$ rpki-client -vvf rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft File: 84122DA5B146979D5AAE13129EB677B96C49C7F6.mft (raw, json) Hash identifier: oJHBlfycKytvtEVWU17E48BD33Yb6x9P/fQ+rSPZQ8k= Subject key identifier: 8F:C8:DA:8D:48:5F:FA:F4:2D:81:33:31:FF:57:80:C0:20:16:87:E2 Authority key identifier: 84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6 Certificate issuer: /CN=84122DA5B146979D5AAE13129EB677B96C49C7F6 Certificate serial: 5D7B449F0E303B867875677774718EF834103ECC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 20:45:15 +0000 Manifest this update: Thu 23 Jul 2026 20:40:15 +0000 Manifest next update: Fri 24 Jul 2026 20:45:15 +0000 Files and hashes: 1: 323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (hash: jhYHGOtLAWmv9OcO3/5rDKvnFPZl5OTObgAsQoi8r50=) 2: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: u+tKwHgjMKGgdgEnZPp2mwsftX+fJPIHxzdML3oWuA4=) 3: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: LWJq/XJLjGCHAx0PdP5FSd33v0EqmvbG5/RZUAKgCgs=) 4: 84122DA5B146979D5AAE13129EB677B96C49C7F6.crl (hash: djeOnJ6j8l2a0OHdI3OGGkCmtGag1Kylqk7qSEQ+Cl0=) 5: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: LXKwnzjsakvh6k668BXuaYJ1O5iQ9reQNkhpZI7YDu8=) 6: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: fHid8e/HPZhTBqkYcMs+Y715ZVlDl6RBBe2DwEnsBPc=) 7: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: 2a7WLuRJ0dxekwgo8okkZl2guEN5PE3JgGMBxaSTXY4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:7b:44:9f:0e:30:3b:86:78:75:67:77:74:71:8e:f8:34:10:3e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84122DA5B146979D5AAE13129EB677B96C49C7F6 Validity Not Before: Jul 23 20:40:15 2026 GMT Not After : Jul 24 20:45:15 2026 GMT Subject: CN=8FC8DA8D485FFAF42D813331FF5780C0201687E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ba:f3:59:96:f0:91:91:2b:04:fb:24:25:ee: 70:70:a6:69:a4:4e:06:dd:04:84:65:d9:25:e0:bf: fb:3f:3a:23:ef:a4:d2:75:36:f3:21:b2:44:f5:f5: c9:ce:19:c4:e7:cc:0f:8c:4a:58:e7:50:4b:00:1f: f0:96:0a:47:d0:d6:ae:4e:36:49:9a:dc:ee:83:0e: 0f:41:97:b7:4a:06:e2:04:49:c4:63:69:1e:b5:fd: 18:fc:3e:c4:ef:f8:21:1a:e3:88:7d:83:c7:8c:1b: e3:fa:4e:20:07:ce:9c:a5:4e:77:18:13:de:ef:a4: fd:62:1d:90:05:ed:ec:c5:e1:bf:a3:5c:96:69:93: dc:c0:b6:d2:fd:85:b7:11:39:e4:14:1d:38:e5:cb: b3:6d:f8:82:21:a4:01:3c:a9:4d:c5:37:11:7e:12: 39:ad:ef:21:e6:71:93:77:d5:26:82:fd:5b:8b:31: f3:8d:29:ea:ef:00:26:7f:d5:43:9e:9c:d7:cc:8e: f1:b8:73:1f:3a:da:fe:70:e8:6a:8b:99:a0:4d:1a: ae:ea:da:8c:c2:e2:8a:da:77:ad:33:eb:3b:e2:ae: 37:cd:5a:b8:43:86:cb:bb:e2:27:53:13:60:cf:23: 12:6e:d8:08:fc:87:eb:83:62:b0:fc:bb:7b:e9:12: ce:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C8:DA:8D:48:5F:FA:F4:2D:81:33:31:FF:57:80:C0:20:16:87:E2 