$ rpki-client -vvf rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft File: 0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft (raw, json) Hash identifier: nuIzCljR+dUBi+wjN+sF1GXYdxwAVWQITGcTq4aJnDY= Subject key identifier: E5:1D:26:03:BA:42:87:B4:30:02:EA:4D:C6:26:10:93:AF:89:C3:94 Authority key identifier: 0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA Certificate issuer: /CN=0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA Certificate serial: 602FA6BF41E86B1DADDFF5A7AB6827F275AD9BF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:01:44 +0000 Manifest this update: Fri 24 Jul 2026 01:56:44 +0000 Manifest next update: Sat 25 Jul 2026 04:13:44 +0000 Files and hashes: 1: 0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl (hash: 5GllAshU0dzHr0SQQp90BAax/eNmj2BZVow8PvU6oY0=) 2: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: dKm4h4htb+xuOuzBD2j/P3WbreIMIoqa9hQCTFJdoG0=) 3: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: AfqLgmWvcp/HfbbhsOhmQtK0n/maxUMDksVbAZ7tmAM=) 4: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: wGWAkljELKeAaAd3PWlxElTnzVBFIyJlkgaeJs8LIbg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:2f:a6:bf:41:e8:6b:1d:ad:df:f5:a7:ab:68:27:f2:75:ad:9b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA Validity Not Before: Jul 24 01:56:44 2026 GMT Not After : Jul 25 04:13:44 2026 GMT Subject: CN=E51D2603BA4287B43002EA4DC6261093AF89C394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:65:68:7f:57:23:90:5d:09:0f:0d:a4:14:8b: 1d:be:df:a4:1b:1a:0c:d5:66:cc:71:d7:5a:94:17: c4:fa:2d:c9:c4:72:bb:60:66:23:52:a3:64:66:54: 3b:a8:0c:dc:e9:31:ec:01:ea:bd:ab:90:51:23:3f: 30:2d:9e:db:09:46:63:70:c0:b5:1a:b2:3b:15:c7: 71:cb:6f:77:04:dd:b0:c3:90:c8:89:ef:25:a5:b9: bf:cb:fd:43:88:d7:5f:10:64:8d:0c:56:fb:e7:45: 46:97:88:5a:40:53:73:49:ec:fa:28:f4:17:80:80: 17:c2:af:85:ca:98:d4:38:66:1c:1b:ae:f4:66:05: 11:8f:79:c1:66:f6:0b:37:d9:2a:13:7c:91:a5:a2: d5:7c:a3:1e:b4:3c:ad:75:71:d3:61:65:24:53:be: 07:b2:1b:9a:6c:78:4b:b4:ef:a9:ff:98:5a:34:40: b0:9d:25:b7:98:85:e3:53:34:16:0b:30:f2:eb:db: fd:4d:51:4b:67:9a:b3:7c:ab:c4:be:b4:0c:8a:68: 86:b7:b9:99:15:1d:37:df:7e:6b:ad:25:35:d9:b8: 4b:e4:47:19:7d:20:2f:c1:39:46:ea:be:e8:7f:a1: 5a:c9:6a:e2:cb:7a:60:8c:6a:f4:57:9a:40:fc:93: 0d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1D:26:03:BA:42:87:B4:30:02:EA:4D:C6:26:10:93:AF:89:C3:94 X509v3 Authority Key Identifier: keyid:0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:8e:cb:5a:ce:68:1f:d4:cb:df:ab:42:e9:d7:5b:a6:9d:31: 7b:82:b4:06:86:a9:2a:2d:2a:cc:72:e5:15:6f:93:40:e5:ff: 11:06:51:e4:cd:03:c4:0b:45:e5:f8:88:2b:11:5d:7b:52:80: 62:2c:93:87:84:47:4f:e4:bf:6a:ff:9c:c2:48:f1:9b:b1:b5: a2:99:c1:20:24:55:a8:20:b6:cd:f4:56:04:b1:3a:c0:b5:e8: a9:2f:a6:e4:ff:ec:dc:98:30:5d:bf:9c:fc:f4:45:33:d1:46: d7:57:07:39:b1:ab:e4:e2:ea:7f:5c:cc:8f:65:f3:86:2f:f9: ac:17:aa:83:24:6b:ee:ac:00:04:1c:50:51:d4:a4:4f:31:6c: f0:a7:7b:1a:b7:6b:92:53:eb:95:c3:d5:ad:83:34:68:78:1d: 75:64:33:5d:69:ba:48:05:1c:58:08:f4:52:1f:ce:e7:1f:33: b8:b9:ab:09:d9:d8:14:8f:f3:12:c5:ab:93:78:2f:d1:f8:43: 97:12:1a:db:91:ac:c0:fb:1c:55:a8:fb:bb:d8:04:9a:88:62: d9:3a:9c:60:f9:48:9c:72:12:1c:88:32:7a:3b:20:bc:fb:bf: b5:ea:86:fc:65:0b:5c:c9:84:14:28:1e:fc:5f:22:09:6d:22: 86:d1:aa:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYC+mv0Hoax2t3/Wnq2gn8nWtm/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGNjg0MUE0NUU3RjRDM0U4Q0M5MEFGMzZCQkZCRDlC NzU1RTRGQTAeFw0yNjA3MjQwMTU2NDRaFw0yNjA3MjUwNDEzNDRaMDMxMTAvBgNV BAMTKEU1MUQyNjAzQkE0Mjg3QjQzMDAyRUE0REM2MjYxMDkzQUY4OUMzOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFZWh/VyOQXQkPDaQUix2+36Qb GgzVZsxx11qUF8T6LcnEcrtgZiNSo2RmVDuoDNzpMewB6r2rkFEjPzAtntsJRmNw wLUasjsVx3HLb3cE3bDDkMiJ7yWlub/L/UOI118QZI0MVvvnRUaXiFpAU3NJ7Poo 9BeAgBfCr4XKmNQ4ZhwbrvRmBRGPecFm9gs32SoTfJGlotV8ox60PK11cdNhZSRT vgeyG5pseEu076n/mFo0QLCdJbeYheNTNBYLMPLr2/1NUUtnmrN8q8S+tAyKaIa3 uZkVHTfffmutJTXZuEvkRxl9IC/BOUbqvuh/oVrJauLLemCMavRXmkD8kw39AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5R0mA7pCh7QwAupNxiYQk6+Jw5QwHwYDVR0j BBgwFoAUDfaEGkXn9MPozJCvNrv72bdV5PowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGRhZjlmMGYtNGZiMS00MGMwLWIzODAtNTlhMzhkYmM5YTE2LzAvMERGNjg0MUE0 NUU3RjRDM0U4Q0M5MEFGMzZCQkZCRDlCNzU1RTRGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wREY2ODQxQTQ1RTdGNEMzRThDQzkwQUYzNkJCRkJEOUI3NTVF NEZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMERGNjg0MUE0NUU3RjRDM0U4Q0M5MEFGMzZCQkZC RDlCNzU1RTRGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCOy1rOaB/Uy9+rQunXW6adMXuCtAaGqSot Ksxy5RVvk0Dl/xEGUeTNA8QLReX4iCsRXXtSgGIsk4eER0/kv2r/nMJI8ZuxtaKZ wSAkVaggts30VgSxOsC16KkvpuT/7NyYMF2/nPz0RTPRRtdXBzmxq+Ti6n9czI9l 84Yv+awXqoMka+6sAAQcUFHUpE8xbPCnexq3a5JT65XD1a2DNGh4HXVkM11pukgF HFgI9FIfzucfM7i5qwnZ2BSP8xLFq5N4L9H4Q5cSGtuRrMD7HFWo+7vYBJqIYtk6 nGD5SJxyEhyIMno7ILz7v7XqhvxlC1zJhBQoHvxfIgltIobRqo8= -----END CERTIFICATE-----Generated at Fri Jul 24 06:23:50 2026 by rpki-client