$ rpki-client -vvf rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft File: D85622299CA02E9652CA0DB7304F71B950BF346D.mft (raw, json) Hash identifier: Ju3LKBRx4CnpIETDchnZzU+kMhsyXBDRQbv811Q+EaM= Subject key identifier: EC:60:DD:D8:30:BE:5E:6B:2F:21:AE:5F:0E:BA:D1:8D:1A:59:08:2D Authority key identifier: D8:56:22:29:9C:A0:2E:96:52:CA:0D:B7:30:4F:71:B9:50:BF:34:6D Certificate issuer: /CN=D85622299CA02E9652CA0DB7304F71B950BF346D Certificate serial: 30789A9CD9B003703B9B749E8EE9953E70E08A04 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 08:40:25 +0000 Manifest this update: Thu 23 Jul 2026 08:35:25 +0000 Manifest next update: Fri 24 Jul 2026 09:27:25 +0000 Files and hashes: 1: 323430313a613565303a3a2f33322d3438203d3e20313532383130.roa (hash: EjCZCWM26KDivUXMEfL07ocLZOd7dbm1FkmvXFA+kQY=) 2: D85622299CA02E9652CA0DB7304F71B950BF346D.crl (hash: GSEMxO9xjZ32i/2JD+XJcX+DjarTcE+hGI6EEjzGAME=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.crl rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 09:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:78:9a:9c:d9:b0:03:70:3b:9b:74:9e:8e:e9:95:3e:70:e0:8a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85622299CA02E9652CA0DB7304F71B950BF346D Validity Not Before: Jul 23 08:35:25 2026 GMT Not After : Jul 24 09:27:25 2026 GMT Subject: CN=EC60DDD830BE5E6B2F21AE5F0EBAD18D1A59082D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e9:c1:36:b5:5c:4e:31:70:1f:95:94:6a:bb: 75:8f:0d:a5:8e:e7:8c:63:95:19:8c:06:b2:cd:7e: 03:c6:aa:cb:0b:55:8e:c8:e7:b8:f9:67:e0:17:e8: 3c:cb:d5:23:ee:d1:8a:a5:fd:70:a5:c3:92:a3:42: ba:87:c9:00:65:ad:02:dc:d9:a5:47:aa:81:fe:f4: 43:e9:ae:74:7d:59:1b:a9:4b:64:a8:f0:09:12:21: ed:40:e1:bc:8f:61:8f:ae:56:19:38:74:f6:0f:56: f2:00:b4:ec:27:52:fb:12:13:2b:c7:4e:c2:fd:2e: 66:31:6d:ac:d2:00:e3:ab:32:be:af:3e:a8:bc:42: 93:b8:22:ed:9e:a0:2c:7d:25:9f:b1:42:6a:91:62: 83:16:64:bf:79:9c:ba:a4:3f:95:48:ca:c3:bf:a9: ec:32:c4:40:26:49:b4:cb:bb:f1:52:82:06:9e:ca: 36:95:e1:65:a7:1d:77:68:dd:f3:26:71:a7:03:bc: 1c:1e:9e:e4:dc:24:36:fc:3e:89:52:e2:3e:e5:e9: 15:79:6a:69:8f:23:15:94:9a:4d:98:ad:8f:5f:67: de:59:f5:74:07:2c:a8:59:0c:38:f9:5e:d2:d4:98: e1:68:69:52:6c:de:b2:ea:c7:6d:a1:f7:e1:1a:d5: a4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:60:DD:D8:30:BE:5E:6B:2F:21:AE:5F:0E:BA:D1:8D:1A:59:08:2D X509v3 Authority Key Identifier: keyid:D8:56:22:29:9C:A0:2E:96:52:CA:0D:B7:30:4F:71:B9:50:BF:34:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:66:20:14:5b:42:c3:6c:ae:14:3a:dc:7a:3a:34:46:0d:79: 