$ rpki-client -vvf rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft File: 03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft (raw, json) Hash identifier: +epklYZJGg4BuY109TVaJl5gxvE57QUQS7hWFYInGGc= Subject key identifier: 08:1F:06:F8:8A:9A:56:E6:45:B8:AE:28:F0:70:F1:4A:48:8F:F8:21 Authority key identifier: 03:CE:E5:EC:F5:D8:2A:C4:35:BB:82:56:96:0A:60:65:A0:A4:EC:90 Certificate issuer: /CN=03CEE5ECF5D82AC435BB8256960A6065A0A4EC90 Certificate serial: 20758A69D4D1E36F89F7A6E3E83BB65DBE26D326 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 14:58:16 +0000 Manifest this update: Thu 23 Jul 2026 14:53:16 +0000 Manifest next update: Fri 24 Jul 2026 18:15:16 +0000 Files and hashes: 1: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (hash: W701XnzRp68q2ju50V8LTfQrMyEFAxYNvXNJc+815TM=) 2: 3230322e39302e3139392e302f32342d3234203d3e203338373739.roa (hash: bAYJsjQtRu+aYVmaWgkshTJ01ed0qF6a1B1HjXmthuw=) 3: 03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl (hash: lK0aXf2mKradtYGLrVvU9CggUrbr2n70xRHQQADYdso=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:75:8a:69:d4:d1:e3:6f:89:f7:a6:e3:e8:3b:b6:5d:be:26:d3:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03CEE5ECF5D82AC435BB8256960A6065A0A4EC90 Validity Not Before: Jul 23 14:53:16 2026 GMT Not After : Jul 24 18:15:16 2026 GMT Subject: CN=081F06F88A9A56E645B8AE28F070F14A488FF821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e3:1f:ca:3e:b3:2c:f2:07:3b:ec:15:2e:1b: d9:17:2a:6c:d8:20:c8:e1:39:e8:f1:b1:be:0d:04: ce:1f:54:bc:b9:3d:07:9a:d9:7a:83:d6:c6:d1:86: cd:1b:72:19:6c:d3:46:5a:3d:0c:a3:04:47:45:44: 4d:37:25:08:9b:9f:3f:f2:10:f3:4b:29:32:d4:13: 21:bc:7b:c2:2b:ce:77:f7:b4:75:be:f3:69:3e:68: 2c:4c:4d:dd:2f:03:44:7f:a8:5b:c2:3b:33:9a:89: a2:6e:ab:df:cd:61:c4:44:ea:19:5d:ac:dd:dc:d4: 1c:5b:08:ed:91:ec:3f:76:14:8b:fc:b8:8f:5e:2b: 9e:97:16:49:54:9f:f2:e8:4f:d5:90:01:79:6f:e8: 2c:b3:ba:be:6c:ba:ed:66:41:4b:34:eb:aa:1b:ab: 99:4f:35:4b:60:74:6a:b3:5b:66:1e:2c:51:83:68: bd:4d:66:00:eb:29:da:83:0f:7d:92:66:59:71:a9: 82:e0:87:fc:ff:f6:2d:51:cf:c1:e5:8c:a8:9b:06: 0e:68:25:ed:0a:eb:e0:27:a6:d5:2f:7c:62:33:c2: 6a:90:f8:7c:b7:93:e8:b9:8e:f8:06:83:2f:63:17: 36:52:8a:c5:88:88:4b:1f:21:38:9c:fa:62:8f:ac: c9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1F:06:F8:8A:9A:56:E6:45:B8:AE:28:F0:70:F1:4A:48:8F:F8:21 X509v3 Authority Key Identifier: keyid:03:CE:E5:EC:F5:D8:2A:C4:35:BB:82:56:96:0A:60:65:A0:A4:EC:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:6f:2d:d6:43:8b:52:f7:d4:1d:57:4f:32:37:1d:be:d5:cd: 