$ rpki-client -vvf rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft File: 883B1118323CCC5736EA818FCCFAFAA5F6346633.mft (raw, json) Hash identifier: Ax7/VlaJwUvVibZWN+tcUKSUEf7BOc2yhz2MVH7ujTY= Subject key identifier: 6C:D9:08:D8:2B:F2:AD:7F:23:0D:A5:7F:C1:FA:09:00:88:F7:3F:6C Authority key identifier: 88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33 Certificate issuer: /CN=883B1118323CCC5736EA818FCCFAFAA5F6346633 Certificate serial: 55482D05EA504D21B1488EF22650F8915BC557EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 15:49:19 +0000 Manifest this update: Thu 23 Jul 2026 15:44:19 +0000 Manifest next update: Fri 24 Jul 2026 18:02:19 +0000 Files and hashes: 1: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: mn881aCiRGLWWEDnawAxEXshps2FtIWZ7qkAUnFIOiE=) 2: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: bFOzzHMeNiibUnZ6L+hq8KLmZQjQupaRQAA5Pf20Elk=) 3: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: XRMjBNqHnY6+jz0gyEQDgptcLtfFhiyGtn8MtQxlV6s=) 4: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: cz+80lMPAlEnAUax/7iLVTXO0rUokGVs+fLA4W5hxnM=) 5: 883B1118323CCC5736EA818FCCFAFAA5F6346633.crl (hash: v/13dl57dQ0jVx3814BRtohp+gq4Ynuv7yo8kJaB52A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:48:2d:05:ea:50:4d:21:b1:48:8e:f2:26:50:f8:91:5b:c5:57:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883B1118323CCC5736EA818FCCFAFAA5F6346633 Validity Not Before: Jul 23 15:44:19 2026 GMT Not After : Jul 24 18:02:19 2026 GMT Subject: CN=6CD908D82BF2AD7F230DA57FC1FA090088F73F6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8e:e7:92:ba:86:53:f7:17:01:64:13:3b:ed: 66:41:66:2f:2e:de:ed:ef:bb:06:0f:48:f9:60:8b: 66:ed:b6:b2:1c:f7:1c:55:9a:e0:89:35:ff:2d:e6: 9e:6b:29:e5:ec:63:c5:21:02:bc:07:ef:42:b1:77: d2:d6:0e:59:30:54:20:71:5b:f0:89:a5:27:c4:e3: 13:f6:e9:d0:6c:80:a8:ec:2f:3f:65:55:61:0d:32: a4:56:37:a5:16:3d:ef:b0:40:b6:b2:60:7c:ac:dd: 9c:f3:28:8c:ae:f9:cd:e1:dd:57:e8:09:59:7e:cf: f9:95:c1:48:86:34:01:c1:6a:b7:5d:d9:d9:20:62: aa:21:44:af:60:75:21:b4:a8:5b:8b:b1:99:28:b4: 5b:73:7f:21:18:47:84:a5:ef:44:80:c1:c8:58:0e: 9e:f0:82:57:9e:1c:f5:6a:66:61:6f:d2:22:c9:4d: 7f:6d:76:b9:0a:42:cc:a4:06:26:23:a0:a5:7e:97: ea:0a:22:41:86:f0:95:4d:a5:e6:68:b2:10:cf:c3: c8:86:ee:35:b7:87:22:77:c3:b1:92:03:b3:0e:c7: bb:51:5a:bb:7b:8d:b9:cb:dc:2f:99:9a:62:64:03: 77:63:51:58:64:c9:38:07:a6:9c:e4:e7:df:51:f5: 16:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D9:08:D8:2B:F2:AD:7F:23:0D:A5:7F:C1:FA:09:00:88:F7:3F:6C X509v3 Authority Key Identifier: