$ rpki-client -vvf rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft File: 0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft (raw, json) Hash identifier: za4JvZe048Cp7xUwhAoD5f/oeQjY1VYl+zQ1og2y7q0= Subject key identifier: 1F:4F:40:9B:5C:56:EC:68:FE:5E:65:D3:03:F2:C9:01:7C:BB:FE:36 Authority key identifier: 0B:6D:FC:81:F6:A5:A4:C5:1C:93:36:05:0C:F9:C6:7E:BE:28:F2:F6 Certificate issuer: /CN=0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6 Certificate serial: 535045C6E22E51A7AD966A7CED98C79474301122 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 07:23:24 +0000 Manifest this update: Fri 24 Jul 2026 07:18:24 +0000 Manifest next update: Sat 25 Jul 2026 07:48:24 +0000 Files and hashes: 1: 3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (hash: uH7wCiM64P68t/GjuIUuXpirB813LNqvCv6j5LUhOUQ=) 2: 0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.crl (hash: PCOqgvrzcqLeX3s1IjvMaOHaSUcqho8LuNPZ9PhSYGw=) 3: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (hash: bOv9UB+jH3yIgez1h0+9f0ARyXLXbtpazjPu+Jy6jyY=) 4: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (hash: RduQCu6LK4ze8a1KtgwVd9edcTww6Gh3TJk7wQrWXc0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.crl rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:50:45:c6:e2:2e:51:a7:ad:96:6a:7c:ed:98:c7:94:74:30:11:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6 Validity Not Before: Jul 24 07:18:24 2026 GMT Not After : Jul 25 07:48:24 2026 GMT Subject: CN=1F4F409B5C56EC68FE5E65D303F2C9017CBBFE36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:85:b9:1a:b4:99:b7:59:ba:ac:f4:93:61: dd:2b:1b:ab:4b:ba:00:2a:7f:fb:fd:07:cb:0e:fd: ef:c6:c9:9a:02:54:eb:b9:b4:58:03:82:ad:f2:5f: 71:d6:7e:d4:58:1c:32:27:5c:50:2c:40:d0:c2:b6: f6:69:f7:af:bf:07:77:79:cd:de:4e:e8:87:07:f0: 05:f5:0e:d7:0e:ec:17:6b:96:50:63:a0:26:73:3e: 82:1d:9b:3c:78:87:63:da:d6:e1:d1:df:c8:09:e7: 09:d2:d6:89:92:c3:e1:6c:e0:59:21:5b:8f:88:85: ae:74:ac:79:40:bf:04:86:66:91:03:89:73:18:21: 90:ed:00:ef:10:e0:69:17:5f:12:5f:9c:da:3b:29: 66:6e:8d:06:a3:73:9c:6e:92:cf:55:db:d2:b1:63: cd:23:f0:c1:71:81:fc:92:c9:9c:3b:e4:fe:c5:a2: e2:60:45:21:cd:e4:0b:bc:7f:3b:c3:ff:bf:df:a7: 5d:a2:ab:81:8d:f6:b8:a0:b6:ff:a9:d1:cf:02:2c: df:44:cd:f3:0e:eb:0c:06:e3:6b:99:48:dc:72:54: b4:80:ad:79:29:24:84:5f:81:bf:ec:ab:2b:b3:44: 9e:fb:7f:cf:b4:93:19:62:4e:90:19:f8:99:3e:b0: 66:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4F:40:9B:5C:56:EC:68:FE:5E:65:D3:03:F2:C9:01:7C:BB:FE:36 X509v3 Authority Key Identifier: keyid:0B:6D:FC:81:F6:A5:A4:C5:1C:93:36:05:0C:F9:C6:7E:BE:28:F2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:02:29:02:89:74:80:82:cc:c3:0e:30:23:97:71:4c:f0:0f: f0:3b:23:6d:e2:de:1f:e0:97:f2:0b:ef:73:cd:0d:a7:aa:dc: bc:df:fa:83:97:fd:27:d3:93:09:6c:43:21:30:4d:01:b8:58: d5:64:88:55:b8:48:96:ec:36:4c:de:a0:b6:71:7a:33:47:fc: 30:bc:2f:14:7e:9c:4b:69:1d:37:ca:a1:df:0b:97:1b:8d:1a: f1:06:a2:e0:d9:72:1e:1f:94:b1:1d:11:bb:f5:6b:46:d4:4c: a0:44:92:34:9a:08:cb:ac:70:66:21:96:29:1e:de:c1:6b:b3: 4f:cd:cb:bc:22:f6:d5:b4:c8:87:53:62:7f:d1:a0:d5:c5:93: 63:46:6c:61:23:75:9e:0f:da:b9:d9:8a:84:db:99:9c:ca:98: 68:3f:8c:b9:35:f5:8d:f9:23:1a:8c:1f:6d:f3:e9:a2:b3:bf: 87:e0:05:80:67:85:5b:46:b3:ad:96:f3:ca:ea:08:8e:dc:94: 47:c6:7c:a5:bc:f2:bf:05:0c:ad:03:e1:91:5e:14:bc:0d:21: b5:68:8a:9b:13:9f:44:66:ff:d6:24:e2:52:8c:57:a5:56:4d: de:ea:9a:b4:ef:97:db:c5:6b:25:1e:81:ea:74:46:ec:d3:a2: 0d:c3:22:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU1BFxuIuUaetlmp87ZjHlHQwESIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI2REZDODFGNkE1QTRDNTFDOTMzNjA1MENGOUM2N0VC RTI4RjJGNjAeFw0yNjA3MjQwNzE4MjRaFw0yNjA3MjUwNzQ4MjRaMDMxMTAvBgNV BAMTKDFGNEY0MDlCNUM1NkVDNjhGRTVFNjVEMzAzRjJDOTAxN0NCQkZFMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mYW5GrSZt1m6rPSTYd0rG6tL ugAqf/v9B8sO/e/GyZoCVOu5tFgDgq3yX3HWftRYHDInXFAsQNDCtvZp96+/B3d5 zd5O6IcH8AX1DtcO7BdrllBjoCZzPoIdmzx4h2Pa1uHR38gJ5wnS1omSw+Fs4Fkh W4+Iha50rHlAvwSGZpEDiXMYIZDtAO8Q4GkXXxJfnNo7KWZujQajc5xuks9V29Kx Y80j8MFxgfySyZw75P7FouJgRSHN5Au8fzvD/7/fp12iq4GN9rigtv+p0c8CLN9E zfMO6wwG42uZSNxyVLSArXkpJIRfgb/sqyuzRJ77f8+0kxliTpAZ+Jk+sGYRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH09Am1xW7Gj+XmXTA/LJAXy7/jYwHwYDVR0j BBgwFoAUC238gfalpMUckzYFDPnGfr4o8vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcxMWFhNDYtZjI4ZS00YzU1LWI5YmEtN2Q1YmRjOTViNGY2LzAvMEI2REZDODFG NkE1QTRDNTFDOTMzNjA1MENGOUM2N0VCRTI4RjJGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQjZERkM4MUY2QTVBNEM1MUM5MzM2MDUwQ0Y5QzY3RUJFMjhG MkY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcxMWFhNDYtZjI4ZS00YzU1LWI5 YmEtN2Q1YmRjOTViNGY2LzAvMEI2REZDODFGNkE1QTRDNTFDOTMzNjA1MENGOUM2 N0VCRTI4RjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoCKQKJdICCzMMOMCOXcUzwD/A7I23i3h/g l/IL73PNDaeq3Lzf+oOX/SfTkwlsQyEwTQG4WNVkiFW4SJbsNkzeoLZxejNH/DC8 LxR+nEtpHTfKod8LlxuNGvEGouDZch4flLEdEbv1a0bUTKBEkjSaCMuscGYhlike 3sFrs0/Ny7wi9tW0yIdTYn/RoNXFk2NGbGEjdZ4P2rnZioTbmZzKmGg/jLk19Y35 IxqMH23z6aKzv4fgBYBnhVtGs62W88rqCI7clEfGfKW88r8FDK0D4ZFeFLwNIbVo ipsTn0Rm/9Yk4lKMV6VWTd7qmrTvl9vFayUegep0RuzTog3DIgQ= -----END CERTIFICATE-----Generated at Fri Jul 24 09:30:07 2026 by rpki-client