$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft File: C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft (raw, json) Hash identifier: ENP1b+rI9SqlP4rp+FX3g+ZYm93uTgpBxmZUCRnjzWU= Subject key identifier: FC:23:D8:03:5D:B1:F9:20:E3:F7:4C:BF:0D:8E:87:7C:5D:EC:24:D9 Authority key identifier: C8:58:99:9B:CD:42:FD:A1:90:70:35:25:FA:3D:B0:03:6E:F8:DC:4B Certificate issuer: /CN=C858999BCD42FDA190703525FA3DB0036EF8DC4B Certificate serial: 2885106C8D6367A275F4F5F6BAC35D133C1FF363 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft Manifest number: 6D Signing time: Fri 24 Jul 2026 01:20:51 +0000 Manifest this update: Fri 24 Jul 2026 01:15:51 +0000 Manifest next update: Sat 25 Jul 2026 05:11:51 +0000 Files and hashes: 1: C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl (hash: Bd1cjhz6iz15w7DKfYexLF2T1QR1mQijie/iepkB+Js=) 2: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: q3yJjhYDYiQshTjZtvHBXc0EumicuvHb+zQLM8AeoEQ=) 3: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: fWxyuXffWj1jqvHAsWNRbofSjd5DXyF8+uTLX0AR1zI=) 4: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: XztwHCHvbhSLiUv5Dcefs2qJFPWKrlIiunIE1+CwfUw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 05:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:85:10:6c:8d:63:67:a2:75:f4:f5:f6:ba:c3:5d:13:3c:1f:f3:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C858999BCD42FDA190703525FA3DB0036EF8DC4B Validity Not Before: Jul 24 01:15:51 2026 GMT Not After : Jul 25 05:11:51 2026 GMT Subject: CN=FC23D8035DB1F920E3F74CBF0D8E877C5DEC24D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:48:84:14:2c:8c:63:27:7c:d9:df:b3:91:2c: 29:b4:9a:a7:39:1f:de:0f:80:95:00:a0:b5:8c:2e: 13:36:65:4c:7f:1b:4c:8a:91:68:08:b0:e2:38:51: 4e:df:9c:5d:b1:59:cd:12:03:5f:b2:ad:4b:00:b0: a0:ce:30:c4:df:43:a0:82:95:22:1a:dc:63:35:79: 53:f8:dc:3c:1d:76:4c:90:80:f1:4b:d2:05:b0:72: 6f:c9:60:ea:5e:5a:04:7d:e0:e7:e2:ef:94:5d:87: 2b:a5:d1:3f:0d:8d:a6:93:ff:f6:b5:14:69:4c:f4: 68:af:83:89:b1:dc:1b:e3:c6:52:95:fd:ad:1d:34: 4c:eb:52:3e:92:70:57:5e:70:ac:6f:ef:f6:7d:85: 98:ca:25:40:f2:95:c7:22:ee:cf:e6:23:59:57:2f: d2:b7:ad:98:cd:5e:ab:7b:79:aa:2c:63:02:06:e5: 1d:82:85:16:5d:70:48:0f:50:57:f8:08:17:01:59: c6:7b:ce:48:0b:8a:7e:99:dd:cf:3b:93:fd:16:4a: 06:cd:f5:f8:7c:b5:c7:5e:91:89:14:8b:7c:39:df: e1:3a:84:70:34:fd:a3:7e:93:ff:f1:eb:e4:1d:d9: 90:7a:de:a8:53:67:3b:fb:cb:31:0f:ea:4a:b1:db: 86:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:23:D8:03:5D:B1:F9:20:E3:F7:4C:BF:0D:8E:87:7C:5D:EC:24:D9 X509v3 Authority Key Identifier: