$ rpki-client -vvf rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft File: CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft (raw, json) Hash identifier: 7dOucDvsU3GdsAuCtKlBKF2dZ/c+K1psguAfn2Kr6nc= Subject key identifier: 91:B2:F1:39:26:13:27:58:DA:1A:45:4C:3A:15:2C:89:A7:9F:F6:24 Authority key identifier: CD:6A:ED:B0:29:FA:32:09:D5:BA:70:46:B7:B8:F5:24:75:FC:C1:0D Certificate issuer: /CN=CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D Certificate serial: 36A161545711CDB714534D6EBA5E3C661FE625BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 16:04:29 +0000 Manifest this update: Thu 23 Jul 2026 15:59:29 +0000 Manifest next update: Fri 24 Jul 2026 16:25:29 +0000 Files and hashes: 1: CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl (hash: eeFFJsRMiOgU3RWY4Ooj50mUon3W5qbOozbTjJobTrA=) 2: 3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa (hash: Z37bpImhHNs5LLivIYF8tbbP1TZLCfEz4nG3CbpQ6v0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:a1:61:54:57:11:cd:b7:14:53:4d:6e:ba:5e:3c:66:1f:e6:25:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D Validity Not Before: Jul 23 15:59:29 2026 GMT Not After : Jul 24 16:25:29 2026 GMT Subject: CN=91B2F13926132758DA1A454C3A152C89A79FF624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f8:2b:9b:f6:1a:1b:43:3b:cd:72:f2:02:8c: ba:a3:55:bc:c7:b8:91:fb:e2:a2:40:77:05:af:0c: e5:6a:8b:f6:5d:ac:80:79:21:84:37:ee:e6:ee:28: 0f:a3:7f:29:78:6d:c4:9d:24:79:93:38:ca:48:ac: 6f:32:ae:69:0d:9f:13:bc:50:18:44:f3:32:76:c6: 36:8b:1a:9a:4d:b4:fe:1d:df:83:7c:49:61:2f:ce: 0f:72:a2:fc:b1:69:68:36:b7:b8:1e:3a:54:88:91: 71:78:58:cb:c1:f8:29:ee:36:3c:99:86:7c:01:02: d3:02:36:6b:80:d0:6a:af:10:e2:cb:54:0f:a4:33: 94:fd:1a:9d:1c:28:61:f2:ee:4c:76:a7:52:f2:2b: 6a:77:f0:7c:53:6a:fb:96:2e:05:52:ea:2c:8b:6c: 20:79:8b:d7:19:57:53:0a:c7:81:f0:cf:2d:dd:34: 7f:12:8b:89:47:1a:33:e8:dd:d5:95:8a:0c:03:de: 05:94:58:56:92:81:c5:6c:a8:5c:99:b9:09:aa:03: a8:90:4e:92:0a:cb:92:c3:fe:b4:dd:6d:c4:e4:fd: aa:d1:0e:0a:fe:5b:e9:6c:5e:85:fb:6b:7c:2e:e6: 78:d1:75:10:06:b3:4d:d0:7c:ec:4b:ee:a0:fb:e8: c4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B2:F1:39:26:13:27:58:DA:1A:45:4C:3A:15:2C:89:A7:9F:F6:24 X509v3 Authority Key Identifier: keyid:CD:6A:ED:B0:29:FA:32:09:D5:BA:70:46:B7:B8:F5:24:75:FC:C1:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:dd:d4:70:44:e9:59:e0:40:d9:fc:2e:90:1a:15:e5:5c:d2: 66:b7:2c:02:d2:33:1a:55:64:1a:d3:2a:65:76:4a:86:f7:dc: 