86FB+BrAnURvELK/uNSsAMihf1hBaipBVDoiOP1RxCoVtPF0ec6ZyusVzIg8Uxs /le1G/c4MxUN3yNHcFw5LbfNUCk7vQ7IAbu7k0tfretOAF1hZd4= -----END CERTIFICATE-----Generated at Fri Jul 24 02:42:18 2026 by rpki-client