$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft File: D522456371D4AC1AABD94B54197F5014F8E929A5.mft (raw, json) Hash identifier: pGdeuZty4WmaV4xIyOKxsJaU3IsTcmuerUtoIzn/wus= Subject key identifier: 60:D6:4A:59:00:59:FC:B4:B8:3F:F1:0A:64:FD:67:10:A9:A2:D0:1B Authority key identifier: D5:22:45:63:71:D4:AC:1A:AB:D9:4B:54:19:7F:50:14:F8:E9:29:A5 Certificate issuer: /CN=D522456371D4AC1AABD94B54197F5014F8E929A5 Certificate serial: 0AAC82F0042A3CDBB77D19E6342D1D94D7035EC8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:46:26 +0000 Manifest this update: Fri 24 Jul 2026 01:41:26 +0000 Manifest next update: Sat 25 Jul 2026 04:33:26 +0000 Files and hashes: 1: D522456371D4AC1AABD94B54197F5014F8E929A5.crl (hash: CMrLX0RkYsyfOOXbD85jVhqx3I0c8DjJxSbvL7yJ3ss=) 2: 3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (hash: OUIoLLo/dAdijxG7HgPy+7u0dGo5YCKdHwzzHlzGJYU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.crl rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ac:82:f0:04:2a:3c:db:b7:7d:19:e6:34:2d:1d:94:d7:03:5e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D522456371D4AC1AABD94B54197F5014F8E929A5 Validity Not Before: Jul 24 01:41:26 2026 GMT Not After : Jul 25 04:33:26 2026 GMT Subject: CN=60D64A590059FCB4B83FF10A64FD6710A9A2D01B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bb:3a:4f:4c:01:fa:59:e1:93:9c:c0:20:46: 0e:b3:6a:b1:e7:fa:b8:58:f9:e6:f3:d1:2f:e3:1a: 00:4e:b3:9b:96:07:c5:94:0a:98:4c:d2:46:86:61: 8c:fc:38:e4:e3:9f:3c:d0:60:24:2a:39:01:db:a1: d3:08:86:40:f7:6c:eb:43:f7:d0:d4:df:a8:73:b6: 76:bd:ff:fe:5f:9e:00:6e:a1:6c:64:01:55:fc:56: ea:67:28:cc:56:cd:ef:5e:59:49:3f:79:2a:73:a7: 61:81:81:97:ac:45:17:07:7a:8f:43:95:f8:af:20: 25:19:52:0f:92:d1:a8:29:f0:ca:2d:50:7a:ba:14: be:84:2a:a3:22:c4:07:da:2f:7f:c4:ab:02:38:2c: 25:ff:29:08:0f:41:9b:f6:c7:05:db:45:8f:bf:f7: 90:15:b4:74:4d:3d:84:cb:6b:d5:81:bc:f3:0e:e4: ff:c6:26:3c:5f:9d:f9:2d:29:0a:79:47:11:5f:32: 19:e3:bb:54:e7:1d:18:f7:dc:c0:5b:2a:55:f4:b0: 5d:58:46:c3:d3:96:0d:91:f1:e1:e1:b2:c6:bb:82: ee:04:1a:f3:e7:3b:c1:2a:be:a2:0f:52:1e:ab:10: 3c:74:5c:cf:b9:ca:e4:13:1d:9e:35:a0:98:13:cc: 2f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D6:4A:59:00:59:FC:B4:B8:3F:F1:0A:64:FD:67:10:A9:A2:D0:1B X509v3 Authority Key Identifier: keyid:D5:22:45:63:71:D4:AC:1A:AB:D9:4B:54:19:7F:50:14:F8:E9:29:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:fd:5a:64:00:b6:cf:f2:40:26:ab:9b:15:53:a9:75:92:29: 