$ rpki-client -vvf rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft File: A100A99332CE78931B9E02D4EFEE6712B81443A5.mft (raw, json) Hash identifier: JDYrdd8gAFHeGpwWz7StegoMnAKZjfLGSrNfqWcUf6Y= Subject key identifier: 23:C0:EA:40:6E:DE:F7:FE:14:E0:8D:F9:8B:B2:DD:FF:9E:90:6D:A4 Authority key identifier: A1:00:A9:93:32:CE:78:93:1B:9E:02:D4:EF:EE:67:12:B8:14:43:A5 Certificate issuer: /CN=A100A99332CE78931B9E02D4EFEE6712B81443A5 Certificate serial: 0CC19410B631D07A4AB5E314EE04822369B0B7C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 12:35:29 +0000 Manifest this update: Thu 23 Jul 2026 12:30:29 +0000 Manifest next update: Fri 24 Jul 2026 15:47:29 +0000 Files and hashes: 1: 3130332e32362e3139312e302f32342d3234203d3e20313530323639.roa (hash: ZcmU1/1tmDS14EVy1azjLSMcCXj3VjCECbts/S2roW8=) 2: 3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (hash: heQq7HcquDyrw94B2s2im1ZCA88nQvwu0Cy2cBDthxc=) 3: 3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (hash: DTmwpednkI6HsiidwVpKHLiGYfMBV1fbHQp1IFSmAn0=) 4: A100A99332CE78931B9E02D4EFEE6712B81443A5.crl (hash: biYbtiioxPKFcnm3xll3dn0r3BLC1R0P8bdnQ97wiT4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.crl rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c1:94:10:b6:31:d0:7a:4a:b5:e3:14:ee:04:82:23:69:b0:b7:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A100A99332CE78931B9E02D4EFEE6712B81443A5 Validity Not Before: Jul 23 12:30:29 2026 GMT Not After : Jul 24 15:47:29 2026 GMT Subject: CN=23C0EA406EDEF7FE14E08DF98BB2DDFF9E906DA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:94:50:14:7d:66:d2:eb:7a:ab:03:4f:b3: 27:e4:40:b6:b7:01:02:7f:e1:2f:5c:64:10:0f:74: 5c:ba:29:07:1c:dd:0e:4c:ee:68:29:b8:d7:3f:f5: 30:a8:f7:f0:4f:bf:a6:8f:b9:b9:af:d2:f2:9c:e4: d6:b8:62:db:62:6d:f8:d3:1f:6f:a5:e0:aa:08:61: 69:58:0e:c2:1d:1b:b1:6a:78:ba:ef:29:3a:1d:dc: fe:0d:58:45:e0:6a:3c:f8:ae:9b:01:fe:f7:b5:c1: 44:c0:b6:f2:0a:c8:ea:cb:66:f6:36:aa:33:04:f7: 97:e2:8b:27:86:ce:e3:18:1f:c2:dc:cc:6c:5a:75: 0c:dc:32:84:00:0e:12:bb:9d:80:db:08:10:a1:e2: 3d:b9:65:bf:50:cc:f0:8f:dd:11:0c:7b:2e:b4:b7: 67:ab:d9:e4:53:1a:0d:80:f1:94:45:39:1b:63:da: a4:0f:80:3f:37:ee:70:22:4f:fb:5e:bc:60:05:14: 2e:c3:27:cf:cf:06:8f:85:b1:c1:5e:a4:67:5f:e8: 55:b4:b8:30:47:79:d1:a6:24:6c:7d:a3:bf:33:5f: b4:35:4b:b8:09:25:06:e5:20:57:aa:dc:93:25:27: b4:d0:df:92:6d:20:73:0f:ad:55:f8:e9:4d:d7:5d: a0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C0:EA:40:6E:DE:F7:FE:14:E0:8D:F9:8B:B2:DD:FF:9E:90:6D:A4 X509v3 Authority Key Identifier: keyid:A1:00:A9:93:32:CE:78:93:1B:9E:02:D4:EF:EE:67:12:B8:14:43:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:98:c4:0b:b6:0c:27:1e:b2:04:84:15:63:07:99:0e:85:22: a6:21:37:b4:db:de:8d:d8:de:30:2c:db:35:9d:37:f5:cd:54: de:6a:75:11:ca:7d:a7:05:45:13:41:a8:bc:d1:0e:e0:60:f2: af:6b:4e:d9:e9:0d:10:39:b8:1b:3e:00:4a:e3:05:8f:54:f9: 9d:66:33:86:e5:dc:ab:a7:53:00:dc:3b:fb:8e:a5:c5:d0:b7: 61:0b:49:7e:8b:b8:89:6a:e3:5c:2c:1b:12:d8:a1:78:d6:08: c0:6e:ef:5b:a1:b0:9c:9f:37:9b:70:35:36:3f:41:28:84:8a: 50:82:9c:94:65:18:8f:f2:75:49:24:b3:07:2b:11:8c:a0:c5: a1:2d:6c:a4:8b:65:17:0d:5b:a9:0b:98:0e:75:01:8f:37:4d: 88:c5:a9:78:95:ea:5d:b5:21:f9:9b:07:d2:a6:45:db:67:a3: c8:a8:49:c3:15:d7:a3:cb:e6:b3:52:90:73:98:70:52:59:28: 0d:bc:e3:39:de:91:ec:55:2e:d7:98:60:58:05:57:99:d8:64: ce:b0:1a:f8:64:e8:63:cc:22:c0:ac:a1:7c:c9:2c:a2:94:7a: 9a:06:7b:ec:b6:02:bc:43:16:06:06:5e:89:c8:b7:78:43:07: 93:7e:39:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDMGUELYx0HpKteMU7gSCI2mwt8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTEwMEE5OTMzMkNFNzg5MzFCOUUwMkQ0RUZFRTY3MTJC ODE0NDNBNTAeFw0yNjA3MjMxMjMwMjlaFw0yNjA3MjQxNTQ3MjlaMDMxMTAvBgNV BAMTKDIzQzBFQTQwNkVERUY3RkUxNEUwOERGOThCQjJEREZGOUU5MDZEQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6O5RQFH1m0ut6qwNPsyfkQLa3 AQJ/4S9cZBAPdFy6KQcc3Q5M7mgpuNc/9TCo9/BPv6aPubmv0vKc5Na4YttibfjT H2+l4KoIYWlYDsIdG7FqeLrvKTod3P4NWEXgajz4rpsB/ve1wUTAtvIKyOrLZvY2 qjME95fiiyeGzuMYH8LczGxadQzcMoQADhK7nYDbCBCh4j25Zb9QzPCP3REMey60 t2er2eRTGg2A8ZRFORtj2qQPgD837nAiT/tevGAFFC7DJ8/PBo+FscFepGdf6FW0 uDBHedGmJGx9o78zX7Q1S7gJJQblIFeq3JMlJ7TQ35JtIHMPrVX46U3XXaBDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI8DqQG7e9/4U4I35i7Ld/56QbaQwHwYDVR0j BBgwFoAUoQCpkzLOeJMbngLU7+5nErgUQ6UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjY5MjZjODItYzhlNS00Zjk3LTg5OTQtMmM0MDY1MzgxN2NlLzAvQTEwMEE5OTMz MkNFNzg5MzFCOUUwMkQ0RUZFRTY3MTJCODE0NDNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTAwQTk5MzMyQ0U3ODkzMUI5RTAyRDRFRkVFNjcxMkI4MTQ0 M0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjY5MjZjODItYzhlNS00Zjk3LTg5 OTQtMmM0MDY1MzgxN2NlLzAvQTEwMEE5OTMzMkNFNzg5MzFCOUUwMkQ0RUZFRTY3 MTJCODE0NDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWYxAu2DCcesgSEFWMHmQ6FIqYhN7Tb3o3Y 3jAs2zWdN/XNVN5qdRHKfacFRRNBqLzRDuBg8q9rTtnpDRA5uBs+AErjBY9U+Z1m M4bl3KunUwDcO/uOpcXQt2ELSX6LuIlq41wsGxLYoXjWCMBu71uhsJyfN5twNTY/ QSiEilCCnJRlGI/ydUkkswcrEYygxaEtbKSLZRcNW6kLmA51AY83TYjFqXiV6l21 IfmbB9KmRdtno8ioScMV16PL5rNSkHOYcFJZKA284znekexVLteYYFgFV5nYZM6w Gvhk6GPMIsCsoXzJLKKUepoGe+y2ArxDFgYGXonIt3hDB5N+OUE= -----END CERTIFICATE-----Generated at Fri Jul 24 05:50:14 2026 by rpki-client