66:6c:60:d2:3c:48:0a:2d:11:51:1d:7e:0a:4a:8a:14:a3:e7: ad:2d:f2:78:7b:89:a5:cb:4b:a3:9e:9f:36:54:2e:f3:b7:1d: 8a:90:be:1c:3d:d7:91:f0:f8:d2:86:77:27:a9:48:b4:fa:c8: f7:ae:f5:e0:5e:a3:bf:2e:45:ee:b0:b8:bf:31:8b:42:6d:b1: 67:cd:1a:27:62:28:a9:11:e3:4a:3d:1e:55:0e:d5:b4:f7:c0: f8:dd:7d:79:3a:4d:8b:c9:ed:91:36:fb:e2:e5:ca:93:4b:ee: 30:51:d7:3d:b0:39:2e:a6:36:30:19:c3:09:18:aa:81:05:6a: b3:36:f7:56:3d:a7:d8:0b:2a:a6:ee:26:31:64:22:1f:82:25: e0:d7:80:7e:5c:95:87:af:a3:70:36:4b:c9:69:e4:78:db:06: 86:20:df:6c:25:a2:99:6a:33:19:a1:f1:ff:3a:68:27:9f:9c: bb:cc:fd:ae:29:ec:f3:dd:51:f8:a5:54:5e:bd:fb:aa:42:38: f7:e3:22:e4:ed:d5:33:8a:fd:65:5e:fa:bc:21:82:24:4e:ca: 6b:67:7c:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNqFhVFcRzbcUU01uul48Zh/mJb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2QUVEQjAyOUZBMzIwOUQ1QkE3MDQ2QjdCOEY1MjQ3 NUZDQzEwRDAeFw0yNjA3MjMxNTU5MjlaFw0yNjA3MjQxNjI1MjlaMDMxMTAvBgNV BAMTKDkxQjJGMTM5MjYxMzI3NThEQTFBNDU0QzNBMTUyQzg5QTc5RkY2MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo+Cub9hobQzvNcvICjLqjVbzH uJH74qJAdwWvDOVqi/ZdrIB5IYQ37ubuKA+jfyl4bcSdJHmTOMpIrG8yrmkNnxO8 UBhE8zJ2xjaLGppNtP4d34N8SWEvzg9yovyxaWg2t7geOlSIkXF4WMvB+CnuNjyZ hnwBAtMCNmuA0GqvEOLLVA+kM5T9Gp0cKGHy7kx2p1LyK2p38HxTavuWLgVS6iyL bCB5i9cZV1MKx4Hwzy3dNH8Si4lHGjPo3dWVigwD3gWUWFaSgcVsqFyZuQmqA6iQ TpIKy5LD/rTdbcTk/arRDgr+W+lsXoX7a3wu5njRdRAGs03QfOxL7qD76MRvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkbLxOSYTJ1jaGkVMOhUsiaef9iQwHwYDVR0j BBgwFoAUzWrtsCn6MgnVunBGt7j1JHX8wQ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmI0YzcwYTEtNTAzNi00NTBiLWI5MzYtNTA4NGY3OGY4MWVmLzAvQ0Q2QUVEQjAy OUZBMzIwOUQ1QkE3MDQ2QjdCOEY1MjQ3NUZDQzEwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDZBRURCMDI5RkEzMjA5RDVCQTcwNDZCN0I4RjUyNDc1RkND MTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmI0YzcwYTEtNTAzNi00NTBiLWI5 MzYtNTA4NGY3OGY4MWVmLzAvQ0Q2QUVEQjAyOUZBMzIwOUQ1QkE3MDQ2QjdCOEY1 MjQ3NUZDQzEwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvd1HBE6VngQNn8LpAaFeVc0ma3LALSMxpV ZBrTKmV2Sob33GZsYNI8SAotEVEdfgpKihSj560t8nh7iaXLS6OenzZULvO3HYqQ vhw915Hw+NKGdyepSLT6yPeu9eBeo78uRe6wuL8xi0JtsWfNGidiKKkR40o9HlUO 1bT3wPjdfXk6TYvJ7ZE2++LlypNL7jBR1z2wOS6mNjAZwwkYqoEFarM291Y9p9gL KqbuJjFkIh+CJeDXgH5clYevo3A2S8lp5HjbBoYg32wloplqMxmh8f86aCefnLvM /a4p7PPdUfilVF69+6pCOPfjIuTt1TOK/WVe+rwhgiROymtnfOk= -----END CERTIFICATE-----Generated at Fri Jul 24 03:15:23 2026 by rpki-client