$ rpki-client -vvf rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft File: DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft (raw, json) Hash identifier: lJ47+LBDiYdDuf1+M/+nbRGVL4RRSwswHaVAIfpKhgo= Subject key identifier: F5:CC:C3:2D:36:3F:F2:B4:2C:6C:06:F7:F2:15:CA:51:45:96:4D:14 Authority key identifier: DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87 Certificate issuer: /CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887 Certificate serial: 51F2BA1C75C82D0DE7CE2CFF69DD87B69A359465 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:11:05 +0000 Manifest this update: Thu 23 Jul 2026 13:06:05 +0000 Manifest next update: Fri 24 Jul 2026 16:26:05 +0000 Files and hashes: 1: 3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa (hash: ogZJ6AIvbYZ3rfPWkAwkD+wUu9pRc9HcU7kgCnHTVek=) 2: 3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa (hash: swMIglkDWca6bTykcQAlBI8mPZmObmBmI7XJvNSgNmI=) 3: 3130332e31392e3138332e302f32342d3234203d3e20313332363432.roa (hash: b9ucf82rqvNvVvSo4KylGCCzRBHVOTbyEMd9uIlhwkk=) 4: DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl (hash: n4INrr77mAv9HAwqQIrGo2AoWSC+vG1WEkBCaEOE9lc=) 5: 3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa (hash: 7vL8y9qGcwGlBHTlp7W2DDNh7nh9ZG6pUOsZTFcC5m8=) 6: 323430353a336463303a3a2f33322d3438203d3e20313332363432.roa (hash: BbljfPMaDaoCXmfqlX766e2gOwStRy9KRMwBeVYrNRA=) 7: 3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa (hash: 2hrlUfalWGLJAAgURvT2UIB10iFx48ljh0wmwwAeiOQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f2:ba:1c:75:c8:2d:0d:e7:ce:2c:ff:69:dd:87:b6:9a:35:94:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887 Validity Not Before: Jul 23 13:06:05 2026 GMT Not After : Jul 24 16:26:05 2026 GMT Subject: CN=F5CCC32D363FF2B42C6C06F7F215CA5145964D14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f2:ea:8b:20:b9:e4:62:fa:09:1a:54:7e:56: b8:3f:a7:d4:a7:bc:cd:31:cf:cd:9d:5c:10:6b:93: 40:98:55:46:0e:5e:9e:15:47:78:fd:25:65:73:57: 9d:88:91:ca:ce:c3:63:4e:55:e7:f4:4e:e8:1b:5f: 08:27:1f:15:4e:9a:b9:91:af:c8:5d:74:84:5c:f6: f1:15:4b:fb:ff:43:ab:56:a5:78:1f:7d:e7:89:46: ea:12:f2:74:4d:cf:07:31:83:12:47:57:2a:28:58: 91:11:5c:b3:ba:09:e6:2f:4c:93:6d:3f:20:fc:08: 43:56:c7:ea:fc:2b:e5:21:92:30:71:24:fd:af:94: a3:bf:c4:81:c8:55:01:17:70:ee:ed:f6:a7:15:d7: 29:b4:cd:15:6f:61:a9:3f:4a:5e:26:44:e4:6a:32: 38:42:91:74:80:9b:df:e7:eb:2e:b2:9e:20:81:b8: ce:6e:ae:b8:4b:77:e9:e0:81:16:e0:0c:ac:5f:a9: 4f:7b:4b:77:fe:cd:07:34:bc:8d:40:73:be:b5:f9: 90:c3:1d:16:5e:d5:c9:03:20:69:3b:a8:36:af:96: 6d:9d:e2:5c:9f:8d:78:2a:60:16:f8:8e:1e:44:f0: cf:ef:6c:8b:b8:21:48:93:ce:01:c4:d1:9a:59:7b: 49:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CC:C3:2D:36:3F:F2:B4:2C:6C:06:F7:F2:15:CA:51:45:96:4D:14 X509v3 Authority Key Identifier: keyid:DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5f:01:3b:35:84:1e:7e:ca:c8:ed:54:2d:65:ea:2f:86:b8: a3:be:f3:ea:d0:14:c3:2d:d2:bf:84:a0:e8:26:7a:a7:2d:24: 6b:da:9c:27:a7:dd:af:e0:1d:be:a9:20:dd:12:b9:7e:42:bf: 6f:3c:90:9e:66:71:b0:bb:d2:2b:16:a8:39:e9:a6:d9:8d:3c: 1c:4d:de:d6:50:6e:e6:48:44:15:19:f7:94:05:a6:97:78:2b: ea:7e:f0:19:3a:fd:fc:51:70:e6:4c:6d:36:ba:e9:ee:d0:fd: c2:7f:38:3f:55:6a:13:e8:d1:20:01:e0:ea:e1:d6:ba:e5:55: 1d:2c:bc:67:1c:ef:97:eb:9a:39:86:ab:7b:50:c1:1b:ff:62: 55:04:09:69:4a:25:a7:07:2a:0e:7f:a0:63:9e:a3:f5:56:87: 1c:1a:31:32:fd:dd:66:95:d7:96:ca:83:d3:76:a6:d0:ae:78: 64:bf:14:33:c1:ce:8d:ca:08:4f:f5:f2:bc:98:e8:9a:df:fd: 48:5c:c1:7f:94:49:12:e2:35:21:3b:0e:d3:c5:f1:47:73:aa: 75:9b:83:a4:d0:20:df:bd:38:49:c0:2c:88:5d:df:a1:09:7a: dd:75:14:ff:c9:59:0a:00:be:05:39:41:45:0a:4f:71:17:52: 44:2b:28:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUfK6HHXILQ3nziz/ad2Htpo1lGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENBM0M4RjhFODJDRDRGOUUyRjhGOUFFQzg5MEJDMURC MDk4QTg4NzAeFw0yNjA3MjMxMzA2MDVaFw0yNjA3MjQxNjI2MDVaMDMxMTAvBgNV BAMTKEY1Q0NDMzJEMzYzRkYyQjQyQzZDMDZGN0YyMTVDQTUxNDU5NjREMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr8uqLILnkYvoJGlR+Vrg/p9Sn vM0xz82dXBBrk0CYVUYOXp4VR3j9JWVzV52IkcrOw2NOVef0TugbXwgnHxVOmrmR r8hddIRc9vEVS/v/Q6tWpXgffeeJRuoS8nRNzwcxgxJHVyooWJERXLO6CeYvTJNt PyD8CENWx+r8K+UhkjBxJP2vlKO/xIHIVQEXcO7t9qcV1ym0zRVvYak/Sl4mRORq MjhCkXSAm9/n6y6yniCBuM5urrhLd+nggRbgDKxfqU97S3f+zQc0vI1Ac761+ZDD HRZe1ckDIGk7qDavlm2d4lyfjXgqYBb4jh5E8M/vbIu4IUiTzgHE0ZpZe0nxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9czDLTY/8rQsbAb38hXKUUWWTRQwHwYDVR0j BBgwFoAU3KPI+Ogs1Pni+PmuyJC8HbCYqIcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTBjNzczYzgtZmI1Ni00NDlmLTg2NDktMTEyZDZlMTY4NmIzLzAvRENBM0M4RjhF ODJDRDRGOUUyRjhGOUFFQzg5MEJDMURCMDk4QTg4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0EzQzhGOEU4MkNENEY5RTJGOEY5QUVDODkwQkMxREIwOThB ODg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTBjNzczYzgtZmI1Ni00NDlmLTg2 NDktMTEyZDZlMTY4NmIzLzAvRENBM0M4RjhFODJDRDRGOUUyRjhGOUFFQzg5MEJD MURCMDk4QTg4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtfATs1hB5+ysjtVC1l6i+GuKO+8+rQFMMt 0r+EoOgmeqctJGvanCen3a/gHb6pIN0SuX5Cv288kJ5mcbC70isWqDnpptmNPBxN 3tZQbuZIRBUZ95QFppd4K+p+8Bk6/fxRcOZMbTa66e7Q/cJ/OD9VahPo0SAB4Orh 1rrlVR0svGcc75frmjmGq3tQwRv/YlUECWlKJacHKg5/oGOeo/VWhxwaMTL93WaV 15bKg9N2ptCueGS/FDPBzo3KCE/18ryY6Jrf/UhcwX+USRLiNSE7DtPF8UdzqnWb g6TQIN+9OEnALIhd36EJet11FP/JWQoAvgU5QUUKT3EXUkQrKOc= -----END CERTIFICATE-----Generated at Fri Jul 24 07:42:33 2026 by rpki-client