$ rpki-client -vvf rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft File: 1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft (raw, json) Hash identifier: vjY1kNx1SLwYkgIRmDx5FQrsziDiLDIaM1k+FxhdPqk= Subject key identifier: DF:EF:9E:24:81:54:2F:BF:42:29:FB:72:B6:99:68:2D:8E:B8:5E:21 Authority key identifier: 1F:CD:6F:60:80:68:A5:6B:2B:A5:CA:D5:58:95:12:D2:1D:98:2F:DC Certificate issuer: /CN=1FCD6F608068A56B2BA5CAD5589512D21D982FDC Certificate serial: 2687EAD6077EE303F62D5D54818E214D8EAD7A1A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:00:38 +0000 Manifest this update: Thu 23 Jul 2026 20:55:38 +0000 Manifest next update: Fri 24 Jul 2026 21:10:38 +0000 Files and hashes: 1: 1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl (hash: VfmMIwCf+olivZvMrPSsBiKrvfoVa9/qtsS5DfZcv/s=) 2: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: NOyjBT0zFszgxATvStbBfl8IjAdIOfkN8ppEqeVA78E=) 3: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: b/v/p4XXRhwRyIRQmWyoUAD/7oSBMCFky65Xuz73r7o=) 4: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: YhKAzrow8fDAadjaSnduhgqC89vTvIB1S39dbE3C1og=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:87:ea:d6:07:7e:e3:03:f6:2d:5d:54:81:8e:21:4d:8e:ad:7a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD6F608068A56B2BA5CAD5589512D21D982FDC Validity Not Before: Jul 23 20:55:38 2026 GMT Not After : Jul 24 21:10:38 2026 GMT Subject: CN=DFEF9E2481542FBF4229FB72B699682D8EB85E21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:66:c8:88:bd:44:e8:32:a4:12:8c:7a:75: 2f:4b:97:27:ff:d6:d7:f5:28:ec:2d:b0:a7:37:c2: a4:b1:af:ce:50:af:7a:13:d5:4c:e8:00:99:f1:6d: 78:e5:36:27:2f:ce:27:23:f8:0a:07:a0:29:88:34: a7:3e:6e:9f:69:35:64:37:39:b8:57:23:43:70:8f: eb:88:52:2a:61:0e:b4:98:a9:6e:1a:64:e7:7f:ec: d9:e6:d4:84:e7:05:a2:c9:92:8a:71:3a:48:21:4e: 30:d8:75:e9:03:25:b0:58:0d:f6:fa:73:f2:0a:d1: 21:dc:0b:40:96:22:c7:1b:2e:43:22:46:a8:b1:5a: 52:67:35:9e:49:94:45:e5:7d:2b:af:8a:23:4b:f0: f2:50:f0:1a:d2:c2:ad:f4:44:32:6b:e5:48:6f:66: 4a:a7:38:36:f7:61:52:2c:d1:cc:26:2c:ff:60:74: 9b:78:89:e5:f6:1d:71:fd:d6:32:45:fd:11:9d:bd: 80:3c:03:14:f7:1b:fa:c9:09:ba:17:4b:9d:60:4a: 24:bf:84:76:08:20:82:15:83:c7:c2:1a:83:76:5a: 65:fa:61:51:8b:28:bb:c0:ad:7e:80:3f:bb:31:92: e1:5f:4c:98:4d:36:7a:74:96:a4:0e:9c:f2:d8:9a: 3a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EF:9E:24:81:54:2F:BF:42:29:FB:72:B6:99:68:2D:8E:B8:5E:21 X509v3 Authority Key Identifier: keyid:1F:CD:6F:60:80:68:A5:6B:2B:A5:CA:D5:58:95:12:D2:1D:98:2F:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:12:c9:4a:c2:ce:b5:23:a2:ba:7a:96:dc:ae:78:79:ae:05: 