21:33:56:07:34:d3:a7:7e:94:d8:2a:e5:eb:66:4e:91:37:7a: 03:fb:15:73:39:20:12:20:8c:4b:39:e1:7d:c5:af:76:56:62: fe:58:71:5b:44:7c:30:35:4d:7a:66:c4:11:ac:3b:4f:b2:4c: ac:26:b6:65:61:02:59:0d:95:ea:9b:05:7b:4e:f5:a9:fc:f2: 0a:62:6d:83:de:8d:1b:4d:28:b6:d0:ff:5d:2c:76:a5:03:bb: 4f:93:3e:10:67:b1:76:1d:49:a1:91:c3:89:3b:83:e6:fc:4c: bb:b2:f6:28:ba:db:3a:96:e1:34:02:fd:47:25:ac:e9:20:b8: 86:7f:64:f7:c0:65:44:7f:20:2b:50:fb:69:cc:ce:9e:e8:a0: d1:ee:a5:ef:23:43:c1:93:70:d4:76:91:ca:f2:79:86:7c:72: 28:18:22:d7:66:a6:69:3b:b0:b2:19:93:e1:92:e0:3c:40:b9: eb:17:19:4b:96:92:6c:0e:77:89:28:b5:9b:e1:21:25:61:f6: af:a7:ef:57:bf:b1:ad:f4:5e:79:a4:18:13:85:50:e5:17:32: 39:4a:31:9d:b4:ef:2f:21:5c:5b:25:d8:a8:d8:14:74:f9:85: 3b:e9:92:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIHWKadTR42+J96bj6Du2Xb4m0yYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNDRUU1RUNGNUQ4MkFDNDM1QkI4MjU2OTYwQTYwNjVB MEE0RUM5MDAeFw0yNjA3MjMxNDUzMTZaFw0yNjA3MjQxODE1MTZaMDMxMTAvBgNV BAMTKDA4MUYwNkY4OEE5QTU2RTY0NUI4QUUyOEYwNzBGMTRBNDg4RkY4MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/4x/KPrMs8gc77BUuG9kXKmzY IMjhOejxsb4NBM4fVLy5PQea2XqD1sbRhs0bchls00ZaPQyjBEdFRE03JQibnz/y EPNLKTLUEyG8e8Irznf3tHW+82k+aCxMTd0vA0R/qFvCOzOaiaJuq9/NYcRE6hld rN3c1BxbCO2R7D92FIv8uI9eK56XFklUn/LoT9WQAXlv6Cyzur5suu1mQUs066ob q5lPNUtgdGqzW2YeLFGDaL1NZgDrKdqDD32SZllxqYLgh/z/9i1Rz8HljKibBg5o Je0K6+AnptUvfGIzwmqQ+Hy3k+i5jvgGgy9jFzZSisWIiEsfITic+mKPrMnBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCB8G+IqaVuZFuK4o8HDxSkiP+CEwHwYDVR0j BBgwFoAUA87l7PXYKsQ1u4JWlgpgZaCk7JAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzRlMWYzNzAtZjMxZi00N2VkLThhNDEtYjI4YmM4ZGFmNDM1LzAvMDNDRUU1RUNG NUQ4MkFDNDM1QkI4MjU2OTYwQTYwNjVBMEE0RUM5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wM0NFRTVFQ0Y1RDgyQUM0MzVCQjgyNTY5NjBBNjA2NUEwQTRF QzkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzRlMWYzNzAtZjMxZi00N2VkLThh NDEtYjI4YmM4ZGFmNDM1LzAvMDNDRUU1RUNGNUQ4MkFDNDM1QkI4MjU2OTYwQTYw NjVBMEE0RUM5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlvLdZDi1L31B1XTzI3Hb7VzSEzVgc006d+ lNgq5etmTpE3egP7FXM5IBIgjEs54X3Fr3ZWYv5YcVtEfDA1TXpmxBGsO0+yTKwm tmVhAlkNleqbBXtO9an88gpibYPejRtNKLbQ/10sdqUDu0+TPhBnsXYdSaGRw4k7 g+b8TLuy9ii62zqW4TQC/UclrOkguIZ/ZPfAZUR/ICtQ+2nMzp7ooNHupe8jQ8GT cNR2kcryeYZ8cigYItdmpmk7sLIZk+GS4DxAuesXGUuWkmwOd4kotZvhISVh9q+n 71e/sa30XnmkGBOFUOUXMjlKMZ207y8hXFsl2KjYFHT5hTvpkn0= -----END CERTIFICATE-----Generated at Fri Jul 24 08:52:22 2026 by rpki-client