$ rpki-client -vvf rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft File: DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft (raw, json) Hash identifier: JQC7+r4MrS54tjDYN2KRIzKpbks56wG74ms6GzWkAwI= Subject key identifier: 7F:DF:F4:B4:5B:3B:E7:70:A4:77:0A:64:99:9B:C5:60:85:AE:89:BB Authority key identifier: DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D Certificate issuer: /CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Certificate serial: 770E872084572333712FECE27F058119460C2221 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 06:32:25 +0000 Manifest this update: Fri 24 Jul 2026 06:27:25 +0000 Manifest next update: Sat 25 Jul 2026 08:48:25 +0000 Files and hashes: 1: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: fD3NLzLgoJ82TLwu7Dwyse03F0V8LT4TWwHSpMtUfEc=) 2: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: WjZRwtvJki8cX6/hev6SY7XFmEOdsbw7GQ4iNASnaI0=) 3: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: E89xRti4PVG0HV9DRFC+eJJ1GWYmvwIqGtNqlTsJLNs=) 4: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: TTk5uxdYgabM/1XXzBbZ8h3cHs3Ef7zAmOsq9InOKKA=) 5: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: 97HN/1c+8Hrc2pb/g0tPOiNTWcjkEdKOrzmx5piyFis=) 6: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: pUwBvJ0FIKqMG3YypxwtIACCh9fdPkCe3slROTdlAFQ=) 7: DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl (hash: QHpSG9JWuLmscYGFckT1gL8y/E5XuzQcjp3UMZsfR/I=) 8: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: d1/YZ4nLn+eOZOqPz/6uDnp+bGReiCL4D5xWg3VSU5w=) 9: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: TkbyXPHwp6Kb69rQYjb4QN3MOoOzWNnMDZFwGXZxRRA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:0e:87:20:84:57:23:33:71:2f:ec:e2:7f:05:81:19:46:0c:22:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Validity Not Before: Jul 24 06:27:25 2026 GMT Not After : Jul 25 08:48:25 2026 GMT Subject: CN=7FDFF4B45B3BE770A4770A64999BC56085AE89BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fa:40:86:1e:55:15:3f:a9:d0:ef:f5:70:96: 84:4a:6e:4c:5e:0f:bf:d4:b5:67:d6:1a:d2:33:89: aa:b0:da:a1:81:2b:a1:b6:96:bd:c0:f2:68:88:c5: 50:6e:9a:e7:25:95:aa:e1:78:a9:84:78:88:40:04: 16:de:c7:d8:6b:43:96:df:f7:36:14:a5:67:dc:f8: fd:ac:82:c7:e3:2e:c9:f9:f6:05:6f:f5:85:9e:af: f3:5a:4b:55:a6:50:d4:e3:4c:dd:b5:2d:83:92:32: 09:8d:1e:b1:63:75:f3:51:35:ff:80:63:52:bc:1d: 73:2c:3e:76:00:52:a5:0e:4b:8c:5c:4f:7b:81:a5: 36:41:fb:e6:5f:36:60:c4:4d:58:d7:2c:12:08:a3: 87:d1:33:98:2b:80:b7:c0:c9:47:1b:ca:61:1a:1d: 27:34:2f:df:cd:37:5c:0c:24:62:61:74:ce:36:e9: 33:49:04:7e:3f:63:bc:80:b1:b2:70:2d:85:76:2b: 6e:e5:06:10:bd:83:7a:b8:34:9f:d4:ff:71:90:f8: e7:c4:88:08:42:8d:79:71:49:59:b7:3c:d6:8b:9e: e3:62:aa:14:2d:c0:19:09:4b:36:15:4b:6b:4a:84: b5:31:ac:a3:19:5f:2c:de:94:e7:51:1f:d0:88:c4: f3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DF:F4:B4:5B:3B:E7:70:A4:77:0A:64:99:9B:C5:60:85:AE:89:BB X509v3 Authority Key Identifier: keyid:DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:41:aa:01:37:e0:fa:07:a3:92:ec:85:b1:cb:42:47:22:f3: 2e:bf:90:af:06:c3:97:36:7e:5b:a4:9e:1e:e4:d5:0a:f0:09: 39:65:31:e0:fc:43:6e:3c:07:49:bf:37:6a:d5:a5:91:ac:a6: 40:a2:df:1a:35:a5:46:cd:bb:72:04:fc:18:d1:78:20:c6:59: 23:a9:64:e8:35:d1:3c:e5:ee:1c:a9:c5:a9:59:af:f0:c8:b3: 39:8a:0a:75:43:9b:0f:e0:79:f6:d1:c2:96:8a:01:e0:5d:ec: b2:86:93:68:83:23:f1:36:a3:06:b1:1a:d8:29:5a:40:f6:7c: 7f:45:1c:0c:87:52:1c:d1:46:5b:54:e7:78:b5:af:27:dd:7a: 88:39:5e:be:0e:13:81:b9:36:e0:8f:ed:7a:62:3c:12:30:d4: 67:53:9f:fd:22:e9:31:86:50:ef:ff:d1:9e:6f:e2:38:08:78: 5c:fe:fa:6d:5e:e9:b1:29:dc:a9:bb:27:5a:d8:93:6e:71:23: f3:23:d9:57:73:1b:21:8c:94:c2:96:69:42:21:1d:db:d5:5f: 09:11:36:4d:2d:05:6b:1f:2e:d0:6b:0f:ee:3d:66:52:d8:79: c8:a7:4d:e4:b5:ad:f0:54:3c:45:9e:90:8e:35:bb:b6:a4:fa: 55:0a:9d:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdw6HIIRXIzNxL+zifwWBGUYMIiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2QTk4N0UyRjlCRjEwNEI5OTM4OTExRThGODNGNEM1 MUM1QTc0RDAeFw0yNjA3MjQwNjI3MjVaFw0yNjA3MjUwODQ4MjVaMDMxMTAvBgNV BAMTKDdGREZGNEI0NUIzQkU3NzBBNDc3MEE2NDk5OUJDNTYwODVBRTg5QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU+kCGHlUVP6nQ7/VwloRKbkxe D7/UtWfWGtIziaqw2qGBK6G2lr3A8miIxVBumucllarheKmEeIhABBbex9hrQ5bf 9zYUpWfc+P2sgsfjLsn59gVv9YWer/NaS1WmUNTjTN21LYOSMgmNHrFjdfNRNf+A Y1K8HXMsPnYAUqUOS4xcT3uBpTZB++ZfNmDETVjXLBIIo4fRM5grgLfAyUcbymEa HSc0L9/NN1wMJGJhdM426TNJBH4/Y7yAsbJwLYV2K27lBhC9g3q4NJ/U/3GQ+OfE iAhCjXlxSVm3PNaLnuNiqhQtwBkJSzYVS2tKhLUxrKMZXyzelOdRH9CIxPOjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf9/0tFs753CkdwpkmZvFYIWuibswHwYDVR0j BBgwFoAU32qYfi+b8QS5k4kR6Pg/TFHFp00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBjMmExM2ItMWY0MC00YzAzLWJjMzUtZjY5NjE1MTZkNGQ5LzAvREY2QTk4N0Uy RjlCRjEwNEI5OTM4OTExRThGODNGNEM1MUM1QTc0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjZBOTg3RTJGOUJGMTA0Qjk5Mzg5MTFFOEY4M0Y0QzUxQzVB NzRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvREY2QTk4N0UyRjlCRjEwNEI5OTM4OTExRThGODNG NEM1MUM1QTc0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1BqgE34PoHo5LshbHLQkci8y6/kK8Gw5c2 fluknh7k1QrwCTllMeD8Q248B0m/N2rVpZGspkCi3xo1pUbNu3IE/BjReCDGWSOp ZOg10Tzl7hypxalZr/DIszmKCnVDmw/gefbRwpaKAeBd7LKGk2iDI/E2owaxGtgp WkD2fH9FHAyHUhzRRltU53i1ryfdeog5Xr4OE4G5NuCP7XpiPBIw1GdTn/0i6TGG UO//0Z5v4jgIeFz++m1e6bEp3Km7J1rYk25xI/Mj2VdzGyGMlMKWaUIhHdvVXwkR Nk0tBWsfLtBrD+49ZlLYecinTeS1rfBUPEWekI41u7ak+lUKnX4= -----END CERTIFICATE-----Generated at Fri Jul 24 11:40:38 2026 by rpki-client