$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft File: DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft (raw, json) Hash identifier: kqSZRPgCPIk/1D2Ml2j7W05zXFoYJbe1O8QxDf31A+8= Subject key identifier: B7:C1:BF:61:EA:2A:CF:88:50:72:51:A1:F3:3A:01:34:00:BB:D9:AA Authority key identifier: DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09 Certificate issuer: /CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09 Certificate serial: 59A1A34EF77E9A0259753D4519BB3E8891CD3C7E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 18:53:12 +0000 Manifest this update: Thu 23 Jul 2026 18:48:12 +0000 Manifest next update: Fri 24 Jul 2026 21:55:12 +0000 Files and hashes: 1: 3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (hash: lXhYJ0DA1ZPF7j87Xae2VDeesVSyf9L7rCounE/aVVg=) 2: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (hash: 8kH9OYeCGgkpS6ETOYa6DFVI3BcrTxBasG8Wv5iWOP8=) 3: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (hash: uFKAqSD6oWq2rEbik7/vRzt6HsV3cf1Z8RYkorvCjFs=) 4: DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl (hash: y3A5ZlN+AnJ6G/GYqpOJ11gEWKcfPy9rj1OXduK01yo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:a1:a3:4e:f7:7e:9a:02:59:75:3d:45:19:bb:3e:88:91:cd:3c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09 Validity Not Before: Jul 23 18:48:12 2026 GMT Not After : Jul 24 21:55:12 2026 GMT Subject: CN=B7C1BF61EA2ACF88507251A1F33A013400BBD9AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a4:5e:e3:d9:5e:83:83:be:51:fe:cc:4e:c8: ca:4b:65:e8:41:d4:a4:a1:03:01:07:69:bf:65:fa: 63:53:ff:f8:43:a0:63:b7:a4:c0:f6:80:2e:04:86: d5:dd:68:13:8c:8c:60:8d:21:7d:55:a7:69:e5:70: fa:79:16:8c:6f:65:81:d5:13:58:38:22:1a:7f:7b: 63:dd:f9:94:4d:5d:7f:7c:20:cb:ce:4a:04:c4:44: 26:ca:18:7f:ef:da:0d:84:d1:d9:bb:a3:4b:a1:e4: ed:cb:51:66:7e:cc:6e:24:16:20:47:81:6a:07:08: 2c:60:8d:53:b4:57:aa:3b:ea:39:27:cf:7e:16:1c: 55:a9:88:6f:d0:e6:b7:30:db:03:61:f6:6d:42:23: 0b:2b:68:99:aa:96:69:02:6c:d2:fe:68:3b:c0:73: 8a:16:d8:cf:0c:27:02:8d:3c:7e:dc:8b:cd:1e:a1: 7d:77:c0:23:6f:8d:05:71:62:02:04:c8:56:bc:d7: 37:a8:39:3e:39:07:23:c4:92:de:04:f0:2b:c1:29: a7:bb:0a:42:64:51:f7:3d:bd:5a:bd:41:73:42:e8: 2b:64:bc:17:7f:e3:b4:85:8d:5c:bc:2f:01:dd:a0: 69:a8:87:3e:ec:7d:32:57:07:24:dd:38:3f:84:fe: 79:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C1:BF:61:EA:2A:CF:88:50:72:51:A1:F3:3A:01:34:00:BB:D9:AA X509v3 Authority Key Identifier: keyid:DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ee:af:b9:cd:94:e7:cc:b6:26:e1:c5:82:f4:ae:69:0f:f4: 