$ rpki-client -vvf rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft File: D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft (raw, json) Hash identifier: FqeBdPSnxTLZBZoFqy0F452h1uIxKkSQzwDnimmk1eE= Subject key identifier: FF:A2:64:EA:41:4A:3F:70:12:F1:58:C4:A1:5D:24:47:C8:96:9A:BC Authority key identifier: D3:B0:B1:2C:00:ED:A4:8B:D2:7B:03:AE:46:20:E5:1B:4D:5B:35:B9 Certificate issuer: /CN=D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9 Certificate serial: 1AA9C31EF1E10B860B2EA5509BD3E6C938E8B0AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:32:42 +0000 Manifest this update: Thu 23 Jul 2026 18:27:42 +0000 Manifest next update: Fri 24 Jul 2026 21:51:42 +0000 Files and hashes: 1: D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.crl (hash: ppbbOoJ+pFW3Xfcl6tQ9ClLM+b5XlJpl8Dd1WEnd3Ds=) 2: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: UG7HopHAsWszm3vKCwbdEPyJLKZk5ZAofsZVkykHgJs=) 3: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: ppvRL+0RoVt7WTK9nlYvDd18NTyRBb+RqG5BAHWS1Ig=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.crl rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a9:c3:1e:f1:e1:0b:86:0b:2e:a5:50:9b:d3:e6:c9:38:e8:b0:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9 Validity Not Before: Jul 23 18:27:42 2026 GMT Not After : Jul 24 21:51:42 2026 GMT Subject: CN=FFA264EA414A3F7012F158C4A15D2447C8969ABC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:15:7d:61:c5:3b:54:f2:f6:0c:25:f3:b1:cb: ac:7a:d4:a3:e7:b8:22:51:7d:80:a3:1e:5c:e4:85: a6:f2:b2:c7:90:f5:6d:25:d2:18:d3:0d:2f:3b:78: 6c:dd:88:29:9c:6d:5f:0f:89:d8:a5:29:5d:49:78: f1:2d:6e:ac:79:25:cf:78:4b:70:08:a8:d4:97:73: 89:15:3d:7a:f4:ab:cd:5d:8d:4c:42:18:7b:d2:b9: 50:97:34:45:09:0d:be:61:f1:5d:99:bb:3f:84:e2: 36:59:41:dd:2c:9d:52:38:4d:f9:49:ef:e9:41:64: 25:30:37:d2:f7:09:a0:64:11:b8:49:3a:40:17:fc: 22:4e:5a:26:d7:3e:98:47:97:a1:a0:b5:9c:02:9b: 89:bd:3f:af:a6:0c:fb:00:7f:d7:70:88:ab:e6:22: 4f:e2:b6:78:d7:b7:91:cb:9c:36:de:c3:08:9e:90: 6e:4e:33:f2:72:af:62:99:40:c3:41:c6:45:37:90: ae:e3:86:17:1d:73:19:b9:b6:9d:25:e7:14:ed:5d: a1:7d:49:17:59:c4:04:5a:84:dc:b9:5a:b4:43:81: 0e:f6:74:b6:35:bb:d1:5c:b0:15:46:68:4a:f6:bb: c2:16:60:48:1c:a3:2e:0c:3c:e3:d6:97:93:49:85: 02:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A2:64:EA:41:4A:3F:70:12:F1:58:C4:A1:5D:24:47:C8:96:9A:BC X509v3 Authority Key Identifier: keyid:D3:B0:B1:2C:00:ED:A4:8B:D2:7B:03:AE:46:20:E5:1B:4D:5B:35:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:52:02:84:57:b7:7b:fb:1e:77:f1:29:2d:c6:9f:af:a2:65: 