$ rpki-client -vvf rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft File: 7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft (raw, json) Hash identifier: Y4Ky+oo2zkYaFNfb70PJxpJTAkcxP0W4sQZ0KLoNSaA= Subject key identifier: 81:65:40:BA:18:A0:60:F5:C0:BD:6F:B6:D5:7C:97:75:0C:1A:DC:30 Authority key identifier: 7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06 Certificate issuer: /CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506 Certificate serial: 659CE917F507D6226D468DD6DBA88CB22821D415 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 16:55:38 +0000 Manifest this update: Thu 23 Jul 2026 16:50:38 +0000 Manifest next update: Fri 24 Jul 2026 18:27:38 +0000 Files and hashes: 1: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: X2e4T35qCspph/xtXp3KyS/o17wZ6E0HRD0EGkuu3j4=) 2: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: Hn5EuMtGipfFtFBXzkyifRq2Ky/xfbDimmF9AiNLLbY=) 3: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: e18vtFsO2rq7V5cmuPD5QY+txt6xvfQ7TNg+W5usCFI=) 4: 7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl (hash: aSBwov21RIzbZUgVn94QoboxoJXj+AFXzQUZjcLBQUA=) 5: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: 5sujLlpuj+APYEuCGGPMp2IaRJT57klQE6sCBEbziO0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:9c:e9:17:f5:07:d6:22:6d:46:8d:d6:db:a8:8c:b2:28:21:d4:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506 Validity Not Before: Jul 23 16:50:38 2026 GMT Not After : Jul 24 18:27:38 2026 GMT Subject: CN=816540BA18A060F5C0BD6FB6D57C97750C1ADC30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0e:92:44:f6:2c:8c:d3:08:d1:a2:4b:60:8d: 97:31:eb:dd:4c:35:43:65:a2:86:c2:4a:3e:9f:8c: 42:76:64:1f:db:3e:c6:44:b0:25:e9:d4:8a:f0:93: 6c:cc:cd:67:a5:ca:fe:be:d1:db:15:d7:db:50:14: 32:77:52:ca:21:19:d4:32:18:6e:45:b4:6c:c7:60: a5:67:1a:b4:88:47:f1:5e:82:17:5c:76:d3:9c:0f: 74:10:ff:ac:e3:ba:15:3d:0b:c8:5e:ba:47:eb:93: 3f:d5:c1:ae:d4:ae:56:49:f5:93:16:35:52:b0:f6: b1:e8:26:b1:cf:8f:ca:0d:88:a1:a6:69:27:82:d7: a1:59:f7:99:44:f4:44:b1:a7:4f:09:bd:87:1f:80: 19:08:77:3b:7b:a3:79:5d:77:ba:69:f3:d4:74:08: 4d:f3:ea:de:37:0f:6a:22:29:5d:a5:a0:47:60:14: 38:76:ed:2c:2e:cc:43:ce:c5:84:75:d7:92:e6:f2: cf:90:13:7e:c6:f5:7a:88:fd:5b:ef:fd:8c:a1:2f: 26:84:7c:c0:38:5f:15:23:66:a0:f3:1b:fa:30:5d: 94:6d:ab:e7:bb:1b:02:3a:e1:0b:24:f4:22:e2:01: 5a:b8:b2:6e:5a:e3:2b:31:80:0e:c6:91:12:bc:a9: 01:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:65:40:BA:18:A0:60:F5:C0:BD:6F:B6:D5:7C:97:75:0C:1A:DC:30 X509v3 Authority Key Identifier: keyid:7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:60:87:27:0e:e5:2f:51:80:7e:5a:be:7c:d0:f3:3b:01:e1: 45:97:3e:79:75:05:bb:58:f5:2a:36:e6:f1:29:28:6e:74:02: 34:fe:ab:c4:66:6b:06:a6:4c:e6:18:4d:8a:a3:75:74:30:1f: 1f:44:5b:a5:3d:ff:f2:9c:a9:02:2b:55:a6:75:72:d9:d6:ee: 95:2d:41:52:d4:ec:2b:0b:99:68:a0:eb:ca:ff:44:73:af:5a: 99:e6:b7:ff:3e:39:a9:3b:16:a0:84:c8:f9:03:84:4b:ca:8a: 54:8e:54:7c:0b:57:74:40:67:3d:f9:a6:38:c2:bc:8d:e2:a9: da:e6:d6:66:d4:34:8f:41:0d:4f:bf:e9:25:4c:ff:f8:21:f3: a3:55:33:8b:57:26:3f:d5:03:fa:32:77:2d:37:81:48:15:4c: 86:20:db:2b:f2:26:ca:16:b9:ab:9e:5e:ca:2d:a8:e8:a9:ec: 80:41:6a:7a:d0:1e:17:d9:75:de:99:80:29:fd:f1:56:7f:c3: f5:c5:74:b6:c0:b7:c4:e5:73:b5:d4:e0:4d:49:9f:57:55:07: 71:f9:41:50:ac:5c:e9:d1:57:ea:31:60:55:2d:de:45:e7:22: ff:01:09:ba:40:da:11:25:af:b0:d5:b5:1c:a0:09:ea:c6:5c: 3f:30:ea:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZZzpF/UH1iJtRo3W26iMsigh1BUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RENkI1MEEyRDQxRUFFQjg0OEU3QzQyRDc0QzBENzdE MTMwMzUwNjAeFw0yNjA3MjMxNjUwMzhaFw0yNjA3MjQxODI3MzhaMDMxMTAvBgNV BAMTKDgxNjU0MEJBMThBMDYwRjVDMEJENkZCNkQ1N0M5Nzc1MEMxQURDMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWDpJE9iyM0wjRoktgjZcx691M NUNloobCSj6fjEJ2ZB/bPsZEsCXp1Irwk2zMzWelyv6+0dsV19tQFDJ3UsohGdQy GG5FtGzHYKVnGrSIR/FeghdcdtOcD3QQ/6zjuhU9C8heukfrkz/Vwa7UrlZJ9ZMW NVKw9rHoJrHPj8oNiKGmaSeC16FZ95lE9ESxp08JvYcfgBkIdzt7o3ldd7pp89R0 CE3z6t43D2oiKV2loEdgFDh27SwuzEPOxYR115Lm8s+QE37G9XqI/Vvv/YyhLyaE fMA4XxUjZqDzG/owXZRtq+e7GwI64Qsk9CLiAVq4sm5a4ysxgA7GkRK8qQGfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgWVAuhigYPXAvW+21XyXdQwa3DAwHwYDVR0j BBgwFoAUfda1Ci1B6uuEjnxC10wNd9EwNQYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVlNTE4NzUtNTA4Ny00MjY0LWE4YmQtNDE1NmY1NWJhYWFiLzAvN0RENkI1MEEy RDQxRUFFQjg0OEU3QzQyRDc0QzBENzdEMTMwMzUwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83REQ2QjUwQTJENDFFQUVCODQ4RTdDNDJENzRDMEQ3N0QxMzAz NTA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4 YmQtNDE1NmY1NWJhYWFiLzAvN0RENkI1MEEyRDQxRUFFQjg0OEU3QzQyRDc0QzBE NzdEMTMwMzUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1ghycO5S9RgH5avnzQ8zsB4UWXPnl1BbtY 9So25vEpKG50AjT+q8RmawamTOYYTYqjdXQwHx9EW6U9//KcqQIrVaZ1ctnW7pUt QVLU7CsLmWig68r/RHOvWpnmt/8+Oak7FqCEyPkDhEvKilSOVHwLV3RAZz35pjjC vI3iqdrm1mbUNI9BDU+/6SVM//gh86NVM4tXJj/VA/oydy03gUgVTIYg2yvyJsoW uaueXsotqOip7IBBanrQHhfZdd6ZgCn98VZ/w/XFdLbAt8Tlc7XU4E1Jn1dVB3H5 QVCsXOnRV+oxYFUt3kXnIv8BCbpA2hElr7DVtRygCerGXD8w6iw= -----END CERTIFICATE-----Generated at Fri Jul 24 10:11:23 2026 by rpki-client