13:42:f7:94:f2:3c:0c:4d:de:f6:66:76:15:c5:3e:69:57:b9: a6:79:ab:2f:85:4c:d9:bb:8c:0f:95:e1:5b:d5:3e:a0:af:df: 23:52:e4:27:4b:da:7f:3e:a6:86:ae:3c:4c:c6:12:78:ba:81: 6c:70:ee:22:a8:c2:2b:64:84:be:b6:72:46:b1:94:91:92:94: 0e:84:23:89:c9:23:58:ed:2a:3e:63:25:40:24:f0:be:33:67: c0:ae:aa:6a:ea:57:54:c9:6c:25:92:78:33:c4:d8:2d:9a:9e: 77:6e:bf:35:af:55:12:93:d9:91:3f:91:80:20:82:92:03:57: 9f:d4:ab:d6:5b:10:9a:ac:34:88:62:91:a9:46:4b:67:80:70: 36:12:b3:18:f3:b1:3d:87:93:e6:fb:a3:b6:c1:b8:05:db:30: 43:19:e6:98:6b:28:f2:ba:aa:a9:e2:cd:0e:4c:b1:c3:7d:51: 3c:d9:02:f7:86:2f:e4:75:64:e9:86:c5:c9:aa:ad:5c:84:02: be:42:cb:c7:18:51:3c:28:26:d1:d2:4e:b2:ea:fa:a0:dc:e3: 74:75:92:34:34:77:af:48:2f:eb:9a:70:db:4a:6f:cd:41:40: ba:5e:94:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWaGjTvd+mgJZdT1FGbs+iJHNPH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENGQUNEMDRFOTQ3OEEzNkYwNThDRDE3REUwRUE2QjdG QjZFNEQwOTAeFw0yNjA3MjMxODQ4MTJaFw0yNjA3MjQyMTU1MTJaMDMxMTAvBgNV BAMTKEI3QzFCRjYxRUEyQUNGODg1MDcyNTFBMUYzM0EwMTM0MDBCQkQ5QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjpF7j2V6Dg75R/sxOyMpLZehB 1KShAwEHab9l+mNT//hDoGO3pMD2gC4EhtXdaBOMjGCNIX1Vp2nlcPp5FoxvZYHV E1g4Ihp/e2Pd+ZRNXX98IMvOSgTERCbKGH/v2g2E0dm7o0uh5O3LUWZ+zG4kFiBH gWoHCCxgjVO0V6o76jknz34WHFWpiG/Q5rcw2wNh9m1CIwsraJmqlmkCbNL+aDvA c4oW2M8MJwKNPH7ci80eoX13wCNvjQVxYgIEyFa81zeoOT45ByPEkt4E8CvBKae7 CkJkUfc9vVq9QXNC6CtkvBd/47SFjVy8LwHdoGmohz7sfTJXByTdOD+E/nmTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt8G/Yeoqz4hQclGh8zoBNAC72aowHwYDVR0j BBgwFoAU3PrNBOlHijbwWM0X3g6mt/tuTQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGEwOTlhZGYtN2UxMi00ZTgzLTk1YzItZGQ3Zjc3NDk0Nzg4LzAvRENGQUNEMDRF OTQ3OEEzNkYwNThDRDE3REUwRUE2QjdGQjZFNEQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0ZBQ0QwNEU5NDc4QTM2RjA1OENEMTdERTBFQTZCN0ZCNkU0 RDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGEwOTlhZGYtN2UxMi00ZTgzLTk1 YzItZGQ3Zjc3NDk0Nzg4LzAvRENGQUNEMDRFOTQ3OEEzNkYwNThDRDE3REUwRUE2 QjdGQjZFNEQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTur7nNlOfMtibhxYL0rmkP9BNC95TyPAxN 3vZmdhXFPmlXuaZ5qy+FTNm7jA+V4VvVPqCv3yNS5CdL2n8+poauPEzGEni6gWxw 7iKowitkhL62ckaxlJGSlA6EI4nJI1jtKj5jJUAk8L4zZ8CuqmrqV1TJbCWSeDPE 2C2annduvzWvVRKT2ZE/kYAggpIDV5/Uq9ZbEJqsNIhikalGS2eAcDYSsxjzsT2H k+b7o7bBuAXbMEMZ5phrKPK6qqnizQ5MscN9UTzZAveGL+R1ZOmGxcmqrVyEAr5C y8cYUTwoJtHSTrLq+qDc43R1kjQ0d69IL+uacNtKb81BQLpelDk= -----END CERTIFICATE-----Generated at Fri Jul 24 02:43:05 2026 by rpki-client