07:b3:46:a5:6b:f3:31:cf:f3:50:1f:3c:b2:9a:68:3c:eb:c7: bc:f1:21:49:c6:33:89:83:f5:6f:3f:7f:b6:82:cc:14:26:8f: 18:3e:01:3e:82:8f:6b:d0:ce:13:e3:58:01:a9:e7:d6:c1:9d: a8:8b:65:9d:f1:b7:9a:a2:a5:03:c2:ba:96:b7:1b:87:79:af: a1:57:55:4a:9c:d4:91:02:c9:ff:59:66:3d:6a:b4:85:32:c5: e0:6c:05:a9:33:ca:23:91:f4:1a:b7:9a:ed:b9:9b:f1:ea:9d: 95:e4:ab:b8:7c:8e:6d:39:d5:3e:2d:3a:5f:fa:98:5b:70:95: df:8d:82:47:3c:ce:b1:ef:59:1a:6b:c7:d4:06:84:e0:c5:fa: 3b:73:91:6b:43:60:c8:e2:a7:5d:67:8f:6a:87:0a:a6:1e:01: bb:f1:93:b7:c6:51:65:ea:0f:35:71:79:a0:7e:42:25:33:ee: a7:36:d1:09:8f:9c:2c:8b:f2:b8:c5:4c:92:26:f2:72:38:5e: 08:85:78:6b:9d:c6:13:b1:cd:92:21:fa:00:2d:68:2e:56:a7: e3:c5:66:1a:eb:7c:df:fb:1f:06:6b:c9:69:73:8b:1f:c6:17: 9a:cf:07:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGqnDHvHhC4YLLqVQm9PmyTjosKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCMEIxMkMwMEVEQTQ4QkQyN0IwM0FFNDYyMEU1MUI0 RDVCMzVCOTAeFw0yNjA3MjMxODI3NDJaFw0yNjA3MjQyMTUxNDJaMDMxMTAvBgNV BAMTKEZGQTI2NEVBNDE0QTNGNzAxMkYxNThDNEExNUQyNDQ3Qzg5NjlBQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FX1hxTtU8vYMJfOxy6x61KPn uCJRfYCjHlzkhabysseQ9W0l0hjTDS87eGzdiCmcbV8PidilKV1JePEtbqx5Jc94 S3AIqNSXc4kVPXr0q81djUxCGHvSuVCXNEUJDb5h8V2Zuz+E4jZZQd0snVI4TflJ 7+lBZCUwN9L3CaBkEbhJOkAX/CJOWibXPphHl6GgtZwCm4m9P6+mDPsAf9dwiKvm Ik/itnjXt5HLnDbewwiekG5OM/Jyr2KZQMNBxkU3kK7jhhcdcxm5tp0l5xTtXaF9 SRdZxARahNy5WrRDgQ72dLY1u9FcsBVGaEr2u8IWYEgcoy4MPOPWl5NJhQJ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/6Jk6kFKP3AS8VjEoV0kR8iWmrwwHwYDVR0j BBgwFoAU07CxLADtpIvSewOuRiDlG01bNbkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTkyZTA3ZjgtMWE0OC00MzkxLWE2YTUtOGU0ZTM5Yzg1ODhhLzAvRDNCMEIxMkMw MEVEQTQ4QkQyN0IwM0FFNDYyMEU1MUI0RDVCMzVCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0IwQjEyQzAwRURBNDhCRDI3QjAzQUU0NjIwRTUxQjRENUIz NUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvRDNCMEIxMkMwMEVEQTQ4QkQyN0IwM0FFNDYyMEU1 MUI0RDVCMzVCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJSAoRXt3v7HnfxKS3Gn6+iZQezRqVr8zHP 81AfPLKaaDzrx7zxIUnGM4mD9W8/f7aCzBQmjxg+AT6Cj2vQzhPjWAGp59bBnaiL ZZ3xt5qipQPCupa3G4d5r6FXVUqc1JECyf9ZZj1qtIUyxeBsBakzyiOR9Bq3mu25 m/HqnZXkq7h8jm051T4tOl/6mFtwld+Ngkc8zrHvWRprx9QGhODF+jtzkWtDYMji p11nj2qHCqYeAbvxk7fGUWXqDzVxeaB+QiUz7qc20QmPnCyL8rjFTJIm8nI4XgiF eGudxhOxzZIh+gAtaC5Wp+PFZhrrfN/7HwZryWlzix/GF5rPB0Y= -----END CERTIFICATE-----Generated at Fri Jul 24 12:42:09 2026 by rpki-client