keyid:C8:58:99:9B:CD:42:FD:A1:90:70:35:25:FA:3D:B0:03:6E:F8:DC:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:39:de:a1:94:4d:14:e7:17:5c:c1:2d:9f:51:e1:50:30:0a: 76:11:43:55:5a:a0:74:1e:3c:f0:96:38:be:66:c8:32:e7:88: 10:24:4a:7b:c5:29:e1:2e:f0:35:d7:a1:61:7d:48:e1:6a:24: 58:55:2e:d1:d4:00:d3:75:ea:4c:2d:05:db:24:6b:69:7d:78: f8:a3:b1:4a:dd:2c:9e:b6:f5:6f:69:f9:7e:cd:f0:18:71:87: cb:77:b0:bd:33:a8:48:a5:e2:47:96:b1:be:bb:c5:ee:54:24: 9c:7f:61:db:37:8a:18:a9:31:cc:49:b2:13:c3:28:d5:ed:dc: bb:a8:ab:0f:0a:5b:1c:64:95:df:4d:88:bf:fd:8b:9a:1b:d9: 04:e7:2c:11:19:a0:d2:80:2b:30:f0:03:17:a5:ef:27:bc:9e: b5:b2:f3:12:d0:ce:bc:53:26:4e:1f:5f:04:0d:d3:c6:6e:e8: a3:fb:04:85:ae:a5:3f:2b:bb:07:58:c8:b1:5b:b0:bb:f4:95: 8d:cc:3d:b2:ec:6d:a7:23:64:92:81:96:f8:05:1b:87:ac:6d: 19:75:2d:70:bb:18:83:b4:1b:55:75:f4:e7:59:05:56:56:59: d6:96:f2:4c:d0:7e:93:e1:89:87:be:34:d8:8f:75:41:0b:67: e0:d9:2d:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKIUQbI1jZ6J19PX2usNdEzwf82MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1ODk5OUJDRDQyRkRBMTkwNzAzNTI1RkEzREIwMDM2 RUY4REM0QjAeFw0yNjA3MjQwMTE1NTFaFw0yNjA3MjUwNTExNTFaMDMxMTAvBgNV BAMTKEZDMjNEODAzNURCMUY5MjBFM0Y3NENCRjBEOEU4NzdDNURFQzI0RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYSIQULIxjJ3zZ37ORLCm0mqc5 H94PgJUAoLWMLhM2ZUx/G0yKkWgIsOI4UU7fnF2xWc0SA1+yrUsAsKDOMMTfQ6CC lSIa3GM1eVP43DwddkyQgPFL0gWwcm/JYOpeWgR94Ofi75Rdhyul0T8NjaaT//a1 FGlM9Givg4mx3BvjxlKV/a0dNEzrUj6ScFdecKxv7/Z9hZjKJUDylcci7s/mI1lX L9K3rZjNXqt7eaosYwIG5R2ChRZdcEgPUFf4CBcBWcZ7zkgLin6Z3c87k/0WSgbN 9fh8tcdekYkUi3w53+E6hHA0/aN+k//x6+Qd2ZB63qhTZzv7yzEP6kqx24ZpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/CPYA12x+SDj90y/DY6HfF3sJNkwHwYDVR0j BBgwFoAUyFiZm81C/aGQcDUl+j2wA2743EswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQwOTRkM2UtMDg5Yy00YzY4LTgwYTItNTZiNWNiZmMxMDNkLzAvQzg1ODk5OUJD RDQyRkRBMTkwNzAzNTI1RkEzREIwMDM2RUY4REM0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DODU4OTk5QkNENDJGREExOTA3MDM1MjVGQTNEQjAwMzZFRjhE QzRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQwOTRkM2UtMDg5Yy00YzY4LTgw YTItNTZiNWNiZmMxMDNkLzAvQzg1ODk5OUJDRDQyRkRBMTkwNzAzNTI1RkEzREIw MDM2RUY4REM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQ53qGUTRTnF1zBLZ9R4VAwCnYRQ1VaoHQe PPCWOL5myDLniBAkSnvFKeEu8DXXoWF9SOFqJFhVLtHUANN16kwtBdska2l9ePij sUrdLJ629W9p+X7N8Bhxh8t3sL0zqEil4keWsb67xe5UJJx/Yds3ihipMcxJshPD KNXt3Luoqw8KWxxkld9NiL/9i5ob2QTnLBEZoNKAKzDwAxel7ye8nrWy8xLQzrxT Jk4fXwQN08Zu6KP7BIWupT8ruwdYyLFbsLv0lY3MPbLsbacjZJKBlvgFG4esbRl1 LXC7GIO0G1V19OdZBVZWWdaW8kzQfpPhiYe+NNiPdUELZ+DZLYc= -----END CERTIFICATE-----Generated at Fri Jul 24 08:48:04 2026 by rpki-client