$ rpki-client -vvf rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft File: 06083035B4010CEC337EE26F5EA15A04DD209219.mft (raw, json) Hash identifier: eEknHyKeVttoger4S4DBWrh9GmfgHKX5gMm7DF22g1s= Subject key identifier: A7:64:85:0E:6A:B7:58:8D:9B:75:5A:64:2E:0C:72:89:AE:5A:AC:A4 Authority key identifier: 06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19 Certificate issuer: /CN=06083035B4010CEC337EE26F5EA15A04DD209219 Certificate serial: 0DCA0DA90894D181355E9EDF6B0119BC69741767 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 19:59:32 +0000 Manifest this update: Thu 23 Jul 2026 19:54:32 +0000 Manifest next update: Fri 24 Jul 2026 21:55:32 +0000 Files and hashes: 1: 323430343a366430303a3a2f33322d3438203d3e203435323934.roa (hash: hu61kA8y8+AVvATIk7KwJvKK9QvDhjlP6nmM1pXjVy4=) 2: 3130332e31392e3230382e302f32322d3234203d3e203435323934.roa (hash: PCIebsIX9snQ/16KTknT7n3JoWYoLSW34RbZ1h8yq10=) 3: 34352e36342e3235322e302f32322d3234203d3e203435323934.roa (hash: ziG1A6Oi8LeUJ0pFcFc03n/VrStN2lfnk92bw36q/aI=) 4: 3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa (hash: ILzJvkloOZdmChaklTC1z8yHQQ79CFcrInsypXVfRQY=) 5: 06083035B4010CEC337EE26F5EA15A04DD209219.crl (hash: XqoP/k14JrUIwdVyEtOeEdYAnEBhFt/aOVU1hNsZW20=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.crl rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:55:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ca:0d:a9:08:94:d1:81:35:5e:9e:df:6b:01:19:bc:69:74:17:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06083035B4010CEC337EE26F5EA15A04DD209219 Validity Not Before: Jul 23 19:54:32 2026 GMT Not After : Jul 24 21:55:32 2026 GMT Subject: CN=A764850E6AB7588D9B755A642E0C7289AE5AACA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a7:e0:a2:e3:de:a9:1b:a0:cc:67:f4:8e:6f: a0:73:41:01:11:f1:e2:53:1a:85:f2:79:d6:8d:b0: 54:5f:37:a5:8e:69:f2:12:16:69:0f:e9:65:a6:ec: 57:e5:90:c2:68:b7:ec:2c:78:c4:aa:16:49:c5:d9: 60:63:8b:b5:6e:a2:6c:7e:cc:36:35:d8:10:d1:10: 50:b1:64:11:79:b3:ef:be:a7:ab:b2:1a:4f:07:09: cf:ca:97:d3:ca:db:3a:71:9f:51:34:10:5e:b7:42: d0:9e:a4:53:dc:53:43:9c:68:71:ae:ec:21:fb:18: a1:ff:21:12:9a:45:20:4e:19:9d:dc:7b:40:22:e4: 01:f9:87:ac:7e:26:46:1a:8b:18:ec:fe:0e:ba:34: 32:ab:eb:ea:44:46:1c:dd:76:c0:ab:a9:f4:40:8d: 25:53:5d:77:f9:08:9b:bb:44:aa:3a:a1:f9:00:6a: f9:31:1b:02:81:24:d1:f7:2d:aa:02:26:81:06:af: 77:f4:0f:46:ee:ec:c6:8c:e6:ba:2b:94:0d:46:d9: 22:96:46:ea:b1:cb:9a:b4:bd:39:f0:20:23:cc:39: 96:65:e1:b4:94:9c:b2:6e:75:39:bc:1f:48:fc:6e: 6f:2b:f9:6a:54:d7:a1:ad:91:35:cd:98:66:72:a9: bc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:64:85:0E:6A:B7:58:8D:9B:75:5A:64:2E:0C:72:89:AE:5A:AC:A4 