$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft File: D7F0443E844F58413FEE61023C66F3C2AF619180.mft (raw, json) Hash identifier: c+oGY1NjDieDy266aZWesH/1F8Wz8Gp4iJhhgzpib94= Subject key identifier: B8:6D:65:46:4E:DC:9D:51:95:39:50:66:F0:03:33:10:65:F7:C1:0F Authority key identifier: D7:F0:44:3E:84:4F:58:41:3F:EE:61:02:3C:66:F3:C2:AF:61:91:80 Certificate issuer: /CN=D7F0443E844F58413FEE61023C66F3C2AF619180 Certificate serial: 176D297CE340A1DE59DAEE88085C9A8A1EDBEB28 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 15:44:07 +0000 Manifest this update: Thu 23 Jul 2026 15:39:07 +0000 Manifest next update: Fri 24 Jul 2026 16:14:07 +0000 Files and hashes: 1: 3130332e35352e3235342e302f32342d3234203d3e20333936393832.roa (hash: m9XJT/DbxbJ6+jpB+KGYoQwi9JE9k1D/+aAA0o2JVf0=) 2: 3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa (hash: 1gK99x1ItHrvOP2nffQyDA72Y2CbBGzEnTeDW6KjBoY=) 3: D7F0443E844F58413FEE61023C66F3C2AF619180.crl (hash: z30Wz7KheQvDWKEHl6EpMsYREpWtXfMALBeS8CYT8yo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.crl rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:6d:29:7c:e3:40:a1:de:59:da:ee:88:08:5c:9a:8a:1e:db:eb:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F0443E844F58413FEE61023C66F3C2AF619180 Validity Not Before: Jul 23 15:39:07 2026 GMT Not After : Jul 24 16:14:07 2026 GMT Subject: CN=B86D65464EDC9D5195395066F003331065F7C10F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:3d:c5:b5:a5:eb:03:24:c0:e0:d9:95:11:87: 6f:b1:6a:aa:ec:65:9d:3c:ef:3e:65:7c:24:7d:dc: 0f:35:01:79:e3:df:c0:96:0b:10:75:4e:da:ba:95: 4a:02:6d:0f:9d:7e:a3:10:07:30:e0:37:d9:33:7d: 41:ab:5f:fd:35:6d:19:2b:65:61:88:80:55:cd:3e: e8:03:d8:4f:54:bb:2e:31:31:75:91:da:2e:cf:2b: 68:af:95:75:ab:06:da:33:55:de:8f:31:b6:1e:2a: 16:73:98:93:99:6a:a5:11:06:af:2b:d7:df:aa:6d: 25:7a:a3:96:06:ac:96:9a:9e:54:00:2f:6f:64:c1: 63:66:7f:37:2b:8a:56:9a:16:81:ef:b5:37:2d:6e: b2:e7:a5:06:17:89:35:fe:5e:22:36:3c:70:94:7b: 1e:b9:8a:45:ce:51:a2:e3:35:53:d7:bd:97:b2:66: e1:7d:e7:12:33:c0:af:e7:95:9e:3c:bc:b4:68:f2: b1:4c:4e:78:c7:81:09:d8:8b:30:f6:df:53:39:92: 1c:80:47:0e:3f:79:76:25:a2:36:d5:86:30:a4:72: 83:f5:e1:de:81:36:43:0e:00:e8:bb:83:c4:3d:53: 05:1f:59:cf:2b:4e:9d:d7:c8:65:51:12:a3:25:67: de:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6D:65:46:4E:DC:9D:51:95:39:50:66:F0:03:33:10:65:F7:C1:0F X509v3 Authority Key Identifier: keyid:D7:F0:44:3E:84:4F:58:41:3F:EE:61:02:3C:66:F3:C2:AF:61:91:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:98:8b:a1:5a:1a:ae:4d:dd:59:08:67:2d:c2:63:f2:20:67: 