$ rpki-client -vvf rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft File: 1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft (raw, json) Hash identifier: g8LhRR52rlvcJYzy2yHE/MP0YR2VO6xa/UD3cFjW8Tw= Subject key identifier: F5:51:1E:C3:C4:84:DE:92:8C:CC:43:CE:F4:1B:C7:C6:26:12:A2:E2 Authority key identifier: 1D:0A:68:20:2E:76:2C:42:0C:7F:38:AE:29:15:E4:E5:DC:42:12:3D Certificate issuer: /CN=1D0A68202E762C420C7F38AE2915E4E5DC42123D Certificate serial: 5FF0FEE883191313A1294C05DC12F33DDA7A0EFE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 16:40:16 +0000 Manifest this update: Thu 23 Jul 2026 16:35:16 +0000 Manifest next update: Fri 24 Jul 2026 19:52:16 +0000 Files and hashes: 1: 1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl (hash: v8iBa6FprpS58oKMnluWDESWVpRGqX4cOwxH4Q3pIh4=) 2: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: HRWu5uWyYj+tP+jHdEqHR4i0tx4A8OiWh4bfexrm8jQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f0:fe:e8:83:19:13:13:a1:29:4c:05:dc:12:f3:3d:da:7a:0e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D0A68202E762C420C7F38AE2915E4E5DC42123D Validity Not Before: Jul 23 16:35:16 2026 GMT Not After : Jul 24 19:52:16 2026 GMT Subject: CN=F5511EC3C484DE928CCC43CEF41BC7C62612A2E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:95:f6:bb:51:27:c3:a8:32:e2:1f:02:b2:95: 2b:08:58:c2:d0:0e:29:ef:a7:66:d1:e0:a9:3a:4d: e4:66:bd:1b:3d:cd:4b:57:79:50:28:0f:c8:79:b1: bf:d0:20:27:58:14:1a:0a:39:57:f1:a1:e6:2d:d5: 36:b4:65:ce:70:ce:2f:b0:bf:85:0e:b8:c2:b1:88: 48:6b:82:0d:20:59:86:d3:46:04:2c:d0:de:b6:bd: 73:2f:aa:54:5c:35:00:a1:09:e7:9c:54:cc:8f:22: 37:53:27:77:9e:9d:56:7b:27:d5:ff:46:60:e0:c3: 4a:c1:e3:86:fb:79:a6:ea:a8:bb:d7:00:e4:fb:97: 85:c8:50:37:5a:12:18:78:be:99:db:ef:ed:ea:a0: e0:4a:9a:9f:cd:a4:72:32:b4:eb:dc:45:be:a9:6a: 95:df:67:6b:01:71:6e:33:08:ed:21:59:36:9e:1e: 6d:89:e2:fe:f7:f3:41:26:0c:8c:11:96:6d:81:ad: 86:cb:4e:5f:a9:28:57:2a:26:18:f7:84:0c:e4:2a: 67:65:59:8b:7f:12:78:d7:d8:5a:30:b3:66:11:67: f1:26:67:6d:ab:ea:04:d2:c0:04:fa:7c:3d:14:1f: e4:d6:78:7c:9f:9a:f6:ae:63:db:57:41:e9:15:58: e8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:51:1E:C3:C4:84:DE:92:8C:CC:43:CE:F4:1B:C7:C6:26:12:A2:E2 X509v3 Authority Key Identifier: keyid:1D:0A:68:20:2E:76:2C:42:0C:7F:38:AE:29:15:E4:E5:DC:42:12:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:40:9e:68:9a:4d:88:7e:72:18:01:34:81:2d:36:a9:9a:73: e0:0c:b0:aa:27:19:36:36:ac:c6:a3:27:41:0e:52:22:46:9a: 34:c1:b0:4c:ea:54:26:27:90:99:00:28:5a:fc:00:73:45:ba: 7b:97:f1:90:e5:34:af:78:92:fb:31:04:49:be:7c:19:e8:90: ff:29:bc:c9:e6:2b:69:b6:82:bf:1e:4d:e7:9e:68:d7:5f:19: 3d:a9:c2:8e:4a:ef:ed:25:94:40:a8:76:ec:00:f9:68:34:5b: 58:fc:63:13:4a:42:29:29:73:49:fc:3d:bd:eb:88:8a:60:f5: a6:72:95:05:4c:7d:ae:86:35:8e:b0:3b:fe:98:8e:9c:54:16: e1:0d:d4:a5:3e:5c:72:33:07:1b:40:2b:5f:e0:d2:39:ef:6e: e0:75:c8:79:b9:03:f5:e2:78:f9:e0:13:cb:c5:5a:e0:e8:6b: 70:35:61:0d:aa:e0:a5:79:aa:78:ea:56:4f:e6:8b:1c:27:3e: b2:d5:be:d7:76:51:56:a2:ad:3f:3c:84:8f:26:0b:3c:d9:32: d7:d3:f9:26:0f:b0:7d:c1:10:10:63:e6:15:b7:0f:e8:fd:4a: 16:a7:81:d8:15:30:71:1c:27:a7:24:eb:18:a1:fa:b4:39:f6: 7f:87:59:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX/D+6IMZExOhKUwF3BLzPdp6Dv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwQTY4MjAyRTc2MkM0MjBDN0YzOEFFMjkxNUU0RTVE QzQyMTIzRDAeFw0yNjA3MjMxNjM1MTZaFw0yNjA3MjQxOTUyMTZaMDMxMTAvBgNV BAMTKEY1NTExRUMzQzQ4NERFOTI4Q0NDNDNDRUY0MUJDN0M2MjYxMkEyRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDblfa7USfDqDLiHwKylSsIWMLQ Dinvp2bR4Kk6TeRmvRs9zUtXeVAoD8h5sb/QICdYFBoKOVfxoeYt1Ta0Zc5wzi+w v4UOuMKxiEhrgg0gWYbTRgQs0N62vXMvqlRcNQChCeecVMyPIjdTJ3eenVZ7J9X/ RmDgw0rB44b7eabqqLvXAOT7l4XIUDdaEhh4vpnb7+3qoOBKmp/NpHIytOvcRb6p apXfZ2sBcW4zCO0hWTaeHm2J4v7380EmDIwRlm2BrYbLTl+pKFcqJhj3hAzkKmdl WYt/EnjX2Fows2YRZ/EmZ22r6gTSwAT6fD0UH+TWeHyfmvauY9tXQekVWOjvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9VEew8SE3pKMzEPO9BvHxiYSouIwHwYDVR0j BBgwFoAUHQpoIC52LEIMfziuKRXk5dxCEj0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDIxMGVjMGYtMDQyMC00MDJmLTk1ZmUtN2IzM2U1MTEyYmMzLzAvMUQwQTY4MjAy RTc2MkM0MjBDN0YzOEFFMjkxNUU0RTVEQzQyMTIzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRDBBNjgyMDJFNzYyQzQyMEM3RjM4QUUyOTE1RTRFNURDNDIx MjNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvMUQwQTY4MjAyRTc2MkM0MjBDN0YzOEFFMjkxNUU0 RTVEQzQyMTIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9AnmiaTYh+chgBNIEtNqmac+AMsKonGTY2 rMajJ0EOUiJGmjTBsEzqVCYnkJkAKFr8AHNFunuX8ZDlNK94kvsxBEm+fBnokP8p vMnmK2m2gr8eTeeeaNdfGT2pwo5K7+0llECoduwA+Wg0W1j8YxNKQikpc0n8Pb3r iIpg9aZylQVMfa6GNY6wO/6YjpxUFuEN1KU+XHIzBxtAK1/g0jnvbuB1yHm5A/Xi ePngE8vFWuDoa3A1YQ2q4KV5qnjqVk/mixwnPrLVvtd2UVairT88hI8mCzzZMtfT +SYPsH3BEBBj5hW3D+j9ShangdgVMHEcJ6ck6xih+rQ59n+HWc4= -----END CERTIFICATE-----Generated at Fri Jul 24 10:53:45 2026 by rpki-client