$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft File: D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft (raw, json) Hash identifier: IFqC2MW/UpLqQVGN9QrMVBip53e8uvoS00PNt3P5YRk= Subject key identifier: 0B:1D:3C:C6:A4:BB:27:A2:DC:4F:8B:DF:7A:BD:5C:31:40:3A:88:F8 Authority key identifier: D8:4B:02:09:2C:D9:FA:F4:87:B7:FF:E8:A3:CE:24:5E:15:32:81:7B Certificate issuer: /CN=D84B02092CD9FAF487B7FFE8A3CE245E1532817B Certificate serial: 2928F0B7F824D4261FF686ADA49CDA40F97F7D1E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:31:04 +0000 Manifest this update: Fri 24 Jul 2026 01:26:04 +0000 Manifest next update: Sat 25 Jul 2026 03:28:04 +0000 Files and hashes: 1: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (hash: qvAhwO/EjrHouy1t9oPOe/Yp+kgXSnzORPmVIxEb76o=) 2: 3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa (hash: O9b/sE0cgUl/rxVhhp6cIJikTp6ysHnQzs5JN33UOjQ=) 3: D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl (hash: 1GLhfCYqRQEKkiICnjRMsnkGT4LKjm8aoSgrFWq7PdM=) 4: 3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa (hash: zY+TCMFw7rqEprfDm4KpW3QZwoOVJC4HoqlrpBLXEfI=) 5: 323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (hash: pHpItOVKv8esoRGqC1921wkOWFNotJS3YzPQt+5pees=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:28:f0:b7:f8:24:d4:26:1f:f6:86:ad:a4:9c:da:40:f9:7f:7d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D84B02092CD9FAF487B7FFE8A3CE245E1532817B Validity Not Before: Jul 24 01:26:04 2026 GMT Not After : Jul 25 03:28:04 2026 GMT Subject: CN=0B1D3CC6A4BB27A2DC4F8BDF7ABD5C31403A88F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f8:23:1e:bc:7a:bb:7b:6e:c2:d6:54:d8:6a: dd:04:59:47:d0:dc:8d:cd:c0:d4:80:62:6c:d1:4d: 7e:94:82:bc:5f:be:94:44:f1:d1:dd:c9:bc:bb:07: f8:b7:b5:4a:a8:f6:06:98:be:91:9e:8f:28:c9:3d: 01:da:1e:a2:d0:07:da:55:7c:0e:ee:ba:83:05:c5: a2:6e:b9:fd:6b:6f:27:87:d4:31:14:ed:31:0e:a0: 99:e2:b5:b5:6c:90:81:a0:0d:74:89:08:85:48:61: 82:d8:53:0c:34:33:32:d0:66:f1:0a:ce:43:24:25: 14:4c:9e:c6:d7:0e:ac:c4:da:ea:e5:16:85:40:e7: 65:e3:40:22:54:97:af:20:6f:75:f5:98:96:2d:d0: 15:3d:ce:52:e7:9a:60:d6:7f:a3:5c:8c:33:35:52: 0a:9a:26:c5:b1:f9:f3:4e:6c:f0:b6:37:01:a2:11: a9:e7:40:bb:81:ef:aa:25:72:30:7b:62:15:61:0e: 74:09:72:8c:33:d9:97:51:a4:e6:d1:62:c9:b8:ca: 63:d9:55:2f:eb:e0:11:4a:95:93:64:b6:d5:6e:cc: 6e:1b:c7:33:3e:ba:0a:11:48:e7:ed:f1:b7:0b:5b: 84:5d:f1:30:0d:70:58:7d:16:b8:81:64:2a:99:cb: d7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1D:3C:C6:A4:BB:27:A2:DC:4F:8B:DF:7A:BD:5C:31:40:3A:88:F8 X509v3 Authority Key Identifier: