$ rpki-client -vvf rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft File: 6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft (raw, json) Hash identifier: H4vqmfyYT1DzAU3tvT6cHlZdAFuZcpPq0f8SEZVZzqI= Subject key identifier: F3:39:A1:35:6E:CB:BE:09:D4:7F:63:D9:8F:25:A5:79:A5:91:59:D1 Authority key identifier: 6D:25:B0:84:4A:51:EF:C1:F9:C9:53:A3:D4:08:68:AA:D2:19:68:24 Certificate issuer: /CN=6D25B0844A51EFC1F9C953A3D40868AAD2196824 Certificate serial: 664728B7DFD20FDFFF4EC023429CD75B5EFE0CFD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 22:06:56 +0000 Manifest this update: Thu 23 Jul 2026 22:01:56 +0000 Manifest next update: Fri 24 Jul 2026 22:36:56 +0000 Files and hashes: 1: 6D25B0844A51EFC1F9C953A3D40868AAD2196824.crl (hash: 0kPPvZcoUBfIk2alFsKaJSfq5TlyFyVi9FXAGo4dxz4=) 2: 3130332e3134392e34322e302f32342d3234203d3e20313530353236.roa (hash: /UiS0/YqAJP6vBXmUjstv/RqhsN7l6a5S8YjTvqIQ1U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.crl rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:47:28:b7:df:d2:0f:df:ff:4e:c0:23:42:9c:d7:5b:5e:fe:0c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D25B0844A51EFC1F9C953A3D40868AAD2196824 Validity Not Before: Jul 23 22:01:56 2026 GMT Not After : Jul 24 22:36:56 2026 GMT Subject: CN=F339A1356ECBBE09D47F63D98F25A579A59159D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2f:5d:9d:5b:e5:13:22:1c:d2:0c:d6:db:9c: f8:65:53:8e:b7:46:6d:e6:9d:4c:77:f9:97:25:85: a2:ff:57:d3:79:8e:b7:83:20:48:88:0a:8d:4f:d3: ee:ae:74:47:36:ab:49:c9:31:e9:a3:f1:9c:cd:17: 7c:09:0f:c0:e6:f7:04:9e:c8:b7:40:56:1f:45:f9: 42:60:c7:dc:9c:b8:89:2e:a0:32:91:f9:dd:59:43: de:59:d8:7f:db:68:a4:db:16:dc:b6:e4:f7:3d:1d: c9:11:16:5a:4a:a0:a7:69:39:9a:0f:a1:90:ba:a2: dd:b9:ee:e1:5f:7a:df:11:45:8a:02:73:ce:54:98: 40:5e:28:1e:9d:71:66:f7:b4:80:f7:e3:e7:b4:7c: 4d:c9:3b:4f:d0:f7:15:9f:b2:48:af:fa:1f:b0:89: 15:1a:eb:84:1b:3d:96:70:f5:76:0f:f9:53:0b:4b: 1d:7c:cd:6e:62:2a:6e:0e:c6:bd:8f:2b:e5:5b:07: e3:cd:73:77:7e:e1:96:43:4e:da:60:98:af:04:ac: 28:84:af:fe:8c:3b:d1:47:1b:2a:9c:1c:ac:0e:0e: ce:0e:d2:f7:44:6a:06:52:ae:76:e2:53:ac:af:e6: da:b3:38:11:7f:42:93:9c:1f:14:8e:43:6d:83:51: 28:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:39:A1:35:6E:CB:BE:09:D4:7F:63:D9:8F:25:A5:79:A5:91:59:D1 X509v3 Authority Key Identifier: keyid:6D:25:B0:84:4A:51:EF:C1:F9:C9:53:A3:D4:08:68:AA:D2:19:68:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:fb:46:75:91:b1:99:b0:ef:76:68:97:00:96:31:44:23:88: 