$ rpki-client -vvf rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft File: D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft (raw, json) Hash identifier: HWneSKhqPVbTSkVkJIL5v61jUsTZp9jlPX4wzFIpeh8= Subject key identifier: 6E:7B:1E:3C:48:B5:CF:19:4B:D7:BC:4E:62:1D:5A:76:23:D1:61:BC Authority key identifier: D0:C8:B4:3A:E8:5F:0F:09:D4:98:73:29:23:2B:EC:E8:BC:C7:4B:8E Certificate issuer: /CN=D0C8B43AE85F0F09D4987329232BECE8BCC74B8E Certificate serial: 67EA2CD74190DA9E1EDEE77D37CCE50B1348C210 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 02:17:09 +0000 Manifest this update: Fri 24 Jul 2026 02:12:09 +0000 Manifest next update: Sat 25 Jul 2026 04:38:09 +0000 Files and hashes: 1: D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl (hash: av0kfBHsHSL+Aq0Vz7DYOOT6tup11wbUxPG+XyOgsQs=) 2: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: yr/oT9BlQ/M4JMNvCd0w0W7t+J3wxH6iIKEMfOlwP+M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ea:2c:d7:41:90:da:9e:1e:de:e7:7d:37:cc:e5:0b:13:48:c2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C8B43AE85F0F09D4987329232BECE8BCC74B8E Validity Not Before: Jul 24 02:12:09 2026 GMT Not After : Jul 25 04:38:09 2026 GMT Subject: CN=6E7B1E3C48B5CF194BD7BC4E621D5A7623D161BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:17:65:8b:79:44:87:48:ba:d2:26:90:b3:e7: f1:58:f8:f1:b8:c1:59:22:9b:d5:c2:2d:48:d1:e2: 13:18:08:34:49:b0:17:f6:6d:a0:09:d0:95:32:ef: 96:33:f9:d7:f3:9e:68:3b:c5:af:f0:8f:ad:3b:1f: 61:57:37:40:b1:95:af:5d:67:0f:8e:66:2e:8b:2e: 71:44:e4:83:b0:29:77:9e:69:b0:b9:6d:2e:94:99: ec:c0:5b:05:28:6f:15:f5:d3:c5:c7:2a:81:6d:42: e9:8a:c5:b8:2a:0f:ce:9d:fa:76:66:dd:f6:e0:ba: 46:b2:6f:dd:b6:2f:44:f8:c9:59:29:ff:c6:b5:ab: 93:c9:af:86:b5:c7:ed:8d:f0:9f:98:42:0d:b2:79: 55:7a:d2:41:04:20:b6:a6:5f:4e:21:52:19:90:6a: 64:5a:fd:13:00:7f:b2:c9:fd:c1:ed:e8:a8:73:ea: 4b:95:59:e5:2c:4d:3b:f9:63:9e:5d:f3:7e:4c:d8: f9:29:e7:06:d9:34:29:3a:68:2a:78:49:3e:19:5f: 13:9f:da:6b:4e:8d:6c:83:29:57:3c:77:11:2a:50: 45:91:8d:cc:b6:3f:1b:08:77:d0:93:da:f5:b7:ef: 16:82:01:29:a7:18:85:5b:1b:d3:3e:bc:bd:15:65: c6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7B:1E:3C:48:B5:CF:19:4B:D7:BC:4E:62:1D:5A:76:23:D1:61:BC X509v3 Authority Key Identifier: keyid:D0:C8:B4:3A:E8:5F:0F:09:D4:98:73:29:23:2B:EC:E8:BC:C7:4B:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:e2:3c:ad:43:ff:48:0b:34:a7:38:54:d4:cf:81:9a:9e:ad: 