X509v3 Authority Key Identifier: keyid:84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c9:e9:ae:4c:9d:f6:6d:e6:e4:4f:0a:62:05:6f:02:a6:84: ea:ec:01:a9:e8:3a:3b:62:cf:fd:ae:d6:2d:d7:7d:97:4e:4e: f7:f7:ad:22:2d:ea:72:2d:02:e3:72:8d:4b:49:4a:cb:5a:f1: 0c:0a:8f:d9:32:40:3c:f2:65:0b:0d:ac:e3:e3:03:4c:21:82: 97:37:a9:10:d0:39:19:c4:e0:86:a7:43:ff:75:14:75:db:50: fd:f3:83:cf:d8:0a:a3:9e:87:79:c3:d8:b8:f3:5a:be:82:69: e9:7b:69:ea:bc:d4:a2:3e:0d:d4:b2:96:4b:d4:81:83:f8:4a: 54:88:64:d1:bf:0d:be:b0:86:ca:8b:b0:7d:d4:e8:6d:2c:17: 7c:4f:ad:d3:06:c2:d6:72:56:e6:c1:25:8c:fc:c6:14:a9:33: e9:5b:78:20:d7:18:d9:94:49:2b:af:94:37:8f:c9:d1:5e:1b: c5:2d:74:3b:b0:68:32:fe:33:fc:16:51:38:57:fb:54:7e:6e: 89:d4:e6:d4:b9:31:a5:ae:35:5d:a8:b0:a7:3f:0a:3d:f1:21: c7:48:73:44:d1:eb:90:d6:85:bf:8b:c9:43:ae:67:4c:0a:ea: 20:59:16:f7:17:65:9a:81:3f:65:2a:0c:d7:76:65:a5:8a:ea: 38:2e:8e:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXXtEnw4wO4Z4dWd3dHGO+DQQPswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQxMjJEQTVCMTQ2OTc5RDVBQUUxMzEyOUVCNjc3Qjk2 QzQ5QzdGNjAeFw0yNjA3MjMyMDQwMTVaFw0yNjA3MjQyMDQ1MTVaMDMxMTAvBgNV BAMTKDhGQzhEQThENDg1RkZBRjQyRDgxMzMzMUZGNTc4MEMwMjAxNjg3RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDauvNZlvCRkSsE+yQl7nBwpmmk TgbdBIRl2SXgv/s/OiPvpNJ1NvMhskT19cnOGcTnzA+MSljnUEsAH/CWCkfQ1q5O Nkma3O6DDg9Bl7dKBuIEScRjaR61/Rj8PsTv+CEa44h9g8eMG+P6TiAHzpylTncY E97vpP1iHZAF7ezF4b+jXJZpk9zAttL9hbcROeQUHTjly7Nt+IIhpAE8qU3FNxF+ Ejmt7yHmcZN31SaC/VuLMfONKervACZ/1UOenNfMjvG4cx862v5w6GqLmaBNGq7q 2ozC4orad60z6zvirjfNWrhDhsu74idTE2DPIxJu2Aj8h+uDYrD8u3vpEs43AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj8jajUhf+vQtgTMx/1eAwCAWh+IwHwYDVR0j BBgwFoAUhBItpbFGl51arhMSnrZ3uWxJx/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWY4NmIxMmUtZTU3NC00MjZiLWFhNmItNDkzOWUzYjAzMGJhLzAvODQxMjJEQTVC MTQ2OTc5RDVBQUUxMzEyOUVCNjc3Qjk2QzQ5QzdGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDEyMkRBNUIxNDY5NzlENUFBRTEzMTI5RUI2NzdCOTZDNDlD N0Y2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWY4NmIxMmUtZTU3NC00MjZiLWFh NmItNDkzOWUzYjAzMGJhLzAvODQxMjJEQTVCMTQ2OTc5RDVBQUUxMzEyOUVCNjc3 Qjk2QzQ5QzdGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrJ6a5MnfZt5uRPCmIFbwKmhOrsAanoOjti z/2u1i3XfZdOTvf3rSIt6nItAuNyjUtJSsta8QwKj9kyQDzyZQsNrOPjA0whgpc3 qRDQORnE4IanQ/91FHXbUP3zg8/YCqOeh3nD2LjzWr6Cael7aeq81KI+DdSylkvU gYP4SlSIZNG/Db6whsqLsH3U6G0sF3xPrdMGwtZyVubBJYz8xhSpM+lbeCDXGNmU SSuvlDePydFeG8UtdDuwaDL+M/wWUThX+1R+bonU5tS5MaWuNV2osKc/Cj3xIcdI c0TR65DWhb+LyUOuZ0wK6iBZFvcXZZqBP2UqDNd2ZaWK6jgujvY= -----END CERTIFICATE-----Generated at Fri Jul 24 02:38:52 2026 by rpki-client