X509v3 Authority Key Identifier: keyid:06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:9a:ae:14:90:d7:fb:64:29:2d:4c:d7:70:43:03:c1:be:bb: ed:61:3e:14:b7:04:73:bb:16:3d:12:31:9f:15:f5:30:58:e8: 57:96:c9:55:f0:d3:f1:3c:71:b4:49:03:da:1d:da:1d:df:24: 44:aa:d3:b4:cd:91:5a:ea:ed:be:17:35:80:55:53:4c:12:79: d1:37:46:d9:d2:e3:92:7c:bc:e1:47:74:7e:b6:31:ca:23:51: bf:e4:00:19:1a:82:ed:10:4e:00:70:6d:50:d1:4e:5c:1b:cf: b5:4d:52:13:c2:b6:b9:4a:da:fd:c0:89:ff:d4:c8:7d:90:09: 95:7d:5d:87:2a:82:95:c7:9e:aa:30:f2:7d:1e:f0:69:c4:77: 19:16:1f:67:c1:00:03:31:e0:96:b0:5b:13:86:b7:2d:88:c2: b4:bf:ba:db:d6:00:57:85:a3:28:26:88:9f:8a:d1:34:24:8f: 5a:15:e9:d3:57:6e:ea:c7:e9:86:94:9b:01:0c:13:80:ee:b5: 58:38:a0:db:8c:b2:c2:c5:1b:aa:4d:21:3b:56:ec:d1:93:13: c1:4c:17:b1:f5:07:c1:fa:e6:7a:e8:0b:26:49:10:e8:4f:0c: c9:1c:e9:6c:49:ce:c3:05:c7:dc:5c:5c:60:e4:fc:4c:0f:be: 3f:9c:c8:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDcoNqQiU0YE1Xp7fawEZvGl0F2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYwODMwMzVCNDAxMENFQzMzN0VFMjZGNUVBMTVBMDRE RDIwOTIxOTAeFw0yNjA3MjMxOTU0MzJaFw0yNjA3MjQyMTU1MzJaMDMxMTAvBgNV BAMTKEE3NjQ4NTBFNkFCNzU4OEQ5Qjc1NUE2NDJFMEM3Mjg5QUU1QUFDQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtp+Ci496pG6DMZ/SOb6BzQQER 8eJTGoXyedaNsFRfN6WOafISFmkP6WWm7FflkMJot+wseMSqFknF2WBji7Vuomx+ zDY12BDREFCxZBF5s+++p6uyGk8HCc/Kl9PK2zpxn1E0EF63QtCepFPcU0OcaHGu 7CH7GKH/IRKaRSBOGZ3ce0Ai5AH5h6x+JkYaixjs/g66NDKr6+pERhzddsCrqfRA jSVTXXf5CJu7RKo6ofkAavkxGwKBJNH3LaoCJoEGr3f0D0bu7MaM5rorlA1G2SKW Ruqxy5q0vTnwICPMOZZl4bSUnLJudTm8H0j8bm8r+WpU16GtkTXNmGZyqby7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp2SFDmq3WI2bdVpkLgxyia5arKQwHwYDVR0j BBgwFoAUBggwNbQBDOwzfuJvXqFaBN0gkhkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQ4MzMwNzQtMzMwZS00YWFhLThjMDAtMDQwODkwYTcxYTExLzAvMDYwODMwMzVC NDAxMENFQzMzN0VFMjZGNUVBMTVBMDRERDIwOTIxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNjA4MzAzNUI0MDEwQ0VDMzM3RUUyNkY1RUExNUEwNEREMjA5 MjE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQ4MzMwNzQtMzMwZS00YWFhLThj MDAtMDQwODkwYTcxYTExLzAvMDYwODMwMzVCNDAxMENFQzMzN0VFMjZGNUVBMTVB MDRERDIwOTIxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6arhSQ1/tkKS1M13BDA8G+u+1hPhS3BHO7 Fj0SMZ8V9TBY6FeWyVXw0/E8cbRJA9od2h3fJESq07TNkVrq7b4XNYBVU0wSedE3 RtnS45J8vOFHdH62McojUb/kABkagu0QTgBwbVDRTlwbz7VNUhPCtrlK2v3Aif/U yH2QCZV9XYcqgpXHnqow8n0e8GnEdxkWH2fBAAMx4JawWxOGty2IwrS/utvWAFeF oygmiJ+K0TQkj1oV6dNXburH6YaUmwEME4DutVg4oNuMssLFG6pNITtW7NGTE8FM F7H1B8H65nroCyZJEOhPDMkc6WxJzsMFx9xcXGDk/EwPvj+cyGA= -----END CERTIFICATE-----Generated at Fri Jul 24 12:42:34 2026 by rpki-client