keyid:88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:d7:0d:d8:7b:b2:d7:b6:f4:20:fc:6f:e0:92:74:06:45:60: 18:0e:72:90:61:31:ec:e2:04:8a:f6:21:bd:8d:7e:fb:f8:a9: c8:ed:2a:57:60:27:a1:4f:c2:43:fd:76:02:af:1d:1d:0e:75: bf:ab:7d:96:4c:31:69:0d:2e:92:58:f6:93:2a:9f:04:d1:9f: 71:95:f7:94:40:16:66:ff:b3:86:d8:a9:79:c5:c8:ac:6f:40: de:02:34:56:65:cd:b7:fc:be:e2:85:49:60:07:46:19:63:50: 07:c1:b2:cb:c9:54:41:c7:a1:94:72:b2:57:c7:5c:0c:bc:c5: 9a:c7:d4:19:08:72:6e:ed:e7:e6:97:f0:76:1a:3d:58:08:1d: f1:13:43:94:af:14:e8:00:8a:7d:79:27:d9:ea:a1:78:76:4a: db:84:3c:5a:f8:da:8e:28:24:fb:0f:14:56:76:16:a4:04:3b: 6c:7b:64:db:ea:db:b4:be:5b:f0:5f:34:2b:60:d2:ab:3a:c3: 5d:25:e3:72:b4:a5:4a:ea:a8:0b:ff:82:3b:3b:3d:09:63:b5: 2b:68:d4:63:39:87:e0:58:f9:6b:0b:d5:c3:2c:4c:5e:a6:1d: 95:54:b7:e6:5d:ee:d6:57:fd:be:44:9c:4e:78:36:97:70:e0: 61:62:17:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVUgtBepQTSGxSI7yJlD4kVvFV+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgzQjExMTgzMjNDQ0M1NzM2RUE4MThGQ0NGQUZBQTVG NjM0NjYzMzAeFw0yNjA3MjMxNTQ0MTlaFw0yNjA3MjQxODAyMTlaMDMxMTAvBgNV BAMTKDZDRDkwOEQ4MkJGMkFEN0YyMzBEQTU3RkMxRkEwOTAwODhGNzNGNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYjueSuoZT9xcBZBM77WZBZi8u 3u3vuwYPSPlgi2bttrIc9xxVmuCJNf8t5p5rKeXsY8UhArwH70Kxd9LWDlkwVCBx W/CJpSfE4xP26dBsgKjsLz9lVWENMqRWN6UWPe+wQLayYHys3ZzzKIyu+c3h3Vfo CVl+z/mVwUiGNAHBardd2dkgYqohRK9gdSG0qFuLsZkotFtzfyEYR4Sl70SAwchY Dp7wgleeHPVqZmFv0iLJTX9tdrkKQsykBiYjoKV+l+oKIkGG8JVNpeZoshDPw8iG 7jW3hyJ3w7GSA7MOx7tRWrt7jbnL3C+ZmmJkA3djUVhkyTgHppzk599R9RZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbNkI2CvyrX8jDaV/wfoJAIj3P2wwHwYDVR0j BBgwFoAUiDsRGDI8zFc26oGPzPr6pfY0ZjMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWRhMzI5NjctZDU1OC00YTM0LWJlOGUtNjRlZjRjZmMwNGUzLzAvODgzQjExMTgz MjNDQ0M1NzM2RUE4MThGQ0NGQUZBQTVGNjM0NjYzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODNCMTExODMyM0NDQzU3MzZFQTgxOEZDQ0ZBRkFBNUY2MzQ2 NjMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvODgzQjExMTgzMjNDQ0M1NzM2RUE4MThGQ0NGQUZB QTVGNjM0NjYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMzXDdh7ste29CD8b+CSdAZFYBgOcpBhMezi BIr2Ib2Nfvv4qcjtKldgJ6FPwkP9dgKvHR0Odb+rfZZMMWkNLpJY9pMqnwTRn3GV 95RAFmb/s4bYqXnFyKxvQN4CNFZlzbf8vuKFSWAHRhljUAfBssvJVEHHoZRyslfH XAy8xZrH1BkIcm7t5+aX8HYaPVgIHfETQ5SvFOgAin15J9nqoXh2StuEPFr42o4o JPsPFFZ2FqQEO2x7ZNvq27S+W/BfNCtg0qs6w10l43K0pUrqqAv/gjs7PQljtSto 1GM5h+BY+WsL1cMsTF6mHZVUt+Zd7tZX/b5EnE54Npdw4GFiF8M= -----END CERTIFICATE-----Generated at Fri Jul 24 06:20:34 2026 by rpki-client