keyid:D8:4B:02:09:2C:D9:FA:F4:87:B7:FF:E8:A3:CE:24:5E:15:32:81:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:31:4f:35:a3:d4:69:10:c8:9d:83:18:7a:a1:06:2d:29:ec: 10:b4:85:b9:d6:68:c1:c9:c2:22:19:0b:84:7e:b5:91:dd:07: b3:97:3d:66:5e:db:9c:8e:e9:5e:d1:0e:ec:68:62:99:84:91: 34:49:b3:a1:9f:19:74:0d:c6:0e:ad:f4:3b:ca:82:0e:5c:5c: 4b:7c:c2:fd:7e:a6:1d:8f:a2:f0:0c:5c:54:28:94:4c:a1:11: 1a:63:46:b4:c8:d7:84:5e:d1:b9:dd:02:47:76:9e:64:9a:59: 80:bc:b8:c8:32:08:39:83:50:ca:2b:28:c6:7a:bf:eb:57:33: 5d:4a:7e:57:c7:bb:37:f9:bc:0a:e5:c4:d8:5e:d7:35:28:7f: 0b:10:45:98:de:85:94:1e:c5:a7:9f:05:de:64:82:e8:bd:b3: 7d:e8:50:2b:a4:e4:92:98:f5:ba:73:87:fd:52:25:34:aa:f8: 91:8c:78:7d:12:1a:37:52:e6:f1:ea:3e:42:f5:1a:d4:ab:c8: c8:8c:ca:88:45:68:06:28:d2:18:7b:c4:0a:5f:f7:23:3c:e6: 91:89:f6:76:88:f6:71:ce:d5:97:8c:97:b9:6a:1b:4b:0f:97: 02:bb:91:8d:93:8d:1a:2c:d2:5c:0b:ab:f9:49:c7:a6:31:af: e2:03:5d:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKSjwt/gk1CYf9oatpJzaQPl/fR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0QjAyMDkyQ0Q5RkFGNDg3QjdGRkU4QTNDRTI0NUUx NTMyODE3QjAeFw0yNjA3MjQwMTI2MDRaFw0yNjA3MjUwMzI4MDRaMDMxMTAvBgNV BAMTKDBCMUQzQ0M2QTRCQjI3QTJEQzRGOEJERjdBQkQ1QzMxNDAzQTg4RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb+CMevHq7e27C1lTYat0EWUfQ 3I3NwNSAYmzRTX6UgrxfvpRE8dHdyby7B/i3tUqo9gaYvpGejyjJPQHaHqLQB9pV fA7uuoMFxaJuuf1rbyeH1DEU7TEOoJnitbVskIGgDXSJCIVIYYLYUww0MzLQZvEK zkMkJRRMnsbXDqzE2urlFoVA52XjQCJUl68gb3X1mJYt0BU9zlLnmmDWf6NcjDM1 UgqaJsWx+fNObPC2NwGiEannQLuB76olcjB7YhVhDnQJcowz2ZdRpObRYsm4ymPZ VS/r4BFKlZNkttVuzG4bxzM+ugoRSOft8bcLW4Rd8TANcFh9FriBZCqZy9cBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCx08xqS7J6LcT4vfer1cMUA6iPgwHwYDVR0j BBgwFoAU2EsCCSzZ+vSHt//oo84kXhUygXswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I3NWJmZDAtYTg2Yy00YmViLTlmOTktYWFjMzNmYjVlNDlmLzAvRDg0QjAyMDky Q0Q5RkFGNDg3QjdGRkU4QTNDRTI0NUUxNTMyODE3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODRCMDIwOTJDRDlGQUY0ODdCN0ZGRThBM0NFMjQ1RTE1MzI4 MTdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2I3NWJmZDAtYTg2Yy00YmViLTlm OTktYWFjMzNmYjVlNDlmLzAvRDg0QjAyMDkyQ0Q5RkFGNDg3QjdGRkU4QTNDRTI0 NUUxNTMyODE3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsxTzWj1GkQyJ2DGHqhBi0p7BC0hbnWaMHJ wiIZC4R+tZHdB7OXPWZe25yO6V7RDuxoYpmEkTRJs6GfGXQNxg6t9DvKgg5cXEt8 wv1+ph2PovAMXFQolEyhERpjRrTI14Re0bndAkd2nmSaWYC8uMgyCDmDUMorKMZ6 v+tXM11KflfHuzf5vArlxNhe1zUofwsQRZjehZQexaefBd5kgui9s33oUCuk5JKY 9bpzh/1SJTSq+JGMeH0SGjdS5vHqPkL1GtSryMiMyohFaAYo0hh7xApf9yM85pGJ 9naI9nHO1ZeMl7lqG0sPlwK7kY2TjRos0lwLq/lJx6Yxr+IDXVE= -----END CERTIFICATE-----Generated at Fri Jul 24 12:36:24 2026 by rpki-client