$ rpki-client -vvf rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft File: DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft (raw, json) Hash identifier: ttUEJBXG23Dd0mftuoQOjJjLuezWL3pwbAP7ZdF5Zbw= Subject key identifier: ED:9F:D3:E3:98:B0:C2:F8:19:8D:F2:AF:B1:C9:CD:EC:FD:CC:A5:35 Authority key identifier: DF:23:04:42:9B:18:F8:08:9F:AE:1F:C9:38:67:4F:36:A0:FD:77:B2 Certificate issuer: /CN=DF2304429B18F8089FAE1FC938674F36A0FD77B2 Certificate serial: 01348D3E6E330F2C37B5D5E81F4C06FFDAFF826E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 15:23:43 +0000 Manifest this update: Thu 23 Jul 2026 15:18:43 +0000 Manifest next update: Fri 24 Jul 2026 19:04:43 +0000 Files and hashes: 1: DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl (hash: a/mAaXP/7P/1jHEGBny2ZjyjhDXGjmn45LuJ+axGY5I=) 2: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: CpW+8vhTW86R4U0S/gqyxxfPZJCtlWIdT+jTSx+66zc=) 3: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: ftQeDYyrz6hB+RbX5fKWVbWWuQdAQyxBYb3VQF1+q6g=) 4: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: N6yMW5HjzqSkSXTxh8LYBYq0zgZeaS0wE1WlogwqRwM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:34:8d:3e:6e:33:0f:2c:37:b5:d5:e8:1f:4c:06:ff:da:ff:82:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF2304429B18F8089FAE1FC938674F36A0FD77B2 Validity Not Before: Jul 23 15:18:43 2026 GMT Not After : Jul 24 19:04:43 2026 GMT Subject: CN=ED9FD3E398B0C2F8198DF2AFB1C9CDECFDCCA535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a9:6f:67:96:3f:af:f4:b5:e3:09:79:0b:41: 2f:4f:37:0e:fa:e7:51:7f:2f:35:68:2a:bf:26:2c: b5:79:3b:b5:e3:2c:ec:67:69:a9:47:0f:9d:3c:96: 08:c0:24:4c:b0:54:50:e3:5b:30:c7:67:29:72:2b: 86:47:18:2a:96:70:9a:34:8f:fb:5d:58:2b:7c:5a: ee:10:87:4c:43:bc:57:40:84:e5:02:9f:78:6a:24: d6:6b:67:5b:16:72:f1:4d:25:33:44:6f:39:72:8f: 94:a4:d2:66:07:03:8a:8e:22:f7:4e:16:ec:bf:54: 94:20:76:47:48:8c:a0:d1:84:99:34:eb:95:2a:f3: 1b:36:03:aa:02:26:9d:a5:2c:a5:6e:ee:ac:52:1d: 0b:c7:b8:5e:50:42:af:0c:3e:eb:41:17:2c:5c:e4: 97:71:e8:6f:61:3f:47:fb:f3:c4:a5:30:48:64:d7: 4d:3b:5a:ed:13:07:d9:64:60:83:58:ee:96:bc:f3: 6f:66:23:a4:ce:01:f9:b8:d9:53:4d:9d:13:92:43: 08:60:de:e8:08:d3:68:6e:06:44:01:2a:4e:d0:66: cd:89:6d:20:25:e4:4a:8b:93:af:63:dc:fa:7b:02: d2:4d:18:b7:67:f5:4b:47:cb:4e:0e:db:3c:c9:b3: 9f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9F:D3:E3:98:B0:C2:F8:19:8D:F2:AF:B1:C9:CD:EC:FD:CC:A5:35 X509v3 Authority Key Identifier: keyid:DF:23:04:42:9B:18:F8:08:9F:AE:1F:C9:38:67:4F:36:A0:FD:77:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:08:40:5d:5d:21:fc:39:5e:7a:b6:bf:82:c6:6e:41:16:59: 18:d6:8c:dd:9a:ef:30:f4:e8:cd:a4:51:99:1e:9e:56:ab:87: 2f:6d:33:8b:19:24:0c:1a:86:95:ae:c3:63:d1:88:1e:53:45: be:e9:3b:58:93:10:c4:b9:23:64:04:1f:3f:87:19:94:3a:56: a6:98:65:59:d2:bc:6a:73:ab:ee:83:82:49:12:46:42:9e:26: 35:d8:f2:0a:7e:46:d0:b1:59:81:76:84:40:7b:70:f1:3c:8f: 4b:5c:5f:99:c6:b0:a8:5b:a3:b0:80:50:b5:9c:d8:c2:2e:8b: 01:38:26:8b:d0:89:0a:f5:89:75:02:8e:ff:61:18:03:df:77: c3:e4:0f:94:66:3d:f7:50:ca:60:e8:96:2d:3c:f8:71:e9:97: ed:ce:cd:be:1c:fa:16:41:0e:e6:65:08:6d:06:b7:ce:47:cc: 73:78:d2:2b:56:e7:5f:2c:2f:17:c0:cd:4b:55:8c:59:a3:7a: 8f:78:1b:dd:5f:44:8d:02:a9:eb:fa:80:88:c5:89:34:78:d6: f0:66:e6:07:9c:a5:e1:cd:44:16:11:a6:a1:e6:29:b8:ba:c1: fe:11:e3:6d:78:32:49:bb:96:ca:ee:e5:90:e2:b0:2f:cc:12: 06:b4:9e:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUATSNPm4zDyw3tdXoH0wG/9r/gm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYyMzA0NDI5QjE4RjgwODlGQUUxRkM5Mzg2NzRGMzZB MEZENzdCMjAeFw0yNjA3MjMxNTE4NDNaFw0yNjA3MjQxOTA0NDNaMDMxMTAvBgNV BAMTKEVEOUZEM0UzOThCMEMyRjgxOThERjJBRkIxQzlDREVDRkRDQ0E1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaqW9nlj+v9LXjCXkLQS9PNw76 51F/LzVoKr8mLLV5O7XjLOxnaalHD508lgjAJEywVFDjWzDHZylyK4ZHGCqWcJo0 j/tdWCt8Wu4Qh0xDvFdAhOUCn3hqJNZrZ1sWcvFNJTNEbzlyj5Sk0mYHA4qOIvdO Fuy/VJQgdkdIjKDRhJk065Uq8xs2A6oCJp2lLKVu7qxSHQvHuF5QQq8MPutBFyxc 5Jdx6G9hP0f788SlMEhk1007Wu0TB9lkYINY7pa8829mI6TOAfm42VNNnROSQwhg 3ugI02huBkQBKk7QZs2JbSAl5EqLk69j3Pp7AtJNGLdn9UtHy04O2zzJs5/rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Z/T45iwwvgZjfKvscnN7P3MpTUwHwYDVR0j BBgwFoAU3yMEQpsY+Aifrh/JOGdPNqD9d7IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDg0ZTg3OWYtM2E1Ni00ZDhkLTgzZTgtMGU5Y2M2NTc3MGVhLzAvREYyMzA0NDI5 QjE4RjgwODlGQUUxRkM5Mzg2NzRGMzZBMEZENzdCMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ERjIzMDQ0MjlCMThGODA4OUZBRTFGQzkzODY3NEYzNkEwRkQ3 N0IyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvREYyMzA0NDI5QjE4RjgwODlGQUUxRkM5Mzg2NzRG MzZBMEZENzdCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMIQF1dIfw5Xnq2v4LGbkEWWRjWjN2a7zD0 6M2kUZkenlarhy9tM4sZJAwahpWuw2PRiB5TRb7pO1iTEMS5I2QEHz+HGZQ6VqaY ZVnSvGpzq+6DgkkSRkKeJjXY8gp+RtCxWYF2hEB7cPE8j0tcX5nGsKhbo7CAULWc 2MIuiwE4JovQiQr1iXUCjv9hGAPfd8PkD5RmPfdQymDoli08+HHpl+3Ozb4c+hZB DuZlCG0Gt85HzHN40itW518sLxfAzUtVjFmjeo94G91fRI0Cqev6gIjFiTR41vBm 5gecpeHNRBYRpqHmKbi6wf4R4214Mkm7lsru5ZDisC/MEga0nnQ= -----END CERTIFICATE-----Generated at Fri Jul 24 05:11:53 2026 by rpki-client