$ rpki-client -vvf rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft File: DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft (raw, json) Hash identifier: fWaah8SLsN1KeoPqMfrtKjJQvbdfvfMbQE8HvoP1UcI= Subject key identifier: BC:F6:44:93:EA:5A:72:21:D7:2C:FC:6A:B9:20:6C:6B:AF:8D:0E:FC Authority key identifier: DB:9A:40:F2:EA:DC:88:1D:0D:A3:EE:A0:05:7E:81:00:29:94:C3:FC Certificate issuer: /CN=DB9A40F2EADC881D0DA3EEA0057E81002994C3FC Certificate serial: 6C4688CAA5AC4D1C70FF828AB022EA9C013E3D8F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:31:36 +0000 Manifest this update: Thu 23 Jul 2026 17:26:36 +0000 Manifest next update: Fri 24 Jul 2026 20:08:36 +0000 Files and hashes: 1: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: gnONcz3sXVxJxBOxBVij9AaOro25JvPxAm2egbKmGvk=) 2: DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl (hash: k9B46WvZYTxKEN5QpA1c/wWn85P6WPanoJlUOnorRGM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:46:88:ca:a5:ac:4d:1c:70:ff:82:8a:b0:22:ea:9c:01:3e:3d:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB9A40F2EADC881D0DA3EEA0057E81002994C3FC Validity Not Before: Jul 23 17:26:36 2026 GMT Not After : Jul 24 20:08:36 2026 GMT Subject: CN=BCF64493EA5A7221D72CFC6AB9206C6BAF8D0EFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:35:86:99:95:f7:9b:90:aa:50:e9:21:e8:9d: f4:d6:66:86:ca:93:59:25:44:bf:99:96:bd:3f:34: 37:f5:30:02:71:69:d4:94:df:8d:ec:f2:80:71:91: c2:eb:db:75:6b:69:35:f4:bb:86:1e:7e:bb:09:6a: ba:e3:72:61:80:a7:f5:c5:6c:c7:4e:e4:5c:fd:54: d1:e2:39:36:57:8e:f2:1c:e0:9d:84:e1:6d:e4:29: 83:3b:19:c4:ac:c8:73:c9:d1:ae:01:b9:d6:7b:69: 1d:0e:4e:cc:7e:47:7c:37:d6:ad:1f:e1:60:3e:f2: 95:a4:fc:23:5b:24:3a:1b:23:3c:cb:f3:c1:c9:9c: 8d:b3:3c:5c:4a:ec:20:41:a1:48:f9:3e:44:e3:b2: f8:c2:ed:46:3c:35:59:c3:5b:a0:25:6a:70:10:0a: ce:21:43:26:a3:76:03:99:ce:e2:cb:cb:0d:3b:f1: e6:f4:00:09:ba:80:69:48:2c:96:08:c1:58:5d:d8: 50:92:48:4e:61:b4:e4:70:45:d2:04:5f:cc:d6:0e: 29:c5:fc:40:10:f5:4f:56:b5:67:c9:5a:b2:65:8a: b8:82:c9:2a:81:84:65:45:82:cc:f2:c1:9b:47:bf: d7:96:2f:eb:15:c1:2d:ec:2f:ca:ff:bb:09:8a:56: db:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F6:44:93:EA:5A:72:21:D7:2C:FC:6A:B9:20:6C:6B:AF:8D:0E:FC X509v3 Authority Key Identifier: keyid:DB:9A:40:F2:EA:DC:88:1D:0D:A3:EE:A0:05:7E:81:00:29:94:C3:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:4f:1c:c9:29:75:37:5b:e8:1d:b7:00:1a:7a:13:ef:1c:b7: c4:1b:33:be:60:02:21:e0:7e:4a:88:4a:a0:7f:c2:f5:11:e3: 01:dd:9a:70:ff:4b:75:55:99:2c:29:8a:af:19:81:80:0e:54: 1a:b5:f6:63:d3:6b:d8:d2:93:eb:76:b2:47:cf:3c:c7:e4:c4: 77:6b:a7:70:7f:59:16:a8:74:0b:c5:ba:75:79:81:59:c4:3f: 50:fd:4c:3a:66:42:15:3a:45:ca:8d:c1:94:ab:3a:a1:19:97: 4a:fc:5d:18:82:23:84:7e:c7:90:86:b4:fd:24:37:37:d1:ff: 86:cb:be:bf:60:4a:8e:fd:c4:0c:43:e4:94:be:82:6d:2b:2e: 4c:ed:61:91:8c:a1:ad:b5:6f:d9:cc:50:0b:45:20:01:f5:9a: 69:92:d5:e5:9e:c3:b3:b6:c5:28:45:8f:88:59:a8:6f:78:81: 04:71:a1:6c:fc:95:fa:9f:e6:65:9d:16:c8:40:7f:a4:d8:ee: 8c:7e:94:cc:b8:c2:82:f5:67:6e:2b:c5:1b:0b:60:24:4d:79: 5e:71:d9:7b:c5:62:95:9d:ed:b7:c5:c6:ca:f1:2b:29:7d:d8: 89:b1:88:d0:3b:b0:14:fc:89:ce:21:78:c4:96:98:ba:0f:ce: 0e:ed:d9:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbEaIyqWsTRxw/4KKsCLqnAE+PY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI5QTQwRjJFQURDODgxRDBEQTNFRUEwMDU3RTgxMDAy OTk0QzNGQzAeFw0yNjA3MjMxNzI2MzZaFw0yNjA3MjQyMDA4MzZaMDMxMTAvBgNV BAMTKEJDRjY0NDkzRUE1QTcyMjFENzJDRkM2QUI5MjA2QzZCQUY4RDBFRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1NYaZlfebkKpQ6SHonfTWZobK k1klRL+Zlr0/NDf1MAJxadSU343s8oBxkcLr23VraTX0u4YefrsJarrjcmGAp/XF bMdO5Fz9VNHiOTZXjvIc4J2E4W3kKYM7GcSsyHPJ0a4BudZ7aR0OTsx+R3w31q0f 4WA+8pWk/CNbJDobIzzL88HJnI2zPFxK7CBBoUj5PkTjsvjC7UY8NVnDW6AlanAQ Cs4hQyajdgOZzuLLyw078eb0AAm6gGlILJYIwVhd2FCSSE5htORwRdIEX8zWDinF /EAQ9U9WtWfJWrJliriCySqBhGVFgszywZtHv9eWL+sVwS3sL8r/uwmKVtv/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvPZEk+paciHXLPxquSBsa6+NDvwwHwYDVR0j BBgwFoAU25pA8urciB0No+6gBX6BACmUw/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2NmMDFlYzYtOGU4OS00MDJhLTkwYzctNTBjNmYxNGNkMjQyLzEvREI5QTQwRjJF QURDODgxRDBEQTNFRUEwMDU3RTgxMDAyOTk0QzNGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjlBNDBGMkVBREM4ODFEMERBM0VFQTAwNTdFODEwMDI5OTRD M0ZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzEvREI5QTQwRjJFQURDODgxRDBEQTNFRUEwMDU3RTgx MDAyOTk0QzNGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtPHMkpdTdb6B23ABp6E+8ct8QbM75gAiHg fkqISqB/wvUR4wHdmnD/S3VVmSwpiq8ZgYAOVBq19mPTa9jSk+t2skfPPMfkxHdr p3B/WRaodAvFunV5gVnEP1D9TDpmQhU6RcqNwZSrOqEZl0r8XRiCI4R+x5CGtP0k NzfR/4bLvr9gSo79xAxD5JS+gm0rLkztYZGMoa21b9nMUAtFIAH1mmmS1eWew7O2 xShFj4hZqG94gQRxoWz8lfqf5mWdFshAf6TY7ox+lMy4woL1Z24rxRsLYCRNeV5x 2XvFYpWd7bfFxsrxKyl92ImxiNA7sBT8ic4heMSWmLoPzg7t2TA= -----END CERTIFICATE-----Generated at Fri Jul 24 09:57:54 2026 by rpki-client