59:e3:f9:2e:0b:07:00:79:ca:cf:5d:e4:36:99:25:4b:6d:f3: 44:fc:a4:e7:51:8d:06:d4:10:85:bb:ad:a5:0d:43:25:5b:35: f4:ae:31:58:8d:1d:92:a5:f4:5a:59:b1:f8:31:c2:68:57:78: dc:92:ba:e6:e1:a9:fa:4e:2b:69:9a:c1:a8:6b:aa:74:8b:47: ba:a1:dc:0c:51:34:d7:a9:e1:18:0b:07:9b:71:32:4c:ae:10: 02:9f:c4:f8:cd:6b:3e:f4:f7:f8:9c:97:85:56:5c:21:5f:67: 71:aa:b5:66:03:1f:05:08:08:d0:7b:83:75:50:d0:d9:3a:33: 3d:a9:d6:fb:15:be:d2:a7:46:2c:f9:2f:75:77:11:6d:d0:1b: 05:7a:c7:81:dd:f1:65:3f:ad:b0:ac:fb:b0:be:89:04:22:02: 22:51:b7:2a:58:a1:46:7e:f6:dd:0a:36:79:01:c2:29:0d:3f: 88:da:22:73:76:31:6f:d8:a2:92:84:d6:49:32:1d:b0:9e:1d: cd:46:90:4a:3e:38:0d:79:34:a5:6a:5f:2e:af:17:f0:cc:0c: 02:47:0a:99:47:1e:35:7a:94:d2:15:4d:de:1a:88:dd:78:f2: 5e:2c:de:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMHianNmwA3A7m3SejumVPnDgigQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1NjIyMjk5Q0EwMkU5NjUyQ0EwREI3MzA0RjcxQjk1 MEJGMzQ2RDAeFw0yNjA3MjMwODM1MjVaFw0yNjA3MjQwOTI3MjVaMDMxMTAvBgNV BAMTKEVDNjBEREQ4MzBCRTVFNkIyRjIxQUU1RjBFQkFEMThEMUE1OTA4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU6cE2tVxOMXAflZRqu3WPDaWO 54xjlRmMBrLNfgPGqssLVY7I57j5Z+AX6DzL1SPu0Yql/XClw5KjQrqHyQBlrQLc 2aVHqoH+9EPprnR9WRupS2So8AkSIe1A4byPYY+uVhk4dPYPVvIAtOwnUvsSEyvH TsL9LmYxbazSAOOrMr6vPqi8QpO4Iu2eoCx9JZ+xQmqRYoMWZL95nLqkP5VIysO/ qewyxEAmSbTLu/FSggaeyjaV4WWnHXdo3fMmcacDvBwenuTcJDb8PolS4j7l6RV5 ammPIxWUmk2YrY9fZ95Z9XQHLKhZDDj5XtLUmOFoaVJs3rLqx22h9+Ea1aSTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7GDd2DC+XmsvIa5fDrrRjRpZCC0wHwYDVR0j BBgwFoAU2FYiKZygLpZSyg23ME9xuVC/NG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODQ3NTMzOGQtN2FjYi00YWE3LWJlZGMtZDY0NTlmZDEzNTA0LzEvRDg1NjIyMjk5 Q0EwMkU5NjUyQ0EwREI3MzA0RjcxQjk1MEJGMzQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODU2MjIyOTlDQTAyRTk2NTJDQTBEQjczMDRGNzFCOTUwQkYz NDZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl ZGMtZDY0NTlmZDEzNTA0LzEvRDg1NjIyMjk5Q0EwMkU5NjUyQ0EwREI3MzA0Rjcx Qjk1MEJGMzQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNmIBRbQsNsrhQ63Ho6NEYNeVnj+S4LBwB5 ys9d5DaZJUtt80T8pOdRjQbUEIW7raUNQyVbNfSuMViNHZKl9FpZsfgxwmhXeNyS uubhqfpOK2mawahrqnSLR7qh3AxRNNep4RgLB5txMkyuEAKfxPjNaz709/icl4VW XCFfZ3GqtWYDHwUICNB7g3VQ0Nk6Mz2p1vsVvtKnRiz5L3V3EW3QGwV6x4Hd8WU/ rbCs+7C+iQQiAiJRtypYoUZ+9t0KNnkBwikNP4jaInN2MW/YopKE1kkyHbCeHc1G kEo+OA15NKVqXy6vF/DMDAJHCplHHjV6lNIVTd4aiN148l4s3io= -----END CERTIFICATE-----Generated at Fri Jul 24 02:47:30 2026 by rpki-client