83:37:87:dd:e6:e3:d2:91:e5:19:7d:d0:5f:bf:52:a8:ef:fd: 6e:9a:83:6c:c8:ba:78:a8:40:89:e6:93:be:ea:53:cc:e7:60: 50:0e:81:b2:db:76:8a:fb:3e:37:8c:cb:a2:9c:11:ff:82:93: 8d:86:4c:dc:9f:10:25:eb:03:67:1f:13:86:7a:a9:14:65:c8: fb:b5:ba:98:07:f3:d0:80:58:8a:be:36:b8:9f:5c:22:82:9c: 83:69:47:a0:f8:68:d2:a6:e8:b8:e0:3c:e5:cd:23:95:08:ec: 6b:3b:bd:e3:ac:2a:24:64:b0:2b:4e:93:e5:e1:31:5a:eb:ad: 9e:5f:56:01:64:ba:42:8c:2d:85:d9:bd:b6:60:d9:68:39:7b: 4f:bd:3d:d0:0d:72:77:ec:c0:e4:5a:53:a5:70:58:87:8f:42: f0:ba:20:0b:75:2e:93:f6:73:15:58:30:fa:16:5b:1b:22:10: f5:46:a5:52:cd:a9:29:40:41:f0:f3:39:fe:d4:f8:94:c2:27: e5:09:5f:37:bc:ee:a5:a1:df:e4:ee:8d:1f:b9:cd:d2:6f:17: 91:f5:c0:3f:20:80:d5:b2:42:a2:5f:7a:64:cb:c9:41:18:6a: 64:a7:37:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJofq1gd+4wP2LV1UgY4hTY6tehowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDZGNjA4MDY4QTU2QjJCQTVDQUQ1NTg5NTEyRDIx RDk4MkZEQzAeFw0yNjA3MjMyMDU1MzhaFw0yNjA3MjQyMTEwMzhaMDMxMTAvBgNV BAMTKERGRUY5RTI0ODE1NDJGQkY0MjI5RkI3MkI2OTk2ODJEOEVCODVFMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKvWbIiL1E6DKkEox6dS9Llyf/ 1tf1KOwtsKc3wqSxr85Qr3oT1UzoAJnxbXjlNicvzicj+AoHoCmINKc+bp9pNWQ3 ObhXI0Nwj+uIUiphDrSYqW4aZOd/7Nnm1ITnBaLJkopxOkghTjDYdekDJbBYDfb6 c/IK0SHcC0CWIscbLkMiRqixWlJnNZ5JlEXlfSuviiNL8PJQ8BrSwq30RDJr5Uhv ZkqnODb3YVIs0cwmLP9gdJt4ieX2HXH91jJF/RGdvYA8AxT3G/rJCboXS51gSiS/ hHYIIIIVg8fCGoN2WmX6YVGLKLvArX6AP7sxkuFfTJhNNnp0lqQOnPLYmjqrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3++eJIFUL79CKftytploLY64XiEwHwYDVR0j BBgwFoAUH81vYIBopWsrpcrVWJUS0h2YL9wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njc1MmIzYzItM2YzMC00MDQwLThiMDUtODM4MjE3NzcwNDhmLzAvMUZDRDZGNjA4 MDY4QTU2QjJCQTVDQUQ1NTg5NTEyRDIxRDk4MkZEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRkNENkY2MDgwNjhBNTZCMkJBNUNBRDU1ODk1MTJEMjFEOTgy RkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjc1MmIzYzItM2YzMC00MDQwLThi MDUtODM4MjE3NzcwNDhmLzAvMUZDRDZGNjA4MDY4QTU2QjJCQTVDQUQ1NTg5NTEy RDIxRDk4MkZEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4SyUrCzrUjorp6ltyueHmuBYM3h93m49KR 5Rl90F+/Uqjv/W6ag2zIunioQInmk77qU8znYFAOgbLbdor7PjeMy6KcEf+Ck42G TNyfECXrA2cfE4Z6qRRlyPu1upgH89CAWIq+NrifXCKCnINpR6D4aNKm6LjgPOXN I5UI7Gs7veOsKiRksCtOk+XhMVrrrZ5fVgFkukKMLYXZvbZg2Wg5e0+9PdANcnfs wORaU6VwWIePQvC6IAt1LpP2cxVYMPoWWxsiEPVGpVLNqSlAQfDzOf7U+JTCJ+UJ Xze87qWh3+TujR+5zdJvF5H1wD8ggNWyQqJfemTLyUEYamSnN5s= -----END CERTIFICATE-----Generated at Fri Jul 24 04:16:53 2026 by rpki-client