05:ba:89:68:57:dc:0b:ae:8f:10:a6:4b:67:6d:2e:7d:0c:92: 07:83:4f:d4:66:d0:34:20:b5:c2:41:40:4e:a5:64:f4:0d:20: f5:1e:3d:40:b9:71:e8:26:00:6e:80:bb:5d:fd:be:c8:55:03: d7:57:6c:6c:1e:48:82:36:78:63:67:55:10:87:5f:da:3e:3c: 15:7e:9d:90:7e:4a:84:56:7c:1b:3b:32:96:c5:2e:b3:6d:ed: 08:5a:d0:a1:7f:da:09:bc:fb:c6:7f:bc:d7:88:f6:d9:21:f8: 1b:9f:db:d5:f5:03:60:c6:ee:a5:b9:4c:ed:5d:6b:d1:33:80: 55:0e:eb:2d:e1:e3:e1:9a:c4:46:eb:a0:8c:d5:19:63:68:1b: 34:1f:9b:8d:20:dd:c3:82:2f:c6:b9:0a:0c:de:b5:2e:8c:3b: bc:c4:2a:11:3d:e9:78:bd:9f:f0:cf:f4:d4:e0:ad:48:50:c5: 47:95:ad:d8:cb:05:64:b7:90:90:cb:09:7f:e6:59:92:e0:7c: 7b:ea:44:32:26:34:a1:8d:5b:b5:3c:97:2b:0c:bf:99:5a:a1: d4:be:be:74:d1:6d:05:29:8b:d8:21:af:87:d4:39:e1:04:3c: 8c:93:fd:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF20pfONAod5Z2u6ICFyaih7b6ygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMDQ0M0U4NDRGNTg0MTNGRUU2MTAyM0M2NkYzQzJB RjYxOTE4MDAeFw0yNjA3MjMxNTM5MDdaFw0yNjA3MjQxNjE0MDdaMDMxMTAvBgNV BAMTKEI4NkQ2NTQ2NEVEQzlENTE5NTM5NTA2NkYwMDMzMzEwNjVGN0MxMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyPcW1pesDJMDg2ZURh2+xaqrs ZZ087z5lfCR93A81AXnj38CWCxB1Ttq6lUoCbQ+dfqMQBzDgN9kzfUGrX/01bRkr ZWGIgFXNPugD2E9Uuy4xMXWR2i7PK2ivlXWrBtozVd6PMbYeKhZzmJOZaqURBq8r 19+qbSV6o5YGrJaanlQAL29kwWNmfzcrilaaFoHvtTctbrLnpQYXiTX+XiI2PHCU ex65ikXOUaLjNVPXvZeyZuF95xIzwK/nlZ48vLRo8rFMTnjHgQnYizD231M5khyA Rw4/eXYlojbVhjCkcoP14d6BNkMOAOi7g8Q9UwUfWc8rTp3XyGVREqMlZ961AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuG1lRk7cnVGVOVBm8AMzEGX3wQ8wHwYDVR0j BBgwFoAU1/BEPoRPWEE/7mECPGbzwq9hkYAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2M2MzZhNDYtMzhmZi00NDk2LTk3MjEtOGMwM2NmMDQ2MzQ1LzAvRDdGMDQ0M0U4 NDRGNTg0MTNGRUU2MTAyM0M2NkYzQzJBRjYxOTE4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EN0YwNDQzRTg0NEY1ODQxM0ZFRTYxMDIzQzY2RjNDMkFGNjE5 MTgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2M2MzZhNDYtMzhmZi00NDk2LTk3 MjEtOGMwM2NmMDQ2MzQ1LzAvRDdGMDQ0M0U4NDRGNTg0MTNGRUU2MTAyM0M2NkYz QzJBRjYxOTE4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqYi6FaGq5N3VkIZy3CY/IgZwW6iWhX3Auu jxCmS2dtLn0MkgeDT9Rm0DQgtcJBQE6lZPQNIPUePUC5cegmAG6Au139vshVA9dX bGweSII2eGNnVRCHX9o+PBV+nZB+SoRWfBs7MpbFLrNt7Qha0KF/2gm8+8Z/vNeI 9tkh+Buf29X1A2DG7qW5TO1da9EzgFUO6y3h4+GaxEbroIzVGWNoGzQfm40g3cOC L8a5CgzetS6MO7zEKhE96Xi9n/DP9NTgrUhQxUeVrdjLBWS3kJDLCX/mWZLgfHvq RDImNKGNW7U8lysMv5laodS+vnTRbQUpi9ghr4fUOeEEPIyT/U4= -----END CERTIFICATE-----Generated at Fri Jul 24 03:02:01 2026 by rpki-client