$ rpki-client -vvf rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft File: D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft (raw, json) Hash identifier: lrUAJkn6hJ9L/FjXFhNAOS6wNTXTMLU9qSxaXKpmDdk= Subject key identifier: 97:3A:92:94:6F:11:4B:7D:3B:61:82:7E:D6:58:41:B2:44:0C:D1:F8 Authority key identifier: D4:F6:C5:CD:98:62:9D:37:23:7B:4E:C9:89:58:EB:AC:92:78:00:A2 Certificate issuer: /CN=D4F6C5CD98629D37237B4EC98958EBAC927800A2 Certificate serial: 08D49D88DEAF3B852D49339B759CA347E5CD6357 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4F6C5CD98629D37237B4EC98958EBAC927800A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 22:57:52 +0000 Manifest this update: Thu 23 Jul 2026 22:52:52 +0000 Manifest next update: Sat 25 Jul 2026 01:36:52 +0000 Files and hashes: 1: 3130332e3136322e3130362e302f32332d3234203d3e20313431363533.roa (hash: PgyWI4yshXqNjgdCXVpkLlAnO45nUwUpbrwhDkW6kTc=) 2: D4F6C5CD98629D37237B4EC98958EBAC927800A2.crl (hash: lX4bXGDr/Uvgyb5HiDCKCnsCQVSiPT4wNjqEXikFym0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.crl rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4F6C5CD98629D37237B4EC98958EBAC927800A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:d4:9d:88:de:af:3b:85:2d:49:33:9b:75:9c:a3:47:e5:cd:63:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4F6C5CD98629D37237B4EC98958EBAC927800A2 Validity Not Before: Jul 23 22:52:52 2026 GMT Not After : Jul 25 01:36:52 2026 GMT Subject: CN=973A92946F114B7D3B61827ED65841B2440CD1F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:68:d5:b5:d0:ad:fc:2f:6d:a2:32:ab:09:29: e6:b7:f1:f4:0e:d2:cc:94:1b:90:a4:a8:f3:17:9d: d1:e1:e2:fe:c5:46:d6:0b:3e:be:e3:65:16:00:c7: 44:bf:76:c0:cd:d5:00:c7:e3:f3:22:f5:d1:fb:c8: 87:aa:82:b4:f8:d2:7a:98:d4:09:75:68:df:4a:94: b0:a1:d6:bd:60:58:4e:6c:7c:b3:a9:a7:d7:ba:61: 52:e1:48:c4:4c:38:3e:ab:27:e0:ca:bf:1f:b6:db: c8:cb:50:0f:17:41:9f:c8:6d:28:ee:c1:4e:6c:8a: 27:4f:c0:71:7a:fd:e7:5b:17:fb:3c:ef:09:6a:43: 95:84:ea:74:34:23:7a:19:f5:43:61:39:91:ca:f3: 33:65:d8:96:fe:90:16:1f:61:60:dc:41:44:7e:b0: 34:11:4e:d5:44:29:61:e1:85:19:d6:45:22:4f:9e: 22:1c:6d:e8:b2:aa:66:bc:aa:68:4f:61:d0:e2:f9: e1:96:d5:92:1d:9d:ca:59:d6:7d:3c:a3:09:2f:b3: 3e:6f:09:4d:95:5c:37:c5:1e:94:eb:68:c4:e8:38: 3e:35:44:b7:a8:50:99:9f:18:d5:33:ec:a4:77:40: 7b:a1:39:40:d3:52:08:71:d1:13:47:ef:d0:7b:1e: ff:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3A:92:94:6F:11:4B:7D:3B:61:82:7E:D6:58:41:B2:44:0C:D1:F8 X509v3 Authority Key Identifier: keyid:D4:F6:C5:CD:98:62:9D:37:23:7B:4E:C9:89:58:EB:AC:92:78:00:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4F6C5CD98629D37237B4EC98958EBAC927800A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:a9:6d:c9:85:dd:73:e0:93:66:62:d1:17:d1:e5:17:16:4d: 95:cc:e9:0a:7d:c9:56:dc:29:51:80:26:cb:a4:6b:49:81:f0: 4a:1f:22:8c:29:ac:ef:83:af:e2:e6:71:e8:74:4d:ab:88:13: 00:ab:16:79:cf:3e:4a:3b:f2:0e:e7:2d:53:e4:ca:c8:b7:6e: dc:0f:ab:41:d2:cd:b3:07:a1:ef:f0:eb:fc:02:17:cb:fc:de: a8:b9:bb:6d:19:17:88:3e:10:fe:bc:ec:f2:6b:7e:20:ed:a7: 91:d0:b9:88:7e:d2:c6:53:89:9e:8d:b6:51:dc:28:3e:8b:a5: a2:7a:7d:94:93:b9:4d:7f:ad:2c:a9:a3:b1:1a:c4:17:fe:62: c7:68:e8:3c:c5:eb:8a:b0:74:af:af:d7:37:48:0d:6b:10:4a: 54:1a:5d:97:f1:38:b8:ce:a8:9f:35:76:49:ec:00:12:93:9b: 86:1c:09:c3:e0:23:0a:af:8d:d2:8d:bc:dc:88:11:72:5a:5b: 3d:42:77:67:b9:87:3f:09:4b:9b:fc:cb:d1:4f:cd:c3:89:5b: 1c:15:a3:fd:26:83:bc:ef:04:d7:2a:13:81:5d:06:15:b5:01: 0f:9c:41:18:bd:f9:2b:b8:5b:fe:fe:00:c0:2e:70:c5:06:b4: 14:13:1b:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCNSdiN6vO4UtSTObdZyjR+XNY1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRGNkM1Q0Q5ODYyOUQzNzIzN0I0RUM5ODk1OEVCQUM5 Mjc4MDBBMjAeFw0yNjA3MjMyMjUyNTJaFw0yNjA3MjUwMTM2NTJaMDMxMTAvBgNV BAMTKDk3M0E5Mjk0NkYxMTRCN0QzQjYxODI3RUQ2NTg0MUIyNDQwQ0QxRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFaNW10K38L22iMqsJKea38fQO 0syUG5CkqPMXndHh4v7FRtYLPr7jZRYAx0S/dsDN1QDH4/Mi9dH7yIeqgrT40nqY 1Al1aN9KlLCh1r1gWE5sfLOpp9e6YVLhSMRMOD6rJ+DKvx+228jLUA8XQZ/IbSju wU5siidPwHF6/edbF/s87wlqQ5WE6nQ0I3oZ9UNhOZHK8zNl2Jb+kBYfYWDcQUR+ sDQRTtVEKWHhhRnWRSJPniIcbeiyqma8qmhPYdDi+eGW1ZIdncpZ1n08owkvsz5v CU2VXDfFHpTraMToOD41RLeoUJmfGNUz7KR3QHuhOUDTUghx0RNH79B7Hv93AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlzqSlG8RS307YYJ+1lhBskQM0fgwHwYDVR0j BBgwFoAU1PbFzZhinTcje07JiVjrrJJ4AKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjliYmU1YzAtNzllZC00NmZhLTg5ODktODhkOGFjYzg3Y2Y4LzAvRDRGNkM1Q0Q5 ODYyOUQzNzIzN0I0RUM5ODk1OEVCQUM5Mjc4MDBBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENEY2QzVDRDk4NjI5RDM3MjM3QjRFQzk4OTU4RUJBQzkyNzgw MEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjliYmU1YzAtNzllZC00NmZhLTg5 ODktODhkOGFjYzg3Y2Y4LzAvRDRGNkM1Q0Q5ODYyOUQzNzIzN0I0RUM5ODk1OEVC QUM5Mjc4MDBBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWpbcmF3XPgk2Zi0RfR5RcWTZXM6Qp9yVbc KVGAJsuka0mB8EofIowprO+Dr+Lmceh0TauIEwCrFnnPPko78g7nLVPkysi3btwP q0HSzbMHoe/w6/wCF8v83qi5u20ZF4g+EP687PJrfiDtp5HQuYh+0sZTiZ6NtlHc KD6LpaJ6fZSTuU1/rSypo7EaxBf+Ysdo6DzF64qwdK+v1zdIDWsQSlQaXZfxOLjO qJ81dknsABKTm4YcCcPgIwqvjdKNvNyIEXJaWz1Cd2e5hz8JS5v8y9FPzcOJWxwV o/0mg7zvBNcqE4FdBhW1AQ+cQRi9+Su4W/7+AMAucMUGtBQTG2Y= -----END CERTIFICATE-----Generated at Fri Jul 24 02:43:16 2026 by rpki-client