$ rpki-client -vvf rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft File: C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft (raw, json) Hash identifier: +IFQm9QEMim6o8UkMYToNGKqqo4gVmD0i11JF6i3sks= Subject key identifier: 63:24:1D:CA:C4:4D:E0:A7:91:89:F4:A9:0A:5F:A6:1A:D9:7C:AC:06 Authority key identifier: C7:06:F9:00:08:D6:29:3E:5E:35:C7:B1:7D:D3:B4:14:EE:B9:A0:A0 Certificate issuer: /CN=C706F90008D6293E5E35C7B17DD3B414EEB9A0A0 Certificate serial: 3A8FC02A49607453593F7BB202A4BE76C537C524 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:00:53 +0000 Manifest this update: Thu 23 Jul 2026 12:55:53 +0000 Manifest next update: Fri 24 Jul 2026 14:19:53 +0000 Files and hashes: 1: C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl (hash: 1c4iLwF2vxeLm3blcsJVaq+O1J264SfxdeExMNv29v8=) 2: 3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa (hash: IZSn7ER9gKZENb7Yh0xyvq6Sz0bKmm3RwSLw7ctssto=) 3: 3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa (hash: YUSL8MaAWMcSEFSDLAAA9feKMtSwIZRFYTLiujhrL28=) 4: 3130332e3139312e3139362e302f32332d3234203d3e20313439393334.roa (hash: mQKueKTh7A3uQ/utWkeUKce0jX8tikpIauTi7aYCX5o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:8f:c0:2a:49:60:74:53:59:3f:7b:b2:02:a4:be:76:c5:37:c5:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C706F90008D6293E5E35C7B17DD3B414EEB9A0A0 Validity Not Before: Jul 23 12:55:53 2026 GMT Not After : Jul 24 14:19:53 2026 GMT Subject: CN=63241DCAC44DE0A79189F4A90A5FA61AD97CAC06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:40:69:ac:47:45:5d:aa:2d:46:dd:9f:97:fa: 76:38:20:92:e1:65:a6:0e:06:95:a6:c1:bb:5b:c6: cf:2d:f0:3c:63:cf:07:a4:f2:8c:66:be:92:e0:1f: 80:1d:da:f2:3c:be:50:64:94:1b:dc:ec:cd:a9:7f: f3:12:f1:af:f0:db:79:14:6e:41:49:51:4d:da:5b: e9:d8:a0:87:0d:37:e8:9f:c1:cb:ac:e6:f8:97:34: 67:4a:4f:a8:66:72:77:5f:bc:1d:8d:42:22:ad:1e: 39:74:9e:ad:2b:0a:72:cf:09:ec:3c:63:e1:3c:85: 68:28:4f:09:f9:2d:ba:f7:18:c7:6a:fb:b5:45:f5: 3c:50:8b:01:5c:4b:e0:f4:07:76:6c:96:de:4d:55: c4:e9:d3:a4:3b:84:e4:83:12:73:58:59:df:43:44: dd:22:5e:46:72:c1:91:6a:f6:1b:e9:5f:42:7e:20: da:06:0e:95:b9:24:d6:f3:ea:a6:e0:06:58:ee:34: 3b:41:f5:90:cb:af:7d:f5:f7:77:b3:e3:39:72:2d: f7:9d:23:4e:50:cb:47:42:53:78:aa:22:15:96:3d: 98:40:1e:a5:99:a3:dc:23:a4:df:3f:7f:9a:01:9c: 74:c7:f4:f5:c2:3c:3a:3d:70:b0:27:b8:14:50:3e: 65:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:24:1D:CA:C4:4D:E0:A7:91:89:F4:A9:0A:5F:A6:1A:D9:7C:AC:06 X509v3 Authority Key Identifier: keyid:C7:06:F9:00:08:D6:29:3E:5E:35:C7:B1:7D:D3:B4:14:EE:B9:A0:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:62:cb:f7:10:79:a9:a8:da:b1:71:8d:f4:1c:b1:87:2b:0d: 41:08:80:84:4c:c7:f2:33:12:d3:95:c0:25:a5:95:84:6e:a5: 32:41:9c:b5:35:b3:b7:2c:b3:bf:be:72:63:b5:c3:37:6a:33: 98:23:14:17:80:65:f4:32:f2:5d:85:e3:2a:aa:38:a1:54:9e: b7:b0:f7:d4:c9:60:bc:4c:1b:45:e8:34:fe:d2:ca:92:bc:c1: b9:21:86:f5:98:bf:44:bb:25:3d:bb:30:cc:40:90:b6:78:df: 26:93:86:ef:b9:09:76:e1:c2:a7:ad:9e:48:e7:4a:1a:ba:45: 61:f7:7f:57:97:91:46:af:e2:7a:92:f6:1e:12:12:d1:89:c8: f8:a7:aa:17:91:e5:99:cd:b7:05:9f:0e:03:8e:9d:14:4a:1b: e1:71:0c:39:1f:5b:a7:a8:ee:26:c0:cd:65:01:09:04:b1:49: 3b:71:c2:5b:35:23:10:66:2d:3f:50:67:a5:d5:a0:c4:3c:a8: b7:df:22:2c:93:ae:1b:32:52:02:bd:09:79:99:04:52:25:d6: 51:12:2f:c0:f3:3b:04:ca:ff:30:a5:fc:0a:9c:20:59:2d:67: 1e:5c:d7:6a:81:b7:df:13:b1:78:15:f0:e7:28:ca:6a:77:12: 7a:a7:03:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOo/AKklgdFNZP3uyAqS+dsU3xSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwNkY5MDAwOEQ2MjkzRTVFMzVDN0IxN0REM0I0MTRF RUI5QTBBMDAeFw0yNjA3MjMxMjU1NTNaFw0yNjA3MjQxNDE5NTNaMDMxMTAvBgNV BAMTKDYzMjQxRENBQzQ0REUwQTc5MTg5RjRBOTBBNUZBNjFBRDk3Q0FDMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQGmsR0Vdqi1G3Z+X+nY4IJLh ZaYOBpWmwbtbxs8t8Dxjzwek8oxmvpLgH4Ad2vI8vlBklBvc7M2pf/MS8a/w23kU bkFJUU3aW+nYoIcNN+ifwcus5viXNGdKT6hmcndfvB2NQiKtHjl0nq0rCnLPCew8 Y+E8hWgoTwn5Lbr3GMdq+7VF9TxQiwFcS+D0B3Zslt5NVcTp06Q7hOSDEnNYWd9D RN0iXkZywZFq9hvpX0J+INoGDpW5JNbz6qbgBljuNDtB9ZDLr33193ez4zlyLfed I05Qy0dCU3iqIhWWPZhAHqWZo9wjpN8/f5oBnHTH9PXCPDo9cLAnuBRQPmXPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYyQdysRN4KeRifSpCl+mGtl8rAYwHwYDVR0j BBgwFoAUxwb5AAjWKT5eNcexfdO0FO65oKAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzVkNmVmZmYtODViMi00YWY0LTg5YWItNmQ5OGM5NTI3ZGE0LzAvQzcwNkY5MDAw OEQ2MjkzRTVFMzVDN0IxN0REM0I0MTRFRUI5QTBBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzA2RjkwMDA4RDYyOTNFNUUzNUM3QjE3REQzQjQxNEVFQjlB MEEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzVkNmVmZmYtODViMi00YWY0LTg5 YWItNmQ5OGM5NTI3ZGE0LzAvQzcwNkY5MDAwOEQ2MjkzRTVFMzVDN0IxN0REM0I0 MTRFRUI5QTBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5iy/cQeamo2rFxjfQcsYcrDUEIgIRMx/Iz EtOVwCWllYRupTJBnLU1s7css7++cmO1wzdqM5gjFBeAZfQy8l2F4yqqOKFUnrew 99TJYLxMG0XoNP7SypK8wbkhhvWYv0S7JT27MMxAkLZ43yaThu+5CXbhwqetnkjn Shq6RWH3f1eXkUav4nqS9h4SEtGJyPinqheR5ZnNtwWfDgOOnRRKG+FxDDkfW6eo 7ibAzWUBCQSxSTtxwls1IxBmLT9QZ6XVoMQ8qLffIiyTrhsyUgK9CXmZBFIl1lES L8DzOwTK/zCl/AqcIFktZx5c12qBt98TsXgV8Ocoymp3EnqnA5I= -----END CERTIFICATE-----Generated at Fri Jul 24 07:43:51 2026 by rpki-client