15:c9:1b:fb:0d:a7:2a:f2:38:2a:40:9e:b2:6e:38:e7:5b:b3: 75:4c:af:81:23:10:31:ed:45:88:cc:41:9e:55:ce:b5:8f:98: d7:f3:06:ee:b6:b4:04:23:7a:6c:7c:89:52:6a:74:4d:6f:8a: ce:17:da:f5:44:d6:86:2a:cf:63:68:db:51:3b:2d:f0:f8:a3: 39:de:6d:c2:2d:55:f7:b6:a7:86:22:6c:51:55:ea:90:99:29: ab:02:98:03:0f:73:21:a9:ac:39:99:d2:eb:87:cb:02:48:0e: 6a:ec:99:ba:c8:c2:78:c0:b4:9b:ab:fd:47:d6:43:4b:0a:28: 92:97:26:cd:e3:f9:33:da:32:bd:21:75:ae:62:c2:60:d3:7c: 14:f4:e4:85:45:63:fd:37:2d:1d:82:62:60:24:e5:b0:8f:45: 39:84:72:34:92:fd:7e:1c:52:27:25:59:9a:5e:76:57:97:02: 88:62:94:a5:1e:04:ee:60:fb:71:b3:7a:e5:33:08:3a:06:04: 78:30:a2:e0:17:5f:06:09:90:27:50:7b:61:24:ab:ad:ab:79: 46:41:a2:d4:4d:cb:8b:86:8a:7d:08:f0:72:37:48:1c:92:60: 31:9d:73:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ+os10GQ2p4e3ud9N8zlCxNIwhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOEI0M0FFODVGMEYwOUQ0OTg3MzI5MjMyQkVDRThC Q0M3NEI4RTAeFw0yNjA3MjQwMjEyMDlaFw0yNjA3MjUwNDM4MDlaMDMxMTAvBgNV BAMTKDZFN0IxRTNDNDhCNUNGMTk0QkQ3QkM0RTYyMUQ1QTc2MjNEMTYxQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSF2WLeUSHSLrSJpCz5/FY+PG4 wVkim9XCLUjR4hMYCDRJsBf2baAJ0JUy75Yz+dfznmg7xa/wj607H2FXN0Cxla9d Zw+OZi6LLnFE5IOwKXeeabC5bS6UmezAWwUobxX108XHKoFtQumKxbgqD86d+nZm 3fbgukayb922L0T4yVkp/8a1q5PJr4a1x+2N8J+YQg2yeVV60kEEILamX04hUhmQ amRa/RMAf7LJ/cHt6Khz6kuVWeUsTTv5Y55d835M2Pkp5wbZNCk6aCp4ST4ZXxOf 2mtOjWyDKVc8dxEqUEWRjcy2PxsId9CT2vW37xaCASmnGIVbG9M+vL0VZcYBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbnsePEi1zxlL17xOYh1adiPRYbwwHwYDVR0j BBgwFoAU0Mi0OuhfDwnUmHMpIyvs6LzHS44wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkZDRmMTYtNTcwZS00YzhjLWE5OTItZGI4OWVhM2JhZDM2LzAvRDBDOEI0M0FF ODVGMEYwOUQ0OTg3MzI5MjMyQkVDRThCQ0M3NEI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEM4QjQzQUU4NUYwRjA5RDQ5ODczMjkyMzJCRUNFOEJDQzc0 QjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvRDBDOEI0M0FFODVGMEYwOUQ0OTg3MzI5MjMyQkVD RThCQ0M3NEI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXiPK1D/0gLNKc4VNTPgZqerRXJG/sNpyry OCpAnrJuOOdbs3VMr4EjEDHtRYjMQZ5VzrWPmNfzBu62tAQjemx8iVJqdE1vis4X 2vVE1oYqz2No21E7LfD4oznebcItVfe2p4YibFFV6pCZKasCmAMPcyGprDmZ0uuH ywJIDmrsmbrIwnjAtJur/UfWQ0sKKJKXJs3j+TPaMr0hda5iwmDTfBT05IVFY/03 LR2CYmAk5bCPRTmEcjSS/X4cUiclWZpedleXAohilKUeBO5g+3GzeuUzCDoGBHgw ouAXXwYJkCdQe2Ekq62reUZBotRNy4uGin0I8HI3SBySYDGdczY= -----END CERTIFICATE-----Generated at Fri Jul 24 08:49:38 2026 by rpki-client