$ rpki-client -vvf rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft File: B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft (raw, json) Hash identifier: bEuHFIaTCFYsg1P6fTDslzoi7XLZCRf1yVdk7aap+4M= Subject key identifier: 0A:7A:BC:B0:B9:61:3A:17:B1:2F:09:8C:11:DE:9E:7A:93:D3:02:4B Authority key identifier: B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E Certificate issuer: /CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E Certificate serial: 2B71EA5C5D5A534244242494EE7F7D1A7EF31216 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 11:54:41 +0000 Manifest this update: Thu 23 Jul 2026 11:49:41 +0000 Manifest next update: Fri 24 Jul 2026 14:10:41 +0000 Files and hashes: 1: B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl (hash: cMh+LHCr87MHQkSy8ir061iBIFJtJ+TgeCmiYvBlRXo=) 2: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: GMFkIV2sJittLK9WJRbpUUZTvqKbZ67tY6581Ugt0f0=) 3: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: dKZb6aaVbPeaaWDRCiGgkOh/h5qEP/6edHL6dbBuTxw=) 4: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: dOi5t8zi5JAQodBD98mcsNs1h4au7JIDI+EvfriW4vk=) 5: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: q3EmEpNbHapfK5Arcd9ZblsuZXEZdJPpzKqJnzLo0DY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:71:ea:5c:5d:5a:53:42:44:24:24:94:ee:7f:7d:1a:7e:f3:12:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E Validity Not Before: Jul 23 11:49:41 2026 GMT Not After : Jul 24 14:10:41 2026 GMT Subject: CN=0A7ABCB0B9613A17B12F098C11DE9E7A93D3024B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:e8:e8:ba:3d:0d:9e:a2:76:cf:1c:16:10:3c: 5e:b9:49:53:32:24:15:92:73:b5:67:27:38:20:bb: 7a:b6:e9:92:94:b9:7c:c9:c4:a5:45:71:2b:8e:34: ac:90:dd:cf:0e:58:52:92:d5:e6:b4:7c:87:94:20: 7b:e0:26:e1:1e:16:99:44:82:74:74:5f:c7:94:46: 0c:e1:a6:39:c2:64:8c:c2:e1:8f:6e:2b:b5:d6:fe: eb:b9:b2:8a:4b:89:14:71:f2:e0:17:7f:da:7e:48: 09:e7:35:2f:98:14:7a:94:f3:c7:54:f0:61:3d:75: 38:5e:4d:62:6a:21:0e:a1:c5:21:8d:df:fd:12:85: 61:1e:c8:ca:02:71:b0:69:aa:0b:3b:e4:06:38:87: 83:27:bb:34:49:a9:15:3b:3e:c6:6c:d8:78:56:39: 44:be:a4:bb:ec:c2:2e:e8:fa:61:52:f2:2a:35:fd: a5:34:7d:32:61:6d:f3:3c:96:2e:97:f2:53:a7:24: 4c:85:fe:bd:0c:c3:fc:ef:bd:d1:88:43:df:2a:11: 87:51:58:e3:04:0e:3a:67:a7:51:48:ff:92:15:1a: ba:1d:ee:19:3d:25:6d:35:0e:4c:eb:a9:c7:12:c0: b5:76:50:9b:92:01:d6:7d:60:d3:e5:72:c8:98:ab: be:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7A:BC:B0:B9:61:3A:17:B1:2F:09:8C:11:DE:9E:7A:93:D3:02:4B X509v3 Authority Key Identifier: keyid:B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ae:a4:ce:81:f6:63:0b:28:75:37:03:6a:f2:ab:1f:1b:2e: 7a:69:e9:29:b5:5a:d5:05:f6:66:ef:2f:fe:6e:1e:fc:21:4a: 55:89:8a:2b:27:7b:f7:55:4f:04:e4:43:d5:ab:c0:75:4e:d0: 3f:83:1c:e4:57:a8:81:c8:d0:de:9f:25:54:87:ff:c0:ad:f6: ee:71:39:90:56:f4:4c:cf:af:f2:1c:04:c7:3e:f9:d2:c4:ee: e5:f4:5f:a1:3a:8d:96:67:c5:a9:06:17:5e:7c:0a:58:09:2d: 94:7c:9f:a4:9e:23:98:43:6a:a6:76:b7:38:ec:6f:a4:33:bd: 1e:fb:8f:29:8a:5a:1b:fa:dd:15:48:6c:48:9b:01:a0:0f:41: dc:50:bc:be:2f:96:3b:15:60:c8:63:a9:fe:f5:f2:bd:d4:5f: 1c:e2:84:ea:6b:d9:1e:41:6f:29:7e:a1:04:ab:95:16:41:26: d4:43:1c:34:97:71:a0:90:b4:01:d2:52:4b:46:a5:07:00:bf: 8d:99:f2:87:3d:5d:b3:be:1e:05:f6:16:66:ad:4d:88:34:ed: 58:f3:56:f4:42:0c:a4:b8:54:9e:ac:fb:74:d1:4e:70:a6:05: 7d:31:5b:82:3a:c4:01:c6:c6:11:96:71:35:ae:e3:ae:22:25: 75:d9:70:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK3HqXF1aU0JEJCSU7n99Gn7zEhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2OENGQTM3OUY0RUFDRDE1REIwRUY3NkNFQkM1ODBB QzFGQkY2RTAeFw0yNjA3MjMxMTQ5NDFaFw0yNjA3MjQxNDEwNDFaMDMxMTAvBgNV BAMTKDBBN0FCQ0IwQjk2MTNBMTdCMTJGMDk4QzExREU5RTdBOTNEMzAyNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD26Oi6PQ2eonbPHBYQPF65SVMy JBWSc7VnJzggu3q26ZKUuXzJxKVFcSuONKyQ3c8OWFKS1ea0fIeUIHvgJuEeFplE gnR0X8eURgzhpjnCZIzC4Y9uK7XW/uu5sopLiRRx8uAXf9p+SAnnNS+YFHqU88dU 8GE9dTheTWJqIQ6hxSGN3/0ShWEeyMoCcbBpqgs75AY4h4MnuzRJqRU7PsZs2HhW OUS+pLvswi7o+mFS8io1/aU0fTJhbfM8li6X8lOnJEyF/r0Mw/zvvdGIQ98qEYdR WOMEDjpnp1FI/5IVGrod7hk9JW01DkzrqccSwLV2UJuSAdZ9YNPlcsiYq77lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCnq8sLlhOhexLwmMEd6eepPTAkswHwYDVR0j BBgwFoAUsWjPo3n06s0V2w73bOvFgKwfv24wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTIxMjdmZWItOTYxNS00YzU4LWEzYmItZWVmN2I3YTY1NDdlLzAvQjE2OENGQTM3 OUY0RUFDRDE1REIwRUY3NkNFQkM1ODBBQzFGQkY2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTY4Q0ZBMzc5RjRFQUNEMTVEQjBFRjc2Q0VCQzU4MEFDMUZC RjZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTIxMjdmZWItOTYxNS00YzU4LWEz YmItZWVmN2I3YTY1NDdlLzAvQjE2OENGQTM3OUY0RUFDRDE1REIwRUY3NkNFQkM1 ODBBQzFGQkY2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiupM6B9mMLKHU3A2ryqx8bLnpp6Sm1WtUF 9mbvL/5uHvwhSlWJiisne/dVTwTkQ9WrwHVO0D+DHORXqIHI0N6fJVSH/8Ct9u5x OZBW9EzPr/IcBMc++dLE7uX0X6E6jZZnxakGF158ClgJLZR8n6SeI5hDaqZ2tzjs b6QzvR77jymKWhv63RVIbEibAaAPQdxQvL4vljsVYMhjqf718r3UXxzihOpr2R5B byl+oQSrlRZBJtRDHDSXcaCQtAHSUktGpQcAv42Z8oc9XbO+HgX2FmatTYg07Vjz VvRCDKS4VJ6s+3TRTnCmBX0xW4I6xAHGxhGWcTWu464iJXXZcEc= -----END CERTIFICATE-----Generated at Fri Jul 24 01:18:57 2026 by rpki-client