0e:42:ca:80:08:6b:a1:4d:5e:9c:15:04:0d:96:1d:47:93:82: 03:0c:2b:cc:54:ef:34:b8:44:1b:0a:ed:80:c9:74:a3:a4:b0: 2b:f4:7f:2d:42:2d:e0:b3:58:54:14:1b:36:db:f8:e6:81:59: db:91:31:6c:19:95:50:d4:f7:8a:51:8b:14:d0:34:fe:57:4d: 21:c4:b2:41:34:4d:fa:65:0a:2d:7a:7b:53:3e:cf:c2:e2:a9: 20:4c:58:c4:4c:37:28:f7:68:cd:d2:a7:e4:1d:16:97:75:02: eb:76:76:ca:aa:9f:11:cf:1a:89:41:fb:99:f4:25:c9:11:ab: 23:85:09:2e:fd:e0:f3:1f:a9:de:84:c2:71:5f:7b:d7:a8:d7: 73:f3:38:36:41:d2:05:b6:94:18:70:fb:e0:39:e6:f3:3e:ac: df:ec:2d:1d:94:ac:5c:24:3f:ab:de:de:7e:b9:2e:11:d7:0a: bf:e6:72:ae:72:f9:45:03:dd:90:ff:99:b3:5b:28:68:06:cd: df:7a:ed:ca:fc:fc:6d:98:1e:b1:b2:78:91:6c:bd:6b:fc:31: a9:35:76:20:3b:d7:81:fe:f0:13:80:54:dd:01:3d:af:c2:2e: 5b:36:84:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqyC8AQqPNu3fRnmNC0dlNcDXsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyMjQ1NjM3MUQ0QUMxQUFCRDk0QjU0MTk3RjUwMTRG OEU5MjlBNTAeFw0yNjA3MjQwMTQxMjZaFw0yNjA3MjUwNDMzMjZaMDMxMTAvBgNV BAMTKDYwRDY0QTU5MDA1OUZDQjRCODNGRjEwQTY0RkQ2NzEwQTlBMkQwMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVuzpPTAH6WeGTnMAgRg6zarHn +rhY+ebz0S/jGgBOs5uWB8WUCphM0kaGYYz8OOTjnzzQYCQqOQHbodMIhkD3bOtD 99DU36hztna9//5fngBuoWxkAVX8VupnKMxWze9eWUk/eSpzp2GBgZesRRcHeo9D lfivICUZUg+S0agp8MotUHq6FL6EKqMixAfaL3/EqwI4LCX/KQgPQZv2xwXbRY+/ 95AVtHRNPYTLa9WBvPMO5P/GJjxfnfktKQp5RxFfMhnju1TnHRj33MBbKlX0sF1Y RsPTlg2R8eHhssa7gu4EGvPnO8EqvqIPUh6rEDx0XM+5yuQTHZ41oJgTzC/xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYNZKWQBZ/LS4P/EKZP1nEKmi0BswHwYDVR0j BBgwFoAU1SJFY3HUrBqr2UtUGX9QFPjpKaUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ4MGIzMjEtYWEzMS00MzE3LTlkMzEtYzJiZDE5MGMxMzg0LzAvRDUyMjQ1NjM3 MUQ0QUMxQUFCRDk0QjU0MTk3RjUwMTRGOEU5MjlBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTIyNDU2MzcxRDRBQzFBQUJEOTRCNTQxOTdGNTAxNEY4RTky OUE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ4MGIzMjEtYWEzMS00MzE3LTlk MzEtYzJiZDE5MGMxMzg0LzAvRDUyMjQ1NjM3MUQ0QUMxQUFCRDk0QjU0MTk3RjUw MTRGOEU5MjlBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACf9WmQAts/yQCarmxVTqXWSKQ5CyoAIa6FN XpwVBA2WHUeTggMMK8xU7zS4RBsK7YDJdKOksCv0fy1CLeCzWFQUGzbb+OaBWduR MWwZlVDU94pRixTQNP5XTSHEskE0TfplCi16e1M+z8LiqSBMWMRMNyj3aM3Sp+Qd Fpd1Aut2dsqqnxHPGolB+5n0JckRqyOFCS794PMfqd6EwnFfe9eo13PzODZB0gW2 lBhw++A55vM+rN/sLR2UrFwkP6ve3n65LhHXCr/mcq5y+UUD3ZD/mbNbKGgGzd96 7cr8/G2YHrGyeJFsvWv8Mak1diA714H+8BOAVN0BPa/CLls2hB4= -----END CERTIFICATE-----Generated at Fri Jul 24 07:45:04 2026 by rpki-client