$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft File: D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft (raw, json) Hash identifier: Jo7tvuRiNuo9eaI5nFKdhb/5unt7194TLE/2N+iFDWo= Subject key identifier: 35:CE:AF:9B:F1:E9:43:F6:FC:14:2C:E9:4F:92:E3:84:84:D6:AF:2A Authority key identifier: D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03 Certificate issuer: /CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03 Certificate serial: 06B4B8C4BDDDD90828C586CB4A65DFA518C91297 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 09:15:45 +0000 Manifest this update: Fri 24 Jul 2026 09:10:45 +0000 Manifest next update: Sat 25 Jul 2026 10:36:45 +0000 Files and hashes: 1: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: mldeFV7Jf6QOev5E++VL/jRK/PuO8nW0ShYwDv/SkQ8=) 2: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: IaAf1+vjln5sceJpZ1s3ScYLsPQRM51r/bqMTajLuUs=) 3: D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl (hash: pzgXhfXyLEdfMXRKSjUaA3cjLb2gndaJ2XnglDGCrY0=) 4: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: xFfth544qMvDawFqjY1oWbMZQMZwR8ATU9ANAJM8pNM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 09:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:b4:b8:c4:bd:dd:d9:08:28:c5:86:cb:4a:65:df:a5:18:c9:12:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03 Validity Not Before: Jul 24 09:10:45 2026 GMT Not After : Jul 25 10:36:45 2026 GMT Subject: CN=35CEAF9BF1E943F6FC142CE94F92E38484D6AF2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0f:de:fc:27:4a:19:95:9e:65:6d:69:78:95: 73:3d:c5:17:78:99:28:c4:c3:33:a6:b9:93:79:c3: 8b:b8:4e:59:80:e0:16:a9:33:ec:5a:64:b7:8c:07: e4:d6:b8:6c:92:d0:c2:ea:19:6e:9c:f1:9e:ba:fa: 63:11:19:ea:f1:ab:f0:17:4f:a0:eb:3c:d4:12:b8: 2a:7e:3c:58:26:aa:54:05:a3:23:fc:85:cb:f3:02: 07:74:a3:52:1f:16:37:c7:22:6d:a3:b3:3e:c5:40: f2:66:3d:dc:0f:d1:56:22:14:70:00:fe:4c:73:9a: 5e:6d:8c:e6:42:09:47:e4:65:57:8a:49:45:f6:21: ed:c1:28:77:fe:57:79:21:8b:36:01:50:11:ff:d0: 92:59:96:86:ac:15:28:bf:98:d0:98:a3:02:a5:f1: ff:d5:d5:0f:b6:3b:d8:59:b6:08:8f:74:b5:6d:0e: 7a:6b:d9:d0:01:d9:63:5c:1c:63:95:1b:57:1d:33: 97:c0:69:fa:1f:46:f3:cc:0d:17:8e:df:16:86:06: ce:c9:ce:30:a6:98:bc:db:4e:38:15:a1:85:89:23: ec:cc:69:86:78:06:d4:97:a0:da:ce:17:93:c8:74: da:77:1e:6b:d2:ab:85:a3:1a:36:d0:ee:d9:d3:f0: 49:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CE:AF:9B:F1:E9:43:F6:FC:14:2C:E9:4F:92:E3:84:84:D6:AF:2A X509v3 Authority Key Identifier: keyid:D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:6d:fa:78:51:b3:24:87:d2:c9:d2:3e:a8:a6:a1:3a:5b:8b: 2b:0f:f2:c5:33:a2:cb:58:36:92:00:cc:e3:ad:3f:72:b2:ee: f8:f1:b8:50:80:03:dd:cd:92:76:f2:7f:ed:cd:5e:9a:8d:46: ad:13:14:4a:41:4c:c3:e6:d2:c2:09:e3:75:ff:a4:6b:40:53: ae:70:fa:d8:a7:0f:23:a5:1c:5c:f7:58:e7:b1:8a:a7:51:56: 30:f3:cd:55:66:d6:f9:51:8f:eb:43:25:d4:3a:86:d6:cf:a4: 67:53:b6:7d:ca:c4:6b:f8:ec:67:5d:9c:f0:75:56:11:d1:d9: 7f:dc:d0:b9:4a:38:7d:77:4c:04:9c:0d:f3:0a:74:d9:49:7b: ce:84:aa:b3:c2:a6:1f:a7:16:b2:25:b1:84:84:90:e8:a2:1f: 74:8c:87:49:56:12:d0:2f:bc:6f:65:bd:03:96:06:cb:ed:e6: 0f:b9:34:bd:1b:92:69:c6:c0:64:18:c8:ef:e6:e4:9b:57:14: 76:34:cb:aa:7e:a9:66:0a:ec:d8:45:16:c7:4a:2d:ce:4c:d5: 97:7f:bd:b9:6f:fd:20:58:91:0a:6d:11:3a:f9:1d:5e:f2:3d: 56:fa:36:4b:bb:d6:c4:d2:9b:46:29:6d:1d:33:38:73:d9:35: bd:77:8a:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBrS4xL3d2QgoxYbLSmXfpRjJEpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg4RTAwNkQyMTk3MzBDNTJERERDQkQ2RUIwNUMwOUEy RjgxNUMwMzAeFw0yNjA3MjQwOTEwNDVaFw0yNjA3MjUxMDM2NDVaMDMxMTAvBgNV BAMTKDM1Q0VBRjlCRjFFOTQzRjZGQzE0MkNFOTRGOTJFMzg0ODRENkFGMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZD978J0oZlZ5lbWl4lXM9xRd4 mSjEwzOmuZN5w4u4TlmA4BapM+xaZLeMB+TWuGyS0MLqGW6c8Z66+mMRGerxq/AX T6DrPNQSuCp+PFgmqlQFoyP8hcvzAgd0o1IfFjfHIm2jsz7FQPJmPdwP0VYiFHAA /kxzml5tjOZCCUfkZVeKSUX2Ie3BKHf+V3khizYBUBH/0JJZloasFSi/mNCYowKl 8f/V1Q+2O9hZtgiPdLVtDnpr2dAB2WNcHGOVG1cdM5fAafofRvPMDReO3xaGBs7J zjCmmLzbTjgVoYWJI+zMaYZ4BtSXoNrOF5PIdNp3HmvSq4WjGjbQ7tnT8El/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNc6vm/HpQ/b8FCzpT5LjhITWryowHwYDVR0j BBgwFoAU2I4AbSGXMMUt3cvW6wXAmi+BXAMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2EwMjEwYjMtY2NhMi00M2M1LTg5ZjktNWE5MDg2YTYwNzAzLzAvRDg4RTAwNkQy MTk3MzBDNTJERERDQkQ2RUIwNUMwOUEyRjgxNUMwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EODhFMDA2RDIxOTczMEM1MkRERENCRDZFQjA1QzA5QTJGODE1 QzAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvRDg4RTAwNkQyMTk3MzBDNTJERERDQkQ2RUIwNUMw OUEyRjgxNUMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMFt+nhRsySH0snSPqimoTpbiysP8sUzostY NpIAzOOtP3Ky7vjxuFCAA93Nknbyf+3NXpqNRq0TFEpBTMPm0sIJ43X/pGtAU65w +tinDyOlHFz3WOexiqdRVjDzzVVm1vlRj+tDJdQ6htbPpGdTtn3KxGv47GddnPB1 VhHR2X/c0LlKOH13TAScDfMKdNlJe86EqrPCph+nFrIlsYSEkOiiH3SMh0lWEtAv vG9lvQOWBsvt5g+5NL0bkmnGwGQYyO/m5JtXFHY0y6p+qWYK7NhFFsdKLc5M1Zd/ vblv/SBYkQptETr5HV7yPVb6Nku71sTSm0YpbR0zOHPZNb13ijs= -----END CERTIFICATE-----Generated at Fri Jul 24 11:23:02 2026 by rpki-client