20:55:24:9d:63:51:96:6f:2c:51:62:2e:9f:92:36:3d:be:8c: ee:43:2a:0a:35:c3:f0:49:06:99:d5:86:38:a3:7b:48:a8:07: e8:7d:be:06:99:5a:f8:a2:5c:f7:bc:26:b9:24:d4:b7:eb:a6: 1c:03:19:dc:c8:61:f2:91:22:02:16:3e:39:72:b3:2d:08:87: 08:dd:bf:46:b3:c2:72:fb:62:70:cd:64:79:69:34:70:4b:34: c8:d1:42:1d:27:ed:a7:8f:ad:9e:fe:36:32:49:d4:e2:f2:10: b8:b1:7e:76:e9:9d:bb:f9:12:52:1c:ea:93:87:94:6a:2e:8b: e4:13:d5:89:05:c9:34:68:6d:1f:76:88:f5:c0:5d:b2:3b:86: 3a:4e:c6:b5:d0:de:b6:02:d5:aa:51:d5:4f:d7:f7:5a:51:4f: 7b:5a:f8:a2:c7:2e:a2:57:e0:b7:ef:f9:98:b3:83:6b:70:19: 57:df:a7:8f:af:30:71:36:68:2f:4d:bd:bc:ea:bd:95:1f:f5: f9:59:ae:78:26:f1:37:24:a4:6f:63:fb:d3:3d:b8:ed:df:65: 30:c7:47:ba:86:80:21:01:61:f8:0f:6c:c4:78:25:e8:0b:99: 19:c0:4e:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZkcot9/SD9//TsAjQpzXW17+DP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQyNUIwODQ0QTUxRUZDMUY5Qzk1M0EzRDQwODY4QUFE MjE5NjgyNDAeFw0yNjA3MjMyMjAxNTZaFw0yNjA3MjQyMjM2NTZaMDMxMTAvBgNV BAMTKEYzMzlBMTM1NkVDQkJFMDlENDdGNjNEOThGMjVBNTc5QTU5MTU5RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbL12dW+UTIhzSDNbbnPhlU463 Rm3mnUx3+ZclhaL/V9N5jreDIEiICo1P0+6udEc2q0nJMemj8ZzNF3wJD8Dm9wSe yLdAVh9F+UJgx9ycuIkuoDKR+d1ZQ95Z2H/baKTbFty25Pc9HckRFlpKoKdpOZoP oZC6ot257uFfet8RRYoCc85UmEBeKB6dcWb3tID34+e0fE3JO0/Q9xWfskiv+h+w iRUa64QbPZZw9XYP+VMLSx18zW5iKm4Oxr2PK+VbB+PNc3d+4ZZDTtpgmK8ErCiE r/6MO9FHGyqcHKwODs4O0vdEagZSrnbiU6yv5tqzOBF/QpOcHxSOQ22DUSidAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8zmhNW7LvgnUf2PZjyWleaWRWdEwHwYDVR0j BBgwFoAUbSWwhEpR78H5yVOj1AhoqtIZaCQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzg2NTk5YTYtZDg2Yi00NzFhLWEwNWItYTlmYWZlM2JiNjlhLzAvNkQyNUIwODQ0 QTUxRUZDMUY5Qzk1M0EzRDQwODY4QUFEMjE5NjgyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDI1QjA4NDRBNTFFRkMxRjlDOTUzQTNENDA4NjhBQUQyMTk2 ODI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzg2NTk5YTYtZDg2Yi00NzFhLWEw NWItYTlmYWZlM2JiNjlhLzAvNkQyNUIwODQ0QTUxRUZDMUY5Qzk1M0EzRDQwODY4 QUFEMjE5NjgyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB37RnWRsZmw73ZolwCWMUQjiCBVJJ1jUZZv LFFiLp+SNj2+jO5DKgo1w/BJBpnVhjije0ioB+h9vgaZWviiXPe8Jrkk1LfrphwD GdzIYfKRIgIWPjlysy0Ihwjdv0azwnL7YnDNZHlpNHBLNMjRQh0n7aePrZ7+NjJJ 1OLyELixfnbpnbv5ElIc6pOHlGoui+QT1YkFyTRobR92iPXAXbI7hjpOxrXQ3rYC 1apR1U/X91pRT3ta+KLHLqJX4Lfv+Zizg2twGVffp4+vMHE2aC9NvbzqvZUf9flZ rngm8TckpG9j+9M9uO3fZTDHR7qGgCEBYfgPbMR4JegLmRnAThk= -----END CERTIFICATE-----Generated at Fri Jul 24 06:24:27 2026 by rpki-client